./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2945102326 <...> Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. execve("./syz-executor2945102326", ["./syz-executor2945102326"], 0x7ffc6a0175c0 /* 10 vars */) = 0 brk(NULL) = 0x55556d8e7000 brk(0x55556d8e7e00) = 0x55556d8e7e00 arch_prctl(ARCH_SET_FS, 0x55556d8e7480) = 0 set_tid_address(0x55556d8e7750) = 5013 set_robust_list(0x55556d8e7760, 24) = 0 rseq(0x55556d8e7da0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2945102326", 4096) = 28 getrandom("\x00\x43\x27\x7a\x8d\xac\x8f\x40", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556d8e7e00 brk(0x55556d908e00) = 0x55556d908e00 brk(0x55556d909000) = 0x55556d909000 mprotect(0x7f36dce01000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f36dcd59970, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f36dcd61270}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f36dcd59970, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f36dcd61270}, NULL, 8) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5014 attached [pid 5014] set_robust_list(0x55556d8e7760, 24 [pid 5013] <... clone resumed>, child_tidptr=0x55556d8e7750) = 5014 [pid 5014] <... set_robust_list resumed>) = 0 [pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] setpgid(0, 0) = 0 [pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1000", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] mkdir("./file0", 0777) = 0 [pid 5014] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5014] pipe2([3, 4], 0) = 0 [pid 5014] dup(4) = 5 [ 175.064569][ T5014] ===================================================== [ 175.072033][ T5014] BUG: KMSAN: uninit-value in v9fs_evict_inode+0x109/0x130 [ 175.079475][ T5014] v9fs_evict_inode+0x109/0x130 [ 175.084734][ T5014] evict+0x3ae/0xa60 [ 175.088830][ T5014] iput+0x9ca/0xe10 [ 175.093059][ T5014] iget_failed+0x15e/0x180 [ 175.097690][ T5014] v9fs_fid_iget_dotl+0x375/0x570 [ 175.103686][ T5014] v9fs_mount+0xc02/0x12b0 [ 175.108314][ T5014] legacy_get_tree+0x114/0x290 [ 175.113383][ T5014] vfs_get_tree+0xa7/0x570 [ 175.118044][ T5014] do_new_mount+0x71f/0x15e0 [ 175.123036][ T5014] path_mount+0x742/0x1f20 [ 175.127678][ T5014] __se_sys_mount+0x725/0x810 [ 175.132685][ T5014] __x64_sys_mount+0xe4/0x150 [ 175.137626][ T5014] do_syscall_64+0xd5/0x1f0 [ 175.142479][ T5014] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.148653][ T5014] [ 175.151070][ T5014] Uninit was created at: [ 175.155778][ T5014] __alloc_pages+0x9d6/0xe70 [ 175.160638][ T5014] new_slab+0x2de/0x1400 [ 175.165228][ T5014] ___slab_alloc+0x1184/0x33d0 [ 175.170189][ T5014] kmem_cache_alloc_lru+0x6d7/0xbe0 [ 175.175708][ T5014] v9fs_alloc_inode+0x62/0x130 [ 175.180703][ T5014] alloc_inode+0x86/0x460 [ 175.185498][ T5014] iget_locked+0x2bf/0xee0 [ 175.190186][ T5014] v9fs_fid_iget_dotl+0x7f/0x570 [ 175.195519][ T5014] v9fs_mount+0xc02/0x12b0 [ 175.200161][ T5014] legacy_get_tree+0x114/0x290 [ 175.205170][ T5014] vfs_get_tree+0xa7/0x570 [ 175.209829][ T5014] do_new_mount+0x71f/0x15e0 [ 175.214961][ T5014] path_mount+0x742/0x1f20 [ 175.219597][ T5014] __se_sys_mount+0x725/0x810 [ 175.224658][ T5014] __x64_sys_mount+0xe4/0x150 [ 175.229564][ T5014] do_syscall_64+0xd5/0x1f0 [ 175.234538][ T5014] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.240679][ T5014] [ 175.243449][ T5014] CPU: 1 PID: 5014 Comm: syz-executor294 Not tainted 6.8.0-syzkaller-11767-g23956900041d #0 [ 175.253826][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 175.264148][ T5014] ===================================================== [ 175.271225][ T5014] Disabling lock debugging due to kernel taint [ 175.277666][ T5014] Kernel panic - not syncing: kmsan.panic set ... [ 175.284202][ T5014] CPU: 1 PID: 5014 Comm: syz-executor294 Tainted: G B 6.8.0-syzkaller-11767-g23956900041d #0 [ 175.295953][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 175.306110][ T5014] Call Trace: [ 175.309509][ T5014] [ 175.312587][ T5014] dump_stack_lvl+0x216/0x2d0 [ 175.317508][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.323617][ T5014] dump_stack+0x1e/0x30 [ 175.327948][ T5014] panic+0x4e2/0xcd0 [ 175.332021][ T5014] ? kmsan_get_metadata+0xf1/0x1d0 [ 175.337433][ T5014] kmsan_report+0x2d5/0x2e0 [ 175.342218][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.348468][ T5014] ? __msan_warning+0x95/0x120 [ 175.353389][ T5014] ? v9fs_evict_inode+0x109/0x130 [ 175.358549][ T5014] ? evict+0x3ae/0xa60 [ 175.362764][ T5014] ? iput+0x9ca/0xe10 [ 175.366985][ T5014] ? iget_failed+0x15e/0x180 [ 175.371792][ T5014] ? v9fs_fid_iget_dotl+0x375/0x570 [ 175.377233][ T5014] ? v9fs_mount+0xc02/0x12b0 [ 175.382046][ T5014] ? legacy_get_tree+0x114/0x290 [ 175.387223][ T5014] ? vfs_get_tree+0xa7/0x570 [ 175.392068][ T5014] ? do_new_mount+0x71f/0x15e0 [ 175.397063][ T5014] ? path_mount+0x742/0x1f20 [ 175.401908][ T5014] ? __se_sys_mount+0x725/0x810 [ 175.407000][ T5014] ? __x64_sys_mount+0xe4/0x150 [ 175.412098][ T5014] ? do_syscall_64+0xd5/0x1f0 [ 175.417048][ T5014] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.423350][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.429363][ T5014] ? filemap_fdatawrite_wbc+0x128/0x270 [ 175.435153][ T5014] ? filemap_fdatawrite+0xbf/0xf0 [ 175.440402][ T5014] ? kmsan_get_metadata+0x146/0x1d0 [ 175.445807][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.451969][ T5014] __msan_warning+0x95/0x120 [ 175.456818][ T5014] v9fs_evict_inode+0x109/0x130 [ 175.461918][ T5014] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 175.467529][ T5014] evict+0x3ae/0xa60 [ 175.471670][ T5014] iput+0x9ca/0xe10 [ 175.475759][ T5014] iget_failed+0x15e/0x180 [ 175.480388][ T5014] v9fs_fid_iget_dotl+0x375/0x570 [ 175.485681][ T5014] ? kmsan_get_metadata+0x146/0x1d0 [ 175.491162][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.497178][ T5014] v9fs_mount+0xc02/0x12b0 [ 175.501834][ T5014] legacy_get_tree+0x114/0x290 [ 175.506837][ T5014] ? __pfx_v9fs_mount+0x10/0x10 [ 175.511937][ T5014] ? __pfx_legacy_get_tree+0x10/0x10 [ 175.517488][ T5014] vfs_get_tree+0xa7/0x570 [ 175.522179][ T5014] ? mount_capable+0x97/0x120 [ 175.527100][ T5014] do_new_mount+0x71f/0x15e0 [ 175.531942][ T5014] ? kmsan_get_metadata+0x146/0x1d0 [ 175.537455][ T5014] path_mount+0x742/0x1f20 [ 175.542143][ T5014] ? user_path_at_empty+0x325/0x3a0 [ 175.547610][ T5014] __se_sys_mount+0x725/0x810 [ 175.552545][ T5014] ? _raw_spin_unlock_irq+0x31/0x50 [ 175.557965][ T5014] ? kmsan_get_metadata+0x146/0x1d0 [ 175.563405][ T5014] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 175.569429][ T5014] __x64_sys_mount+0xe4/0x150 [ 175.574367][ T5014] do_syscall_64+0xd5/0x1f0 [ 175.579103][ T5014] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 175.585224][ T5014] RIP: 0033:0x7f36dcd8e569 [ 175.589817][ T5014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 175.609769][ T5014] RSP: 002b:00007ffc8cce1b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.618390][ T5014] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36dcd8e569 [ 175.626476][ T5014] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 0000000000000000 [ 175.634585][ T5014] RBP: 0000000000000000 R08: 0000000020000300 R09: 00007ffc8cce1b60 [ 175.642751][ T5014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8cce1b60 [ 175.650884][ T5014] R13: 00007ffc8cce1de8 R14: 431bde82d7b634db R15: 00007f36dcdd7074 [ 175.659910][ T5014] [ 175.663408][ T5014] Kernel Offset: disabled [ 175.667878][ T5014] Rebooting in 86400 seconds..