./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2469188382 <...> forked to background, child pid 4836 [ 107.846424][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.898092][ T4837] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 109.958897][ T4925] sshd (4925) used greatest stack depth: 4088 bytes left OK syzkaller syzkaller login: [ 111.546705][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. execve("./syz-executor2469188382", ["./syz-executor2469188382"], 0x7ffe392205c0 /* 10 vars */) = 0 brk(NULL) = 0x555556fd8000 brk(0x555556fd8d00) = 0x555556fd8d00 arch_prctl(ARCH_SET_FS, 0x555556fd8380) = 0 set_tid_address(0x555556fd8650) = 5187 set_robust_list(0x555556fd8660, 24) = 0 rseq(0x555556fd8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2469188382", 4096) = 28 getrandom("\xa7\xee\x29\xe0\x19\xc5\xdf\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556fd8d00 brk(0x555556ff9d00) = 0x555556ff9d00 brk(0x555556ffa000) = 0x555556ffa000 mprotect(0x7fc3c153b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556fd8650) = 5188 ./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x555556fd8660, 24) = 0 [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5188] setpgid(0, 0) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4executing program ) = 4 [pid 5188] close(3) = 0 [pid 5188] write(1, "executing program\n", 18) = 18 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc3b9000000 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5188] munmap(0x7fc3b9000000, 138412032) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] close(4) = 0 [pid 5188] mkdir("./file1", 0777) = 0 [pid 5188] mount("/dev/loop0", "./file1", "hfs", MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "") = 0 [pid 5188] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file1") = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 159.810120][ T5188] loop0: detected capacity change from 0 to 64 [ 159.868442][ T5188] ===================================================== [ 159.875776][ T5188] BUG: KMSAN: uninit-value in __hfs_ext_cache_extent+0x69f/0x7e0 [ 159.883822][ T5188] __hfs_ext_cache_extent+0x69f/0x7e0 [ 159.889365][ T5188] hfs_get_block+0x733/0xf50 [ 159.894229][ T5188] __block_write_begin_int+0xa6b/0x2f80 [ 159.900053][ T5188] cont_write_begin+0xf82/0x1940 [ 159.905084][ T5188] hfs_write_begin+0x85/0x120 [ 159.910057][ T5188] cont_write_begin+0x32f/0x1940 [ 159.915146][ T5188] hfs_write_begin+0x85/0x120 [ 159.920079][ T5188] hfs_file_truncate+0x1a5/0xd30 [ 159.925177][ T5188] hfs_inode_setattr+0x998/0xab0 [ 159.930322][ T5188] notify_change+0x1a8e/0x1b80 [ 159.935233][ T5188] do_truncate+0x22a/0x2b0 [ 159.939737][ T5188] vfs_truncate+0x5d4/0x680 [ 159.944547][ T5188] do_sys_truncate+0x104/0x240 [ 159.949469][ T5188] __x64_sys_truncate+0x6c/0xa0 [ 159.954585][ T5188] x64_sys_call+0x2ce3/0x3ba0 [ 159.959438][ T5188] do_syscall_64+0xcd/0x1e0 [ 159.964206][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.970356][ T5188] [ 159.972718][ T5188] Uninit was created at: [ 159.977091][ T5188] __kmalloc_noprof+0x661/0xf30 [ 159.982168][ T5188] hfs_find_init+0x91/0x250 [ 159.986856][ T5188] hfs_get_block+0x68d/0xf50 [ 159.991761][ T5188] __block_write_begin_int+0xa6b/0x2f80 [ 159.997463][ T5188] cont_write_begin+0xf82/0x1940 [ 160.002680][ T5188] hfs_write_begin+0x85/0x120 [ 160.007516][ T5188] cont_write_begin+0x32f/0x1940 [ 160.012716][ T5188] hfs_write_begin+0x85/0x120 [ 160.017554][ T5188] hfs_file_truncate+0x1a5/0xd30 [ 160.022718][ T5188] hfs_inode_setattr+0x998/0xab0 [ 160.027828][ T5188] notify_change+0x1a8e/0x1b80 [ 160.032790][ T5188] do_truncate+0x22a/0x2b0 [ 160.037382][ T5188] vfs_truncate+0x5d4/0x680 [ 160.042168][ T5188] do_sys_truncate+0x104/0x240 [ 160.047089][ T5188] __x64_sys_truncate+0x6c/0xa0 [ 160.052157][ T5188] x64_sys_call+0x2ce3/0x3ba0 [ 160.057018][ T5188] do_syscall_64+0xcd/0x1e0 [ 160.061752][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.067838][ T5188] [ 160.070434][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz-executor246 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 160.081474][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.091708][ T5188] ===================================================== [ 160.098739][ T5188] Disabling lock debugging due to kernel taint [ 160.105082][ T5188] Kernel panic - not syncing: kmsan.panic set ... [ 160.111600][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz-executor246 Tainted: G B 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 160.123948][ T5188] Tainted: [B]=BAD_PAGE [ 160.128142][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.138270][ T5188] Call Trace: [ 160.141603][ T5188] [ 160.144582][ T5188] dump_stack_lvl+0x216/0x2d0 [ 160.149358][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.155294][ T5188] dump_stack+0x1e/0x30 [ 160.159539][ T5188] panic+0x4e2/0xcf0 [ 160.163559][ T5188] ? kmsan_get_metadata+0xb1/0x1c0 [ 160.168917][ T5188] kmsan_report+0x2c7/0x2d0 [ 160.173613][ T5188] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 160.180065][ T5188] ? __msan_warning+0x95/0x120 [ 160.184934][ T5188] ? __hfs_ext_cache_extent+0x69f/0x7e0 [ 160.190582][ T5188] ? hfs_get_block+0x733/0xf50 [ 160.195441][ T5188] ? __block_write_begin_int+0xa6b/0x2f80 [ 160.201258][ T5188] ? cont_write_begin+0xf82/0x1940 [ 160.206463][ T5188] ? hfs_write_begin+0x85/0x120 [ 160.211433][ T5188] ? cont_write_begin+0x32f/0x1940 [ 160.216702][ T5188] ? hfs_write_begin+0x85/0x120 [ 160.221649][ T5188] ? hfs_file_truncate+0x1a5/0xd30 [ 160.226862][ T5188] ? hfs_inode_setattr+0x998/0xab0 [ 160.232075][ T5188] ? notify_change+0x1a8e/0x1b80 [ 160.237100][ T5188] ? do_truncate+0x22a/0x2b0 [ 160.241784][ T5188] ? vfs_truncate+0x5d4/0x680 [ 160.246558][ T5188] ? do_sys_truncate+0x104/0x240 [ 160.251594][ T5188] ? __x64_sys_truncate+0x6c/0xa0 [ 160.256748][ T5188] ? x64_sys_call+0x2ce3/0x3ba0 [ 160.261819][ T5188] ? do_syscall_64+0xcd/0x1e0 [ 160.266597][ T5188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.272823][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.278154][ T5188] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 160.284605][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.289952][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.295966][ T5188] ? hfs_brec_find+0x87c/0x980 [ 160.300857][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.306799][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.312127][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.317446][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.323378][ T5188] __msan_warning+0x95/0x120 [ 160.328077][ T5188] __hfs_ext_cache_extent+0x69f/0x7e0 [ 160.333566][ T5188] hfs_get_block+0x733/0xf50 [ 160.338270][ T5188] __block_write_begin_int+0xa6b/0x2f80 [ 160.343942][ T5188] ? __pfx_hfs_get_block+0x10/0x10 [ 160.349168][ T5188] cont_write_begin+0xf82/0x1940 [ 160.354202][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.359521][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.365454][ T5188] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 160.371399][ T5188] hfs_write_begin+0x85/0x120 [ 160.376173][ T5188] ? __pfx_hfs_get_block+0x10/0x10 [ 160.381385][ T5188] ? __pfx_hfs_write_begin+0x10/0x10 [ 160.386770][ T5188] cont_write_begin+0x32f/0x1940 [ 160.391863][ T5188] hfs_write_begin+0x85/0x120 [ 160.396702][ T5188] ? __pfx_hfs_get_block+0x10/0x10 [ 160.401916][ T5188] hfs_file_truncate+0x1a5/0xd30 [ 160.406962][ T5188] ? unmap_mapping_range+0xc8/0x3f0 [ 160.412264][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 160.417594][ T5188] hfs_inode_setattr+0x998/0xab0 [ 160.422642][ T5188] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 160.428207][ T5188] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 160.433771][ T5188] notify_change+0x1a8e/0x1b80 [ 160.438631][ T5188] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 160.445085][ T5188] do_truncate+0x22a/0x2b0 [ 160.449602][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 160.455535][ T5188] vfs_truncate+0x5d4/0x680 [ 160.460173][ T5188] do_sys_truncate+0x104/0x240 [ 160.465076][ T5188] __x64_sys_truncate+0x6c/0xa0 [ 160.470053][ T5188] x64_sys_call+0x2ce3/0x3ba0 [ 160.474904][ T5188] do_syscall_64+0xcd/0x1e0 [ 160.479508][ T5188] ? clear_bhb_loop+0x25/0x80 [ 160.484269][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.490293][ T5188] RIP: 0033:0x7fc3c14c7a59 [ 160.494781][ T5188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 160.514492][ T5188] RSP: 002b:00007ffc0aca8d88 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 160.523005][ T5188] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fc3c14c7a59 [ 160.531060][ T5188] RDX: 00007fc3c14c6a51 RSI: 00000000001fefff RDI: 0000000020000280 [ 160.539110][ T5188] RBP: 00007fc3c153b5f0 R08: 00000000000002bb R09: 0000555556fd94c0 [ 160.547174][ T5188] R10: 00007ffc0aca8c50 R11: 0000000000000246 R12: 00007ffc0aca8db0 [ 160.555220][ T5188] R13: 00007ffc0aca8fd8 R14: 431bde82d7b634db R15: 00007fc3c151003b [ 160.563287][ T5188] [ 160.566615][ T5188] Kernel Offset: disabled [ 160.571001][ T5188] Rebooting in 86400 seconds..