./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor118931704 <...> Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. execve("./syz-executor118931704", ["./syz-executor118931704"], 0x7fffbf12cb40 /* 10 vars */) = 0 brk(NULL) = 0x55558de81000 brk(0x55558de81d00) = 0x55558de81d00 arch_prctl(ARCH_SET_FS, 0x55558de81380) = 0 set_tid_address(0x55558de81650) = 5044 set_robust_list(0x55558de81660, 24) = 0 rseq(0x55558de81ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor118931704", 4096) = 27 getrandom("\x4f\xca\x56\x35\x25\x97\x12\x70", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558de81d00 brk(0x55558dea2d00) = 0x55558dea2d00 brk(0x55558dea3000) = 0x55558dea3000 mprotect(0x7fada98b8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558de81650) = 5045 ./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x55558de81660, 24) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 executing program [pid 5045] close(3) = 0 [pid 5045] write(1, "executing program\n", 18) = 18 [pid 5045] memfd_create("syzkaller", 0) = 3 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fada1400000 [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5045] munmap(0x7fada1400000, 138412032) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5045] close(3) = 0 [pid 5045] close(4) = 0 [pid 5045] mkdir("./file1", 0777) = 0 [pid 5045] mount("/dev/loop0", "./file1", "hfs", 0, "") = 0 [pid 5045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5045] chdir("./file1") = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5045] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 4 [ 159.157831][ T5045] loop0: detected capacity change from 0 to 64 [ 159.223102][ T5045] ===================================================== [ 159.230573][ T5045] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x836/0xca0 [ 159.238513][ T5045] hfs_find_set_zero_bits+0x836/0xca0 [ 159.244207][ T5045] hfs_vbm_search_free+0x141/0x530 [ 159.249513][ T5045] hfs_extend_file+0x69e/0x19f0 [ 159.254662][ T5045] hfs_get_block+0x3d8/0xf50 [ 159.259446][ T5045] __block_write_begin_int+0xa6b/0x2f80 [ 159.265245][ T5045] block_write_begin+0x143/0x450 [ 159.270462][ T5045] cont_write_begin+0xcc0/0x1320 [ 159.275571][ T5045] hfs_write_begin+0x9a/0x140 [ 159.280506][ T5045] generic_perform_write+0x4ba/0x12e0 [ 159.286063][ T5045] __generic_file_write_iter+0x20a/0x460 [ 159.291940][ T5045] generic_file_write_iter+0x103/0x5b0 [ 159.297926][ T5045] vfs_write+0xb2f/0x1550 [ 159.302554][ T5045] ksys_write+0x20f/0x4c0 [ 159.307058][ T5045] __x64_sys_write+0x93/0xe0 [ 159.311927][ T5045] x64_sys_call+0x3490/0x3c10 [ 159.316947][ T5045] do_syscall_64+0xcd/0x1e0 [ 159.321805][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.327938][ T5045] [ 159.330301][ T5045] Uninit was created at: [ 159.334917][ T5045] __kmalloc_cache_noprof+0x4f0/0xb00 [ 159.340564][ T5045] hfs_mdb_get+0x1bd4/0x28b0 [ 159.345360][ T5045] hfs_fill_super+0x1cf6/0x23c0 [ 159.350563][ T5045] mount_bdev+0x39a/0x520 [ 159.355083][ T5045] hfs_mount+0x4d/0x60 [ 159.359277][ T5045] legacy_get_tree+0x114/0x290 [ 159.364346][ T5045] vfs_get_tree+0xa7/0x570 [ 159.368952][ T5045] do_new_mount+0x71f/0x15e0 [ 159.373980][ T5045] path_mount+0x742/0x1f10 [ 159.378602][ T5045] __se_sys_mount+0x722/0x810 [ 159.383606][ T5045] __x64_sys_mount+0xe4/0x150 [ 159.388451][ T5045] x64_sys_call+0xed5/0x3c10 [ 159.393308][ T5045] do_syscall_64+0xcd/0x1e0 [ 159.398002][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.404193][ T5045] [ 159.406603][ T5045] CPU: 1 PID: 5045 Comm: syz-executor118 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 159.417014][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.427349][ T5045] ===================================================== [ 159.434466][ T5045] Disabling lock debugging due to kernel taint [ 159.440821][ T5045] Kernel panic - not syncing: kmsan.panic set ... [ 159.447369][ T5045] CPU: 1 PID: 5045 Comm: syz-executor118 Tainted: G B 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 159.459192][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.469376][ T5045] Call Trace: [ 159.472743][ T5045] [ 159.475736][ T5045] dump_stack_lvl+0x216/0x2d0 [ 159.480534][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.486488][ T5045] dump_stack+0x1e/0x30 [ 159.490758][ T5045] panic+0x4e2/0xcd0 [ 159.494763][ T5045] ? kmsan_get_metadata+0xf1/0x1d0 [ 159.500017][ T5045] kmsan_report+0x2d5/0x2e0 [ 159.504675][ T5045] ? __msan_warning+0x95/0x120 [ 159.509557][ T5045] ? hfs_find_set_zero_bits+0x836/0xca0 [ 159.515265][ T5045] ? hfs_vbm_search_free+0x141/0x530 [ 159.520751][ T5045] ? hfs_extend_file+0x69e/0x19f0 [ 159.525894][ T5045] ? hfs_get_block+0x3d8/0xf50 [ 159.530812][ T5045] ? __block_write_begin_int+0xa6b/0x2f80 [ 159.536642][ T5045] ? block_write_begin+0x143/0x450 [ 159.541880][ T5045] ? cont_write_begin+0xcc0/0x1320 [ 159.547114][ T5045] ? hfs_write_begin+0x9a/0x140 [ 159.552074][ T5045] ? generic_perform_write+0x4ba/0x12e0 [ 159.557743][ T5045] ? __generic_file_write_iter+0x20a/0x460 [ 159.563680][ T5045] ? generic_file_write_iter+0x103/0x5b0 [ 159.569437][ T5045] ? vfs_write+0xb2f/0x1550 [ 159.574141][ T5045] ? ksys_write+0x20f/0x4c0 [ 159.578758][ T5045] ? __x64_sys_write+0x93/0xe0 [ 159.583726][ T5045] ? x64_sys_call+0x3490/0x3c10 [ 159.588702][ T5045] ? do_syscall_64+0xcd/0x1e0 [ 159.593508][ T5045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.599783][ T5045] ? kmsan_internal_poison_memory+0x49/0x90 [ 159.605839][ T5045] ? kmsan_slab_free+0xd6/0x140 [ 159.610977][ T5045] ? kfree+0x23a/0xb70 [ 159.615158][ T5045] ? hfs_find_exit+0x4e/0xb0 [ 159.619873][ T5045] ? hfs_extend_file+0x467/0x19f0 [ 159.625005][ T5045] ? hfs_get_block+0x3d8/0xf50 [ 159.629878][ T5045] ? __block_write_begin_int+0xa6b/0x2f80 [ 159.635716][ T5045] ? block_write_begin+0x143/0x450 [ 159.640941][ T5045] ? cont_write_begin+0xcc0/0x1320 [ 159.646160][ T5045] ? hfs_write_begin+0x9a/0x140 [ 159.651136][ T5045] ? generic_perform_write+0x4ba/0x12e0 [ 159.656865][ T5045] ? __generic_file_write_iter+0x20a/0x460 [ 159.662789][ T5045] ? generic_file_write_iter+0x103/0x5b0 [ 159.668532][ T5045] ? vfs_write+0xb2f/0x1550 [ 159.673165][ T5045] ? ksys_write+0x20f/0x4c0 [ 159.677837][ T5045] ? __x64_sys_write+0x93/0xe0 [ 159.682794][ T5045] ? x64_sys_call+0x3490/0x3c10 [ 159.687757][ T5045] ? do_syscall_64+0xcd/0x1e0 [ 159.692544][ T5045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.698751][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.704082][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.710039][ T5045] ? kfree+0x1a1/0xb70 [ 159.714304][ T5045] ? filter_irq_stacks+0x164/0x1a0 [ 159.719563][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.724927][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.730865][ T5045] __msan_warning+0x95/0x120 [ 159.735562][ T5045] hfs_find_set_zero_bits+0x836/0xca0 [ 159.741169][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.746502][ T5045] hfs_vbm_search_free+0x141/0x530 [ 159.751767][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.757979][ T5045] hfs_extend_file+0x69e/0x19f0 [ 159.764287][ T5045] ? __mark_inode_dirty+0x367/0x11d0 [ 159.769706][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.775052][ T5045] hfs_get_block+0x3d8/0xf50 [ 159.779745][ T5045] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 159.785749][ T5045] __block_write_begin_int+0xa6b/0x2f80 [ 159.791512][ T5045] ? __pfx_hfs_get_block+0x10/0x10 [ 159.796948][ T5045] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 159.802974][ T5045] block_write_begin+0x143/0x450 [ 159.808046][ T5045] ? __pfx_hfs_get_block+0x10/0x10 [ 159.813326][ T5045] cont_write_begin+0xcc0/0x1320 [ 159.818378][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.823913][ T5045] hfs_write_begin+0x9a/0x140 [ 159.828777][ T5045] ? __pfx_hfs_get_block+0x10/0x10 [ 159.834080][ T5045] ? __pfx_hfs_write_begin+0x10/0x10 [ 159.839552][ T5045] generic_perform_write+0x4ba/0x12e0 [ 159.845071][ T5045] __generic_file_write_iter+0x20a/0x460 [ 159.850861][ T5045] generic_file_write_iter+0x103/0x5b0 [ 159.856453][ T5045] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 159.862901][ T5045] ? kmsan_get_metadata+0x146/0x1d0 [ 159.868229][ T5045] vfs_write+0xb2f/0x1550 [ 159.872684][ T5045] ? __pfx_generic_file_write_iter+0x10/0x10 [ 159.878797][ T5045] ksys_write+0x20f/0x4c0 [ 159.883256][ T5045] __x64_sys_write+0x93/0xe0 [ 159.887978][ T5045] x64_sys_call+0x3490/0x3c10 [ 159.892771][ T5045] do_syscall_64+0xcd/0x1e0 [ 159.897408][ T5045] ? clear_bhb_loop+0x25/0x80 [ 159.902233][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.908258][ T5045] RIP: 0033:0x7fada9844a99 [ 159.912762][ T5045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 159.932727][ T5045] RSP: 002b:00007ffcbebbd0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.941241][ T5045] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fada9844a99 [ 159.949307][ T5045] RDX: 00000000fffffdef RSI: 00000000200000c0 RDI: 0000000000000004 [ 159.957376][ T5045] RBP: 00007fada98b85f0 R08: 000055558de824c0 R09: 000055558de824c0 [ 159.965463][ T5045] R10: 0000000000000272 R11: 0000000000000246 R12: 00007ffcbebbd0e0 [ 159.973568][ T5045] R13: 00007ffcbebbd308 R14: 431bde82d7b634db R15: 00007fada988d03b [ 159.981677][ T5045] [ 159.985013][ T5045] Kernel Offset: disabled [ 159.989401][ T5045] Rebooting in 86400 seconds..