syzbot


KMSAN: uninit-value in hfsplus_cat_bin_cmp_key

Status: upstream: reported C repro on 2024/11/06 05:02
Subsystems: hfs
[Documentation on labels]
Reported-by: syzbot+968ecf5dc01b3e0148ec@syzkaller.appspotmail.com
First crash: 359d, last: 39d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] hfsplus: add check for cat key length 1 (2) 2024/11/06 21:48
[syzbot] [hfs?] KMSAN: uninit-value in hfsplus_cat_bin_cmp_key 1 (3) 2024/11/06 07:20
Last patch testing requests (7)
Created Duration User Patch Repo Result
2025/10/02 15:47 38m retest repro upstream OK log
2025/07/06 20:45 22m retest repro upstream report log
2025/04/22 09:00 25m retest repro upstream report log
2025/01/30 20:22 33m retest repro upstream error
2024/11/16 13:37 2h01m retest repro upstream report log
2024/11/06 09:58 54m eadavis@qq.com patch upstream OK log
2024/11/06 06:38 28m eadavis@qq.com patch upstream OK log

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in hfsplus_cat_bin_cmp_key+0xd9/0x190 fs/hfsplus/catalog.c:36
 hfsplus_cat_bin_cmp_key+0xd9/0x190 fs/hfsplus/catalog.c:36
 hfs_find_rec_by_key+0xae/0x240 fs/hfsplus/bfind.c:89
 __hfsplus_brec_find+0x271/0x840 fs/hfsplus/bfind.c:124
 hfsplus_brec_find+0x4df/0x9f0 fs/hfsplus/bfind.c:184
 hfsplus_brec_read+0x46/0x1f0 fs/hfsplus/bfind.c:211
 hfsplus_find_cat+0xb5/0x4f0 fs/hfsplus/catalog.c:202
 hfsplus_cat_write_inode+0x2ca/0xe20 fs/hfsplus/inode.c:596
 hfsplus_write_inode+0x178/0x960 fs/hfsplus/super.c:161
 write_inode fs/fs-writeback.c:1525 [inline]
 __writeback_single_inode+0x892/0x1190 fs/fs-writeback.c:1745
 writeback_sb_inodes+0xac1/0x1cb0 fs/fs-writeback.c:1976
 wb_writeback+0x4ce/0xc00 fs/fs-writeback.c:2156
 wb_do_writeback fs/fs-writeback.c:2303 [inline]
 wb_workfn+0x397/0x1910 fs/fs-writeback.c:2343
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xb8e/0x1d80 kernel/workqueue.c:3319
 worker_thread+0xedf/0x1590 kernel/workqueue.c:3400
 kthread+0xd59/0xf00 kernel/kthread.c:463
 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4197 [inline]
 slab_alloc_node mm/slub.c:4240 [inline]
 __do_kmalloc_node mm/slub.c:4375 [inline]
 __kmalloc_noprof+0x95f/0x1310 mm/slub.c:4388
 kmalloc_noprof include/linux/slab.h:909 [inline]
 hfsplus_find_init+0x90/0x1d0 fs/hfsplus/bfind.c:21
 hfsplus_cat_write_inode+0x1a8/0xe20 fs/hfsplus/inode.c:592
 hfsplus_write_inode+0x178/0x960 fs/hfsplus/super.c:161
 write_inode fs/fs-writeback.c:1525 [inline]
 __writeback_single_inode+0x892/0x1190 fs/fs-writeback.c:1745
 writeback_sb_inodes+0xac1/0x1cb0 fs/fs-writeback.c:1976
 wb_writeback+0x4ce/0xc00 fs/fs-writeback.c:2156
 wb_do_writeback fs/fs-writeback.c:2303 [inline]
 wb_workfn+0x397/0x1910 fs/fs-writeback.c:2343
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xb8e/0x1d80 kernel/workqueue.c:3319
 worker_thread+0xedf/0x1590 kernel/workqueue.c:3400
 kthread+0xd59/0xf00 kernel/kthread.c:463
 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

CPU: 1 UID: 0 PID: 3962 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(none) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: writeback wb_workfn (flush-7:5)
=====================================================

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/09 09:37 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/08/02 14:20 upstream 89748acdf226 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/06/22 20:34 upstream 739a6c93cc75 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/06/09 23:53 upstream 19272b37aa4f 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/05/14 06:10 upstream 02ddfb981de8 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/04/08 08:32 upstream 0af2f6be1b42 a2ada0e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/02/06 10:01 upstream 92514ef226f5 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/01/31 21:56 upstream 69e858e0b8b2 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/22 00:37 upstream fc39fb56917b 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/20 23:10 upstream bf9aa14fc523 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/02 05:28 upstream 6c52d4da1c74 f00eed24 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/02 04:52 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/02 04:52 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/18 14:58 upstream 8b789f2b7602 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/18 12:02 upstream 8b789f2b7602 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/18 03:34 upstream d4b779985a6c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/18 03:30 upstream d4b779985a6c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/18 03:29 upstream d4b779985a6c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 23:29 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 23:27 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 23:27 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 23:27 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 23:27 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 09:29 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 08:39 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 03:13 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 03:12 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/09/09 03:12 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/02/01 01:46 upstream 69e858e0b8b2 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/02/01 01:46 upstream 69e858e0b8b2 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/01/16 17:07 upstream 619f0b6fad52 968edaf4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2025/01/16 17:05 upstream 619f0b6fad52 968edaf4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/02 13:32 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
2024/11/02 13:32 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in hfsplus_cat_bin_cmp_key
* Struck through repros no longer work on HEAD.