./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2463273892 <...> Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. execve("./syz-executor2463273892", ["./syz-executor2463273892"], 0x7ffd012f97a0 /* 10 vars */) = 0 brk(NULL) = 0x555578f66000 brk(0x555578f66d00) = 0x555578f66d00 arch_prctl(ARCH_SET_FS, 0x555578f66380) = 0 set_tid_address(0x555578f66650) = 5786 set_robust_list(0x555578f66660, 24) = 0 rseq(0x555578f66ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2463273892", 4096) = 28 getrandom("\x50\x09\xc7\x68\x8e\x31\xf7\x45", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555578f66d00 brk(0x555578f87d00) = 0x555578f87d00 brk(0x555578f88000) = 0x555578f88000 mprotect(0x7f90785c9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555578f66650) = 5787 ./strace-static-x86_64: Process 5787 attached [pid 5787] set_robust_list(0x555578f66660, 24) = 0 [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5787] setpgid(0, 0) = 0 [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5787] write(3, "1000", 4) = 4 [pid 5787] close(3) = 0 [pid 5787] write(1, "executing program\n", 18executing program ) = 18 [pid 5787] memfd_create("syzkaller", 0) = 3 [pid 5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9070000000 [pid 5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5787] munmap(0x7f9070000000, 138412032) = 0 [pid 5787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5787] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5787] close(3) = 0 [pid 5787] close(4) = 0 [pid 5787] mkdir("./file1", 0777) = 0 [pid 5787] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_SYNCHRONOUS|MS_NODIRATIME|MS_REC, "") = 0 [pid 5787] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5787] chdir("./file1") = 0 [pid 5787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 204.282622][ T5787] loop0: detected capacity change from 0 to 1024 [ 204.344345][ T5787] ===================================================== [ 204.351726][ T5787] BUG: KMSAN: uninit-value in hfsplus_attr_bin_cmp_key+0xf1/0x190 [ 204.360091][ T5787] hfsplus_attr_bin_cmp_key+0xf1/0x190 [ 204.365925][ T5787] hfs_find_rec_by_key+0xb1/0x240 [ 204.371218][ T5787] __hfsplus_brec_find+0x26f/0x7b0 [ 204.376722][ T5787] hfsplus_brec_find+0x445/0x970 [ 204.381922][ T5787] hfsplus_find_attr+0x30c/0x390 [ 204.387302][ T5787] __hfsplus_getxattr+0x376/0xe40 [ 204.392603][ T5787] hfsplus_getxattr+0x123/0x1e0 [ 204.397935][ T5787] hfsplus_security_getxattr+0x53/0x70 [ 204.403683][ T5787] vfs_getxattr_alloc+0x77a/0xc10 [ 204.409114][ T5787] ima_read_xattr+0x51/0xe0 [ 204.413970][ T5787] process_measurement+0x26e5/0x3f30 [ 204.419444][ T5787] ima_file_check+0xb4/0x100 [ 204.424508][ T5787] security_file_post_open+0xc6/0x540 [ 204.430157][ T5787] path_openat+0x58cc/0x6200 [ 204.435044][ T5787] do_filp_open+0x20e/0x590 [ 204.439745][ T5787] do_sys_openat2+0x1bf/0x2f0 [ 204.444717][ T5787] __x64_sys_openat+0x2a1/0x310 [ 204.449824][ T5787] x64_sys_call+0x120e/0x3ba0 [ 204.454916][ T5787] do_syscall_64+0xcd/0x1e0 [ 204.459671][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.465932][ T5787] [ 204.468360][ T5787] Uninit was created at: [ 204.472881][ T5787] __kmalloc_noprof+0x661/0xf30 [ 204.478099][ T5787] hfsplus_find_init+0x95/0x1d0 [ 204.483176][ T5787] __hfsplus_getxattr+0x2c6/0xe40 [ 204.488519][ T5787] hfsplus_getxattr+0x123/0x1e0 [ 204.493621][ T5787] hfsplus_security_getxattr+0x53/0x70 [ 204.499448][ T5787] vfs_getxattr_alloc+0x77a/0xc10 [ 204.504781][ T5787] ima_read_xattr+0x51/0xe0 [ 204.509497][ T5787] process_measurement+0x26e5/0x3f30 [ 204.515061][ T5787] ima_file_check+0xb4/0x100 [ 204.519908][ T5787] security_file_post_open+0xc6/0x540 [ 204.525674][ T5787] path_openat+0x58cc/0x6200 [ 204.530522][ T5787] do_filp_open+0x20e/0x590 [ 204.535390][ T5787] do_sys_openat2+0x1bf/0x2f0 [ 204.540248][ T5787] __x64_sys_openat+0x2a1/0x310 [ 204.545348][ T5787] x64_sys_call+0x120e/0x3ba0 [ 204.550244][ T5787] do_syscall_64+0xcd/0x1e0 [ 204.555115][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.561220][ T5787] [ 204.563638][ T5787] CPU: 0 UID: 0 PID: 5787 Comm: syz-executor246 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 204.575299][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.585587][ T5787] ===================================================== [ 204.592655][ T5787] Disabling lock debugging due to kernel taint [ 204.599051][ T5787] Kernel panic - not syncing: kmsan.panic set ... [ 204.605623][ T5787] CPU: 0 UID: 0 PID: 5787 Comm: syz-executor246 Tainted: G B 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 204.618588][ T5787] Tainted: [B]=BAD_PAGE [ 204.622861][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.633119][ T5787] Call Trace: [ 204.636800][ T5787] [ 204.639836][ T5787] dump_stack_lvl+0x216/0x2d0 [ 204.646755][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.652903][ T5787] dump_stack+0x1e/0x30 [ 204.657253][ T5787] panic+0x4e2/0xcf0 [ 204.661348][ T5787] ? kmsan_get_metadata+0x121/0x1c0 [ 204.667039][ T5787] kmsan_report+0x2c7/0x2d0 [ 204.671719][ T5787] ? folio_wait_bit_common+0xbac/0xcf0 [ 204.677347][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.682728][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.688096][ T5787] ? __msan_warning+0x95/0x120 [ 204.693019][ T5787] ? hfsplus_attr_bin_cmp_key+0xf1/0x190 [ 204.698917][ T5787] ? hfs_find_rec_by_key+0xb1/0x240 [ 204.704304][ T5787] ? __hfsplus_brec_find+0x26f/0x7b0 [ 204.709788][ T5787] ? hfsplus_brec_find+0x445/0x970 [ 204.715094][ T5787] ? hfsplus_find_attr+0x30c/0x390 [ 204.720414][ T5787] ? __hfsplus_getxattr+0x376/0xe40 [ 204.725998][ T5787] ? hfsplus_getxattr+0x123/0x1e0 [ 204.731315][ T5787] ? hfsplus_security_getxattr+0x53/0x70 [ 204.737312][ T5787] ? vfs_getxattr_alloc+0x77a/0xc10 [ 204.743796][ T5787] ? ima_read_xattr+0x51/0xe0 [ 204.749424][ T5787] ? process_measurement+0x26e5/0x3f30 [ 204.756215][ T5787] ? ima_file_check+0xb4/0x100 [ 204.761354][ T5787] ? security_file_post_open+0xc6/0x540 [ 204.767120][ T5787] ? path_openat+0x58cc/0x6200 [ 204.772098][ T5787] ? do_filp_open+0x20e/0x590 [ 204.776917][ T5787] ? do_sys_openat2+0x1bf/0x2f0 [ 204.781903][ T5787] ? __x64_sys_openat+0x2a1/0x310 [ 204.787069][ T5787] ? x64_sys_call+0x120e/0x3ba0 [ 204.792166][ T5787] ? do_syscall_64+0xcd/0x1e0 [ 204.797024][ T5787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.803450][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.808842][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.814862][ T5787] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 204.820558][ T5787] ? filter_irq_stacks+0x60/0x1a0 [ 204.825791][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.831255][ T5787] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 204.837789][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.843248][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.848661][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.854744][ T5787] __msan_warning+0x95/0x120 [ 204.859498][ T5787] hfsplus_attr_bin_cmp_key+0xf1/0x190 [ 204.865224][ T5787] hfs_find_rec_by_key+0xb1/0x240 [ 204.870415][ T5787] ? __pfx_hfsplus_attr_bin_cmp_key+0x10/0x10 [ 204.876669][ T5787] __hfsplus_brec_find+0x26f/0x7b0 [ 204.882034][ T5787] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 204.887846][ T5787] hfsplus_brec_find+0x445/0x970 [ 204.892945][ T5787] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 204.898762][ T5787] hfsplus_find_attr+0x30c/0x390 [ 204.903914][ T5787] __hfsplus_getxattr+0x376/0xe40 [ 204.909187][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.915185][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.920561][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.926553][ T5787] ? strcpy+0x53/0xc0 [ 204.930720][ T5787] hfsplus_getxattr+0x123/0x1e0 [ 204.935837][ T5787] hfsplus_security_getxattr+0x53/0x70 [ 204.941505][ T5787] ? __pfx_hfsplus_security_getxattr+0x10/0x10 [ 204.947954][ T5787] vfs_getxattr_alloc+0x77a/0xc10 [ 204.953265][ T5787] ima_read_xattr+0x51/0xe0 [ 204.958038][ T5787] process_measurement+0x26e5/0x3f30 [ 204.963495][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.968912][ T5787] ? filter_irq_stacks+0x164/0x1a0 [ 204.974197][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.979605][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 204.985606][ T5787] ? end_current_label_crit_section+0x124/0x2a0 [ 204.992040][ T5787] ? kmsan_get_metadata+0x13e/0x1c0 [ 204.997438][ T5787] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 205.003449][ T5787] ima_file_check+0xb4/0x100 [ 205.008226][ T5787] security_file_post_open+0xc6/0x540 [ 205.013846][ T5787] path_openat+0x58cc/0x6200 [ 205.018660][ T5787] do_filp_open+0x20e/0x590 [ 205.023379][ T5787] do_sys_openat2+0x1bf/0x2f0 [ 205.028438][ T5787] __x64_sys_openat+0x2a1/0x310 [ 205.033528][ T5787] x64_sys_call+0x120e/0x3ba0 [ 205.038362][ T5787] do_syscall_64+0xcd/0x1e0 [ 205.043040][ T5787] ? clear_bhb_loop+0x25/0x80 [ 205.047907][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.054050][ T5787] RIP: 0033:0x7f9078555a99 [ 205.058608][ T5787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 205.078552][ T5787] RSP: 002b:00007ffe902066f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.087143][ T5787] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9078555a99 [ 205.095244][ T5787] RDX: 000000000000275a RSI: 0000000020000040 RDI: 00000000ffffff9c [ 205.103358][ T5787] RBP: 00007f90785c95f0 R08: 00000000000006a4 R09: 0000555578f674c0 [ 205.111489][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe90206720 [ 205.119615][ T5787] R13: 00007ffe90206948 R14: 431bde82d7b634db R15: 00007f907859e03b [ 205.127760][ T5787] [ 205.131278][ T5787] Kernel Offset: disabled [ 205.135706][ T5787] Rebooting in 86400 seconds..