./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2851221338 <...> Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. execve("./syz-executor2851221338", ["./syz-executor2851221338"], 0x7ffd267ea3b0 /* 10 vars */) = 0 brk(NULL) = 0x555585e4d000 brk(0x555585e4dd00) = 0x555585e4dd00 arch_prctl(ARCH_SET_FS, 0x555585e4d380) = 0 set_tid_address(0x555585e4d650) = 5180 set_robust_list(0x555585e4d660, 24) = 0 rseq(0x555585e4dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2851221338", 4096) = 28 getrandom("\xa8\x81\xad\xc3\x74\xff\x1b\xe3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585e4dd00 brk(0x555585e6ed00) = 0x555585e6ed00 brk(0x555585e6f000) = 0x555585e6f000 mprotect(0x7f7d02ca4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555585e4d650) = 5181 ./strace-static-x86_64: Process 5181 attached [pid 5181] set_robust_list(0x555585e4d660, 24) = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 executing program [pid 5181] close(3) = 0 [pid 5181] write(1, "executing program\n", 18) = 18 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cfa600000 [pid 5181] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5181] munmap(0x7f7cfa600000, 138412032) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5181] close(3) = 0 [pid 5181] close(4) = 0 [pid 5181] mkdir("./file0", 0777) = 0 [ 185.881707][ T5181] loop0: detected capacity change from 0 to 256 [pid 5181] mount("/dev/loop0", "./file0", "exfat", MS_NOEXEC, "") = 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5181] chdir("./file0") = 0 [ 185.935002][ T5181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [pid 5181] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 020) = 4 [ 185.991704][ T29] audit: type=1800 audit(1727856073.783:2): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor285" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 186.004203][ T5181] ===================================================== [ 186.020320][ T5181] BUG: KMSAN: uninit-value in __exfat_get_dentry_set+0x10ca/0x14d0 [ 186.029037][ T5181] __exfat_get_dentry_set+0x10ca/0x14d0 [ 186.034875][ T5181] exfat_get_dentry_set+0x58/0xec0 [ 186.040213][ T5181] __exfat_write_inode+0x3c1/0xe30 [ 186.045595][ T5181] __exfat_truncate+0x7f3/0xbb0 [ 186.050664][ T5181] exfat_truncate+0xee/0x2a0 [ 186.055571][ T5181] exfat_direct_IO+0x5a3/0x900 [ 186.060546][ T5181] generic_file_direct_write+0x275/0x6a0 [ 186.066483][ T5181] __generic_file_write_iter+0x242/0x460 [ 186.072555][ T5181] exfat_file_write_iter+0x894/0xfb0 [ 186.078135][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 186.083720][ T5181] vfs_writev+0x56a/0x14f0 [ 186.088319][ T5181] __se_sys_pwritev2+0x280/0x470 [ 186.093555][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 186.098814][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 186.103807][ T5181] do_syscall_64+0xcd/0x1e0 [ 186.108539][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.114880][ T5181] [ 186.117306][ T5181] Uninit was stored to memory at: [ 186.122885][ T5181] _copy_to_iter+0xe53/0x2b30 [ 186.127773][ T5181] copy_page_to_iter+0x419/0x880 [ 186.133047][ T5181] shmem_file_read_iter+0xa09/0x12b0 [ 186.138583][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 186.144175][ T5181] vfs_iter_read+0x278/0x760 [ 186.148983][ T5181] loop_process_work+0x20fc/0x3750 [ 186.154364][ T5181] loop_rootcg_workfn+0x2b/0x40 [ 186.159403][ T5181] process_scheduled_works+0xae0/0x1c40 [ 186.165277][ T5181] worker_thread+0xea7/0x14f0 [ 186.170201][ T5181] kthread+0x3e2/0x540 [ 186.174600][ T5181] ret_from_fork+0x6d/0x90 [ 186.179206][ T5181] ret_from_fork_asm+0x1a/0x30 [ 186.184253][ T5181] [ 186.186779][ T5181] Uninit was stored to memory at: [ 186.192137][ T5181] copy_page_from_iter_atomic+0x12b7/0x3100 [ 186.198412][ T5181] generic_perform_write+0x8d1/0x1080 [ 186.204296][ T5181] shmem_file_write_iter+0x2ba/0x2f0 [ 186.209851][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 186.215398][ T5181] vfs_iter_write+0x44d/0xd40 [ 186.220291][ T5181] loop_process_work+0x15e6/0x3750 [ 186.225691][ T5181] loop_rootcg_workfn+0x2b/0x40 [ 186.230730][ T5181] process_scheduled_works+0xae0/0x1c40 [ 186.236561][ T5181] worker_thread+0xea7/0x14f0 [ 186.241481][ T5181] kthread+0x3e2/0x540 [ 186.245912][ T5181] ret_from_fork+0x6d/0x90 [ 186.250514][ T5181] ret_from_fork_asm+0x1a/0x30 [ 186.255573][ T5181] [ 186.257993][ T5181] Uninit was created at: [ 186.262581][ T5181] __alloc_pages_noprof+0x9d6/0xe70 [ 186.268019][ T5181] alloc_pages_mpol_noprof+0x299/0x990 [ 186.273738][ T5181] folio_alloc_noprof+0x1db/0x310 [ 186.278955][ T5181] filemap_alloc_folio_noprof+0xa6/0x440 [ 186.285029][ T5181] __filemap_get_folio+0xac4/0x1550 [ 186.290455][ T5181] block_write_begin+0x6e/0x2b0 [ 186.295631][ T5181] exfat_write_begin+0xfb/0x400 [ 186.300690][ T5181] exfat_file_write_iter+0x474/0xfb0 [ 186.306252][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 186.311702][ T5181] vfs_writev+0x56a/0x14f0 [ 186.316456][ T5181] __se_sys_pwritev2+0x280/0x470 [ 186.321632][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 186.327002][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 186.331901][ T5181] do_syscall_64+0xcd/0x1e0 [ 186.336703][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.342911][ T5181] [ 186.345349][ T5181] CPU: 0 UID: 0 PID: 5181 Comm: syz-executor285 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 186.356930][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.367234][ T5181] ===================================================== [ 186.374419][ T5181] Disabling lock debugging due to kernel taint [ 186.380695][ T5181] Kernel panic - not syncing: kmsan.panic set ... [ 186.387208][ T5181] CPU: 0 UID: 0 PID: 5181 Comm: syz-executor285 Tainted: G B 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 186.399979][ T5181] Tainted: [B]=BAD_PAGE [ 186.404208][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.414372][ T5181] Call Trace: [ 186.417768][ T5181] [ 186.420812][ T5181] dump_stack_lvl+0x216/0x2d0 [ 186.425646][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.431598][ T5181] dump_stack+0x1e/0x30 [ 186.435892][ T5181] panic+0x4e2/0xcf0 [ 186.439956][ T5181] ? kmsan_get_metadata+0x41/0x1c0 [ 186.445278][ T5181] kmsan_report+0x2c7/0x2d0 [ 186.449906][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.455224][ T5181] ? __msan_warning+0x95/0x120 [ 186.460166][ T5181] ? __exfat_get_dentry_set+0x10ca/0x14d0 [ 186.466048][ T5181] ? exfat_get_dentry_set+0x58/0xec0 [ 186.471484][ T5181] ? __exfat_write_inode+0x3c1/0xe30 [ 186.476906][ T5181] ? __exfat_truncate+0x7f3/0xbb0 [ 186.482055][ T5181] ? exfat_truncate+0xee/0x2a0 [ 186.486963][ T5181] ? exfat_direct_IO+0x5a3/0x900 [ 186.492114][ T5181] ? generic_file_direct_write+0x275/0x6a0 [ 186.498111][ T5181] ? __generic_file_write_iter+0x242/0x460 [ 186.504168][ T5181] ? exfat_file_write_iter+0x894/0xfb0 [ 186.509787][ T5181] ? do_iter_readv_writev+0x88a/0xa30 [ 186.515387][ T5181] ? vfs_writev+0x56a/0x14f0 [ 186.520092][ T5181] ? __se_sys_pwritev2+0x280/0x470 [ 186.525355][ T5181] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 186.530714][ T5181] ? x64_sys_call+0x2edb/0x3ba0 [ 186.535708][ T5181] ? do_syscall_64+0xcd/0x1e0 [ 186.540553][ T5181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.546912][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.552857][ T5181] ? __wait_on_bit+0x1f8/0x4b0 [ 186.557755][ T5181] ? __pfx_bit_wait_io+0x10/0x10 [ 186.562822][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.568759][ T5181] ? out_of_line_wait_on_bit+0x13c/0x170 [ 186.574532][ T5181] ? __pfx_wake_bit_function+0x10/0x10 [ 186.580125][ T5181] ? __pfx_bit_wait_io+0x10/0x10 [ 186.585192][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.591007][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.597010][ T5181] __msan_warning+0x95/0x120 [ 186.601798][ T5181] __exfat_get_dentry_set+0x10ca/0x14d0 [ 186.607694][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.613064][ T5181] exfat_get_dentry_set+0x58/0xec0 [ 186.618413][ T5181] ? exfat_set_volume_dirty+0x15e/0x490 [ 186.624125][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.629638][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.635621][ T5181] __exfat_write_inode+0x3c1/0xe30 [ 186.640885][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.646837][ T5181] ? inode_needs_sync+0x130/0x2c0 [ 186.652109][ T5181] __exfat_truncate+0x7f3/0xbb0 [ 186.657117][ T5181] ? kmsan_get_shadow_origin_ptr+0x3/0xb0 [ 186.662998][ T5181] exfat_truncate+0xee/0x2a0 [ 186.667825][ T5181] exfat_direct_IO+0x5a3/0x900 [ 186.672753][ T5181] ? __pfx_exfat_direct_IO+0x10/0x10 [ 186.678557][ T5181] generic_file_direct_write+0x275/0x6a0 [ 186.685355][ T5181] __generic_file_write_iter+0x242/0x460 [ 186.691451][ T5181] exfat_file_write_iter+0x894/0xfb0 [ 186.696986][ T5181] ? __pfx_exfat_write_end+0x10/0x10 [ 186.702464][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 186.708861][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 186.714239][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.719655][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 186.725780][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 186.731729][ T5181] vfs_writev+0x56a/0x14f0 [ 186.736279][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.741748][ T5181] ? __traceiter_rdev_dump_survey+0x40/0x160 [ 186.748124][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.754179][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 186.759507][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 186.765583][ T5181] __se_sys_pwritev2+0x280/0x470 [ 186.770742][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 186.775965][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 186.780876][ T5181] do_syscall_64+0xcd/0x1e0 [ 186.785577][ T5181] ? clear_bhb_loop+0x25/0x80 [ 186.790388][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.796467][ T5181] RIP: 0033:0x7f7d02c2fad9 [ 186.801027][ T5181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 186.820812][ T5181] RSP: 002b:00007ffe1e834608 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 186.829384][ T5181] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f7d02c2fad9 [ 186.837476][ T5181] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 186.846455][ T5181] RBP: 00007f7d02ca45f0 R08: 0000000000000000 R09: 0000000000000000 [ 186.854591][ T5181] R10: 0000000000000030 R11: 0000000000000246 R12: 00007ffe1e834640 [ 186.862860][ T5181] R13: 00007ffe1e834868 R14: 431bde82d7b634db R15: 00007f7d02c7803b [ 186.871167][ T5181] [ 186.874594][ T5181] Kernel Offset: disabled [ 186.879230][ T5181] Rebooting in 86400 seconds..