./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2438008479 <...> Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. execve("./syz-executor2438008479", ["./syz-executor2438008479"], 0x7ffe387988f0 /* 10 vars */) = 0 brk(NULL) = 0x555584c09000 brk(0x555584c09d00) = 0x555584c09d00 arch_prctl(ARCH_SET_FS, 0x555584c09380) = 0 set_tid_address(0x555584c09650) = 5180 set_robust_list(0x555584c09660, 24) = 0 rseq(0x555584c09ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2438008479", 4096) = 28 getrandom("\xee\x41\xf1\xb3\x0f\x55\x41\xf4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555584c09d00 brk(0x555584c2ad00) = 0x555584c2ad00 brk(0x555584c2b000) = 0x555584c2b000 mprotect(0x7f7d9841f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584c09650) = 5181 ./strace-static-x86_64: Process 5181 attached [pid 5181] set_robust_list(0x555584c09660, 24) = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4executing program ) = 4 [pid 5181] close(3) = 0 [pid 5181] write(1, "executing program\n", 18) = 18 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7d8fe00000 [pid 5181] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5181] munmap(0x7f7d8fe00000, 138412032) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5181] close(3) = 0 [pid 5181] close(4) = 0 [pid 5181] mkdir("./file0", 0777) = 0 [ 158.186213][ T5181] loop0: detected capacity change from 0 to 256 [pid 5181] mount("/dev/loop0", "./file0", "exfat", MS_NOEXEC, "") = 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5181] chdir("./file0") = 0 [pid 5181] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 020) = 4 [ 158.235361][ T5181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 158.266060][ T29] audit: type=1800 audit(1727844432.666:2): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor243" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 158.271824][ T5181] ===================================================== [ 158.294012][ T5181] BUG: KMSAN: uninit-value in __exfat_get_dentry_set+0x10ca/0x14d0 [ 158.302143][ T5181] __exfat_get_dentry_set+0x10ca/0x14d0 [ 158.307876][ T5181] exfat_get_dentry_set+0x58/0xec0 [ 158.313270][ T5181] __exfat_write_inode+0x3c1/0xe30 [ 158.318541][ T5181] __exfat_truncate+0x7f3/0xbb0 [ 158.323583][ T5181] exfat_truncate+0xee/0x2a0 [ 158.328332][ T5181] exfat_direct_IO+0x5a3/0x900 [ 158.333380][ T5181] generic_file_direct_write+0x275/0x6a0 [ 158.339222][ T5181] __generic_file_write_iter+0x242/0x460 [ 158.345092][ T5181] exfat_file_write_iter+0x894/0xfb0 [ 158.350773][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 158.356315][ T5181] vfs_writev+0x56a/0x14f0 [ 158.360913][ T5181] __se_sys_pwritev2+0x280/0x470 [ 158.366111][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 158.371395][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 158.376188][ T5181] do_syscall_64+0xcd/0x1e0 [ 158.380827][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.387034][ T5181] [ 158.389441][ T5181] Uninit was stored to memory at: [ 158.394819][ T5181] _copy_to_iter+0xe53/0x2b30 [ 158.399652][ T5181] copy_page_to_iter+0x419/0x880 [ 158.404801][ T5181] shmem_file_read_iter+0xa09/0x12b0 [ 158.410277][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 158.415786][ T5181] vfs_iter_read+0x278/0x760 [ 158.420544][ T5181] loop_process_work+0x20fc/0x3750 [ 158.425936][ T5181] loop_rootcg_workfn+0x2b/0x40 [ 158.430941][ T5181] process_scheduled_works+0xae0/0x1c40 [ 158.436698][ T5181] worker_thread+0xea7/0x14f0 [ 158.441601][ T5181] kthread+0x3e2/0x540 [ 158.445778][ T5181] ret_from_fork+0x6d/0x90 [ 158.450304][ T5181] ret_from_fork_asm+0x1a/0x30 [ 158.455369][ T5181] [ 158.457784][ T5181] Uninit was stored to memory at: [ 158.463158][ T5181] copy_page_from_iter_atomic+0x12b7/0x3100 [ 158.469234][ T5181] generic_perform_write+0x8d1/0x1080 [ 158.474992][ T5181] shmem_file_write_iter+0x2ba/0x2f0 [ 158.480541][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 158.486009][ T5181] vfs_iter_write+0x44d/0xd40 [ 158.490868][ T5181] loop_process_work+0x15e6/0x3750 [ 158.496231][ T5181] loop_rootcg_workfn+0x2b/0x40 [ 158.501335][ T5181] process_scheduled_works+0xae0/0x1c40 [ 158.507047][ T5181] worker_thread+0xea7/0x14f0 [ 158.511993][ T5181] kthread+0x3e2/0x540 [ 158.516243][ T5181] ret_from_fork+0x6d/0x90 [ 158.520759][ T5181] ret_from_fork_asm+0x1a/0x30 [ 158.525759][ T5181] [ 158.528155][ T5181] Uninit was created at: [ 158.532732][ T5181] __alloc_pages_noprof+0x9d6/0xe70 [ 158.538091][ T5181] alloc_pages_mpol_noprof+0x299/0x990 [ 158.543754][ T5181] folio_alloc_noprof+0x1db/0x310 [ 158.548928][ T5181] filemap_alloc_folio_noprof+0xa6/0x440 [ 158.554778][ T5181] __filemap_get_folio+0xac4/0x1550 [ 158.560148][ T5181] block_write_begin+0x6e/0x2b0 [ 158.565197][ T5181] exfat_write_begin+0xfb/0x400 [ 158.570207][ T5181] exfat_file_write_iter+0x474/0xfb0 [ 158.575693][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 158.581067][ T5181] vfs_writev+0x56a/0x14f0 [ 158.585791][ T5181] __se_sys_pwritev2+0x280/0x470 [ 158.590926][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 158.596215][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 158.601067][ T5181] do_syscall_64+0xcd/0x1e0 [ 158.605787][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.611917][ T5181] [ 158.614331][ T5181] CPU: 1 UID: 0 PID: 5181 Comm: syz-executor243 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 158.625655][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.635945][ T5181] ===================================================== [ 158.643095][ T5181] Disabling lock debugging due to kernel taint [ 158.649348][ T5181] Kernel panic - not syncing: kmsan.panic set ... [ 158.655864][ T5181] CPU: 1 UID: 0 PID: 5181 Comm: syz-executor243 Tainted: G B 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 158.668637][ T5181] Tainted: [B]=BAD_PAGE [ 158.672837][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.682974][ T5181] Call Trace: [ 158.686306][ T5181] [ 158.689284][ T5181] dump_stack_lvl+0x216/0x2d0 [ 158.694127][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.700040][ T5181] dump_stack+0x1e/0x30 [ 158.704296][ T5181] panic+0x4e2/0xcf0 [ 158.708295][ T5181] ? kmsan_get_metadata+0x41/0x1c0 [ 158.713510][ T5181] kmsan_report+0x2c7/0x2d0 [ 158.718102][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 158.723414][ T5181] ? __msan_warning+0x95/0x120 [ 158.728356][ T5181] ? __exfat_get_dentry_set+0x10ca/0x14d0 [ 158.734204][ T5181] ? exfat_get_dentry_set+0x58/0xec0 [ 158.739604][ T5181] ? __exfat_write_inode+0x3c1/0xe30 [ 158.744990][ T5181] ? __exfat_truncate+0x7f3/0xbb0 [ 158.750107][ T5181] ? exfat_truncate+0xee/0x2a0 [ 158.754958][ T5181] ? exfat_direct_IO+0x5a3/0x900 [ 158.759997][ T5181] ? generic_file_direct_write+0x275/0x6a0 [ 158.765927][ T5181] ? __generic_file_write_iter+0x242/0x460 [ 158.771861][ T5181] ? exfat_file_write_iter+0x894/0xfb0 [ 158.777420][ T5181] ? do_iter_readv_writev+0x88a/0xa30 [ 158.782903][ T5181] ? vfs_writev+0x56a/0x14f0 [ 158.787576][ T5181] ? __se_sys_pwritev2+0x280/0x470 [ 158.792803][ T5181] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 158.798113][ T5181] ? x64_sys_call+0x2edb/0x3ba0 [ 158.803100][ T5181] ? do_syscall_64+0xcd/0x1e0 [ 158.807946][ T5181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.814168][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.820135][ T5181] ? __wait_on_bit+0x1f8/0x4b0 [ 158.825023][ T5181] ? __pfx_bit_wait_io+0x10/0x10 [ 158.830115][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.836045][ T5181] ? out_of_line_wait_on_bit+0x13c/0x170 [ 158.841846][ T5181] ? __pfx_wake_bit_function+0x10/0x10 [ 158.847427][ T5181] ? __pfx_bit_wait_io+0x10/0x10 [ 158.852518][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 158.857806][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.863709][ T5181] __msan_warning+0x95/0x120 [ 158.868419][ T5181] __exfat_get_dentry_set+0x10ca/0x14d0 [ 158.874089][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 158.879393][ T5181] exfat_get_dentry_set+0x58/0xec0 [ 158.884626][ T5181] ? exfat_set_volume_dirty+0x15e/0x490 [ 158.890294][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 158.895585][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.901493][ T5181] __exfat_write_inode+0x3c1/0xe30 [ 158.906712][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 158.912616][ T5181] ? inode_needs_sync+0x130/0x2c0 [ 158.917735][ T5181] __exfat_truncate+0x7f3/0xbb0 [ 158.922704][ T5181] ? kmsan_get_shadow_origin_ptr+0x3/0xb0 [ 158.928546][ T5181] exfat_truncate+0xee/0x2a0 [ 158.933247][ T5181] exfat_direct_IO+0x5a3/0x900 [ 158.938163][ T5181] ? __pfx_exfat_direct_IO+0x10/0x10 [ 158.943621][ T5181] generic_file_direct_write+0x275/0x6a0 [ 158.949433][ T5181] __generic_file_write_iter+0x242/0x460 [ 158.955272][ T5181] exfat_file_write_iter+0x894/0xfb0 [ 158.960701][ T5181] ? __pfx_exfat_write_end+0x10/0x10 [ 158.966189][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 158.972128][ T5181] do_iter_readv_writev+0x88a/0xa30 [ 158.977520][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 158.982808][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 158.988718][ T5181] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 158.994653][ T5181] vfs_writev+0x56a/0x14f0 [ 158.999212][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 159.004507][ T5181] ? __traceiter_rdev_dump_survey+0x40/0x160 [ 159.010610][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.016515][ T5181] ? kmsan_get_metadata+0x13e/0x1c0 [ 159.021807][ T5181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.027712][ T5181] __se_sys_pwritev2+0x280/0x470 [ 159.032775][ T5181] __x64_sys_pwritev2+0x11f/0x1a0 [ 159.037927][ T5181] x64_sys_call+0x2edb/0x3ba0 [ 159.042722][ T5181] do_syscall_64+0xcd/0x1e0 [ 159.047330][ T5181] ? clear_bhb_loop+0x25/0x80 [ 159.052110][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.058162][ T5181] RIP: 0033:0x7f7d983aaad9 [ 159.062688][ T5181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 159.082484][ T5181] RSP: 002b:00007ffe494d1268 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 159.091027][ T5181] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f7d983aaad9 [ 159.099089][ T5181] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 159.107152][ T5181] RBP: 00007f7d9841f5f0 R08: 0000000000000000 R09: 0000000000000000 [ 159.115244][ T5181] R10: 0000000000000030 R11: 0000000000000246 R12: 00007ffe494d12a0 [ 159.123301][ T5181] R13: 00007ffe494d14c8 R14: 431bde82d7b634db R15: 00007f7d983f303b [ 159.131393][ T5181] [ 159.134626][ T5181] Kernel Offset: disabled [ 159.139011][ T5181] Rebooting in 86400 seconds..