./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1112009885 <...> Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. execve("./syz-executor1112009885", ["./syz-executor1112009885"], 0x7fffc4e79320 /* 10 vars */) = 0 brk(NULL) = 0x555574040000 brk(0x555574040d00) = 0x555574040d00 arch_prctl(ARCH_SET_FS, 0x555574040380) = 0 set_tid_address(0x555574040650) = 5178 set_robust_list(0x555574040660, 24) = 0 rseq(0x555574040ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1112009885", 4096) = 28 getrandom("\x48\x42\x44\xb6\x1e\x63\xdb\x60", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574040d00 brk(0x555574061d00) = 0x555574061d00 brk(0x555574062000) = 0x555574062000 mprotect(0x7f4685dd3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555574040650) = 5179 ./strace-static-x86_64: Process 5179 attached [pid 5179] set_robust_list(0x555574040660, 24) = 0 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3executing program ) = 0 [pid 5179] write(1, "executing program\n", 18) = 18 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f467d800000 [pid 5179] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5179] munmap(0x7f467d800000, 138412032) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] close(4) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [ 161.729294][ T5179] loop0: detected capacity change from 0 to 256 [pid 5179] mount("/dev/loop0", "./file0", "exfat", MS_NOEXEC, "") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5179] chdir("./file0") = 0 [ 161.775829][ T5179] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [pid 5179] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 020) = 4 [ 161.807104][ T29] audit: type=1800 audit(1727850007.307:2): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor111" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 161.810921][ T5179] ===================================================== [ 161.835147][ T5179] BUG: KMSAN: uninit-value in __exfat_get_dentry_set+0x10ca/0x14d0 [ 161.843459][ T5179] __exfat_get_dentry_set+0x10ca/0x14d0 [ 161.849198][ T5179] exfat_get_dentry_set+0x58/0xec0 [ 161.854540][ T5179] __exfat_write_inode+0x3c1/0xe30 [ 161.859815][ T5179] __exfat_truncate+0x7f3/0xbb0 [ 161.864919][ T5179] exfat_truncate+0xee/0x2a0 [ 161.869656][ T5179] exfat_direct_IO+0x5a3/0x900 [ 161.874631][ T5179] generic_file_direct_write+0x275/0x6a0 [ 161.880473][ T5179] __generic_file_write_iter+0x242/0x460 [ 161.886397][ T5179] exfat_file_write_iter+0x894/0xfb0 [ 161.891851][ T5179] do_iter_readv_writev+0x88a/0xa30 [ 161.897327][ T5179] vfs_writev+0x56a/0x14f0 [ 161.901917][ T5179] __se_sys_pwritev2+0x280/0x470 [ 161.907198][ T5179] __x64_sys_pwritev2+0x11f/0x1a0 [ 161.912443][ T5179] x64_sys_call+0x2edb/0x3ba0 [ 161.917431][ T5179] do_syscall_64+0xcd/0x1e0 [ 161.922122][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.928424][ T5179] [ 161.930834][ T5179] Uninit was stored to memory at: [ 161.936284][ T5179] _copy_to_iter+0xe53/0x2b30 [ 161.941134][ T5179] copy_page_to_iter+0x419/0x880 [ 161.946294][ T5179] shmem_file_read_iter+0xa09/0x12b0 [ 161.951790][ T5179] do_iter_readv_writev+0x88a/0xa30 [ 161.957427][ T5179] vfs_iter_read+0x278/0x760 [ 161.962291][ T5179] loop_process_work+0x20fc/0x3750 [ 161.967702][ T5179] loop_rootcg_workfn+0x2b/0x40 [ 161.972713][ T5179] process_scheduled_works+0xae0/0x1c40 [ 161.978510][ T5179] worker_thread+0xea7/0x14f0 [ 161.983458][ T5179] kthread+0x3e2/0x540 [ 161.987698][ T5179] ret_from_fork+0x6d/0x90 [ 161.992205][ T5179] ret_from_fork_asm+0x1a/0x30 [ 161.997216][ T5179] [ 161.999629][ T5179] Uninit was stored to memory at: [ 162.005078][ T5179] copy_page_from_iter_atomic+0x12b7/0x3100 [ 162.011158][ T5179] generic_perform_write+0x8d1/0x1080 [ 162.016895][ T5179] shmem_file_write_iter+0x2ba/0x2f0 [ 162.022427][ T5179] do_iter_readv_writev+0x88a/0xa30 [ 162.027850][ T5179] vfs_iter_write+0x44d/0xd40 [ 162.032709][ T5179] loop_process_work+0x15e6/0x3750 [ 162.038047][ T5179] loop_rootcg_workfn+0x2b/0x40 [ 162.043212][ T5179] process_scheduled_works+0xae0/0x1c40 [ 162.048877][ T5179] worker_thread+0xea7/0x14f0 [ 162.053764][ T5179] kthread+0x3e2/0x540 [ 162.058050][ T5179] ret_from_fork+0x6d/0x90 [ 162.062575][ T5179] ret_from_fork_asm+0x1a/0x30 [ 162.067601][ T5179] [ 162.070096][ T5179] Uninit was created at: [ 162.074605][ T5179] __alloc_pages_noprof+0x9d6/0xe70 [ 162.079991][ T5179] alloc_pages_mpol_noprof+0x299/0x990 [ 162.085746][ T5179] folio_alloc_noprof+0x1db/0x310 [ 162.090925][ T5179] filemap_alloc_folio_noprof+0xa6/0x440 [ 162.096785][ T5179] __filemap_get_folio+0xac4/0x1550 [ 162.102188][ T5179] block_write_begin+0x6e/0x2b0 [ 162.107356][ T5179] exfat_write_begin+0xfb/0x400 [ 162.112379][ T5179] exfat_file_write_iter+0x474/0xfb0 [ 162.118330][ T5179] do_iter_readv_writev+0x88a/0xa30 [ 162.123909][ T5179] vfs_writev+0x56a/0x14f0 [ 162.128466][ T5179] __se_sys_pwritev2+0x280/0x470 [ 162.133784][ T5179] __x64_sys_pwritev2+0x11f/0x1a0 [ 162.139102][ T5179] x64_sys_call+0x2edb/0x3ba0 [ 162.144038][ T5179] do_syscall_64+0xcd/0x1e0 [ 162.148803][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.154993][ T5179] [ 162.157454][ T5179] CPU: 0 UID: 0 PID: 5179 Comm: syz-executor111 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 162.169114][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.179373][ T5179] ===================================================== [ 162.186488][ T5179] Disabling lock debugging due to kernel taint [ 162.192857][ T5179] Kernel panic - not syncing: kmsan.panic set ... [ 162.199401][ T5179] CPU: 0 UID: 0 PID: 5179 Comm: syz-executor111 Tainted: G B 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 162.212126][ T5179] Tainted: [B]=BAD_PAGE [ 162.216344][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.226527][ T5179] Call Trace: [ 162.229907][ T5179] [ 162.232897][ T5179] dump_stack_lvl+0x216/0x2d0 [ 162.237741][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.243802][ T5179] dump_stack+0x1e/0x30 [ 162.248082][ T5179] panic+0x4e2/0xcf0 [ 162.252138][ T5179] ? kmsan_get_metadata+0x41/0x1c0 [ 162.257374][ T5179] kmsan_report+0x2c7/0x2d0 [ 162.261979][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.267271][ T5179] ? __msan_warning+0x95/0x120 [ 162.272151][ T5179] ? __exfat_get_dentry_set+0x10ca/0x14d0 [ 162.278000][ T5179] ? exfat_get_dentry_set+0x58/0xec0 [ 162.283426][ T5179] ? __exfat_write_inode+0x3c1/0xe30 [ 162.288835][ T5179] ? __exfat_truncate+0x7f3/0xbb0 [ 162.293992][ T5179] ? exfat_truncate+0xee/0x2a0 [ 162.298912][ T5179] ? exfat_direct_IO+0x5a3/0x900 [ 162.303961][ T5179] ? generic_file_direct_write+0x275/0x6a0 [ 162.309901][ T5179] ? __generic_file_write_iter+0x242/0x460 [ 162.315849][ T5179] ? exfat_file_write_iter+0x894/0xfb0 [ 162.321493][ T5179] ? do_iter_readv_writev+0x88a/0xa30 [ 162.327026][ T5179] ? vfs_writev+0x56a/0x14f0 [ 162.331726][ T5179] ? __se_sys_pwritev2+0x280/0x470 [ 162.336968][ T5179] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 162.342290][ T5179] ? x64_sys_call+0x2edb/0x3ba0 [ 162.347263][ T5179] ? do_syscall_64+0xcd/0x1e0 [ 162.352055][ T5179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.358267][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.364187][ T5179] ? __wait_on_bit+0x1f8/0x4b0 [ 162.369050][ T5179] ? __pfx_bit_wait_io+0x10/0x10 [ 162.374086][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.379998][ T5179] ? out_of_line_wait_on_bit+0x13c/0x170 [ 162.385737][ T5179] ? __pfx_wake_bit_function+0x10/0x10 [ 162.391292][ T5179] ? __pfx_bit_wait_io+0x10/0x10 [ 162.396357][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.401702][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.407631][ T5179] __msan_warning+0x95/0x120 [ 162.412400][ T5179] __exfat_get_dentry_set+0x10ca/0x14d0 [ 162.418706][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.424080][ T5179] exfat_get_dentry_set+0x58/0xec0 [ 162.429337][ T5179] ? exfat_set_volume_dirty+0x15e/0x490 [ 162.435094][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.440411][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.446463][ T5179] __exfat_write_inode+0x3c1/0xe30 [ 162.451711][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.457677][ T5179] ? inode_needs_sync+0x130/0x2c0 [ 162.462826][ T5179] __exfat_truncate+0x7f3/0xbb0 [ 162.467831][ T5179] ? kmsan_get_shadow_origin_ptr+0x3/0xb0 [ 162.473793][ T5179] exfat_truncate+0xee/0x2a0 [ 162.478544][ T5179] exfat_direct_IO+0x5a3/0x900 [ 162.483457][ T5179] ? __pfx_exfat_direct_IO+0x10/0x10 [ 162.488882][ T5179] generic_file_direct_write+0x275/0x6a0 [ 162.494761][ T5179] __generic_file_write_iter+0x242/0x460 [ 162.500539][ T5179] exfat_file_write_iter+0x894/0xfb0 [ 162.505953][ T5179] ? __pfx_exfat_write_end+0x10/0x10 [ 162.511436][ T5179] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 162.517739][ T5179] do_iter_readv_writev+0x88a/0xa30 [ 162.523110][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.528460][ T5179] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 162.534380][ T5179] ? __pfx_exfat_file_write_iter+0x10/0x10 [ 162.540309][ T5179] vfs_writev+0x56a/0x14f0 [ 162.544825][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.550146][ T5179] ? __traceiter_rdev_dump_survey+0x40/0x160 [ 162.556383][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.562314][ T5179] ? kmsan_get_metadata+0x13e/0x1c0 [ 162.567616][ T5179] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.573532][ T5179] __se_sys_pwritev2+0x280/0x470 [ 162.578619][ T5179] __x64_sys_pwritev2+0x11f/0x1a0 [ 162.583786][ T5179] x64_sys_call+0x2edb/0x3ba0 [ 162.588621][ T5179] do_syscall_64+0xcd/0x1e0 [ 162.593313][ T5179] ? clear_bhb_loop+0x25/0x80 [ 162.598090][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.604426][ T5179] RIP: 0033:0x7f4685d5ead9 [ 162.608935][ T5179] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 162.629116][ T5179] RSP: 002b:00007ffe1dc6b3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 162.638082][ T5179] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f4685d5ead9 [ 162.646154][ T5179] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 162.654205][ T5179] RBP: 00007f4685dd35f0 R08: 0000000000000000 R09: 0000000000000000 [ 162.662272][ T5179] R10: 0000000000000030 R11: 0000000000000246 R12: 00007ffe1dc6b430 [ 162.670422][ T5179] R13: 00007ffe1dc6b658 R14: 431bde82d7b634db R15: 00007f4685da703b [ 162.678524][ T5179] [ 162.682084][ T5179] Kernel Offset: disabled [ 162.686505][ T5179] Rebooting in 86400 seconds..