KMSAN: uninit-value in ovl_fileattr_get

Status: closed as dup on 2026/02/11 09:00
Subsystems: overlayfs
[Documentation on labels]
Reported-by: syzbot+fa79520cb6cf363d660d@syzkaller.appspotmail.com
First crash: 199d, last: 194d
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KMSAN: uninit-value in fuse_fileattr_get fuse 7 syz, C 19 186d 199d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [overlayfs?] KMSAN: uninit-value in ovl_fileattr_get 1 (2) 2026/02/11 08:59
[PATCH] fs: set fsx_valid hint in file_getattr() syscall 4 (4) 2026/02/11 08:57

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in ovl_security_fileattr fs/overlayfs/inode.c:617 [inline]
BUG: KMSAN: uninit-value in ovl_real_fileattr_get fs/overlayfs/inode.c:701 [inline]
BUG: KMSAN: uninit-value in ovl_fileattr_get+0x5cd/0x650 fs/overlayfs/inode.c:720
 ovl_security_fileattr fs/overlayfs/inode.c:617 [inline]
 ovl_real_fileattr_get fs/overlayfs/inode.c:701 [inline]
 ovl_fileattr_get+0x5cd/0x650 fs/overlayfs/inode.c:720
 vfs_fileattr_get fs/file_attr.c:94 [inline]
 __do_sys_file_getattr fs/file_attr.c:416 [inline]
 __se_sys_file_getattr+0x6cb/0xbd0 fs/file_attr.c:372
 __x64_sys_file_getattr+0xe4/0x150 fs/file_attr.c:372
 x64_sys_call+0x17cd/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:469
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 ovl_security_fileattr fs/overlayfs/inode.c:612 [inline]
 ovl_real_fileattr_get fs/overlayfs/inode.c:701 [inline]
 ovl_fileattr_get+0x5c6/0x650 fs/overlayfs/inode.c:720
 vfs_fileattr_get fs/file_attr.c:94 [inline]
 __do_sys_file_getattr fs/file_attr.c:416 [inline]
 __se_sys_file_getattr+0x6cb/0xbd0 fs/file_attr.c:372
 __x64_sys_file_getattr+0xe4/0x150 fs/file_attr.c:372
 x64_sys_call+0x17cd/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:469
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable fa.i created at:
 __do_sys_file_getattr fs/file_attr.c:380 [inline]
 __se_sys_file_getattr+0x8c/0xbd0 fs/file_attr.c:372
 __x64_sys_file_getattr+0xe4/0x150 fs/file_attr.c:372

CPU: 0 UID: 0 PID: 6044 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
=====================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/06 10:33 upstream 8fdb05de0e2d f03c4191 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/10 22:10 upstream 72c395024dac 91d776d3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/10 22:09 upstream 72c395024dac 91d776d3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/08 14:55 upstream e7aa57247700 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/06 06:56 upstream 8fdb05de0e2d f03c4191 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/06 10:04 upstream 8fdb05de0e2d f03c4191 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ovl_fileattr_get
2026/02/06 10:04 upstream 8fdb05de0e2d f03c4191 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in ovl_fileattr_get
* Struck through repros no longer work on HEAD.