./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1872457174 <...> Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. execve("./syz-executor1872457174", ["./syz-executor1872457174"], 0x7ffd40427be0 /* 10 vars */) = 0 brk(NULL) = 0x555572b41000 brk(0x555572b41d00) = 0x555572b41d00 arch_prctl(ARCH_SET_FS, 0x555572b41380) = 0 set_tid_address(0x555572b41650) = 5185 set_robust_list(0x555572b41660, 24) = 0 rseq(0x555572b41ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1872457174", 4096) = 28 getrandom("\x16\x04\x68\x45\xbc\xca\xd3\x88", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555572b41d00 brk(0x555572b62d00) = 0x555572b62d00 brk(0x555572b63000) = 0x555572b63000 mprotect(0x7fdea7ed0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555572b41650) = 5186 ./strace-static-x86_64: Process 5186 attached [pid 5186] set_robust_list(0x555572b41660, 24) = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3executing program ) = 0 [pid 5186] write(1, "executing program\n", 18) = 18 [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fde9fa00000 [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5186] munmap(0x7fde9fa00000, 138412032) = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5186] close(3) = 0 [pid 5186] close(4) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [pid 5186] mount("/dev/loop0", "./file0", "hfsplus", 0, "nls=iso8859-13,gid=0x0000000000000000,gid=0x0000000000000000,barrier,nobarrier,") = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5186] mkdirat(AT_FDCWD, "./file6", 000) = 0 [ 159.281460][ T5186] loop0: detected capacity change from 0 to 1024 [ 159.333071][ T5186] ===================================================== [ 159.340399][ T5186] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x10f0/0x1340 [ 159.348390][ T5186] hfsplus_delete_cat+0x10f0/0x1340 [ 159.353894][ T5186] hfsplus_rmdir+0x140/0x2e0 [ 159.358687][ T5186] vfs_rmdir+0x5bf/0x800 [ 159.363289][ T5186] do_rmdir+0x630/0x8b0 [ 159.367612][ T5186] __x64_sys_unlinkat+0x1ba/0x220 [ 159.372960][ T5186] x64_sys_call+0x2981/0x3c10 [ 159.377825][ T5186] do_syscall_64+0xcd/0x1e0 [ 159.382602][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.388617][ T5186] [ 159.391087][ T5186] Uninit was stored to memory at: [ 159.396333][ T5186] hfsplus_create_cat+0x17f6/0x1800 [ 159.401815][ T5186] hfsplus_mknod+0x201/0x560 [ 159.406579][ T5186] hfsplus_mkdir+0x58/0x70 [ 159.411267][ T5186] vfs_mkdir+0x4a0/0x780 [ 159.415646][ T5186] do_mkdirat+0x529/0x810 [ 159.420063][ T5186] __x64_sys_mkdirat+0xc6/0x120 [ 159.425150][ T5186] x64_sys_call+0x39e5/0x3c10 [ 159.430020][ T5186] do_syscall_64+0xcd/0x1e0 [ 159.434867][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.441078][ T5186] [ 159.443467][ T5186] Uninit was stored to memory at: [ 159.448619][ T5186] hfsplus_create_cat+0x17f6/0x1800 [ 159.454039][ T5186] hfsplus_fill_super+0x227f/0x2700 [ 159.459397][ T5186] mount_bdev+0x39a/0x520 [ 159.463989][ T5186] hfsplus_mount+0x4d/0x60 [ 159.468547][ T5186] legacy_get_tree+0x114/0x290 [ 159.473515][ T5186] vfs_get_tree+0xa7/0x570 [ 159.478080][ T5186] do_new_mount+0x71f/0x15e0 [ 159.482866][ T5186] path_mount+0x742/0x1f10 [ 159.487414][ T5186] __se_sys_mount+0x722/0x810 [ 159.492357][ T5186] __x64_sys_mount+0xe4/0x150 [ 159.497199][ T5186] x64_sys_call+0xed5/0x3c10 [ 159.502069][ T5186] do_syscall_64+0xcd/0x1e0 [ 159.506759][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.512889][ T5186] [ 159.515281][ T5186] Uninit was created at: [ 159.519705][ T5186] __alloc_pages_noprof+0x9d6/0xe70 [ 159.525154][ T5186] allocate_slab+0x203/0x1220 [ 159.530011][ T5186] ___slab_alloc+0x12ef/0x35e0 [ 159.535016][ T5186] kmem_cache_alloc_lru_noprof+0x584/0xb30 [ 159.541056][ T5186] hfsplus_alloc_inode+0x5a/0xd0 [ 159.546087][ T5186] alloc_inode+0x86/0x460 [ 159.550503][ T5186] iget_locked+0x2a7/0xf20 [ 159.555233][ T5186] hfsplus_iget+0x59/0xaf0 [ 159.559733][ T5186] hfsplus_btree_open+0x13e/0x1d00 [ 159.565113][ T5186] hfsplus_fill_super+0x1113/0x2700 [ 159.570469][ T5186] mount_bdev+0x39a/0x520 [ 159.575083][ T5186] hfsplus_mount+0x4d/0x60 [ 159.579586][ T5186] legacy_get_tree+0x114/0x290 [ 159.584535][ T5186] vfs_get_tree+0xa7/0x570 [ 159.589100][ T5186] do_new_mount+0x71f/0x15e0 [ 159.593879][ T5186] path_mount+0x742/0x1f10 [ 159.598426][ T5186] __se_sys_mount+0x722/0x810 [ 159.603318][ T5186] __x64_sys_mount+0xe4/0x150 [ 159.608140][ T5186] x64_sys_call+0xed5/0x3c10 [ 159.612986][ T5186] do_syscall_64+0xcd/0x1e0 [ 159.617663][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.623783][ T5186] [ 159.626197][ T5186] CPU: 1 UID: 0 PID: 5186 Comm: syz-executor187 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 159.637201][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.647471][ T5186] ===================================================== [ 159.654579][ T5186] Disabling lock debugging due to kernel taint [ 159.660909][ T5186] Kernel panic - not syncing: kmsan.panic set ... [ 159.667420][ T5186] CPU: 1 UID: 0 PID: 5186 Comm: syz-executor187 Tainted: G B 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 159.679831][ T5186] Tainted: [B]=BAD_PAGE [ 159.684026][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.694152][ T5186] Call Trace: [ 159.697483][ T5186] [ 159.700462][ T5186] dump_stack_lvl+0x216/0x2d0 [ 159.705309][ T5186] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.711240][ T5186] dump_stack+0x1e/0x30 [ 159.715507][ T5186] panic+0x4e2/0xcd0 [ 159.719510][ T5186] ? kmsan_get_metadata+0xf1/0x1c0 [ 159.724743][ T5186] kmsan_report+0x2c7/0x2d0 [ 159.729360][ T5186] ? __msan_warning+0x95/0x120 [ 159.734246][ T5186] ? hfsplus_delete_cat+0x10f0/0x1340 [ 159.739796][ T5186] ? hfsplus_rmdir+0x140/0x2e0 [ 159.744666][ T5186] ? vfs_rmdir+0x5bf/0x800 [ 159.749173][ T5186] ? do_rmdir+0x630/0x8b0 [ 159.753585][ T5186] ? __x64_sys_unlinkat+0x1ba/0x220 [ 159.758945][ T5186] ? x64_sys_call+0x2981/0x3c10 [ 159.763907][ T5186] ? do_syscall_64+0xcd/0x1e0 [ 159.768725][ T5186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.774997][ T5186] ? hfsplus_bnode_dump+0xca0/0xcd0 [ 159.780319][ T5186] ? set_page_dirty+0xa5/0x220 [ 159.785194][ T5186] ? kmsan_get_metadata+0x13e/0x1c0 [ 159.790530][ T5186] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.796525][ T5186] ? hfsplus_brec_remove+0x91d/0x9d0 [ 159.801953][ T5186] ? kmsan_get_metadata+0x13e/0x1c0 [ 159.807327][ T5186] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.813274][ T5186] __msan_warning+0x95/0x120 [ 159.818019][ T5186] hfsplus_delete_cat+0x10f0/0x1340 [ 159.823341][ T5186] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.829283][ T5186] ? kmsan_get_metadata+0x13e/0x1c0 [ 159.834609][ T5186] hfsplus_rmdir+0x140/0x2e0 [ 159.839315][ T5186] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 159.844541][ T5186] vfs_rmdir+0x5bf/0x800 [ 159.848880][ T5186] do_rmdir+0x630/0x8b0 [ 159.853137][ T5186] __x64_sys_unlinkat+0x1ba/0x220 [ 159.858295][ T5186] x64_sys_call+0x2981/0x3c10 [ 159.863144][ T5186] do_syscall_64+0xcd/0x1e0 [ 159.867765][ T5186] ? clear_bhb_loop+0x25/0x80 [ 159.872533][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.878554][ T5186] RIP: 0033:0x7fdea7e5bdd9 [ 159.883050][ T5186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 159.902887][ T5186] RSP: 002b:00007ffd4d655728 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 159.911453][ T5186] RAX: ffffffffffffffda RBX: 0036656c69662f2e RCX: 00007fdea7e5bdd9 [ 159.919510][ T5186] RDX: 0000000000000200 RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 159.927562][ T5186] RBP: 00007fdea7ed05f0 R08: 0000555572b424c0 R09: 0000555572b424c0 [ 159.935611][ T5186] R10: 00000000000005db R11: 0000000000000246 R12: 00007ffd4d655750 [ 159.943653][ T5186] R13: 00007ffd4d655978 R14: 431bde82d7b634db R15: 00007fdea7ea503b [ 159.951717][ T5186] [ 159.955008][ T5186] Kernel Offset: disabled [ 159.959386][ T5186] Rebooting in 86400 seconds..