./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2211841336 <...> Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. execve("./syz-executor2211841336", ["./syz-executor2211841336"], 0x7ffdde8b5ee0 /* 10 vars */) = 0 brk(NULL) = 0x55558beba000 brk(0x55558bebad00) = 0x55558bebad00 arch_prctl(ARCH_SET_FS, 0x55558beba380) = 0 set_tid_address(0x55558beba650) = 5187 set_robust_list(0x55558beba660, 24) = 0 rseq(0x55558bebaca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2211841336", 4096) = 28 getrandom("\x6e\x5d\xba\x46\x28\x82\x2a\xe6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558bebad00 brk(0x55558bedbd00) = 0x55558bedbd00 brk(0x55558bedc000) = 0x55558bedc000 mprotect(0x7f7ad22af000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558beba650) = 5188 ./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x55558beba660, 24) = 0 [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5188] setpgid(0, 0) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4) = 4 [pid 5188] close(3) = 0 [pid 5188] write(1, "executing program\n", 18) = 18 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ac9c00000 executing program [pid 5188] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5188] munmap(0x7f7ac9c00000, 138412032) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] close(4) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [ 165.505881][ T5188] loop0: detected capacity change from 0 to 256 [pid 5188] mount("/dev/loop0", "./file0", "exfat", MS_NOEXEC, "") = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5188] chdir("./file0") = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 020) = 4 [ 165.545628][ T5188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 165.584706][ T29] audit: type=1800 audit(1727861761.192:2): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor221" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 165.585143][ T5188] ===================================================== [ 165.612929][ T5188] BUG: KMSAN: uninit-value in __exfat_get_dentry_set+0x10ca/0x14d0 [ 165.621053][ T5188] __exfat_get_dentry_set+0x10ca/0x14d0 [ 165.626905][ T5188] exfat_get_dentry_set+0x58/0xec0 [ 165.632370][ T5188] __exfat_write_inode+0x3c1/0xe30 [ 165.637753][ T5188] __exfat_truncate+0x7f3/0xbb0 [ 165.642960][ T5188] exfat_truncate+0xee/0x2a0 [ 165.647722][ T5188] exfat_direct_IO+0x5a3/0x900 [ 165.652733][ T5188] generic_file_direct_write+0x275/0x6a0 [ 165.658593][ T5188] __generic_file_write_iter+0x242/0x460 [ 165.664739][ T5188] exfat_file_write_iter+0x894/0xfb0 [ 165.670205][ T5188] do_iter_readv_writev+0x88a/0xa30 [ 165.675691][ T5188] vfs_writev+0x56a/0x14f0 [ 165.680263][ T5188] __se_sys_pwritev2+0x280/0x470 [ 165.685445][ T5188] __x64_sys_pwritev2+0x11f/0x1a0 [ 165.690647][ T5188] x64_sys_call+0x2edb/0x3ba0 [ 165.695572][ T5188] do_syscall_64+0xcd/0x1e0 [ 165.700282][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.706487][ T5188] [ 165.708882][ T5188] Uninit was stored to memory at: [ 165.714256][ T5188] _copy_to_iter+0xe53/0x2b30 [ 165.719088][ T5188] copy_page_to_iter+0x419/0x880 [ 165.724248][ T5188] shmem_file_read_iter+0xa09/0x12b0 [ 165.729733][ T5188] do_iter_readv_writev+0x88a/0xa30 [ 165.735132][ T5188] vfs_iter_read+0x278/0x760 [ 165.739886][ T5188] loop_process_work+0x20fc/0x3750 [ 165.745287][ T5188] loop_rootcg_workfn+0x2b/0x40 [ 165.750286][ T5188] process_scheduled_works+0xae0/0x1c40 [ 165.756079][ T5188] worker_thread+0xea7/0x14f0 [ 165.760926][ T5188] kthread+0x3e2/0x540 [ 165.765218][ T5188] ret_from_fork+0x6d/0x90 [ 165.769795][ T5188] ret_from_fork_asm+0x1a/0x30 [ 165.774768][ T5188] [ 165.777171][ T5188] Uninit was stored to memory at: [ 165.782615][ T5188] copy_page_from_iter_atomic+0x12b7/0x3100 [ 165.788685][ T5188] generic_perform_write+0x8d1/0x1080 [ 165.794288][ T5188] shmem_file_write_iter+0x2ba/0x2f0 [ 165.799771][ T5188] do_iter_readv_writev+0x88a/0xa30 [ 165.805197][ T5188] vfs_iter_write+0x44d/0xd40 [ 165.810059][ T5188] loop_process_work+0x15e6/0x3750 [ 165.815404][ T5188] loop_rootcg_workfn+0x2b/0x40 [ 165.820402][ T5188] process_scheduled_works+0xae0/0x1c40 [ 165.826226][ T5188] worker_thread+0xea7/0x14f0 [ 165.831076][ T5188] kthread+0x3e2/0x540 [ 165.835341][ T5188] ret_from_fork+0x6d/0x90 [ 165.839908][ T5188] ret_from_fork_asm+0x1a/0x30 [ 165.844916][ T5188] [ 165.847315][ T5188] Uninit was created at: [ 165.851681][ T5188] __alloc_pages_noprof+0x9d6/0xe70 [ 165.857076][ T5188] alloc_pages_mpol_noprof+0x299/0x990 [ 165.862755][ T5188] folio_alloc_noprof+0x1db/0x310 [ 165.868069][ T5188] filemap_alloc_folio_noprof+0xa6/0x440 [ 165.873969][ T5188] __filemap_get_folio+0xac4/0x1550 [ 165.879352][ T5188] block_write_begin+0x6e/0x2b0 [ 165.884426][ T5188] exfat_write_begin+0xfb/0x400 [ 165.889440][ T5188] exfat_file_write_iter+0x474/0xfb0 [ 165.894908][ T5188] do_iter_readv_writev+0x88a/0xa30 [ 165.900286][ T5188] vfs_writev+0x56a/0x14f0 [ 165.904997][ T5188] __se_sys_pwritev2+0x280/0x470 [ 165.910116][ T5188] __x64_sys_pwritev2+0x11f/0x1a0 [ 165.915339][ T5188] x64_sys_call+0x2edb/0x3ba0 [ 165.920191][ T5188] do_syscall_64+0xcd/0x1e0 [ 165.924921][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.931028][ T5188] [ 165.933580][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz-executor221 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 165.944935][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.955161][ T5188] ===================================================== [ 165.962293][ T5188] Disabling lock debugging due to kernel taint [ 165.968531][ T5188] Kernel panic - not syncing: kmsan.panic set ... [ 165.975016][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz-executor221 Tainted: G B 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 165.987718][ T5188] Tainted: [B]=BAD_PAGE [ 165.991937][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.002131][ T5188] Call Trace: [ 166.005490][ T5188] [ 166.008472][ T5188] dump_stack_lvl+0x216/0x2d0 [ 166.013263][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.019198][ T5188] dump_stack+0x1e/0x30 [ 166.023515][ T5188] panic+0x4e2/0xcf0 [ 166.027511][ T5188] ? kmsan_get_metadata+0x41/0x1c0 [ 166.032728][ T5188] kmsan_report+0x2c7/0x2d0 [ 166.037333][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.042650][ T5188] ? __msan_warning+0x95/0x120 [ 166.047536][ T5188] ? __exfat_get_dentry_set+0x10ca/0x14d0 [ 166.053400][ T5188] ? exfat_get_dentry_set+0x58/0xec0 [ 166.058921][ T5188] ? __exfat_write_inode+0x3c1/0xe30 [ 166.064327][ T5188] ? __exfat_truncate+0x7f3/0xbb0 [ 166.069502][ T5188] ? exfat_truncate+0xee/0x2a0 [ 166.074352][ T5188] ? exfat_direct_IO+0x5a3/0x900 [ 166.079391][ T5188] ? generic_file_direct_write+0x275/0x6a0 [ 166.085325][ T5188] ? __generic_file_write_iter+0x242/0x460 [ 166.091268][ T5188] ? exfat_file_write_iter+0x894/0xfb0 [ 166.096834][ T5188] ? do_iter_readv_writev+0x88a/0xa30 [ 166.102330][ T5188] ? vfs_writev+0x56a/0x14f0 [ 166.107014][ T5188] ? __se_sys_pwritev2+0x280/0x470 [ 166.112270][ T5188] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 166.117583][ T5188] ? x64_sys_call+0x2edb/0x3ba0 [ 166.122552][ T5188] ? do_syscall_64+0xcd/0x1e0 [ 166.127340][ T5188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.133554][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.139458][ T5188] ? __wait_on_bit+0x1f8/0x4b0 [ 166.144319][ T5188] ? __pfx_bit_wait_io+0x10/0x10 [ 166.149348][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.155274][ T5188] ? out_of_line_wait_on_bit+0x13c/0x170 [ 166.161008][ T5188] ? __pfx_wake_bit_function+0x10/0x10 [ 166.166575][ T5188] ? __pfx_bit_wait_io+0x10/0x10 [ 166.171603][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.176914][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.182875][ T5188] __msan_warning+0x95/0x120 [ 166.187603][ T5188] __exfat_get_dentry_set+0x10ca/0x14d0 [ 166.193345][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.198653][ T5188] exfat_get_dentry_set+0x58/0xec0 [ 166.203953][ T5188] ? exfat_set_volume_dirty+0x15e/0x490 [ 166.209626][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.214921][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.220827][ T5188] __exfat_write_inode+0x3c1/0xe30 [ 166.226049][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.231978][ T5188] ? inode_needs_sync+0x130/0x2c0 [ 166.237155][ T5188] __exfat_truncate+0x7f3/0xbb0 [ 166.242138][ T5188] ? kmsan_get_shadow_origin_ptr+0x3/0xb0 [ 166.248036][ T5188] exfat_truncate+0xee/0x2a0 [ 166.252723][ T5188] exfat_direct_IO+0x5a3/0x900 [ 166.257601][ T5188] ? __pfx_exfat_direct_IO+0x10/0x10 [ 166.262995][ T5188] generic_file_direct_write+0x275/0x6a0 [ 166.268770][ T5188] __generic_file_write_iter+0x242/0x460 [ 166.274534][ T5188] exfat_file_write_iter+0x894/0xfb0 [ 166.279918][ T5188] ? __pfx_exfat_write_end+0x10/0x10 [ 166.285326][ T5188] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 166.291230][ T5188] do_iter_readv_writev+0x88a/0xa30 [ 166.296547][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.301835][ T5188] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 166.307776][ T5188] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 166.313683][ T5188] vfs_writev+0x56a/0x14f0 [ 166.318180][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.323503][ T5188] ? __traceiter_rdev_dump_survey+0x40/0x160 [ 166.329671][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.335569][ T5188] ? kmsan_get_metadata+0x13e/0x1c0 [ 166.340854][ T5188] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 166.346772][ T5188] __se_sys_pwritev2+0x280/0x470 [ 166.351833][ T5188] __x64_sys_pwritev2+0x11f/0x1a0 [ 166.357054][ T5188] x64_sys_call+0x2edb/0x3ba0 [ 166.361918][ T5188] do_syscall_64+0xcd/0x1e0 [ 166.366589][ T5188] ? clear_bhb_loop+0x25/0x80 [ 166.371356][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.377387][ T5188] RIP: 0033:0x7f7ad223aad9 [ 166.381878][ T5188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 166.401700][ T5188] RSP: 002b:00007ffeb141c358 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 166.410283][ T5188] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f7ad223aad9 [ 166.418337][ T5188] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 166.426385][ T5188] RBP: 00007f7ad22af5f0 R08: 0000000000000000 R09: 0000000000000000 [ 166.434431][ T5188] R10: 0000000000000030 R11: 0000000000000246 R12: 00007ffeb141c390 [ 166.442479][ T5188] R13: 00007ffeb141c5b8 R14: 431bde82d7b634db R15: 00007f7ad228303b [ 166.450548][ T5188] [ 166.453902][ T5188] Kernel Offset: disabled [ 166.458287][ T5188] Rebooting in 86400 seconds..