./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3430692458 <...> Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. execve("./syz-executor3430692458", ["./syz-executor3430692458"], 0x7ffc08cc6fe0 /* 10 vars */) = 0 brk(NULL) = 0x555588b8d000 brk(0x555588b8dd00) = 0x555588b8dd00 arch_prctl(ARCH_SET_FS, 0x555588b8d380) = 0 set_tid_address(0x555588b8d650) = 5783 set_robust_list(0x555588b8d660, 24) = 0 rseq(0x555588b8dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3430692458", 4096) = 28 getrandom("\x1b\x5e\xc8\x3a\x92\x2a\x97\xda", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555588b8dd00 brk(0x555588baed00) = 0x555588baed00 brk(0x555588baf000) = 0x555588baf000 mprotect(0x7ffaf3a74000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555588b8d650) = 5784 ./strace-static-x86_64: Process 5784 attached [pid 5784] set_robust_list(0x555588b8d660, 24) = 0 [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5784] setpgid(0, 0) = 0 [pid 5784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1000", 4executing program ) = 4 [pid 5784] close(3) = 0 [pid 5784] write(1, "executing program\n", 18) = 18 [pid 5784] memfd_create("syzkaller", 0) = 3 [pid 5784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffaeb400000 [pid 5784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5784] munmap(0x7ffaeb400000, 138412032) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5784] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5784] close(3) = 0 [pid 5784] close(4) = 0 [pid 5784] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 5784] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", MS_SYNCHRONOUS|MS_NOATIME|MS_POSIXACL|MS_LAZYTIME, "") = 0 [pid 5784] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 5784] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 179.260373][ T5784] loop0: detected capacity change from 0 to 1024 [pid 5784] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5784] openat(AT_FDCWD, "blkio.bfq.io_merged_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 179.338898][ T5784] ===================================================== [ 179.346220][ T5784] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x82c/0x970 [ 179.354538][ T5784] __hfsplus_ext_cache_extent+0x82c/0x970 [ 179.360449][ T5784] hfsplus_file_extend+0x775/0x1ba0 [ 179.365910][ T5784] hfsplus_get_block+0xe99/0x1690 [ 179.371089][ T5784] __block_write_begin_int+0xa6b/0x2f80 [ 179.376856][ T5784] cont_write_begin+0xf82/0x1940 [ 179.381955][ T5784] hfsplus_write_begin+0x85/0x120 [ 179.387264][ T5784] generic_perform_write+0x4d8/0x1080 [ 179.392836][ T5784] __generic_file_write_iter+0x207/0x460 [ 179.398721][ T5784] generic_file_write_iter+0x102/0x5b0 [ 179.404478][ T5784] vfs_write+0xb2b/0x1540 [ 179.408945][ T5784] ksys_write+0x24f/0x4c0 [ 179.413510][ T5784] __x64_sys_write+0x93/0xe0 [ 179.418272][ T5784] x64_sys_call+0x306a/0x3ba0 [ 179.423265][ T5784] do_syscall_64+0xcd/0x1e0 [ 179.427967][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.434086][ T5784] [ 179.436508][ T5784] Uninit was created at: [ 179.440920][ T5784] __kmalloc_noprof+0x661/0xf30 [ 179.445993][ T5784] hfsplus_find_init+0x95/0x1d0 [ 179.451024][ T5784] hfsplus_file_extend+0x6d8/0x1ba0 [ 179.456441][ T5784] hfsplus_get_block+0xe99/0x1690 [ 179.461624][ T5784] __block_write_begin_int+0xa6b/0x2f80 [ 179.467400][ T5784] cont_write_begin+0xf82/0x1940 [ 179.472504][ T5784] hfsplus_write_begin+0x85/0x120 [ 179.477781][ T5784] generic_perform_write+0x4d8/0x1080 [ 179.483442][ T5784] __generic_file_write_iter+0x207/0x460 [ 179.489206][ T5784] generic_file_write_iter+0x102/0x5b0 [ 179.494898][ T5784] vfs_write+0xb2b/0x1540 [ 179.499403][ T5784] ksys_write+0x24f/0x4c0 [ 179.503995][ T5784] __x64_sys_write+0x93/0xe0 [ 179.508746][ T5784] x64_sys_call+0x306a/0x3ba0 [ 179.513651][ T5784] do_syscall_64+0xcd/0x1e0 [ 179.518363][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.524487][ T5784] [ 179.526909][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz-executor343 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 179.538239][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.548595][ T5784] ===================================================== [ 179.555755][ T5784] Disabling lock debugging due to kernel taint [ 179.562014][ T5784] Kernel panic - not syncing: kmsan.panic set ... [ 179.568510][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz-executor343 Tainted: G B 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 179.581226][ T5784] Tainted: [B]=BAD_PAGE [ 179.585467][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.595680][ T5784] Call Trace: [ 179.599029][ T5784] [ 179.602017][ T5784] dump_stack_lvl+0x216/0x2d0 [ 179.606815][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.612765][ T5784] dump_stack+0x1e/0x30 [ 179.617057][ T5784] panic+0x4e2/0xcf0 [ 179.621069][ T5784] ? kmsan_get_metadata+0x121/0x1c0 [ 179.626413][ T5784] kmsan_report+0x2c7/0x2d0 [ 179.631072][ T5784] ? add_event_to_ctx+0x17ce/0x2290 [ 179.636446][ T5784] ? __msan_warning+0x95/0x120 [ 179.641321][ T5784] ? __hfsplus_ext_cache_extent+0x82c/0x970 [ 179.647325][ T5784] ? hfsplus_file_extend+0x775/0x1ba0 [ 179.652881][ T5784] ? hfsplus_get_block+0xe99/0x1690 [ 179.658179][ T5784] ? __block_write_begin_int+0xa6b/0x2f80 [ 179.664016][ T5784] ? cont_write_begin+0xf82/0x1940 [ 179.669235][ T5784] ? hfsplus_write_begin+0x85/0x120 [ 179.674572][ T5784] ? generic_perform_write+0x4d8/0x1080 [ 179.680250][ T5784] ? __generic_file_write_iter+0x207/0x460 [ 179.686185][ T5784] ? generic_file_write_iter+0x102/0x5b0 [ 179.691949][ T5784] ? vfs_write+0xb2b/0x1540 [ 179.696570][ T5784] ? ksys_write+0x24f/0x4c0 [ 179.701175][ T5784] ? __x64_sys_write+0x93/0xe0 [ 179.706048][ T5784] ? x64_sys_call+0x306a/0x3ba0 [ 179.711033][ T5784] ? do_syscall_64+0xcd/0x1e0 [ 179.715913][ T5784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.722114][ T5784] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 179.728116][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.733492][ T5784] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 179.740031][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.745394][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.751431][ T5784] ? hfsplus_brec_find+0x886/0x970 [ 179.756689][ T5784] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 179.762518][ T5784] ? __hfsplus_ext_write_extent+0x53e/0x600 [ 179.768552][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.773892][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.779856][ T5784] __msan_warning+0x95/0x120 [ 179.784614][ T5784] __hfsplus_ext_cache_extent+0x82c/0x970 [ 179.790481][ T5784] hfsplus_file_extend+0x775/0x1ba0 [ 179.795842][ T5784] ? filemap_get_folios+0x4a/0x60 [ 179.800994][ T5784] hfsplus_get_block+0xe99/0x1690 [ 179.806119][ T5784] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 179.812600][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.818016][ T5784] __block_write_begin_int+0xa6b/0x2f80 [ 179.823683][ T5784] ? filemap_add_folio+0x281/0x320 [ 179.828939][ T5784] ? __pfx_hfsplus_get_block+0x10/0x10 [ 179.834527][ T5784] cont_write_begin+0xf82/0x1940 [ 179.839580][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.844930][ T5784] hfsplus_write_begin+0x85/0x120 [ 179.850084][ T5784] ? __pfx_hfsplus_get_block+0x10/0x10 [ 179.855651][ T5784] ? __pfx_hfsplus_write_begin+0x10/0x10 [ 179.861415][ T5784] generic_perform_write+0x4d8/0x1080 [ 179.866971][ T5784] __generic_file_write_iter+0x207/0x460 [ 179.872741][ T5784] generic_file_write_iter+0x102/0x5b0 [ 179.878327][ T5784] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 179.884790][ T5784] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.890122][ T5784] vfs_write+0xb2b/0x1540 [ 179.894577][ T5784] ? __pfx_generic_file_write_iter+0x10/0x10 [ 179.900685][ T5784] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.906631][ T5784] ksys_write+0x24f/0x4c0 [ 179.911090][ T5784] __x64_sys_write+0x93/0xe0 [ 179.915842][ T5784] x64_sys_call+0x306a/0x3ba0 [ 179.920718][ T5784] do_syscall_64+0xcd/0x1e0 [ 179.925347][ T5784] ? clear_bhb_loop+0x25/0x80 [ 179.930138][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.936153][ T5784] RIP: 0033:0x7ffaf3a00ad9 [ 179.940663][ T5784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 179.960490][ T5784] RSP: 002b:00007ffc91d0e7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.969092][ T5784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaf3a00ad9 [ 179.977180][ T5784] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 0000000000000004 [ 179.985271][ T5784] RBP: 00007ffaf3a745f0 R08: 0000555588b8e4c0 R09: 0000555588b8e4c0 [ 179.993341][ T5784] R10: 0000000000000651 R11: 0000000000000246 R12: 00007ffc91d0e7d0 [ 180.001396][ T5784] R13: 00007ffc91d0e9f8 R14: 431bde82d7b634db R15: 00007ffaf3a4903b [ 180.009475][ T5784] [ 180.012859][ T5784] Kernel Offset: disabled [ 180.017250][ T5784] Rebooting in 86400 seconds..