From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oo1-f69.google.com (mail-oo1-f69.google.com [209.85.161.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 7432D36E46F for ; Sun, 13 Sep 2026 17:05:18 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.69 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789319120; cv=none; b=qzfHd03fQmln6FzS4SaKoyRnDerbIcsmsHVNftDl0CTtLrilK7IM/0nKveui4dPSSqdgJ7/KGxIRweZNClLQMH9zlBAmFofiq1nbal1e+5er+XsQtAE2xHtLrrRDfmHgVx2vJydeFJ0KkcdNKBVWuDIy/8bdJvsMucUGu8Gw1wo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789319120; c=relaxed/simple; bh=5FMwaMvXJ6YWDzh6OccgfHx65rc59LyHQMEX+JIdj84=; h=MIME-Version:Date:Message-ID:Subject:From:To:Cc:Content-Type; b=F7VYVBfWPBEZ8D/CXvW7ZDNXYUdpcgIyvImWgKgMKLDJ6atH05tvi0kHiBF7UqQCcfsPf20SlSog+dvwKlSouUYpgZhz/nRcXgZR8RDYnBFGKjl97qS2EjxZra2c0gb63QyXolrLHTQMJ91PhWTn8HSoIPPzV46fA6fiX8B+8Gw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.161.69 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-6c2d5235ac3so994054eaf.0 for ; Sun, 13 Sep 2026 10:05:18 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789319117; x=1789923917; h=content-type:cc:to:from:subject:message-id:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=i833zgCVRJvx/b7+XGbTUMnoNpAaOM+80cA6QNN0E50=; b=VYY6jmbqjcnR9tOg+X/fIQ/eVtG+w7eofefDCcGqT/8TKUngF4U1pMmYvS7iwyJupa i3JcoJ8eERzGVmmu67eMicXGgpbl8XCj5SC8RkcTWE282ArGeP5VXHarNNRIyM/gP/Zv KyTz07FC+kXRG76ObwjH+lVk2/ZcyI/UYknlFiqgQ6gQltGg8ECIKQ465tApwmWKamKX BL1AuSeA/9/Q2X2SRzwsaSEtxubUSW15h7N5LZESByytTWAU9vu5WHsm//jVAU4DJFzI sNKAm/HicTWEz4uRArwL+8t7imxUoRFm4seqrMn6/cWEAcHu52E8WBojocIj85Oe1hbl 854Q== X-Gm-Message-State: AFuF++k9DiYXlt3qXr9WkPD2+0veeWODQ5GR0GyZGCXPgEYVJSj6TNig 7NJMKtg0NOiT1RPH0H5sTffA6sxo86trxoMgUkJynKKcDeCEUhejhVIlZ3bH7JZqZXcJs1FEVhX w37R30LMISh132i4raCBufDZjxnJapFZtHZhKqZrAin4JHDEsHN5niabaM84= Precedence: bulk X-Mailing-List: syzbot@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a4a:ee0c:0:b0:6b1:9b72:213c with SMTP id 006d021491bc7-6c3cc7045f9mr970960eaf.3.1789319117347; Sun, 13 Sep 2026 10:05:17 -0700 (PDT) Date: Sun, 13 Sep 2026 10:05:17 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6aa6d7cd.016ef6ab.da411.0001.GAE@google.com> Subject: [moderation/CI] Re: dcache: fully initialize the inline name in __d_alloc() From: syzbot ci To: syzkaller-upstream-moderation@googlegroups.com Cc: syzbot@lists.linux.dev Content-Type: text/plain; charset="UTF-8" syzbot ci has tested the following series [v1] dcache: fully initialize the inline name in __d_alloc() https://lore.kernel.org/all/20260913152802.13413-1-drifabdelmalekmohamedsaid@gmail.com * [PATCH] dcache: fully initialize the inline name in __d_alloc() and found the following issue: KASAN: null-ptr-deref Read in __d_alloc Full report is available here: https://ci.syzbot.org/series/5b221ae6-70dc-4b99-963a-3d9e7db97db0 *** KASAN: null-ptr-deref Read in __d_alloc tree: vfs URL: https://kernel.googlesource.com/pub/scm/linux/kernel/git/vfs/vfs.git base: f5d607b8091438d8416d0e3ae02532a18539b48b arch: amd64 compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 config: https://ci.syzbot.org/builds/9b8e9369-7fc0-4fbd-a090-6f785f103d1b/config kfence: initialized - using 2097152 bytes for 255 objects at 0xffff88823c400000-0xffff88823c600000 Console: colour VGA+ 80x25 printk: console [ttyS0] enabled printk: console [ttyS0] enabled printk: legacy bootconsole [earlyser0] disabled printk: legacy bootconsole [earlyser0] disabled Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar ... MAX_LOCKDEP_SUBCLASSES: 8 ... MAX_LOCK_DEPTH: 48 ... MAX_LOCKDEP_KEYS: 8192 ... CLASSHASH_SIZE: 4096 ... MAX_LOCKDEP_ENTRIES: 1048576 ... MAX_LOCKDEP_CHAINS: 1048576 ... CHAINHASH_SIZE: 524288 memory used by lock dependency info: 106625 kB memory used for stack traces: 8320 kB per task-struct memory footprint: 1920 bytes mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl ACPI: Core revision 20260408 clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns APIC: Switch to symmetric I/O mode setup x2apic enabled APIC: Switched APIC routing to: physical x2apic ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x285c3ee517e, max_idle_ns: 440795257231 ns Calibrating delay loop (skipped) preset value.. 5599.99 BogoMIPS (lpj=27999980) Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 mitigations: Enabled attack vectors: user_kernel, user_user, guest_host, guest_guest, SMT mitigations: auto Speculative Store Bypass: Vulnerable Spectre V2 : Mitigation: Retpolines ITS: Mitigation: Aligned branch/return thunks MDS: Vulnerable: Clear CPU buffers attempted, no microcode Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT active return thunk: its_return_thunk x86/fpu: x87 FPU will use FXSAVE pid_max: default: 32768 minimum: 301 landlock: Up and running. Yama: becoming mindful. TOMOYO Linux initialized AppArmor: AppArmor initialized LSM support for eBPF active debugfs: Unable to create file 'net_refcnt@ffffffff9aedda40', debugfs is not initialized yet debugfs: Unable to create file 'net_notrefcnt@ffffffff9aeddab8', debugfs is not initialized yet Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, vmalloc hugepage) Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, vmalloc hugepage) Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc) Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc) ================================================================== BUG: KASAN: null-ptr-deref in __d_alloc+0x65/0x7b0 Read of size 40 at addr 0000000000000000 by task swapper/0/0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: dump_stack_lvl+0xe8/0x150 kasan_report+0x117/0x150 kasan_check_range+0x264/0x2c0 __asan_memcpy+0x29/0x70 __d_alloc+0x65/0x7b0 d_make_root+0x41/0x80 shmem_fill_super+0xc07/0x1090 get_tree_nodev+0xbb/0x150 vfs_get_tree+0x92/0x2a0 vfs_kern_mount+0x15b/0x220 kern_mount+0x43/0x90 shmem_init+0x37/0x170 mnt_init+0x19b/0x1f0 vfs_caches_init+0x22/0x30 start_kernel+0x34c/0x3e0 x86_64_start_reservations+0x24/0x30 x86_64_start_kernel+0x137/0x1b0 common_startup_64+0x13e/0x157 ================================================================== *** If these findings have caused you to resend the series or submit a separate fix, please add the following tag to your commit message: Tested-by: syzbot@syzkaller.appspotmail.com --- This report is generated by a bot. It may contain errors. syzbot ci engineers can be reached at syzkaller@googlegroups.com. To test a fix for this bug, please reply with `#syz test` (on a separate line) and attach the patch to the email. Notes: - The patch will be applied on top of the tested series (as an incremental fix). - To test a new version of the whole series, please send it directly to syzbot@lists.linux.dev. - Arguments like custom git repos and branches are not supported. The email will later be sent to: [brauner@kernel.org drifabdelmalekmohamedsaid@gmail.com dvyukov@google.com glider@google.com jack@suse.cz kmsan-dev@googlegroups.com linux-fsdevel@vger.kernel.org linux-kernel@vger.kernel.org syzbot@syzkaller.appspotmail.com viro@zeniv.linux.org.uk] If the report looks fine to you, reply with: #syz upstream If the report is a false positive, reply with #syz invalid