./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor429700152
<...>
Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts.
execve("./syz-executor429700152", ["./syz-executor429700152"], 0x7ffc06475370 /* 10 vars */) = 0
brk(NULL) = 0x555557348000
brk(0x555557348d00) = 0x555557348d00
arch_prctl(ARCH_SET_FS, 0x555557348380) = 0
set_tid_address(0x555557348650) = 5005
set_robust_list(0x555557348660, 24) = 0
rseq(0x555557348ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor429700152", 4096) = 27
getrandom("\xbc\x49\x18\xe1\x87\xe4\xf1\x06", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555557348d00
brk(0x555557369d00) = 0x555557369d00
brk(0x55555736a000) = 0x55555736a000
mprotect(0x7f055b101000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557348650) = 5006
./strace-static-x86_64: Process 5006 attached
[pid 5006] set_robust_list(0x555557348660, 24) = 0
[pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5006] setpgid(0, 0) = 0
[pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5006] write(3, "1000", 4) = 4
[pid 5006] close(3) = 0
[pid 5006] memfd_create("syzkaller", 0) = 3
[pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0552c4f000
[pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid 5006] munmap(0x7f0552c4f000, 138412032) = 0
[pid 5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5006] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5006] close(3) = 0
[pid 5006] mkdir("./file0", 0777) = 0
[ 143.847297][ T5006] loop0: detected capacity change from 0 to 8192
[ 143.867161][ T5006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 143.880750][ T5006] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 143.890933][ T5006] REISERFS (device loop0): using ordered data mode
[ 143.897668][ T5006] reiserfs: using flush barriers
[ 143.906283][ T5006] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 143.923496][ T5006] REISERFS (device loop0): checking transaction log (loop0)
[ 143.933917][ T5006] REISERFS (device loop0): Using tea hash to sort names
[pid 5006] mount("/dev/loop0", "./file0", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SILENT, "") = 0
[pid 5006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5006] chdir("./file0") = 0
[pid 5006] ioctl(4, LOOP_CLR_FD) = 0
[pid 5006] close(4) = 0
[pid 5006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4
[pid 5006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5
[pid 5006] ftruncate(5, 8421371) = 0
[ 143.942440][ T5006] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 143.980916][ T5006] =====================================================
[ 143.988255][ T5006] BUG: KMSAN: uninit-value in search_by_key+0x3293/0x6780
[ 143.995564][ T5006] search_by_key+0x3293/0x6780
[ 144.000705][ T5006] reiserfs_delete_solid_item+0x4ec/0xe90
[ 144.006638][ T5006] remove_save_link+0x2ed/0x420
[ 144.011786][ T5006] reiserfs_truncate_file+0xd00/0x1b70
[ 144.017424][ T5006] reiserfs_setattr+0x1b79/0x1ee0
[ 144.023152][ T5006] notify_change+0x19fd/0x1af0
[ 144.028201][ T5006] do_truncate+0x22a/0x2a0
[ 144.032798][ T5006] do_sys_ftruncate+0x81c/0xb30
[ 144.037833][ T5006] __x64_sys_ftruncate+0x71/0xa0
[ 144.043129][ T5006] do_syscall_64+0x44/0x110
[ 144.047837][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 144.054523][ T5006]
[ 144.056944][ T5006] Local variable cpu_key created at:
[ 144.062665][ T5006] reiserfs_delete_solid_item+0xbf/0xe90
[ 144.068701][ T5006] remove_save_link+0x2ed/0x420
[ 144.073739][ T5006]
[ 144.076148][ T5006] CPU: 0 PID: 5006 Comm: syz-executor429 Not tainted 6.7.0-rc7-syzkaller #0
[ 144.085330][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 144.095628][ T5006] =====================================================
[ 144.103008][ T5006] Disabling lock debugging due to kernel taint
[ 144.109462][ T5006] Kernel panic - not syncing: kmsan.panic set ...
[ 144.115977][ T5006] CPU: 0 PID: 5006 Comm: syz-executor429 Tainted: G B 6.7.0-rc7-syzkaller #0
[ 144.126385][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 144.136549][ T5006] Call Trace:
[ 144.139930][ T5006] <TASK>
[ 144.142941][ T5006] dump_stack_lvl+0x1bf/0x240
[ 144.147739][ T5006] dump_stack+0x1e/0x20
[ 144.152007][ T5006] panic+0x4de/0xc90
[ 144.156034][ T5006] ? add_taint+0x108/0x1a0
[ 144.160558][ T5006] kmsan_report+0x2d0/0x2d0
[ 144.165191][ T5006] ? __msan_warning+0x96/0x110
[ 144.170092][ T5006] ? search_by_key+0x3293/0x6780
[ 144.175231][ T5006] ? reiserfs_delete_solid_item+0x4ec/0xe90
[ 144.181327][ T5006] ? remove_save_link+0x2ed/0x420
[ 144.186675][ T5006] ? reiserfs_truncate_file+0xd00/0x1b70
[ 144.192440][ T5006] ? reiserfs_setattr+0x1b79/0x1ee0
[ 144.197805][ T5006] ? notify_change+0x19fd/0x1af0
[ 144.202874][ T5006] ? do_truncate+0x22a/0x2a0
[ 144.207630][ T5006] ? do_sys_ftruncate+0x81c/0xb30
[ 144.212957][ T5006] ? __x64_sys_ftruncate+0x71/0xa0
[ 144.218194][ T5006] ? do_syscall_64+0x44/0x110
[ 144.223065][ T5006] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 144.229373][ T5006] ? __find_get_block+0x3bc/0x1d10
[ 144.234893][ T5006] ? rmqueue+0x55/0x12e0
[ 144.239237][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.245672][ T5006] ? bdev_getblk+0xf0/0x1790
[ 144.250354][ T5006] ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 144.256295][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 144.262252][ T5006] __msan_warning+0x96/0x110
[ 144.267091][ T5006] search_by_key+0x3293/0x6780
[ 144.272039][ T5006] ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 144.278071][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.284748][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 144.290790][ T5006] reiserfs_delete_solid_item+0x4ec/0xe90
[ 144.296819][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.303278][ T5006] ? do_journal_begin_r+0x9f/0x1930
[ 144.308760][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 144.314689][ T5006] ? do_journal_begin_r+0x9f/0x1930
[ 144.320257][ T5006] ? filter_irq_stacks+0x60/0x1a0
[ 144.325544][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.331987][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.338406][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 144.344426][ T5006] ? do_journal_begin_r+0x1803/0x1930
[ 144.350016][ T5006] ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 144.356445][ T5006] remove_save_link+0x2ed/0x420
[ 144.361418][ T5006] reiserfs_truncate_file+0xd00/0x1b70
[ 144.367034][ T5006] reiserfs_setattr+0x1b79/0x1ee0
[ 144.372203][ T5006] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 144.378232][ T5006] ? reiserfs_commit_write+0xb60/0xb60
[ 144.383819][ T5006] notify_change+0x19fd/0x1af0
[ 144.388808][ T5006] do_truncate+0x22a/0x2a0
[ 144.393385][ T5006] do_sys_ftruncate+0x81c/0xb30
[ 144.398357][ T5006] __x64_sys_ftruncate+0x71/0xa0
[ 144.403479][ T5006] do_syscall_64+0x44/0x110
[ 144.408319][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 144.414525][ T5006] RIP: 0033:0x7f055b08dad9
[ 144.419086][ T5006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 144.439316][ T5006] RSP: 002b:00007ffca41d8228 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 144.447915][ T5006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f055b08dad9
[ 144.457232][ T5006] RDX: 00007f055b08dad9 RSI: 0000000000000000 RDI: 0000000000000004
[ 144.465407][ T5006] RBP: 00007f055b1015f0 R08: 00005555573494c0 R09: 00005555573494c0
[ 144.473487][ T5006] R10: 00005555573494c0 R11: 0000000000000246 R12: 00007ffca41d8250
[ 144.481691][ T5006] R13: 00007ffca41d8478 R14: 431bde82d7b634db R15: 00007f055b0d603b
[ 144.489927][ T5006] </TASK>
[ 144.493309][ T5006] Kernel Offset: disabled
[ 144.497777][ T5006] Rebooting in 86400 seconds..