./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3373402580 <...> Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. execve("./syz-executor3373402580", ["./syz-executor3373402580"], 0x7ffc2f3b8c70 /* 10 vars */) = 0 brk(NULL) = 0x5555561a6000 brk(0x5555561a6d00) = 0x5555561a6d00 arch_prctl(ARCH_SET_FS, 0x5555561a6380) = 0 set_tid_address(0x5555561a6650) = 5052 set_robust_list(0x5555561a6660, 24) = 0 rseq(0x5555561a6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3373402580", 4096) = 28 getrandom("\xec\x74\x3a\x41\x18\xeb\x8d\x4a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555561a6d00 brk(0x5555561c7d00) = 0x5555561c7d00 brk(0x5555561c8000) = 0x5555561c8000 mprotect(0x7f4f0f970000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5053 attached , child_tidptr=0x5555561a6650) = 5053 [pid 5053] set_robust_list(0x5555561a6660, 24) = 0 [pid 5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5053] setpgid(0, 0) = 0 [pid 5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5053] write(3, "1000", 4) = 4 [pid 5053] close(3) = 0 executing program [pid 5053] write(1, "executing program\n", 18) = 18 [pid 5053] memfd_create("syzkaller", 0) = 3 [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f07400000 [pid 5053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5053] munmap(0x7f4f07400000, 138412032) = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5053] close(3) = 0 [pid 5053] close(4) = 0 [pid 5053] mkdir("./file1", 0777) = 0 [pid 5053] mount("/dev/loop0", "./file1", "hfs", 0, "") = 0 [ 162.025686][ T5053] loop0: detected capacity change from 0 to 64 [pid 5053] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5053] chdir("./file1") = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5053] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 4 [ 162.130822][ T5053] ===================================================== [ 162.138291][ T5053] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x836/0xca0 [ 162.146337][ T5053] hfs_find_set_zero_bits+0x836/0xca0 [ 162.151919][ T5053] hfs_vbm_search_free+0x141/0x530 [ 162.157283][ T5053] hfs_extend_file+0x69e/0x19f0 [ 162.162309][ T5053] hfs_get_block+0x3d8/0xf50 [ 162.167150][ T5053] __block_write_begin_int+0xa6b/0x2f80 [ 162.172859][ T5053] block_write_begin+0x143/0x450 [ 162.177993][ T5053] cont_write_begin+0xcc0/0x1320 [ 162.183091][ T5053] hfs_write_begin+0x9a/0x140 [ 162.188150][ T5053] generic_perform_write+0x4ba/0x12e0 [ 162.193733][ T5053] __generic_file_write_iter+0x20a/0x460 [ 162.199545][ T5053] generic_file_write_iter+0x103/0x5b0 [ 162.205214][ T5053] vfs_write+0xb2f/0x1550 [ 162.209703][ T5053] ksys_write+0x20f/0x4c0 [ 162.214254][ T5053] __x64_sys_write+0x93/0xe0 [ 162.219311][ T5053] x64_sys_call+0x3490/0x3c10 [ 162.224219][ T5053] do_syscall_64+0xcd/0x1e0 [ 162.228904][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.235026][ T5053] [ 162.237424][ T5053] Uninit was created at: [ 162.241879][ T5053] __kmalloc_cache_noprof+0x4f0/0xb00 [ 162.247517][ T5053] hfs_mdb_get+0x1bd4/0x28b0 [ 162.252302][ T5053] hfs_fill_super+0x1cf6/0x23c0 [ 162.257424][ T5053] mount_bdev+0x39a/0x520 [ 162.261920][ T5053] hfs_mount+0x4d/0x60 [ 162.266190][ T5053] legacy_get_tree+0x114/0x290 [ 162.271125][ T5053] vfs_get_tree+0xa7/0x570 [ 162.275755][ T5053] do_new_mount+0x71f/0x15e0 [ 162.280507][ T5053] path_mount+0x742/0x1f10 [ 162.285121][ T5053] __se_sys_mount+0x722/0x810 [ 162.289963][ T5053] __x64_sys_mount+0xe4/0x150 [ 162.294870][ T5053] x64_sys_call+0xed5/0x3c10 [ 162.299634][ T5053] do_syscall_64+0xcd/0x1e0 [ 162.304385][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.310482][ T5053] [ 162.312856][ T5053] CPU: 0 PID: 5053 Comm: syz-executor337 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 162.323262][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.333528][ T5053] ===================================================== [ 162.340516][ T5053] Disabling lock debugging due to kernel taint [ 162.346823][ T5053] Kernel panic - not syncing: kmsan.panic set ... [ 162.353361][ T5053] CPU: 0 PID: 5053 Comm: syz-executor337 Tainted: G B 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 162.365169][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.375344][ T5053] Call Trace: [ 162.378681][ T5053] [ 162.381666][ T5053] dump_stack_lvl+0x216/0x2d0 [ 162.386463][ T5053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.392411][ T5053] dump_stack+0x1e/0x30 [ 162.396765][ T5053] panic+0x4e2/0xcd0 [ 162.400770][ T5053] ? kmsan_get_metadata+0xf1/0x1d0 [ 162.406019][ T5053] kmsan_report+0x2d5/0x2e0 [ 162.410689][ T5053] ? __msan_warning+0x95/0x120 [ 162.415648][ T5053] ? hfs_find_set_zero_bits+0x836/0xca0 [ 162.421368][ T5053] ? hfs_vbm_search_free+0x141/0x530 [ 162.426858][ T5053] ? hfs_extend_file+0x69e/0x19f0 [ 162.431989][ T5053] ? hfs_get_block+0x3d8/0xf50 [ 162.436860][ T5053] ? __block_write_begin_int+0xa6b/0x2f80 [ 162.442694][ T5053] ? block_write_begin+0x143/0x450 [ 162.447914][ T5053] ? cont_write_begin+0xcc0/0x1320 [ 162.453148][ T5053] ? hfs_write_begin+0x9a/0x140 [ 162.458155][ T5053] ? generic_perform_write+0x4ba/0x12e0 [ 162.463819][ T5053] ? __generic_file_write_iter+0x20a/0x460 [ 162.469751][ T5053] ? generic_file_write_iter+0x103/0x5b0 [ 162.475506][ T5053] ? vfs_write+0xb2f/0x1550 [ 162.480118][ T5053] ? ksys_write+0x20f/0x4c0 [ 162.484729][ T5053] ? __x64_sys_write+0x93/0xe0 [ 162.489707][ T5053] ? x64_sys_call+0x3490/0x3c10 [ 162.494735][ T5053] ? do_syscall_64+0xcd/0x1e0 [ 162.499527][ T5053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.505734][ T5053] ? kmsan_internal_poison_memory+0x49/0x90 [ 162.511767][ T5053] ? kmsan_slab_free+0xd6/0x140 [ 162.516809][ T5053] ? kfree+0x23a/0xb70 [ 162.520982][ T5053] ? hfs_find_exit+0x4e/0xb0 [ 162.525703][ T5053] ? hfs_extend_file+0x467/0x19f0 [ 162.530829][ T5053] ? hfs_get_block+0x3d8/0xf50 [ 162.535688][ T5053] ? __block_write_begin_int+0xa6b/0x2f80 [ 162.541519][ T5053] ? block_write_begin+0x143/0x450 [ 162.546736][ T5053] ? cont_write_begin+0xcc0/0x1320 [ 162.551959][ T5053] ? hfs_write_begin+0x9a/0x140 [ 162.556929][ T5053] ? generic_perform_write+0x4ba/0x12e0 [ 162.562679][ T5053] ? __generic_file_write_iter+0x20a/0x460 [ 162.568626][ T5053] ? generic_file_write_iter+0x103/0x5b0 [ 162.574448][ T5053] ? vfs_write+0xb2f/0x1550 [ 162.579089][ T5053] ? ksys_write+0x20f/0x4c0 [ 162.583863][ T5053] ? __x64_sys_write+0x93/0xe0 [ 162.588755][ T5053] ? x64_sys_call+0x3490/0x3c10 [ 162.593719][ T5053] ? do_syscall_64+0xcd/0x1e0 [ 162.598526][ T5053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.604742][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.610155][ T5053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.616183][ T5053] ? kfree+0x1a1/0xb70 [ 162.620368][ T5053] ? filter_irq_stacks+0x164/0x1a0 [ 162.625616][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.630939][ T5053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.636964][ T5053] __msan_warning+0x95/0x120 [ 162.641676][ T5053] hfs_find_set_zero_bits+0x836/0xca0 [ 162.647219][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.652624][ T5053] hfs_vbm_search_free+0x141/0x530 [ 162.657884][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.663313][ T5053] hfs_extend_file+0x69e/0x19f0 [ 162.668375][ T5053] ? __mark_inode_dirty+0x367/0x11d0 [ 162.674064][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.679404][ T5053] hfs_get_block+0x3d8/0xf50 [ 162.684099][ T5053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 162.690057][ T5053] __block_write_begin_int+0xa6b/0x2f80 [ 162.695741][ T5053] ? __pfx_hfs_get_block+0x10/0x10 [ 162.700970][ T5053] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 162.706935][ T5053] block_write_begin+0x143/0x450 [ 162.711990][ T5053] ? __pfx_hfs_get_block+0x10/0x10 [ 162.717227][ T5053] cont_write_begin+0xcc0/0x1320 [ 162.722300][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.727631][ T5053] hfs_write_begin+0x9a/0x140 [ 162.732410][ T5053] ? __pfx_hfs_get_block+0x10/0x10 [ 162.737655][ T5053] ? __pfx_hfs_write_begin+0x10/0x10 [ 162.743105][ T5053] generic_perform_write+0x4ba/0x12e0 [ 162.748733][ T5053] __generic_file_write_iter+0x20a/0x460 [ 162.754574][ T5053] generic_file_write_iter+0x103/0x5b0 [ 162.760178][ T5053] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 162.766877][ T5053] ? kmsan_get_metadata+0x146/0x1d0 [ 162.772214][ T5053] vfs_write+0xb2f/0x1550 [ 162.776678][ T5053] ? __pfx_generic_file_write_iter+0x10/0x10 [ 162.782812][ T5053] ksys_write+0x20f/0x4c0 [ 162.787324][ T5053] __x64_sys_write+0x93/0xe0 [ 162.792029][ T5053] x64_sys_call+0x3490/0x3c10 [ 162.796822][ T5053] do_syscall_64+0xcd/0x1e0 [ 162.801435][ T5053] ? clear_bhb_loop+0x25/0x80 [ 162.806211][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.812237][ T5053] RIP: 0033:0x7f4f0f8fca99 [ 162.816758][ T5053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 162.836548][ T5053] RSP: 002b:00007ffddef9e338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.845067][ T5053] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f4f0f8fca99 [ 162.853134][ T5053] RDX: 00000000fffffdef RSI: 00000000200000c0 RDI: 0000000000000004 [ 162.861244][ T5053] RBP: 00007f4f0f9705f0 R08: 00005555561a74c0 R09: 00005555561a74c0 [ 162.869346][ T5053] R10: 0000000000000272 R11: 0000000000000246 R12: 00007ffddef9e360 [ 162.877657][ T5053] R13: 00007ffddef9e588 R14: 431bde82d7b634db R15: 00007f4f0f94503b [ 162.885726][ T5053] [ 162.888935][ T5053] Kernel Offset: disabled [ 162.893313][ T5053] Rebooting in 86400 seconds..