* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
2022-11-25 9:56 [syzbot] " syzbot
@ 2023-02-10 12:21 ` syzbot
2024-06-08 11:09 ` Chao Yu
2024-06-09 2:51 ` Chao Yu
0 siblings, 2 replies; 8+ messages in thread
From: syzbot @ 2023-02-10 12:21 UTC (permalink / raw)
To: glider, linux-fsdevel, linux-kernel, syzkaller-bugs
syzbot has found a reproducer for the following issue on:
HEAD commit: 8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
git tree: https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
kernel config: https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15c76993480000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+3ae6be33a50b5aae4dab@syzkaller.appspotmail.com
=======================================================
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand
option from the mount to silence this warning.
=======================================================
=====================================================
BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
do_read_cache_page mm/filemap.c:3595 [inline]
read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
read_mapping_page include/linux/pagemap.h:755 [inline]
hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
mount_bdev+0x628/0x920 fs/super.c:1359
hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
path_mount+0xf98/0x26a0 fs/namespace.c:3475
do_mount fs/namespace.c:3488 [inline]
__do_sys_mount fs/namespace.c:3697 [inline]
__se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
__ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
entry_SYSENTER_compat_after_hwframe+0x70/0x82
Uninit was created at:
__alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
alloc_pages+0xb4b/0xec0
alloc_slab_page mm/slub.c:1851 [inline]
allocate_slab mm/slub.c:1998 [inline]
new_slab+0x5c5/0x19b0 mm/slub.c:2051
___slab_alloc+0x132b/0x3790 mm/slub.c:3193
__slab_alloc mm/slub.c:3292 [inline]
__slab_alloc_node mm/slub.c:3345 [inline]
slab_alloc_node mm/slub.c:3442 [inline]
slab_alloc mm/slub.c:3460 [inline]
__kmem_cache_alloc_lru mm/slub.c:3467 [inline]
kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
alloc_inode_sb include/linux/fs.h:3119 [inline]
hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
alloc_inode+0xad/0x4b0 fs/inode.c:259
iget_locked+0x340/0xf80 fs/inode.c:1286
hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
mount_bdev+0x628/0x920 fs/super.c:1359
hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
path_mount+0xf98/0x26a0 fs/namespace.c:3475
do_mount fs/namespace.c:3488 [inline]
__do_sys_mount fs/namespace.c:3697 [inline]
__se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
__ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
entry_SYSENTER_compat_after_hwframe+0x70/0x82
CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
=====================================================
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
[not found] <CAE8VWiKc3tWxyyDFBYCn81rpTcgc4nAB=KgQCno4j0C96gTkaA@mail.gmail.com>
@ 2024-04-14 2:35 ` syzbot
0 siblings, 0 replies; 8+ messages in thread
From: syzbot @ 2024-04-14 2:35 UTC (permalink / raw)
To: linux-kernel, shresthprasad7, syzkaller-bugs
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
KMSAN: uninit-value in hfs_revalidate_dentry
loop0: detected capacity change from 0 to 64
=====================================================
BUG: KMSAN: uninit-value in hfs_revalidate_dentry+0x30b/0x3f0 fs/hfs/sysdep.c:30
hfs_revalidate_dentry+0x30b/0x3f0 fs/hfs/sysdep.c:30
lookup_fast+0x418/0x8e0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x817/0x1490 fs/namei.c:2331
path_lookupat+0xd9/0x6f0 fs/namei.c:2484
filename_lookup+0x22f/0x750 fs/namei.c:2514
user_path_at_empty+0x8b/0x3a0 fs/namei.c:2921
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3689 [inline]
__do_sys_mount fs/namespace.c:3898 [inline]
__se_sys_mount+0x66b/0x810 fs/namespace.c:3875
__x64_sys_mount+0xe4/0x150 fs/namespace.c:3875
x64_sys_call+0x2bf4/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
Uninit was created at:
__alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598
__alloc_pages_node include/linux/gfp.h:238 [inline]
alloc_pages_node include/linux/gfp.h:261 [inline]
alloc_slab_page mm/slub.c:2175 [inline]
allocate_slab mm/slub.c:2338 [inline]
new_slab+0x2de/0x1400 mm/slub.c:2391
___slab_alloc+0x1184/0x33d0 mm/slub.c:3525
__slab_alloc mm/slub.c:3610 [inline]
__slab_alloc_node mm/slub.c:3663 [inline]
slab_alloc_node mm/slub.c:3835 [inline]
kmem_cache_alloc_lru+0x6d7/0xbe0 mm/slub.c:3864
alloc_inode_sb include/linux/fs.h:3091 [inline]
hfs_alloc_inode+0x5a/0xd0 fs/hfs/super.c:165
alloc_inode+0x86/0x460 fs/inode.c:261
iget_locked+0x2bf/0xee0 fs/inode.c:1280
hfs_btree_open+0x16c/0x1aa0 fs/hfs/btree.c:38
hfs_mdb_get+0x1fe2/0x28b0 fs/hfs/mdb.c:199
hfs_fill_super+0x1cf6/0x23c0 fs/hfs/super.c:406
mount_bdev+0x397/0x520 fs/super.c:1658
hfs_mount+0x4d/0x60 fs/hfs/super.c:456
legacy_get_tree+0x114/0x290 fs/fs_context.c:662
vfs_get_tree+0xa7/0x570 fs/super.c:1779
do_new_mount+0x71f/0x15e0 fs/namespace.c:3352
path_mount+0x742/0x1f20 fs/namespace.c:3679
do_mount fs/namespace.c:3692 [inline]
__do_sys_mount fs/namespace.c:3898 [inline]
__se_sys_mount+0x725/0x810 fs/namespace.c:3875
__x64_sys_mount+0xe4/0x150 fs/namespace.c:3875
x64_sys_call+0x2bf4/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
CPU: 1 PID: 5493 Comm: syz-executor.0 Not tainted 6.9.0-rc3-syzkaller-00355-g7efd0a74039f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
=====================================================
Tested on:
commit: 7efd0a74 Merge tag 'ata-6.9-rc4' of git://git.kernel.o..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1602674d180000
kernel config: https://syzkaller.appspot.com/x/.config?x=807e31f7fd7666b5
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Note: no patches were applied.
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
[not found] <CAE8VWiJFOtDVnSgMUmr0OsgUr6E+c9m5p_n-Dg_qn2LCdu2jcA@mail.gmail.com>
@ 2024-04-14 17:38 ` syzbot
0 siblings, 0 replies; 8+ messages in thread
From: syzbot @ 2024-04-14 17:38 UTC (permalink / raw)
To: linux-kernel, shresthprasad7, syzkaller-bugs
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
KMSAN: uninit-value in hfs_revalidate_dentry
loop0: detected capacity change from 0 to 64
=====================================================
BUG: KMSAN: uninit-value in hfs_revalidate_dentry+0x30b/0x3f0 fs/hfs/sysdep.c:30
hfs_revalidate_dentry+0x30b/0x3f0 fs/hfs/sysdep.c:30
lookup_fast+0x418/0x8e0
walk_component fs/namei.c:2000 [inline]
link_path_walk+0x817/0x1490 fs/namei.c:2331
path_lookupat+0xd9/0x6f0 fs/namei.c:2484
filename_lookup+0x22f/0x750 fs/namei.c:2514
user_path_at_empty+0x8b/0x3a0 fs/namei.c:2921
user_path_at include/linux/namei.h:57 [inline]
do_mount fs/namespace.c:3689 [inline]
__do_sys_mount fs/namespace.c:3898 [inline]
__se_sys_mount+0x66b/0x810 fs/namespace.c:3875
__x64_sys_mount+0xe4/0x150 fs/namespace.c:3875
x64_sys_call+0x2bf4/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
Uninit was created at:
__alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598
__alloc_pages_node include/linux/gfp.h:238 [inline]
alloc_pages_node include/linux/gfp.h:261 [inline]
alloc_slab_page mm/slub.c:2175 [inline]
allocate_slab mm/slub.c:2338 [inline]
new_slab+0x2de/0x1400 mm/slub.c:2391
___slab_alloc+0x1184/0x33d0 mm/slub.c:3525
__slab_alloc mm/slub.c:3610 [inline]
__slab_alloc_node mm/slub.c:3663 [inline]
slab_alloc_node mm/slub.c:3835 [inline]
kmem_cache_alloc_lru+0x6d7/0xbe0 mm/slub.c:3864
alloc_inode_sb include/linux/fs.h:3091 [inline]
hfs_alloc_inode+0x5a/0xd0 fs/hfs/super.c:165
alloc_inode+0x86/0x460 fs/inode.c:261
iget_locked+0x2bf/0xee0 fs/inode.c:1280
hfs_btree_open+0x16c/0x1aa0 fs/hfs/btree.c:38
hfs_mdb_get+0x1fe2/0x28b0 fs/hfs/mdb.c:199
hfs_fill_super+0x1cf6/0x23c0 fs/hfs/super.c:406
mount_bdev+0x397/0x520 fs/super.c:1658
hfs_mount+0x4d/0x60 fs/hfs/super.c:456
legacy_get_tree+0x114/0x290 fs/fs_context.c:662
vfs_get_tree+0xa7/0x570 fs/super.c:1779
do_new_mount+0x71f/0x15e0 fs/namespace.c:3352
path_mount+0x742/0x1f20 fs/namespace.c:3679
do_mount fs/namespace.c:3692 [inline]
__do_sys_mount fs/namespace.c:3898 [inline]
__se_sys_mount+0x725/0x810 fs/namespace.c:3875
__x64_sys_mount+0xe4/0x150 fs/namespace.c:3875
x64_sys_call+0x2bf4/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
CPU: 0 PID: 5496 Comm: syz-executor.0 Not tainted 6.9.0-rc3-syzkaller-00365-g399f4dae683a-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
=====================================================
Tested on:
commit: 399f4dae Merge tag 'for_linus' of git://git.kernel.org..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1322ffdd180000
kernel config: https://syzkaller.appspot.com/x/.config?x=807e31f7fd7666b5
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
patch: https://syzkaller.appspot.com/x/patch.diff?x=157ba243180000
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
2023-02-10 12:21 ` [syzbot] [hfs?] " syzbot
@ 2024-06-08 11:09 ` Chao Yu
2024-06-08 11:33 ` syzbot
2024-06-09 2:51 ` Chao Yu
1 sibling, 1 reply; 8+ messages in thread
From: Chao Yu @ 2024-06-08 11:09 UTC (permalink / raw)
To: syzbot, syzkaller-bugs; +Cc: linux-fsdevel, linux-kernel, glider
#syz test: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
On 2023/2/10 20:21, syzbot wrote:
> syzbot has found a reproducer for the following issue on:
>
> HEAD commit: 8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
> git tree: https://github.com/google/kmsan.git master
> console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
> kernel config: https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
> dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
> compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
> userspace arch: i386
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15c76993480000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
> mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+3ae6be33a50b5aae4dab@syzkaller.appspotmail.com
>
> =======================================================
> WARNING: The mand mount option has been deprecated and
> and is ignored by this kernel. Remove the mand
> option from the mount to silence this warning.
> =======================================================
> =====================================================
> BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
> BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
> hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
> hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
> block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
> hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
> filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
> do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
> do_read_cache_page mm/filemap.c:3595 [inline]
> read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
> read_mapping_page include/linux/pagemap.h:755 [inline]
> hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
> hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
> hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
> mount_bdev+0x628/0x920 fs/super.c:1359
> hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
> legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
> vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
> do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
> path_mount+0xf98/0x26a0 fs/namespace.c:3475
> do_mount fs/namespace.c:3488 [inline]
> __do_sys_mount fs/namespace.c:3697 [inline]
> __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
> __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
> do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
> __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
> do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
> do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
> entry_SYSENTER_compat_after_hwframe+0x70/0x82
>
> Uninit was created at:
> __alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
> alloc_pages+0xb4b/0xec0
> alloc_slab_page mm/slub.c:1851 [inline]
> allocate_slab mm/slub.c:1998 [inline]
> new_slab+0x5c5/0x19b0 mm/slub.c:2051
> ___slab_alloc+0x132b/0x3790 mm/slub.c:3193
> __slab_alloc mm/slub.c:3292 [inline]
> __slab_alloc_node mm/slub.c:3345 [inline]
> slab_alloc_node mm/slub.c:3442 [inline]
> slab_alloc mm/slub.c:3460 [inline]
> __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
> kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
> alloc_inode_sb include/linux/fs.h:3119 [inline]
> hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
> alloc_inode+0xad/0x4b0 fs/inode.c:259
> iget_locked+0x340/0xf80 fs/inode.c:1286
> hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
> hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
> hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
> mount_bdev+0x628/0x920 fs/super.c:1359
> hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
> legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
> vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
> do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
> path_mount+0xf98/0x26a0 fs/namespace.c:3475
> do_mount fs/namespace.c:3488 [inline]
> __do_sys_mount fs/namespace.c:3697 [inline]
> __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
> __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
> do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
> __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
> do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
> do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
> entry_SYSENTER_compat_after_hwframe+0x70/0x82
>
> CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
> =====================================================
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
2024-06-08 11:09 ` Chao Yu
@ 2024-06-08 11:33 ` syzbot
0 siblings, 0 replies; 8+ messages in thread
From: syzbot @ 2024-06-08 11:33 UTC (permalink / raw)
To: chao, glider, linux-fsdevel, linux-kernel, syzkaller-bugs
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
memory: 36984K
[ 50.182299][ T1] Write protecting the kernel read-only data: 262144k
[ 50.230344][ T1] Freeing unused kernel image (rodata/data gap) memory: 1860K
[ 51.888217][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 51.898420][ T1] x86/mm: Checking user space page tables
[ 53.414268][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 53.423551][ T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[ 53.444612][ T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[ 53.456544][ T1] Run /sbin/init as init process
[ 54.990987][ T4448] mount (4448) used greatest stack depth: 8080 bytes left
[ 55.063339][ T4449] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[ 55.407814][ T4452] mount (4452) used greatest stack depth: 5536 bytes left
Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [ 59.268897][ T4482] udevd[4482]: starting version 3.2.11
[ 62.847262][ T4483] udevd[4483]: starting eudev-3.2.11
[ 62.860816][ T4482] udevd (4482) used greatest stack depth: 5296 bytes left
done
Starting system message bus: [ 101.638329][ T4678] dbus-uuidgen (4678) used greatest stack depth: 5288 bytes left
done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-9.4.1 starting
dev: loaded udev
DUID 00:04:98:24:4c:28:99:7c:d9:70:fe:51:ca:fe:56:33:2c:7d
forked to background, child pid 4695
[ 110.050686][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.117239][ T4696] eql: remember to turn off Van-Jacobson compression on your slave devices
[ 111.294758][ T4772] ssh-keygen (4772) used greatest stack depth: 4480 bytes left
Starting sshd: [ 111.635136][ T779] cfg80211: failed to load regulatory.db
OK
syzkaller
syzkaller login: [ 113.824166][ C0] =====================================================
[ 113.831324][ C0] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0
[ 113.838490][ C0] receive_buf+0x25e3/0x5fd0
[ 113.843430][ C0] virtnet_poll+0xd1c/0x23c0
[ 113.848241][ C0] __napi_poll+0xe7/0x980
[ 113.852660][ C0] net_rx_action+0x82a/0x1850
[ 113.857539][ C0] handle_softirqs+0x1d8/0x810
[ 113.862472][ C0] __irq_exit_rcu+0x68/0x120
[ 113.867263][ C0] irq_exit_rcu+0x12/0x20
[ 113.871748][ C0] common_interrupt+0x94/0xa0
[ 113.876625][ C0] asm_common_interrupt+0x2b/0x40
[ 113.881816][ C0] __sanitizer_cov_trace_pc+0x0/0x70
[ 113.887395][ C0] update_stack_state+0x64/0x270
[ 113.892486][ C0] unwind_next_frame+0x19a/0x470
[ 113.897959][ C0] arch_stack_walk+0x1ec/0x2d0
[ 113.902980][ C0] stack_trace_save+0xaa/0xe0
[ 113.908072][ C0] kmsan_internal_poison_memory+0x49/0x90
[ 113.913988][ C0] kmsan_slab_alloc+0xdf/0x160
[ 113.918925][ C0] kmem_cache_alloc_noprof+0x637/0xb20
[ 113.924598][ C0] mas_alloc_nodes+0x4a3/0xf00
[ 113.929579][ C0] mas_preallocate+0x183c/0x2730
[ 113.934818][ C0] mmap_region+0x2ca2/0x4460
[ 113.939784][ C0] do_mmap+0xfc5/0x1a40
[ 113.944442][ C0] vm_mmap_pgoff+0x23b/0x5a0
[ 113.949284][ C0] ksys_mmap_pgoff+0x16e/0x7a0
[ 113.954302][ C0] __x64_sys_mmap+0x1a8/0x240
[ 113.959245][ C0] x64_sys_call+0x1bbf/0x3b50
[ 113.964185][ C0] do_syscall_64+0xcf/0x1e0
[ 113.969036][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.975180][ C0]
[ 113.977671][ C0] Uninit was created at:
[ 113.982057][ C0] __alloc_pages_noprof+0x9d6/0xe70
[ 113.987558][ C0] alloc_pages_mpol_noprof+0x299/0x990
[ 113.993311][ C0] alloc_pages_noprof+0x1bf/0x1e0
[ 113.998471][ C0] skb_page_frag_refill+0x2bf/0x7c0
[ 114.003973][ C0] virtnet_rq_alloc+0x43/0xbb0
[ 114.008926][ C0] try_fill_recv+0x3f0/0x2f50
[ 114.013776][ C0] virtnet_open+0x1cc/0xb00
[ 114.018581][ C0] __dev_open+0x546/0x6f0
[ 114.023118][ C0] __dev_change_flags+0x309/0x9a0
[ 114.028352][ C0] dev_change_flags+0x8e/0x1d0
[ 114.033326][ C0] devinet_ioctl+0x13ec/0x22c0
[ 114.038533][ C0] inet_ioctl+0x4bd/0x6d0
[ 114.042936][ C0] sock_do_ioctl+0xb7/0x540
[ 114.047801][ C0] sock_ioctl+0x727/0xd70
[ 114.052237][ C0] __se_sys_ioctl+0x261/0x450
[ 114.057137][ C0] __x64_sys_ioctl+0x96/0xe0
[ 114.061972][ C0] x64_sys_call+0x1883/0x3b50
[ 114.067162][ C0] do_syscall_64+0xcf/0x1e0
[ 114.071823][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.077958][ C0]
[ 114.080379][ C0] CPU: 0 PID: 4812 Comm: dhcpcd-run-hook Not tainted 6.9.0-syzkaller-10230-g4d30ff38e3f9 #0
[ 114.090739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 114.101012][ C0] =====================================================
[ 114.108227][ C0] Disabling lock debugging due to kernel taint
[ 114.114572][ C0] Kernel panic - not syncing: kmsan.panic set ...
[ 114.121098][ C0] CPU: 0 PID: 4812 Comm: dhcpcd-run-hook Tainted: G B 6.9.0-syzkaller-10230-g4d30ff38e3f9 #0
[ 114.132804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 114.142969][ C0] Call Trace:
[ 114.146437][ C0] <IRQ>
[ 114.149434][ C0] dump_stack_lvl+0x216/0x2d0
[ 114.154230][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.160181][ C0] dump_stack+0x1e/0x30
[ 114.164457][ C0] panic+0x4e2/0xcd0
[ 114.168670][ C0] ? kmsan_get_metadata+0xb1/0x1d0
[ 114.173913][ C0] kmsan_report+0x2d5/0x2e0
[ 114.178526][ C0] ? is_last_task_frame+0x1d8/0x420
[ 114.183941][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.189335][ C0] ? __msan_warning+0x95/0x120
[ 114.194328][ C0] ? receive_buf+0x25e3/0x5fd0
[ 114.199215][ C0] ? virtnet_poll+0xd1c/0x23c0
[ 114.204468][ C0] ? __napi_poll+0xe7/0x980
[ 114.209197][ C0] ? net_rx_action+0x82a/0x1850
[ 114.214155][ C0] ? handle_softirqs+0x1d8/0x810
[ 114.219313][ C0] ? __irq_exit_rcu+0x68/0x120
[ 114.224187][ C0] ? irq_exit_rcu+0x12/0x20
[ 114.228797][ C0] ? common_interrupt+0x94/0xa0
[ 114.233835][ C0] ? asm_common_interrupt+0x2b/0x40
[ 114.239212][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[ 114.245388][ C0] ? update_stack_state+0x64/0x270
[ 114.250627][ C0] ? unwind_next_frame+0x19a/0x470
[ 114.255886][ C0] ? arch_stack_walk+0x1ec/0x2d0
[ 114.260934][ C0] ? stack_trace_save+0xaa/0xe0
[ 114.265911][ C0] ? kmsan_internal_poison_memory+0x49/0x90
[ 114.272008][ C0] ? kmsan_slab_alloc+0xdf/0x160
[ 114.277047][ C0] ? kmem_cache_alloc_noprof+0x637/0xb20
[ 114.282820][ C0] ? mas_alloc_nodes+0x4a3/0xf00
[ 114.287876][ C0] ? mas_preallocate+0x183c/0x2730
[ 114.293206][ C0] ? mmap_region+0x2ca2/0x4460
[ 114.298092][ C0] ? do_mmap+0xfc5/0x1a40
[ 114.302532][ C0] ? vm_mmap_pgoff+0x23b/0x5a0
[ 114.307418][ C0] ? ksys_mmap_pgoff+0x16e/0x7a0
[ 114.312494][ C0] ? __x64_sys_mmap+0x1a8/0x240
[ 114.317451][ C0] ? x64_sys_call+0x1bbf/0x3b50
[ 114.322507][ C0] ? do_syscall_64+0xcf/0x1e0
[ 114.327358][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.333581][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.338899][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.344227][ C0] ? page_to_skb+0xdae/0x1620
[ 114.349019][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.354526][ C0] __msan_warning+0x95/0x120
[ 114.359242][ C0] receive_buf+0x25e3/0x5fd0
[ 114.364049][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.369356][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.375284][ C0] virtnet_poll+0xd1c/0x23c0
[ 114.380002][ C0] ? __pfx_virtnet_poll+0x10/0x10
[ 114.385130][ C0] __napi_poll+0xe7/0x980
[ 114.389562][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.394870][ C0] net_rx_action+0x82a/0x1850
[ 114.399646][ C0] ? sched_clock_cpu+0x55/0x870
[ 114.404604][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 114.409827][ C0] handle_softirqs+0x1d8/0x810
[ 114.414700][ C0] __irq_exit_rcu+0x68/0x120
[ 114.419381][ C0] irq_exit_rcu+0x12/0x20
[ 114.423803][ C0] common_interrupt+0x94/0xa0
[ 114.428576][ C0] </IRQ>
[ 114.431555][ C0] <TASK>
[ 114.434531][ C0] asm_common_interrupt+0x2b/0x40
[ 114.439653][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[ 114.445825][ C0] Code: f6 e8 04 58 80 00 5b 41 5e 5d c3 cc cc cc cc 8b 3a e8 74 ea 92 00 eb e3 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 80 5e 0a 00 65
[ 114.465551][ C0] RSP: 0018:ffff888121413348 EFLAGS: 00000286
[ 114.471907][ C0] RAX: ffff888116394cc0 RBX: ffff888121413428 RCX: ffff888116394180
[ 114.480131][ C0] RDX: 0000000000000000 RSI: ffff888121413ed0 RDI: ffff888121413ed0
[ 114.488297][ C0] RBP: ffff888121413368 R08: ffffea000000000f R09: ffff888121410000
[ 114.496384][ C0] R10: ffff888121413428 R11: ffffffff81936f80 R12: ffff888121413e50
[ 114.504462][ C0] R13: ffff888121413480 R14: ffff888121413ed0 R15: ffff888116394cc0
[ 114.512556][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 114.518864][ C0] ? decode_frame_pointer+0x19/0x80
[ 114.524160][ C0] update_stack_state+0x64/0x270
[ 114.529362][ C0] unwind_next_frame+0x19a/0x470
[ 114.534440][ C0] arch_stack_walk+0x1ec/0x2d0
[ 114.539328][ C0] ? __x64_sys_mmap+0x1a8/0x240
[ 114.544459][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 114.550766][ C0] stack_trace_save+0xaa/0xe0
[ 114.555558][ C0] kmsan_internal_poison_memory+0x49/0x90
[ 114.561409][ C0] ? kmsan_internal_poison_memory+0x49/0x90
[ 114.567444][ C0] ? kmsan_slab_alloc+0xdf/0x160
[ 114.572748][ C0] ? kmem_cache_alloc_noprof+0x637/0xb20
[ 114.578571][ C0] ? mas_alloc_nodes+0x4a3/0xf00
[ 114.583901][ C0] ? mas_preallocate+0x183c/0x2730
[ 114.589207][ C0] ? mmap_region+0x2ca2/0x4460
[ 114.594137][ C0] ? do_mmap+0xfc5/0x1a40
[ 114.598572][ C0] ? vm_mmap_pgoff+0x23b/0x5a0
[ 114.603459][ C0] ? ksys_mmap_pgoff+0x16e/0x7a0
[ 114.608513][ C0] ? __x64_sys_mmap+0x1a8/0x240
[ 114.613461][ C0] ? __kernel_text_address+0x2a/0xa0
[ 114.618867][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.624169][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.629464][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.635372][ C0] ? kmem_cache_alloc_noprof+0x67/0xb20
[ 114.641123][ C0] ? filter_irq_stacks+0x60/0x1a0
[ 114.646435][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.652006][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.658172][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.663506][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.669455][ C0] kmsan_slab_alloc+0xdf/0x160
[ 114.674337][ C0] kmem_cache_alloc_noprof+0x637/0xb20
[ 114.679907][ C0] ? mas_alloc_nodes+0x4a3/0xf00
[ 114.685004][ C0] mas_alloc_nodes+0x4a3/0xf00
[ 114.689945][ C0] mas_preallocate+0x183c/0x2730
[ 114.695111][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.701089][ C0] mmap_region+0x2ca2/0x4460
[ 114.705900][ C0] ? cap_mmap_addr+0x326/0x490
[ 114.711067][ C0] do_mmap+0xfc5/0x1a40
[ 114.715362][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.720773][ C0] vm_mmap_pgoff+0x23b/0x5a0
[ 114.725483][ C0] ksys_mmap_pgoff+0x16e/0x7a0
[ 114.730543][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.735871][ C0] __x64_sys_mmap+0x1a8/0x240
[ 114.740657][ C0] x64_sys_call+0x1bbf/0x3b50
[ 114.745454][ C0] do_syscall_64+0xcf/0x1e0
[ 114.750047][ C0] ? clear_bhb_loop+0x25/0x80
[ 114.754827][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.760872][ C0] RIP: 0033:0x7f2869f18b74
[ 114.765415][ C0] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f
[ 114.785329][ C0] RSP: 002b:00007ffcbfc0e7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 114.793956][ C0] RAX: ffffffffffffffda RBX: 00000000000003d8 RCX: 00007f2869f18b74
[ 114.802084][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000
[ 114.810199][ C0] RBP: 0000000000002000 R08: 00000000ffffffff R09: 0000000000000000
[ 114.818331][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f2869ca1218
[ 114.826406][ C0] R13: 00007f2869ca1248 R14: 00007f2869f2cab0 R15: 00007f2869e22b10
[ 114.834505][ C0] </TASK>
[ 114.838107][ C0] Kernel Offset: disabled
[ 114.842503][ C0] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build255802096=/tmp/go-build -gno-record-gcc-switches'
git status (err=<nil>)
HEAD detached at 25905f5d0a
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"25905f5d0a2a7883bd33491997556193582c6059\"
Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=1056f66a980000
Tested on:
commit: 4d30ff38 hfs: fix to initialize .tz_secondswest in hfs..
git tree: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
kernel config: https://syzkaller.appspot.com/x/.config?x=48182e7cc446d358
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Note: no patches were applied.
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
2023-02-10 12:21 ` [syzbot] [hfs?] " syzbot
2024-06-08 11:09 ` Chao Yu
@ 2024-06-09 2:51 ` Chao Yu
2024-06-09 5:45 ` syzbot
1 sibling, 1 reply; 8+ messages in thread
From: Chao Yu @ 2024-06-09 2:51 UTC (permalink / raw)
To: syzbot; +Cc: syzkaller-bugs, linux-fsdevel, linux-kernel, glider
#syz test: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
On 2023/2/10 20:21, syzbot wrote:
> syzbot has found a reproducer for the following issue on:
>
> HEAD commit: 8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
> git tree: https://github.com/google/kmsan.git master
> console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
> kernel config: https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
> dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
> compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
> userspace arch: i386
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15c76993480000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
> mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+3ae6be33a50b5aae4dab@syzkaller.appspotmail.com
>
> =======================================================
> WARNING: The mand mount option has been deprecated and
> and is ignored by this kernel. Remove the mand
> option from the mount to silence this warning.
> =======================================================
> =====================================================
> BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
> BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
> hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
> hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
> block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
> hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
> filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
> do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
> do_read_cache_page mm/filemap.c:3595 [inline]
> read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
> read_mapping_page include/linux/pagemap.h:755 [inline]
> hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
> hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
> hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
> mount_bdev+0x628/0x920 fs/super.c:1359
> hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
> legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
> vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
> do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
> path_mount+0xf98/0x26a0 fs/namespace.c:3475
> do_mount fs/namespace.c:3488 [inline]
> __do_sys_mount fs/namespace.c:3697 [inline]
> __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
> __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
> do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
> __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
> do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
> do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
> entry_SYSENTER_compat_after_hwframe+0x70/0x82
>
> Uninit was created at:
> __alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
> alloc_pages+0xb4b/0xec0
> alloc_slab_page mm/slub.c:1851 [inline]
> allocate_slab mm/slub.c:1998 [inline]
> new_slab+0x5c5/0x19b0 mm/slub.c:2051
> ___slab_alloc+0x132b/0x3790 mm/slub.c:3193
> __slab_alloc mm/slub.c:3292 [inline]
> __slab_alloc_node mm/slub.c:3345 [inline]
> slab_alloc_node mm/slub.c:3442 [inline]
> slab_alloc mm/slub.c:3460 [inline]
> __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
> kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
> alloc_inode_sb include/linux/fs.h:3119 [inline]
> hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
> alloc_inode+0xad/0x4b0 fs/inode.c:259
> iget_locked+0x340/0xf80 fs/inode.c:1286
> hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
> hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
> hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
> mount_bdev+0x628/0x920 fs/super.c:1359
> hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
> legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
> vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
> do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
> path_mount+0xf98/0x26a0 fs/namespace.c:3475
> do_mount fs/namespace.c:3488 [inline]
> __do_sys_mount fs/namespace.c:3697 [inline]
> __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
> __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
> do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
> __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
> do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
> do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
> entry_SYSENTER_compat_after_hwframe+0x70/0x82
>
> CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
> =====================================================
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
2024-06-09 2:51 ` Chao Yu
@ 2024-06-09 5:45 ` syzbot
0 siblings, 0 replies; 8+ messages in thread
From: syzbot @ 2024-06-09 5:45 UTC (permalink / raw)
To: chao, glider, linux-fsdevel, linux-kernel, syzkaller-bugs
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
T1] ALSA device list:
[ 49.732806][ T1] #0: Dummy 1
[ 49.736413][ T1] #1: Loopback 1
[ 49.740228][ T1] #2: Virtual MIDI Card 1
[ 49.750262][ T10] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 49.760115][ T10] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 49.769557][ T1] md: Waiting for all devices to be available before autodetect
[ 49.777447][ T1] md: If you don't use raid, use raid=noautodetect
[ 49.784213][ T1] md: Autodetecting RAID arrays.
[ 49.789324][ T1] md: autorun ...
[ 49.793191][ T1] md: ... autorun DONE.
[ 49.912261][ T1] EXT4-fs (sda1): mounted filesystem 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 ro with ordered data mode. Quota mode: none.
[ 49.925661][ T1] VFS: Mounted root (ext4 filesystem) readonly on device 8:1.
[ 49.949100][ T1] devtmpfs: mounted
[ 50.204085][ T1] Freeing unused kernel image (initmem) memory: 36920K
[ 50.216901][ T1] Write protecting the kernel read-only data: 260096k
[ 50.263842][ T1] Freeing unused kernel image (rodata/data gap) memory: 1876K
[ 51.884629][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 51.895285][ T1] x86/mm: Checking user space page tables
[ 53.370836][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 53.379919][ T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[ 53.401312][ T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[ 53.413335][ T1] Run /sbin/init as init process
[ 55.024257][ T4444] mount (4444) used greatest stack depth: 8112 bytes left
[ 55.119469][ T4445] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[ 55.460316][ T4448] mount (4448) used greatest stack depth: 5568 bytes left
Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [ 59.293786][ T4478] udevd[4478]: starting version 3.2.11
[ 62.812014][ T4480] udevd[4480]: starting eudev-3.2.11
[ 62.823661][ T4478] udevd (4478) used greatest stack depth: 5344 bytes left
[ 96.252561][ T1219] net_ratelimit: 2 callbacks suppressed
[ 96.252654][ T1219] aoe: packet could not be sent on lo. consider increasing tx_queue_len
[ 96.267801][ T1219] aoe: packet could not be sent on bond0. consider increasing tx_queue_len
[ 96.276910][ T1219] aoe: packet could not be sent on dummy0. consider increasing tx_queue_len
[ 96.286143][ T1219] aoe: packet could not be sent on eql. consider increasing tx_queue_len
[ 96.295161][ T1219] aoe: packet could not be sent on ifb0. consider increasing tx_queue_len
[ 96.304298][ T1219] aoe: packet could not be sent on ifb1. consider increasing tx_queue_len
[ 96.313312][ T1219] aoe: packet could not be sent on eth0. consider increasing tx_queue_len
[ 96.322319][ T1219] aoe: packet could not be sent on wlan0. consider increasing tx_queue_len
[ 96.331822][ T1219] aoe: packet could not be sent on wlan1. consider increasing tx_queue_len
[ 96.341035][ T1219] aoe: packet could not be sent on hwsim0. consider increasing tx_queue_len
done
Starting system message bus: done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-9.4.1 starting
dev: loaded udev
DUID 00:04:98:24:4c:28:99:7c:d9:70:fe:51:ca:fe:56:33:2c:7d
forked to background, child pid 4692
[ 110.213007][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.255329][ T4693] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 111.615530][ T10] cfg80211: failed to load regulatory.db
OK
syzkaller
syzkaller login: [ 114.058251][ C0] =====================================================
[ 114.065473][ C0] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0
[ 114.072524][ C0] receive_buf+0x25e3/0x5fd0
[ 114.077324][ C0] virtnet_poll+0xd1c/0x23c0
[ 114.082110][ C0] __napi_poll+0xe7/0x980
[ 114.086745][ C0] net_rx_action+0x82a/0x1850
[ 114.091708][ C0] handle_softirqs+0x1ce/0x800
[ 114.096721][ C0] __irq_exit_rcu+0x68/0x120
[ 114.101495][ C0] irq_exit_rcu+0x12/0x20
[ 114.106116][ C0] common_interrupt+0x94/0xa0
[ 114.111003][ C0] asm_common_interrupt+0x2b/0x40
[ 114.116235][ C0] virt_to_page_or_null+0x9b/0x150
[ 114.121622][ C0] kmsan_get_metadata+0x146/0x1d0
[ 114.126851][ C0] kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.132755][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40
[ 114.138838][ C0] move_page_tables+0x22aa/0x3940
[ 114.144062][ C0] setup_arg_pages+0x1741/0x1eb0
[ 114.149161][ C0] load_elf_binary+0x186e/0x4e10
[ 114.154310][ C0] bprm_execve+0xc57/0x21c0
[ 114.158971][ C0] do_execveat_common+0xceb/0xd70
[ 114.164231][ C0] __x64_sys_execve+0xf4/0x130
[ 114.169182][ C0] x64_sys_call+0x164f/0x3b90
[ 114.174097][ C0] do_syscall_64+0xcd/0x1e0
[ 114.178953][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.185159][ C0]
[ 114.187583][ C0] Uninit was created at:
[ 114.191970][ C0] __alloc_pages_noprof+0x9d6/0xe70
[ 114.197429][ C0] alloc_pages_mpol_noprof+0x299/0x990
[ 114.203217][ C0] alloc_pages_noprof+0x1bf/0x1e0
[ 114.208521][ C0] skb_page_frag_refill+0x2bf/0x7c0
[ 114.214331][ C0] virtnet_rq_alloc+0x43/0xbb0
[ 114.219311][ C0] try_fill_recv+0x3f0/0x2f50
[ 114.224213][ C0] virtnet_open+0x1cc/0xb00
[ 114.228892][ C0] __dev_open+0x546/0x6f0
[ 114.233458][ C0] __dev_change_flags+0x309/0x9a0
[ 114.238699][ C0] dev_change_flags+0x8e/0x1d0
[ 114.243670][ C0] devinet_ioctl+0x13ec/0x22c0
[ 114.248707][ C0] inet_ioctl+0x4bd/0x6d0
[ 114.253223][ C0] sock_do_ioctl+0xb7/0x540
[ 114.257877][ C0] sock_ioctl+0x727/0xd70
[ 114.262296][ C0] __se_sys_ioctl+0x261/0x450
[ 114.267163][ C0] __x64_sys_ioctl+0x96/0xe0
[ 114.271913][ C0] x64_sys_call+0x18c0/0x3b90
[ 114.276861][ C0] do_syscall_64+0xcd/0x1e0
[ 114.281557][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.287691][ C0]
[ 114.290142][ C0] CPU: 0 PID: 4810 Comm: cmp Not tainted 6.10.0-rc2-syzkaller-00318-g68af0e6e57f1 #0
[ 114.299891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 114.310124][ C0] =====================================================
[ 114.317210][ C0] Disabling lock debugging due to kernel taint
[ 114.323590][ C0] Kernel panic - not syncing: kmsan.panic set ...
[ 114.330063][ C0] CPU: 0 PID: 4810 Comm: cmp Tainted: G B 6.10.0-rc2-syzkaller-00318-g68af0e6e57f1 #0
[ 114.341090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 114.351224][ C0] Call Trace:
[ 114.354569][ C0] <IRQ>
[ 114.357458][ C0] dump_stack_lvl+0x216/0x2d0
[ 114.362339][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.368256][ C0] dump_stack+0x1e/0x30
[ 114.372558][ C0] panic+0x4e2/0xcd0
[ 114.376579][ C0] ? kmsan_get_metadata+0xa1/0x1d0
[ 114.381828][ C0] kmsan_report+0x2d5/0x2e0
[ 114.386474][ C0] ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[ 114.392494][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 114.398930][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.404232][ C0] ? __msan_warning+0x95/0x120
[ 114.409102][ C0] ? receive_buf+0x25e3/0x5fd0
[ 114.413993][ C0] ? virtnet_poll+0xd1c/0x23c0
[ 114.418899][ C0] ? __napi_poll+0xe7/0x980
[ 114.423521][ C0] ? net_rx_action+0x82a/0x1850
[ 114.428495][ C0] ? handle_softirqs+0x1ce/0x800
[ 114.433533][ C0] ? __irq_exit_rcu+0x68/0x120
[ 114.438422][ C0] ? irq_exit_rcu+0x12/0x20
[ 114.443046][ C0] ? common_interrupt+0x94/0xa0
[ 114.448005][ C0] ? asm_common_interrupt+0x2b/0x40
[ 114.453326][ C0] ? virt_to_page_or_null+0x9b/0x150
[ 114.458717][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.464012][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.469951][ C0] ? __msan_metadata_ptr_for_load_8+0x24/0x40
[ 114.476138][ C0] ? move_page_tables+0x22aa/0x3940
[ 114.481443][ C0] ? setup_arg_pages+0x1741/0x1eb0
[ 114.487208][ C0] ? load_elf_binary+0x186e/0x4e10
[ 114.492542][ C0] ? bprm_execve+0xc57/0x21c0
[ 114.497428][ C0] ? do_execveat_common+0xceb/0xd70
[ 114.502965][ C0] ? __x64_sys_execve+0xf4/0x130
[ 114.508049][ C0] ? x64_sys_call+0x164f/0x3b90
[ 114.513049][ C0] ? do_syscall_64+0xcd/0x1e0
[ 114.517835][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.524271][ C0] ? kmsan_internal_memmove_metadata+0x17b/0x230
[ 114.530728][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.536028][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.541332][ C0] ? page_to_skb+0xdae/0x1620
[ 114.546091][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.551404][ C0] __msan_warning+0x95/0x120
[ 114.556099][ C0] receive_buf+0x25e3/0x5fd0
[ 114.560811][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.566222][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.572325][ C0] virtnet_poll+0xd1c/0x23c0
[ 114.577052][ C0] ? __pfx_virtnet_poll+0x10/0x10
[ 114.582192][ C0] __napi_poll+0xe7/0x980
[ 114.586804][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.592127][ C0] net_rx_action+0x82a/0x1850
[ 114.596929][ C0] ? sched_clock_cpu+0x55/0x870
[ 114.601889][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 114.607136][ C0] handle_softirqs+0x1ce/0x800
[ 114.612097][ C0] __irq_exit_rcu+0x68/0x120
[ 114.616825][ C0] irq_exit_rcu+0x12/0x20
[ 114.621255][ C0] common_interrupt+0x94/0xa0
[ 114.626143][ C0] </IRQ>
[ 114.629121][ C0] <TASK>
[ 114.632123][ C0] asm_common_interrupt+0x2b/0x40
[ 114.637277][ C0] RIP: 0010:virt_to_page_or_null+0x9b/0x150
[ 114.643734][ C0] Code: d6 48 c1 ee 23 48 8b 34 f1 48 85 f6 74 13 48 89 d1 48 c1 e9 1b 0f b6 c9 48 c1 e1 04 48 01 ce eb 02 31 f6 65 ff 05 ad a1 c4 7d <48> 85 f6 74 09 4c 8b 06 41 f6 c0 02 75 17 31 c9 65 ff 0d 96 a1 c4
[ 114.663636][ C0] RSP: 0018:ffff888115fa3560 EFLAGS: 00000282
[ 114.669801][ C0] RAX: ffff8881a04798b0 RBX: ffff8881204798b0 RCX: 0000000000000240
[ 114.678046][ C0] RDX: 00000001204798b0 RSI: ffff88813fff9240 RDI: ffff8881204798b0
[ 114.686097][ C0] RBP: ffff888115fa3560 R08: ffffea000000000f R09: 0000000000000000
[ 114.694353][ C0] R10: ffff8881157a3588 R11: 0000000000000004 R12: 00007ffffffff000
[ 114.702427][ C0] R13: ffff88811759ccc0 R14: 0000000000000001 R15: ffff8881204798b0
[ 114.710503][ C0] kmsan_get_metadata+0x146/0x1d0
[ 114.715665][ C0] kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 114.721472][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40
[ 114.727581][ C0] move_page_tables+0x22aa/0x3940
[ 114.732810][ C0] setup_arg_pages+0x1741/0x1eb0
[ 114.737898][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.743211][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.748534][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 114.754977][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.760321][ C0] load_elf_binary+0x186e/0x4e10
[ 114.765360][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.770982][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 114.777440][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20
[ 114.783631][ C0] ? load_elf_binary+0x1331/0x4e10
[ 114.788932][ C0] ? kmsan_get_metadata+0x146/0x1d0
[ 114.794247][ C0] ? __pfx_load_elf_binary+0x10/0x10
[ 114.799718][ C0] bprm_execve+0xc57/0x21c0
[ 114.804338][ C0] do_execveat_common+0xceb/0xd70
[ 114.809485][ C0] __x64_sys_execve+0xf4/0x130
[ 114.814370][ C0] x64_sys_call+0x164f/0x3b90
[ 114.819190][ C0] do_syscall_64+0xcd/0x1e0
[ 114.823875][ C0] ? clear_bhb_loop+0x25/0x80
[ 114.828744][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.834741][ C0] RIP: 0033:0x7febec525ef7
[ 114.839238][ C0] Code: Unable to access opcode bytes at 0x7febec525ecd.
[ 114.846321][ C0] RSP: 002b:00007ffee08c4918 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 114.855113][ C0] RAX: ffffffffffffffda RBX: 000055e293558020 RCX: 00007febec525ef7
[ 114.863169][ C0] RDX: 000055e293558048 RSI: 000055e293558020 RDI: 000055e2935580d0
[ 114.871237][ C0] RBP: 000055e2935580d0 R08: 000055e2935580d9 R09: 00007ffee08c8ecb
[ 114.879289][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 000055e293558048
[ 114.887358][ C0] R13: 00007febec6d3904 R14: 000055e293558048 R15: 0000000000000000
[ 114.895462][ C0] </TASK>
[ 114.898839][ C0] Kernel Offset: disabled
[ 114.903237][ C0] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3593741732=/tmp/go-build -gno-record-gcc-switches'
git status (err=<nil>)
HEAD detached at 25905f5d0a
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"25905f5d0a2a7883bd33491997556193582c6059\"
Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=16a96dce980000
Tested on:
commit: 68af0e6e hfs: fix to initialize fields of hfs_inode_in..
git tree: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
kernel config: https://syzkaller.appspot.com/x/.config?x=b7d07bfd0c305fe4
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Note: no patches were applied.
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
[not found] <10654d2b-4fb4-4484-bda7-bec60ddf214e@kernel.org>
@ 2024-06-09 9:42 ` syzbot
0 siblings, 0 replies; 8+ messages in thread
From: syzbot @ 2024-06-09 9:42 UTC (permalink / raw)
To: chao, linux-kernel, syzkaller-bugs
Hello,
syzbot tried to test the proposed patch but the build/boot failed:
[ T1] Demotion targets for Node 1: null
[ 49.119163][ T1] Key type .fscrypt registered
[ 49.124054][ T1] Key type fscrypt-provisioning registered
[ 49.131133][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 49.161844][ T1] Btrfs loaded, assert=on, ref-verify=on, zoned=yes, fsverity=yes
[ 49.188222][ T1] Key type encrypted registered
[ 49.193331][ T1] AppArmor: AppArmor sha256 policy hashing enabled
[ 49.200083][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 49.207200][ T1] Loading compiled-in module X.509 certificates
[ 49.249983][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: 4044fdb61657f0d7afb57899761a918f325ad9da'
[ 49.261109][ T1] ima: Allocated hash algorithm: sha256
[ 49.267173][ T1] ima: No architecture policies found
[ 49.273691][ T1] evm: Initialising EVM extended attributes:
[ 49.279714][ T1] evm: security.selinux (disabled)
[ 49.284916][ T1] evm: security.SMACK64 (disabled)
[ 49.290078][ T1] evm: security.SMACK64EXEC (disabled)
[ 49.295621][ T1] evm: security.SMACK64TRANSMUTE (disabled)
[ 49.301561][ T1] evm: security.SMACK64MMAP (disabled)
[ 49.307143][ T1] evm: security.apparmor
[ 49.311428][ T1] evm: security.ima
[ 49.315316][ T1] evm: security.capability
[ 49.319780][ T1] evm: HMAC attrs: 0x1
[ 49.328692][ T1] PM: Magic number: 12:657:575
[ 49.334778][ T1] usbmon usbmon15: hash matches
[ 49.340450][ T1] tty ptyb7: hash matches
[ 49.346466][ T1] workqueue: hash matches
[ 49.351454][ T1] printk: legacy console [netcon0] enabled
[ 49.357452][ T1] netconsole: network logging started
[ 49.364585][ T1] gtp: GTP module loaded (pdp ctx size 128 bytes)
[ 49.373483][ T1] rdma_rxe: loaded
[ 49.379175][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 49.398675][ T1] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 49.416007][ T1] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[ 49.424502][ T1] clk: Disabling unused clocks
[ 49.429431][ T1] ALSA device list:
[ 49.433391][ T1] #0: Dummy 1
[ 49.436942][ T1] #1: Loopback 1
[ 49.440749][ T1] #2: Virtual MIDI Card 1
[ 49.450862][ T781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 49.460739][ T781] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 49.470135][ T1] md: Waiting for all devices to be available before autodetect
[ 49.478147][ T1] md: If you don't use raid, use raid=noautodetect
[ 49.484855][ T1] md: Autodetecting RAID arrays.
[ 49.489958][ T1] md: autorun ...
[ 49.493726][ T1] md: ... autorun DONE.
[ 49.614018][ T1] EXT4-fs (sda1): mounted filesystem 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 ro with ordered data mode. Quota mode: none.
[ 49.627278][ T1] VFS: Mounted root (ext4 filesystem) readonly on device 8:1.
[ 49.652172][ T1] devtmpfs: mounted
[ 49.914371][ T1] Freeing unused kernel image (initmem) memory: 36920K
[ 49.925939][ T1] Write protecting the kernel read-only data: 260096k
[ 49.973690][ T1] Freeing unused kernel image (rodata/data gap) memory: 1876K
[ 51.629847][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 51.640154][ T1] x86/mm: Checking user space page tables
[ 53.150732][ T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 53.159748][ T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[ 53.180434][ T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[ 53.192322][ T1] Run /sbin/init as init process
[ 54.758005][ T4441] mount (4441) used greatest stack depth: 8144 bytes left
[ 54.829184][ T4442] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[ 55.180355][ T4445] mount (4445) used greatest stack depth: 5568 bytes left
Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [ 58.985674][ T4475] udevd[4475]: starting version 3.2.11
[ 62.542055][ T4476] udevd[4476]: starting eudev-3.2.11
[ 62.555019][ T4475] udevd (4475) used greatest stack depth: 5376 bytes left
[ 96.245738][ T1222] net_ratelimit: 2 callbacks suppressed
[ 96.245811][ T1222] aoe: packet could not be sent on lo. consider increasing tx_queue_len
[ 96.260621][ T1222] aoe: packet could not be sent on bond0. consider increasing tx_queue_len
[ 96.270147][ T1222] aoe: packet could not be sent on dummy0. consider increasing tx_queue_len
[ 96.279315][ T1222] aoe: packet could not be sent on eql. consider increasing tx_queue_len
[ 96.288322][ T1222] aoe: packet could not be sent on ifb0. consider increasing tx_queue_len
[ 96.297303][ T1222] aoe: packet could not be sent on ifb1. consider increasing tx_queue_len
[ 96.306386][ T1222] aoe: packet could not be sent on eth0. consider increasing tx_queue_len
[ 96.315372][ T1222] aoe: packet could not be sent on wlan0. consider increasing tx_queue_len
[ 96.324577][ T1222] aoe: packet could not be sent on wlan1. consider increasing tx_queue_len
[ 96.333636][ T1222] aoe: packet could not be sent on hwsim0. consider increasing tx_queue_len
done
Starting system message bus: done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-9.4.1 starting
dev: loaded udev
DUID 00:04:ee:6e:2e:e3:62:a1:1e:1b:9d:a6:87:1c:6e:7e:27:0f
forked to background, child pid 4688
[ 109.985374][ T4689] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.004681][ T4689] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 111.585878][ T781] cfg80211: failed to load regulatory.db
OK
syzkaller
syzkaller login: [ 115.417995][ C1] =====================================================
[ 115.425211][ C1] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0
[ 115.432271][ C1] receive_buf+0x25e3/0x5fd0
[ 115.437052][ C1] virtnet_poll+0xd1c/0x23c0
[ 115.441841][ C1] __napi_poll+0xe7/0x980
[ 115.446368][ C1] net_rx_action+0x82a/0x1850
[ 115.451222][ C1] handle_softirqs+0x1ce/0x800
[ 115.456164][ C1] __irq_exit_rcu+0x68/0x120
[ 115.460908][ C1] irq_exit_rcu+0x12/0x20
[ 115.465413][ C1] common_interrupt+0x94/0xa0
[ 115.470274][ C1] asm_common_interrupt+0x2b/0x40
[ 115.475495][ C1] acpi_safe_halt+0x25/0x30
[ 115.480160][ C1] acpi_idle_do_entry+0x22/0x40
[ 115.485189][ C1] acpi_idle_enter+0xa1/0xc0
[ 115.489935][ C1] cpuidle_enter_state+0xcb/0x250
[ 115.495149][ C1] cpuidle_enter+0x7f/0xf0
[ 115.499731][ C1] do_idle+0x551/0x750
[ 115.503955][ C1] cpu_startup_entry+0x65/0x80
[ 115.508864][ C1] start_secondary+0xcb/0xd0
[ 115.513732][ C1] common_startup_64+0x12c/0x137
[ 115.518832][ C1]
[ 115.521190][ C1] Uninit was created at:
[ 115.525702][ C1] __alloc_pages_noprof+0x9d6/0xe70
[ 115.531074][ C1] alloc_pages_mpol_noprof+0x299/0x990
[ 115.536739][ C1] alloc_pages_noprof+0x1bf/0x1e0
[ 115.541955][ C1] skb_page_frag_refill+0x2bf/0x7c0
[ 115.547353][ C1] virtnet_rq_alloc+0x43/0xbb0
[ 115.552376][ C1] try_fill_recv+0x3f0/0x2f50
[ 115.557337][ C1] virtnet_open+0x1cc/0xb00
[ 115.561938][ C1] __dev_open+0x546/0x6f0
[ 115.566459][ C1] __dev_change_flags+0x309/0x9a0
[ 115.571639][ C1] dev_change_flags+0x8e/0x1d0
[ 115.576573][ C1] devinet_ioctl+0x13ec/0x22c0
[ 115.581510][ C1] inet_ioctl+0x4bd/0x6d0
[ 115.585995][ C1] sock_do_ioctl+0xb7/0x540
[ 115.590666][ C1] sock_ioctl+0x727/0xd70
[ 115.595147][ C1] __se_sys_ioctl+0x261/0x450
[ 115.599966][ C1] __x64_sys_ioctl+0x96/0xe0
[ 115.604710][ C1] x64_sys_call+0x18c0/0x3b90
[ 115.609556][ C1] do_syscall_64+0xcd/0x1e0
[ 115.614236][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.620293][ C1]
[ 115.622756][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de-dirty #0
[ 115.633186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 115.643409][ C1] =====================================================
[ 115.650429][ C1] Disabling lock debugging due to kernel taint
[ 115.656718][ C1] Kernel panic - not syncing: kmsan.panic set ...
[ 115.663231][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.10.0-rc2-syzkaller-00366-g771ed66105de-dirty #0
[ 115.675047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 115.685180][ C1] Call Trace:
[ 115.688511][ C1] <IRQ>
[ 115.691424][ C1] dump_stack_lvl+0x216/0x2d0
[ 115.696208][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 115.702134][ C1] dump_stack+0x1e/0x30
[ 115.706380][ C1] panic+0x4e2/0xcd0
[ 115.710363][ C1] ? kmsan_get_metadata+0xb1/0x1d0
[ 115.715588][ C1] kmsan_report+0x2d5/0x2e0
[ 115.720193][ C1] ? kmsan_get_metadata+0x146/0x1d0
[ 115.725494][ C1] ? __msan_warning+0x95/0x120
[ 115.730524][ C1] ? receive_buf+0x25e3/0x5fd0
[ 115.735423][ C1] ? virtnet_poll+0xd1c/0x23c0
[ 115.740319][ C1] ? __napi_poll+0xe7/0x980
[ 115.744975][ C1] ? net_rx_action+0x82a/0x1850
[ 115.749951][ C1] ? handle_softirqs+0x1ce/0x800
[ 115.755021][ C1] ? __irq_exit_rcu+0x68/0x120
[ 115.759883][ C1] ? irq_exit_rcu+0x12/0x20
[ 115.764500][ C1] ? common_interrupt+0x94/0xa0
[ 115.769456][ C1] ? asm_common_interrupt+0x2b/0x40
[ 115.774754][ C1] ? acpi_safe_halt+0x25/0x30
[ 115.779534][ C1] ? acpi_idle_do_entry+0x22/0x40
[ 115.784738][ C1] ? acpi_idle_enter+0xa1/0xc0
[ 115.789603][ C1] ? cpuidle_enter_state+0xcb/0x250
[ 115.794891][ C1] ? cpuidle_enter+0x7f/0xf0
[ 115.799595][ C1] ? do_idle+0x551/0x750
[ 115.803909][ C1] ? cpu_startup_entry+0x65/0x80
[ 115.808953][ C1] ? start_secondary+0xcb/0xd0
[ 115.813810][ C1] ? common_startup_64+0x12c/0x137
[ 115.819068][ C1] ? kmsan_get_metadata+0x146/0x1d0
[ 115.824384][ C1] ? kmsan_internal_memmove_metadata+0x17b/0x230
[ 115.830861][ C1] ? __msan_memcpy+0x108/0x1c0
[ 115.835763][ C1] ? page_to_skb+0x1271/0x1620
[ 115.840612][ C1] ? kmsan_get_metadata+0x146/0x1d0
[ 115.845931][ C1] __msan_warning+0x95/0x120
[ 115.850618][ C1] receive_buf+0x25e3/0x5fd0
[ 115.855336][ C1] ? kmsan_get_metadata+0x146/0x1d0
[ 115.860641][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 115.866572][ C1] virtnet_poll+0xd1c/0x23c0
[ 115.871299][ C1] ? __pfx_virtnet_poll+0x10/0x10
[ 115.876444][ C1] __napi_poll+0xe7/0x980
[ 115.880885][ C1] ? kmsan_get_metadata+0x146/0x1d0
[ 115.886199][ C1] net_rx_action+0x82a/0x1850
[ 115.891087][ C1] ? sched_clock_cpu+0x55/0x870
[ 115.896185][ C1] ? __pfx_net_rx_action+0x10/0x10
[ 115.901416][ C1] handle_softirqs+0x1ce/0x800
[ 115.906294][ C1] __irq_exit_rcu+0x68/0x120
[ 115.911007][ C1] irq_exit_rcu+0x12/0x20
[ 115.915429][ C1] common_interrupt+0x94/0xa0
[ 115.920232][ C1] </IRQ>
[ 115.923211][ C1] <TASK>
[ 115.926197][ C1] asm_common_interrupt+0x2b/0x40
[ 115.931326][ C1] RIP: 0010:acpi_safe_halt+0x25/0x30
[ 115.936807][ C1] Code: 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 80 5e 0a 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d eb a8 44 00 f3 0f 1e fa fb f4 <fa> 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90
[ 115.956643][ C1] RSP: 0018:ffff8881026ebdb0 EFLAGS: 00000246
[ 115.962829][ C1] RAX: ffff8881026d4180 RBX: ffffffff91286b50 RCX: 0000000000000001
[ 115.970895][ C1] RDX: ffff888103172864 RSI: ffffffff91286b50 RDI: ffff888103172864
[ 115.978952][ C1] RBP: ffff8881026ebdb0 R08: ffffea000000000f R09: 00000000000000ff
[ 115.987007][ C1] R10: ffff888101ed4182 R11: ffffffff8f78b590 R12: ffff888103dcf400
[ 115.995060][ C1] R13: ffffffff91286bd0 R14: 0000000000000001 R15: 0000000000000001
[ 116.003139][ C1] ? __pfx_acpi_idle_enter+0x10/0x10
[ 116.008538][ C1] acpi_idle_do_entry+0x22/0x40
[ 116.013513][ C1] acpi_idle_enter+0xa1/0xc0
[ 116.018199][ C1] cpuidle_enter_state+0xcb/0x250
[ 116.023340][ C1] cpuidle_enter+0x7f/0xf0
[ 116.027868][ C1] do_idle+0x551/0x750
[ 116.032019][ C1] cpu_startup_entry+0x65/0x80
[ 116.036863][ C1] ? __pfx_setup_secondary_APIC_clock+0x10/0x10
[ 116.043215][ C1] start_secondary+0xcb/0xd0
[ 116.047891][ C1] common_startup_64+0x12c/0x137
[ 116.052944][ C1] </TASK>
[ 116.056275][ C1] Kernel Offset: disabled
[ 116.060660][ C1] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1647276148=/tmp/go-build -gno-record-gcc-switches'
git status (err=<nil>)
HEAD detached at 25905f5d0a
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"25905f5d0a2a7883bd33491997556193582c6059\"
Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=14f8680a980000
Tested on:
commit: 771ed661 Merge tag 'clk-fixes-for-linus' of git://git...
git tree: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel config: https://syzkaller.appspot.com/x/.config?x=b7d07bfd0c305fe4
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
patch: https://syzkaller.appspot.com/x/patch.diff?x=16939696980000
^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2024-06-09 9:42 UTC | newest]
Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <CAE8VWiKc3tWxyyDFBYCn81rpTcgc4nAB=KgQCno4j0C96gTkaA@mail.gmail.com>
2024-04-14 2:35 ` [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry syzbot
[not found] <10654d2b-4fb4-4484-bda7-bec60ddf214e@kernel.org>
2024-06-09 9:42 ` syzbot
[not found] <CAE8VWiJFOtDVnSgMUmr0OsgUr6E+c9m5p_n-Dg_qn2LCdu2jcA@mail.gmail.com>
2024-04-14 17:38 ` syzbot
2022-11-25 9:56 [syzbot] " syzbot
2023-02-10 12:21 ` [syzbot] [hfs?] " syzbot
2024-06-08 11:09 ` Chao Yu
2024-06-08 11:33 ` syzbot
2024-06-09 2:51 ` Chao Yu
2024-06-09 5:45 ` syzbot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox