./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2249449241 <...> Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. execve("./syz-executor2249449241", ["./syz-executor2249449241"], 0x7fff8c94dc00 /* 10 vars */) = 0 brk(NULL) = 0x555555b1b000 brk(0x555555b1bd00) = 0x555555b1bd00 arch_prctl(ARCH_SET_FS, 0x555555b1b380) = 0 set_tid_address(0x555555b1b650) = 5012 set_robust_list(0x555555b1b660, 24) = 0 rseq(0x555555b1bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2249449241", 4096) = 28 getrandom("\x41\x68\xbb\x4b\x56\x5e\x25\x4c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555b1bd00 brk(0x555555b3cd00) = 0x555555b3cd00 brk(0x555555b3d000) = 0x555555b3d000 mprotect(0x7f598b499000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5013 attached , child_tidptr=0x555555b1b650) = 5013 [pid 5013] set_robust_list(0x555555b1b660, 24) = 0 [pid 5013] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] setsid() = 1 [pid 5013] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5013] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5013] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5013] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5013] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5013] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5013] unshare(CLONE_NEWNS) = 0 [pid 5013] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5013] unshare(CLONE_NEWIPC) = 0 [pid 5013] unshare(CLONE_NEWCGROUP) = 0 [pid 5013] unshare(CLONE_NEWUTS) = 0 [pid 5013] unshare(CLONE_SYSVSEM) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "16777216", 8) = 8 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "536870912", 9) = 9 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "1024", 4) = 4 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "8192", 4) = 4 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "1024", 4) = 4 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "1024", 4) = 4 [pid 5013] close(3) = 0 [pid 5013] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5013] close(3) = 0 [pid 5013] getpid() = 1 [pid 5013] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [ 157.840848][ T95] ===================================================== [ 157.848235][ T95] BUG: KMSAN: uninit-value in virtqueue_add+0x21c6/0x6530 [ 157.855559][ T95] virtqueue_add+0x21c6/0x6530 [ 157.860524][ T95] virtqueue_add_sgs+0x186/0x1a0 [ 157.865673][ T95] virtscsi_add_cmd+0x838/0xad0 [ 157.870736][ T95] virtscsi_queuecommand+0x896/0xa60 [ 157.876224][ T95] scsi_queue_rq+0x4874/0x5790 [ 157.881161][ T95] blk_mq_dispatch_rq_list+0x13f8/0x3600 [ 157.887005][ T95] __blk_mq_sched_dispatch_requests+0x10af/0x2500 [ 157.893647][ T95] blk_mq_sched_dispatch_requests+0x160/0x2d0 [ 157.899909][ T95] blk_mq_run_work_fn+0xd0/0x280 [ 157.905079][ T95] process_scheduled_works+0x104e/0x1e70 [ 157.910885][ T95] worker_thread+0xf45/0x1490 [ 157.915720][ T95] kthread+0x3ed/0x540 [ 157.919963][ T95] ret_from_fork+0x66/0x80 [ 157.924562][ T95] ret_from_fork_asm+0x11/0x20 [ 157.929502][ T95] [ 157.931905][ T95] Uninit was created at: [ 157.936380][ T95] __alloc_pages+0x9a4/0xe00 [ 157.941159][ T95] alloc_pages_mpol+0x62b/0x9d0 [ 157.946208][ T95] folio_alloc+0x1da/0x380 [ 157.950804][ T95] filemap_alloc_folio+0xa5/0x430 [ 157.956015][ T95] __filemap_get_folio+0xa5a/0x1760 [ 157.961494][ T95] ext4_da_write_begin+0x7f8/0xec0 [ 157.966805][ T95] generic_perform_write+0x3f5/0xc40 [ 157.972303][ T95] ext4_buffered_write_iter+0x564/0xaa0 [ 157.978021][ T95] ext4_file_write_iter+0x20f/0x3460 [ 157.983463][ T95] __kernel_write_iter+0x329/0x930 [ 157.988731][ T95] dump_user_range+0x593/0xcd0 [ 157.993662][ T95] elf_core_dump+0x528d/0x5a40 [ 157.998619][ T95] do_coredump+0x32c9/0x4920 [ 158.003366][ T95] get_signal+0x2185/0x2d10 [ 158.008046][ T95] arch_do_signal_or_restart+0x53/0xca0 [ 158.013937][ T95] irqentry_exit_to_user_mode+0xaa/0x160 [ 158.019748][ T95] irqentry_exit+0x16/0x40 [ 158.024395][ T95] exc_page_fault+0x246/0x6f0 [ 158.029223][ T95] asm_exc_page_fault+0x2b/0x30 [ 158.034257][ T95] [ 158.036668][ T95] Bytes 0-4095 of 4096 are uninitialized [ 158.042403][ T95] Memory access of size 4096 starts at ffff88812d1e2000 [ 158.049458][ T95] [ 158.051862][ T95] CPU: 0 PID: 95 Comm: kworker/0:1H Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 158.061655][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 158.071847][ T95] Workqueue: kblockd blk_mq_run_work_fn [ 158.077649][ T95] ===================================================== [ 158.084945][ T95] Disabling lock debugging due to kernel taint [ 158.091196][ T95] Kernel panic - not syncing: kmsan.panic set ... [ 158.098059][ T95] CPU: 0 PID: 95 Comm: kworker/0:1H Tainted: G B 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 158.109421][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 158.119615][ T95] Workqueue: kblockd blk_mq_run_work_fn [ 158.125328][ T95] Call Trace: [ 158.128709][ T95] [ 158.131732][ T95] dump_stack_lvl+0x1bf/0x240 [ 158.136615][ T95] dump_stack+0x1e/0x20 [ 158.141036][ T95] panic+0x4de/0xc90 [ 158.145102][ T95] ? add_taint+0x108/0x1a0 [ 158.149690][ T95] kmsan_report+0x2d0/0x2d0 [ 158.154396][ T95] ? kmsan_internal_check_memory+0x476/0x530 [ 158.160588][ T95] ? kmsan_handle_dma+0xac/0xc0 [ 158.165897][ T95] ? virtqueue_add+0x21c6/0x6530 [ 158.170992][ T95] ? virtqueue_add_sgs+0x186/0x1a0 [ 158.176262][ T95] ? virtscsi_add_cmd+0x838/0xad0 [ 158.181468][ T95] ? virtscsi_queuecommand+0x896/0xa60 [ 158.187110][ T95] ? scsi_queue_rq+0x4874/0x5790 [ 158.192241][ T95] ? blk_mq_dispatch_rq_list+0x13f8/0x3600 [ 158.198255][ T95] ? __blk_mq_sched_dispatch_requests+0x10af/0x2500 [ 158.205124][ T95] ? blk_mq_sched_dispatch_requests+0x160/0x2d0 [ 158.211555][ T95] ? blk_mq_run_work_fn+0xd0/0x280 [ 158.216818][ T95] ? process_scheduled_works+0x104e/0x1e70 [ 158.222796][ T95] ? worker_thread+0xf45/0x1490 [ 158.227805][ T95] ? kthread+0x3ed/0x540 [ 158.232229][ T95] ? ret_from_fork+0x66/0x80 [ 158.237020][ T95] ? ret_from_fork_asm+0x11/0x20 [ 158.242168][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.248291][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.254679][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.260927][ T95] ? iowrite16+0x38/0x1d0 [ 158.265538][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.271570][ T95] ? iowrite16+0x38/0x1d0 [ 158.276271][ T95] kmsan_internal_check_memory+0x476/0x530 [ 158.282386][ T95] kmsan_handle_dma+0xac/0xc0 [ 158.287295][ T95] virtqueue_add+0x21c6/0x6530 [ 158.293088][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.299257][ T95] virtqueue_add_sgs+0x186/0x1a0 [ 158.304890][ T95] virtscsi_add_cmd+0x838/0xad0 [ 158.310053][ T95] virtscsi_queuecommand+0x896/0xa60 [ 158.315645][ T95] ? virtscsi_kick_event_all+0x3f0/0x3f0 [ 158.321464][ T95] scsi_queue_rq+0x4874/0x5790 [ 158.326440][ T95] ? scsi_complete+0x480/0x480 [ 158.331384][ T95] blk_mq_dispatch_rq_list+0x13f8/0x3600 [ 158.337376][ T95] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 158.343405][ T95] __blk_mq_sched_dispatch_requests+0x10af/0x2500 [ 158.350235][ T95] ? __blk_mq_sched_dispatch_requests+0xeb1/0x2500 [ 158.356957][ T95] blk_mq_sched_dispatch_requests+0x160/0x2d0 [ 158.363223][ T95] blk_mq_run_work_fn+0xd0/0x280 [ 158.368319][ T95] ? blk_mq_alloc_and_init_hctx+0x17c0/0x17c0 [ 158.374551][ T95] process_scheduled_works+0x104e/0x1e70 [ 158.380399][ T95] worker_thread+0xf45/0x1490 [ 158.385261][ T95] kthread+0x3ed/0x540 [ 158.389513][ T95] ? pr_cont_work+0xce0/0xce0 [ 158.394447][ T95] ? kthread_blkcg+0x120/0x120 [ 158.400129][ T95] ret_from_fork+0x66/0x80 [ 158.404787][ T95] ? kthread_blkcg+0x120/0x120 [ 158.409763][ T95] ret_from_fork_asm+0x11/0x20 [ 158.414748][ T95] [ 159.897094][ T95] Shutting down cpus with NMI [ 159.902191][ T95] Kernel Offset: disabled [ 159.906597][ T95] Rebooting in 86400 seconds..