syzbot


KMSAN: uninit-value in from_kuid_munged (2)

Status: closed as invalid on 2026/05/30 06:05
Subsystems: kernel
Labels: prio:high
[Documentation on labels]
First crash: 64d, last: 23d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
2d729a3d-6aa7-43ff-8932-e29a04c392a3 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KMSAN: uninit-value in from_kuid_munged (2) 2026/05/24 16:03 2026/05/24 16:03 2026/05/24 17:18 c69befb30ac10e158cc9d1557b508ee3f0eca1de
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KMSAN: uninit-value in from_kuid_munged kernel 7 14 77d 118d 0/29 closed as invalid on 2026/04/01 01:54

Sample crash report:
=====================================================
BUG: KMSAN: uninit-value in map_id_range_up_base kernel/user_namespace.c:360 [inline]
BUG: KMSAN: uninit-value in map_id_range_up kernel/user_namespace.c:391 [inline]
BUG: KMSAN: uninit-value in map_id_up kernel/user_namespace.c:406 [inline]
BUG: KMSAN: uninit-value in from_kuid kernel/user_namespace.c:444 [inline]
BUG: KMSAN: uninit-value in from_kuid_munged+0xb74/0xc90 kernel/user_namespace.c:469
 map_id_range_up_base kernel/user_namespace.c:360 [inline]
 map_id_range_up kernel/user_namespace.c:391 [inline]
 map_id_up kernel/user_namespace.c:406 [inline]
 from_kuid kernel/user_namespace.c:444 [inline]
 from_kuid_munged+0xb74/0xc90 kernel/user_namespace.c:469
 __scm_recv_common+0x233/0x910 net/core/scm.c:517
 scm_recv_unix+0x5e/0x580 net/core/scm.c:545
 __unix_dgram_recvmsg+0x14e1/0x1750 net/unix/af_unix.c:2666
 unix_dgram_recvmsg+0x112/0x180 net/unix/af_unix.c:2686
 sock_recvmsg_nosec net/socket.c:1137 [inline]
 sock_recvmsg+0x27b/0x310 net/socket.c:1159
 ____sys_recvmsg+0x193/0x620 net/socket.c:2918
 ___sys_recvmsg+0x20b/0x850 net/socket.c:2960
 __sys_recvmsg net/socket.c:2993 [inline]
 __do_sys_recvmsg net/socket.c:2999 [inline]
 __se_sys_recvmsg net/socket.c:2996 [inline]
 __x64_sys_recvmsg+0x20e/0x3d0 net/socket.c:2996
 x64_sys_call+0x35cc/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:48
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable scm created at:
 __unix_dgram_recvmsg+0x4d/0x1750 net/unix/af_unix.c:2569
 unix_dgram_recvmsg+0x112/0x180 net/unix/af_unix.c:2686

CPU: 0 UID: 0 PID: 4932 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
=====================================================

Crashes (22):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/20 17:26 upstream 27fa82620cba 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/19 02:31 upstream 4d3a2a466b8d 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/03 20:11 upstream f377d0025eb0 a0d91488 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/03 02:38 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/02 20:39 upstream f1a5e78a55eb a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/02 06:49 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/28 16:23 upstream 3b3bea6d4b9c b4209743 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/27 05:44 upstream 20b64cf8705a 9c2d0995 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/27 01:16 upstream 20b64cf8705a 9c2d0995 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/25 13:31 upstream 27d128c1cff6 9c2d0995 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/25 12:48 upstream 27d128c1cff6 9c2d0995 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/20 07:05 upstream c1f49dea2b8f 303e2802 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/19 16:25 upstream faeab166167f 303e2802 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/19 05:00 upstream eb5249b12507 303e2802 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/19 01:42 upstream eb5249b12507 303e2802 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/18 00:58 upstream 43cfbdda5af6 24ecfc1e .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/04/17 00:29 upstream 1d51b370a0f8 321ae225 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-root KMSAN: uninit-value in from_kuid_munged
2026/05/16 18:00 upstream 6916d5703ddf a15a64a6 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in from_kuid_munged
2026/05/05 19:01 upstream a293ec25d59d 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in from_kuid_munged
2026/05/05 16:11 upstream a293ec25d59d 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in from_kuid_munged
2026/04/28 07:19 upstream 3b3bea6d4b9c ce741359 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in from_kuid_munged
2026/04/09 17:44 upstream 7f87a5ea75f0 38c8e246 .config console log report [disk image] [vmlinux] [kernel image] ci-upstream-kmsan-gce-386-root KMSAN: uninit-value in from_kuid_munged
* Struck through repros no longer work on HEAD.