./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3427867673 <...> Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. execve("./syz-executor3427867673", ["./syz-executor3427867673"], 0x7ffd0cbe6d40 /* 10 vars */) = 0 brk(NULL) = 0x555556ce8000 brk(0x555556ce8d00) = 0x555556ce8d00 arch_prctl(ARCH_SET_FS, 0x555556ce8380) = 0 set_tid_address(0x555556ce8650) = 5005 set_robust_list(0x555556ce8660, 24) = 0 rseq(0x555556ce8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3427867673", 4096) = 28 getrandom("\xd1\x2a\xb1\x59\xd2\xa4\xc6\xd5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556ce8d00 brk(0x555556d09d00) = 0x555556d09d00 brk(0x555556d0a000) = 0x555556d0a000 mprotect(0x7fe7f5db4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5006 attached , child_tidptr=0x555556ce8650) = 5006 [pid 5006] set_robust_list(0x555556ce8660, 24) = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5006] setpgid(0, 0) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5006] write(3, "1000", 4) = 4 [pid 5006] close(3) = 0 [pid 5006] memfd_create("syzkaller", 0) = 3 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe7ed902000 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5006] munmap(0x7fe7ed902000, 138412032) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5006] close(3) = 0 [pid 5006] mkdir("./file0", 0777) = 0 [pid 5006] mount("/dev/loop0", "./file0", "erofs", MS_RDONLY|MS_NODIRATIME|MS_STRICTATIME, "") = 0 [pid 5006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5006] chdir("./file0") = 0 [pid 5006] ioctl(4, LOOP_CLR_FD) = 0 [pid 5006] close(4) = 0 [ 136.918692][ T5006] loop0: detected capacity change from 0 to 16 [ 136.940044][ T5006] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.957132][ T5006] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -12 in[46, 4050] out[917] [ 136.968971][ T5006] ===================================================== [ 136.976276][ T5006] BUG: KMSAN: uninit-value in hex_dump_to_buffer+0xae9/0x10f0 [ 136.984141][ T5006] hex_dump_to_buffer+0xae9/0x10f0 [ 136.989513][ T5006] print_hex_dump+0x13d/0x3e0 [ 136.994385][ T5006] z_erofs_lz4_decompress+0x257e/0x2a70 [ 137.000236][ T5006] z_erofs_decompress_queue+0x338c/0x6460 [ 137.006124][ T5006] z_erofs_runqueue+0x36cd/0x3830 [ 137.011389][ T5006] z_erofs_read_folio+0x435/0x810 [ 137.016581][ T5006] filemap_read_folio+0xce/0x370 [ 137.021783][ T5006] do_read_cache_folio+0x3b4/0x11e0 [ 137.027182][ T5006] read_cache_folio+0x60/0x80 [ 137.032158][ T5006] erofs_bread+0x286/0x6f0 [ 137.036727][ T5006] erofs_namei+0x2fe/0x1790 [ 137.041559][ T5006] erofs_lookup+0x100/0x3c0 [ 137.046216][ T5006] lookup_one_qstr_excl+0x233/0x520 [ 137.051678][ T5006] filename_create+0x2fc/0x6d0 [ 137.056587][ T5006] do_mkdirat+0x69/0x800 [ 137.061023][ T5006] __x64_sys_mkdirat+0xc8/0x120 [ 137.066016][ T5006] do_syscall_64+0x44/0x110 [ 137.070709][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.076781][ T5006] [ 137.079317][ T5006] Uninit was created at: [ 137.083781][ T5006] __alloc_pages+0x9a4/0xe00 [ 137.088702][ T5006] alloc_pages_mpol+0x62b/0x9d0 [ 137.093727][ T5006] folio_alloc+0x1da/0x380 [ 137.098309][ T5006] filemap_alloc_folio+0xa5/0x430 [ 137.103646][ T5006] do_read_cache_folio+0x163/0x11e0 [ 137.109028][ T5006] read_cache_folio+0x60/0x80 [ 137.113998][ T5006] erofs_bread+0x286/0x6f0 [ 137.118557][ T5006] erofs_namei+0x2fe/0x1790 [ 137.123345][ T5006] erofs_lookup+0x100/0x3c0 [ 137.128001][ T5006] lookup_one_qstr_excl+0x233/0x520 [ 137.133423][ T5006] filename_create+0x2fc/0x6d0 [ 137.138325][ T5006] do_mkdirat+0x69/0x800 [ 137.142760][ T5006] __x64_sys_mkdirat+0xc8/0x120 [ 137.147755][ T5006] do_syscall_64+0x44/0x110 [ 137.152435][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.158511][ T5006] [ 137.161099][ T5006] CPU: 1 PID: 5006 Comm: syz-executor342 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 137.171730][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 137.182042][ T5006] ===================================================== [ 137.189046][ T5006] Disabling lock debugging due to kernel taint [ 137.195330][ T5006] Kernel panic - not syncing: kmsan.panic set ... [ 137.201851][ T5006] CPU: 1 PID: 5006 Comm: syz-executor342 Tainted: G B 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 137.213902][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 137.224057][ T5006] Call Trace: [ 137.227407][ T5006] [ 137.230413][ T5006] dump_stack_lvl+0x1bf/0x240 [ 137.235207][ T5006] dump_stack+0x1e/0x20 [ 137.239519][ T5006] panic+0x4de/0xc90 [ 137.243584][ T5006] ? add_taint+0x108/0x1a0 [ 137.248089][ T5006] kmsan_report+0x2d0/0x2d0 [ 137.252779][ T5006] ? __msan_warning+0x96/0x110 [ 137.257711][ T5006] ? hex_dump_to_buffer+0xae9/0x10f0 [ 137.263174][ T5006] ? print_hex_dump+0x13d/0x3e0 [ 137.268158][ T5006] ? z_erofs_lz4_decompress+0x257e/0x2a70 [ 137.274032][ T5006] ? z_erofs_decompress_queue+0x338c/0x6460 [ 137.280079][ T5006] ? z_erofs_runqueue+0x36cd/0x3830 [ 137.285390][ T5006] ? z_erofs_read_folio+0x435/0x810 [ 137.290737][ T5006] ? filemap_read_folio+0xce/0x370 [ 137.295986][ T5006] ? do_read_cache_folio+0x3b4/0x11e0 [ 137.301531][ T5006] ? read_cache_folio+0x60/0x80 [ 137.306501][ T5006] ? erofs_bread+0x286/0x6f0 [ 137.311236][ T5006] ? erofs_namei+0x2fe/0x1790 [ 137.316062][ T5006] ? erofs_lookup+0x100/0x3c0 [ 137.320870][ T5006] ? lookup_one_qstr_excl+0x233/0x520 [ 137.326386][ T5006] ? filename_create+0x2fc/0x6d0 [ 137.331492][ T5006] ? do_mkdirat+0x69/0x800 [ 137.336080][ T5006] ? __x64_sys_mkdirat+0xc8/0x120 [ 137.341203][ T5006] ? do_syscall_64+0x44/0x110 [ 137.345994][ T5006] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.352256][ T5006] ? irq_work_queue+0x1c3/0x260 [ 137.357300][ T5006] ? vprintk_emit+0xa59/0xbd0 [ 137.362151][ T5006] ? vprintk_default+0x3e/0x50 [ 137.367056][ T5006] ? vprintk+0xea/0xf0 [ 137.371219][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.377162][ T5006] __msan_warning+0x96/0x110 [ 137.381890][ T5006] hex_dump_to_buffer+0xae9/0x10f0 [ 137.387159][ T5006] print_hex_dump+0x13d/0x3e0 [ 137.392047][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.398048][ T5006] z_erofs_lz4_decompress+0x257e/0x2a70 [ 137.403779][ T5006] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 137.409697][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.415643][ T5006] z_erofs_decompress_queue+0x338c/0x6460 [ 137.421644][ T5006] z_erofs_runqueue+0x36cd/0x3830 [ 137.426925][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.432896][ T5006] z_erofs_read_folio+0x435/0x810 [ 137.438090][ T5006] filemap_read_folio+0xce/0x370 [ 137.443137][ T5006] ? z_erofs_rcu_callback+0x3d0/0x3d0 [ 137.448674][ T5006] do_read_cache_folio+0x3b4/0x11e0 [ 137.454017][ T5006] ? z_erofs_rcu_callback+0x3d0/0x3d0 [ 137.459570][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.465572][ T5006] read_cache_folio+0x60/0x80 [ 137.470437][ T5006] erofs_bread+0x286/0x6f0 [ 137.475007][ T5006] erofs_namei+0x2fe/0x1790 [ 137.479618][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 137.486003][ T5006] erofs_lookup+0x100/0x3c0 [ 137.490594][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 137.496530][ T5006] ? erofs_namei+0x1790/0x1790 [ 137.501428][ T5006] lookup_one_qstr_excl+0x233/0x520 [ 137.506754][ T5006] filename_create+0x2fc/0x6d0 [ 137.511707][ T5006] do_mkdirat+0x69/0x800 [ 137.516109][ T5006] ? getname_flags+0x5f8/0x980 [ 137.521037][ T5006] __x64_sys_mkdirat+0xc8/0x120 [ 137.525992][ T5006] do_syscall_64+0x44/0x110 [ 137.530672][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 137.536768][ T5006] RIP: 0033:0x7fe7f5d40a19 [ 137.541310][ T5006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 137.561090][ T5006] RSP: 002b:00007fff55985f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 137.569661][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7f5d40a19 [ 137.577744][ T5006] RDX: 00000000000001ff RSI: 0000000020000440 RDI: ffffffffffffff9c [ 137.585821][ T5006] RBP: 00007fe7f5db45f0 R08: 00000000000001fb R09: 0000555556ce94c0 [ 137.593883][ T5006] R10: 00007fff55985dd0 R11: 0000000000000246 R12: 00007fff55985f30 [ 137.601987][ T5006] R13: 00007fff55986158 R14: 431bde82d7b634db R15: 00007fe7f5d8903b [ 137.610086][ T5006] [ 137.613303][ T5006] Kernel Offset: disabled [ 137.617671][ T5006] Rebooting in 86400 seconds..