./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2107061668 <...> Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. execve("./syz-executor2107061668", ["./syz-executor2107061668"], 0x7ffec6d6db80 /* 10 vars */) = 0 brk(NULL) = 0x555573913000 brk(0x555573913d00) = 0x555573913d00 arch_prctl(ARCH_SET_FS, 0x555573913380) = 0 set_tid_address(0x555573913650) = 5787 set_robust_list(0x555573913660, 24) = 0 rseq(0x555573913ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2107061668", 4096) = 28 getrandom("\xf5\x6d\x48\xd8\x35\xf0\x68\x8d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555573913d00 brk(0x555573934d00) = 0x555573934d00 brk(0x555573935000) = 0x555573935000 mprotect(0x7f0454a18000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555573913650) = 5788 ./strace-static-x86_64: Process 5788 attached [pid 5788] set_robust_list(0x555573913660, 24) = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5788] setpgid(0, 0) = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] write(3, "1000", 4) = 4 [pid 5788] close(3executing program ) = 0 [pid 5788] write(1, "executing program\n", 18) = 18 [pid 5788] memfd_create("syzkaller", 0) = 3 [pid 5788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f044c400000 [pid 5788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5788] munmap(0x7f044c400000, 138412032) = 0 [pid 5788] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5788] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5788] close(3) = 0 [pid 5788] close(4) = 0 [pid 5788] mkdir("./file1", 0777) = 0 [pid 5788] mount("/dev/loop0", "./file1", "hfs", 0, "") = 0 [pid 5788] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5788] chdir("./file1") = 0 [pid 5788] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 180.178438][ T5788] loop0: detected capacity change from 0 to 64 [ 180.250111][ T5788] ===================================================== [ 180.257684][ T5788] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x836/0xca0 [ 180.265826][ T5788] hfs_find_set_zero_bits+0x836/0xca0 [ 180.271395][ T5788] hfs_vbm_search_free+0x141/0x530 [ 180.276970][ T5788] hfs_extend_file+0x69e/0x19f0 [ 180.282027][ T5788] hfs_get_block+0x3d8/0xf50 [ 180.287076][ T5788] __block_write_begin_int+0xa6b/0x2f80 [ 180.292832][ T5788] cont_write_begin+0xf82/0x1940 [ 180.298183][ T5788] hfs_write_begin+0x85/0x120 [ 180.303058][ T5788] cont_write_begin+0x32f/0x1940 [ 180.308311][ T5788] hfs_write_begin+0x85/0x120 [ 180.313189][ T5788] hfs_file_truncate+0x1a5/0xd30 [ 180.318413][ T5788] hfs_inode_setattr+0x998/0xab0 [ 180.323497][ T5788] notify_change+0x1a8e/0x1b80 [ 180.328576][ T5788] do_truncate+0x22a/0x2b0 [ 180.333196][ T5788] vfs_truncate+0x5d4/0x680 [ 180.337968][ T5788] do_sys_truncate+0x104/0x240 [ 180.342899][ T5788] __x64_sys_truncate+0x6c/0xa0 [ 180.348054][ T5788] x64_sys_call+0x2ce3/0x3ba0 [ 180.352905][ T5788] do_syscall_64+0xcd/0x1e0 [ 180.357709][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.363768][ T5788] [ 180.366261][ T5788] Uninit was created at: [ 180.370733][ T5788] __kmalloc_cache_noprof+0x4f0/0xb00 [ 180.376442][ T5788] hfs_mdb_get+0x1bd4/0x28b0 [ 180.381215][ T5788] hfs_fill_super+0x1cf6/0x23c0 [ 180.386316][ T5788] mount_bdev+0x39a/0x520 [ 180.390839][ T5788] hfs_mount+0x4d/0x60 [ 180.395151][ T5788] legacy_get_tree+0x114/0x290 [ 180.400072][ T5788] vfs_get_tree+0xb1/0x5a0 [ 180.404795][ T5788] do_new_mount+0x71f/0x15e0 [ 180.409552][ T5788] path_mount+0x742/0x1f10 [ 180.414272][ T5788] __se_sys_mount+0x722/0x810 [ 180.419107][ T5788] __x64_sys_mount+0xe4/0x150 [ 180.424043][ T5788] x64_sys_call+0x255a/0x3ba0 [ 180.428916][ T5788] do_syscall_64+0xcd/0x1e0 [ 180.433599][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.439776][ T5788] [ 180.442227][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz-executor210 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 180.453718][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.464146][ T5788] ===================================================== [ 180.471142][ T5788] Disabling lock debugging due to kernel taint [ 180.477649][ T5788] Kernel panic - not syncing: kmsan.panic set ... [ 180.484202][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz-executor210 Tainted: G B 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 180.496914][ T5788] Tainted: [B]=BAD_PAGE [ 180.501115][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.511264][ T5788] Call Trace: [ 180.514655][ T5788] [ 180.517675][ T5788] dump_stack_lvl+0x216/0x2d0 [ 180.522472][ T5788] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.528451][ T5788] dump_stack+0x1e/0x30 [ 180.532739][ T5788] panic+0x4e2/0xcf0 [ 180.536783][ T5788] ? kmsan_get_metadata+0x121/0x1c0 [ 180.542198][ T5788] kmsan_report+0x2c7/0x2d0 [ 180.546835][ T5788] ? __msan_warning+0x95/0x120 [ 180.551716][ T5788] ? hfs_find_set_zero_bits+0x836/0xca0 [ 180.557358][ T5788] ? hfs_vbm_search_free+0x141/0x530 [ 180.562776][ T5788] ? hfs_extend_file+0x69e/0x19f0 [ 180.567906][ T5788] ? hfs_get_block+0x3d8/0xf50 [ 180.572771][ T5788] ? __block_write_begin_int+0xa6b/0x2f80 [ 180.578606][ T5788] ? cont_write_begin+0xf82/0x1940 [ 180.583835][ T5788] ? hfs_write_begin+0x85/0x120 [ 180.588851][ T5788] ? cont_write_begin+0x32f/0x1940 [ 180.594093][ T5788] ? hfs_write_begin+0x85/0x120 [ 180.599119][ T5788] ? hfs_file_truncate+0x1a5/0xd30 [ 180.604361][ T5788] ? hfs_inode_setattr+0x998/0xab0 [ 180.609642][ T5788] ? notify_change+0x1a8e/0x1b80 [ 180.614679][ T5788] ? do_truncate+0x22a/0x2b0 [ 180.619399][ T5788] ? vfs_truncate+0x5d4/0x680 [ 180.624185][ T5788] ? do_sys_truncate+0x104/0x240 [ 180.629231][ T5788] ? __x64_sys_truncate+0x6c/0xa0 [ 180.634364][ T5788] ? x64_sys_call+0x2ce3/0x3ba0 [ 180.639351][ T5788] ? do_syscall_64+0xcd/0x1e0 [ 180.644214][ T5788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.650411][ T5788] ? hfs_extend_file+0x467/0x19f0 [ 180.655623][ T5788] ? hfs_get_block+0x3d8/0xf50 [ 180.660485][ T5788] ? __block_write_begin_int+0xa6b/0x2f80 [ 180.666322][ T5788] ? cont_write_begin+0xf82/0x1940 [ 180.671538][ T5788] ? hfs_write_begin+0x85/0x120 [ 180.676505][ T5788] ? cont_write_begin+0x32f/0x1940 [ 180.681725][ T5788] ? hfs_write_begin+0x85/0x120 [ 180.686687][ T5788] ? hfs_file_truncate+0x1a5/0xd30 [ 180.691909][ T5788] ? hfs_inode_setattr+0x998/0xab0 [ 180.697143][ T5788] ? notify_change+0x1a8e/0x1b80 [ 180.702181][ T5788] ? do_truncate+0x22a/0x2b0 [ 180.706869][ T5788] ? vfs_truncate+0x5d4/0x680 [ 180.711650][ T5788] ? do_sys_truncate+0x104/0x240 [ 180.716693][ T5788] ? __x64_sys_truncate+0x6c/0xa0 [ 180.721849][ T5788] ? x64_sys_call+0x2ce3/0x3ba0 [ 180.726812][ T5788] ? do_syscall_64+0xcd/0x1e0 [ 180.731607][ T5788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.737787][ T5788] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.743732][ T5788] ? kfree+0x1a7/0xdb0 [ 180.747931][ T5788] ? filter_irq_stacks+0x60/0x1a0 [ 180.753109][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.758511][ T5788] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.764487][ T5788] __msan_warning+0x95/0x120 [ 180.769266][ T5788] hfs_find_set_zero_bits+0x836/0xca0 [ 180.774733][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.780099][ T5788] hfs_vbm_search_free+0x141/0x530 [ 180.785347][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.790680][ T5788] hfs_extend_file+0x69e/0x19f0 [ 180.795646][ T5788] ? __mark_inode_dirty+0x35d/0x11a0 [ 180.801068][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.806400][ T5788] hfs_get_block+0x3d8/0xf50 [ 180.811093][ T5788] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.817046][ T5788] __block_write_begin_int+0xa6b/0x2f80 [ 180.822723][ T5788] ? __pfx_hfs_get_block+0x10/0x10 [ 180.827956][ T5788] cont_write_begin+0xf82/0x1940 [ 180.833026][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.838414][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.843788][ T5788] hfs_write_begin+0x85/0x120 [ 180.848632][ T5788] ? __pfx_hfs_get_block+0x10/0x10 [ 180.853879][ T5788] ? __pfx_hfs_write_begin+0x10/0x10 [ 180.859279][ T5788] cont_write_begin+0x32f/0x1940 [ 180.864344][ T5788] hfs_write_begin+0x85/0x120 [ 180.869126][ T5788] ? __pfx_hfs_get_block+0x10/0x10 [ 180.874348][ T5788] hfs_file_truncate+0x1a5/0xd30 [ 180.879399][ T5788] ? unmap_mapping_range+0xc8/0x3f0 [ 180.884708][ T5788] ? kmsan_get_metadata+0x13e/0x1c0 [ 180.890048][ T5788] hfs_inode_setattr+0x998/0xab0 [ 180.895105][ T5788] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 180.900700][ T5788] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 180.906337][ T5788] notify_change+0x1a8e/0x1b80 [ 180.911315][ T5788] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 180.917877][ T5788] do_truncate+0x22a/0x2b0 [ 180.922399][ T5788] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.928368][ T5788] vfs_truncate+0x5d4/0x680 [ 180.932981][ T5788] do_sys_truncate+0x104/0x240 [ 180.937861][ T5788] __x64_sys_truncate+0x6c/0xa0 [ 180.942821][ T5788] x64_sys_call+0x2ce3/0x3ba0 [ 180.947617][ T5788] do_syscall_64+0xcd/0x1e0 [ 180.952236][ T5788] ? clear_bhb_loop+0x25/0x80 [ 180.957034][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.963101][ T5788] RIP: 0033:0x7f04549a4a59 [ 180.967599][ T5788] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 180.987333][ T5788] RSP: 002b:00007ffe92a30328 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 180.995859][ T5788] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f04549a4a59 [ 181.003948][ T5788] RDX: 00007f04549a3a51 RSI: 000000000000f000 RDI: 0000000020000080 [ 181.012017][ T5788] RBP: 00007f0454a185f0 R08: 0000000000000272 R09: 00005555739144c0 [ 181.020096][ T5788] R10: 00007ffe92a301f0 R11: 0000000000000246 R12: 00007ffe92a30350 [ 181.028151][ T5788] R13: 00007ffe92a30578 R14: 431bde82d7b634db R15: 00007f04549ed03b [ 181.036254][ T5788] [ 181.039666][ T5788] Kernel Offset: disabled [ 181.044051][ T5788] Rebooting in 86400 seconds..