./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor80774514
<...>
Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts.
execve("./syz-executor80774514", ["./syz-executor80774514"], 0x7fff96e21180 /* 10 vars */) = 0
brk(NULL) = 0x5555790a3000
brk(0x5555790a3d00) = 0x5555790a3d00
arch_prctl(ARCH_SET_FS, 0x5555790a3380) = 0
set_tid_address(0x5555790a3650) = 5177
set_robust_list(0x5555790a3660, 24) = 0
rseq(0x5555790a3ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor80774514", 4096) = 26
getrandom("\x0b\xa9\xa2\xa8\xa0\xe2\x08\xca", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555790a3d00
brk(0x5555790c4d00) = 0x5555790c4d00
brk(0x5555790c5000) = 0x5555790c5000
mprotect(0x7f3d77e90000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555790a3650) = 5178
./strace-static-x86_64: Process 5178 attached
[pid 5178] set_robust_list(0x5555790a3660, 24) = 0
[pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5178] setpgid(0, 0) = 0
[pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5178] write(3, "1000", 4) = 4
[pid 5178] close(3) = 0
[pid 5178] write(1, "executing program\n", 18executing program
) = 18
[pid 5178] memfd_create("syzkaller", 0) = 3
[pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d6f800000
[pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
[pid 5178] munmap(0x7f3d6f800000, 138412032) = 0
[pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5178] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5178] close(3) = 0
[pid 5178] close(4) = 0
[pid 5178] mkdir("./file1", 0777) = 0
[pid 5178] mount("/dev/loop0", "./file1", "hfs", MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "") = 0
[ 188.177097][ T5178] loop0: detected capacity change from 0 to 64
[pid 5178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5178] chdir("./file1") = 0
[ 188.245488][ T5178] =====================================================
[ 188.253012][ T5178] BUG: KMSAN: uninit-value in hfs_free_fork+0x6b4/0xa50
[ 188.260428][ T5178] hfs_free_fork+0x6b4/0xa50
[ 188.265218][ T5178] hfs_cat_delete+0x501/0xb90
[ 188.270688][ T5178] hfs_remove+0x16a/0x2f0
[ 188.275305][ T5178] vfs_unlink+0x676/0xa90
[ 188.280154][ T5178] do_unlinkat+0x823/0xe10
[ 188.284969][ T5178] __x64_sys_unlink+0x76/0xa0
[ 188.290248][ T5178] x64_sys_call+0x30d3/0x3ba0
[pid 5178] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 188.295348][ T5178] do_syscall_64+0xcd/0x1e0
[ 188.300441][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.306779][ T5178]
[ 188.309404][ T5178] Uninit was created at:
[ 188.314099][ T5178] __kmalloc_noprof+0x661/0xf30
[ 188.319505][ T5178] hfs_find_init+0x91/0x250
[ 188.324337][ T5178] hfs_free_fork+0x3bb/0xa50
[ 188.329484][ T5178] hfs_cat_delete+0x501/0xb90
[ 188.334439][ T5178] hfs_remove+0x16a/0x2f0
[ 188.339189][ T5178] vfs_unlink+0x676/0xa90
[ 188.343737][ T5178] do_unlinkat+0x823/0xe10
[ 188.348474][ T5178] __x64_sys_unlink+0x76/0xa0
[ 188.353431][ T5178] x64_sys_call+0x30d3/0x3ba0
[ 188.358566][ T5178] do_syscall_64+0xcd/0x1e0
[ 188.363329][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.369664][ T5178]
[ 188.372132][ T5178] CPU: 0 UID: 0 PID: 5178 Comm: syz-executor807 Not tainted 6.11.0-rc5-syzkaller #0
[ 188.382061][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 188.392484][ T5178] =====================================================
[ 188.400034][ T5178] Disabling lock debugging due to kernel taint
[ 188.406580][ T5178] Kernel panic - not syncing: kmsan.panic set ...
[ 188.413384][ T5178] CPU: 0 UID: 0 PID: 5178 Comm: syz-executor807 Tainted: G B 6.11.0-rc5-syzkaller #0
[ 188.424619][ T5178] Tainted: [B]=BAD_PAGE
[ 188.428862][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 188.439125][ T5178] Call Trace:
[ 188.442544][ T5178] <TASK>
[ 188.445556][ T5178] dump_stack_lvl+0x216/0x2d0
[ 188.450389][ T5178] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 188.456374][ T5178] dump_stack+0x1e/0x30
[ 188.460706][ T5178] panic+0x4e2/0xcd0
[ 188.464812][ T5178] ? kmsan_get_metadata+0xe1/0x1c0
[ 188.470122][ T5178] kmsan_report+0x2c7/0x2d0
[ 188.474797][ T5178] ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 188.481295][ T5178] ? __msan_warning+0x95/0x120
[ 188.486203][ T5178] ? hfs_free_fork+0x6b4/0xa50
[ 188.491081][ T5178] ? hfs_cat_delete+0x501/0xb90
[ 188.496109][ T5178] ? hfs_remove+0x16a/0x2f0
[ 188.500852][ T5178] ? vfs_unlink+0x676/0xa90
[ 188.505554][ T5178] ? do_unlinkat+0x823/0xe10
[ 188.510293][ T5178] ? __x64_sys_unlink+0x76/0xa0
[ 188.515380][ T5178] ? x64_sys_call+0x30d3/0x3ba0
[ 188.520387][ T5178] ? do_syscall_64+0xcd/0x1e0
[ 188.525216][ T5178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.531454][ T5178] ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 188.537443][ T5178] ? kmsan_get_metadata+0x13e/0x1c0
[ 188.542910][ T5178] ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 188.549392][ T5178] ? kmsan_get_metadata+0x13e/0x1c0
[ 188.554745][ T5178] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 188.560711][ T5178] ? hfs_brec_find+0x87c/0x980
[ 188.565645][ T5178] ? kmsan_internal_unpoison_memory+0x14/0x20
[ 188.571901][ T5178] ? kmsan_get_metadata+0x13e/0x1c0
[ 188.577276][ T5178] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 188.583454][ T5178] __msan_warning+0x95/0x120
[ 188.588229][ T5178] hfs_free_fork+0x6b4/0xa50
[ 188.593015][ T5178] hfs_cat_delete+0x501/0xb90
[ 188.597889][ T5178] hfs_remove+0x16a/0x2f0
[ 188.602373][ T5178] ? __pfx_hfs_remove+0x10/0x10
[ 188.607397][ T5178] vfs_unlink+0x676/0xa90
[ 188.611935][ T5178] do_unlinkat+0x823/0xe10
[ 188.616496][ T5178] __x64_sys_unlink+0x76/0xa0
[ 188.621309][ T5178] x64_sys_call+0x30d3/0x3ba0
[ 188.626225][ T5178] do_syscall_64+0xcd/0x1e0
[ 188.630874][ T5178] ? clear_bhb_loop+0x25/0x80
[ 188.635705][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.641856][ T5178] RIP: 0033:0x7f3d77e1ca59
[ 188.646402][ T5178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 188.666369][ T5178] RSP: 002b:00007ffd924e8478 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 188.674945][ T5178] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f3d77e1ca59
[ 188.683131][ T5178] RDX: 00007f3d77e1ba51 RSI: 0000000000000000 RDI: 0000000020000280
[ 188.691331][ T5178] RBP: 00007f3d77e905f0 R08: 00000000000002a1 R09: 00005555790a44c0
[ 188.699467][ T5178] R10: 00007ffd924e8340 R11: 0000000000000246 R12: 00007ffd924e84a0
[ 188.707592][ T5178] R13: 00007ffd924e86c8 R14: 431bde82d7b634db R15: 00007f3d77e6503b
[ 188.715729][ T5178] </TASK>
[ 188.719296][ T5178] Kernel Offset: disabled
[ 188.723739][ T5178] Rebooting in 86400 seconds..