./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1013394862 <...> Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. execve("./syz-executor1013394862", ["./syz-executor1013394862"], 0x7fffd1841990 /* 10 vars */) = 0 brk(NULL) = 0x55557e300000 brk(0x55557e300d00) = 0x55557e300d00 arch_prctl(ARCH_SET_FS, 0x55557e300380) = 0 set_tid_address(0x55557e300650) = 5785 set_robust_list(0x55557e300660, 24) = 0 rseq(0x55557e300ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1013394862", 4096) = 28 getrandom("\x59\x98\xa2\xe9\xd0\x6c\xbf\x99", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e300d00 brk(0x55557e321d00) = 0x55557e321d00 brk(0x55557e322000) = 0x55557e322000 mprotect(0x7f0f4866a000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5786 attached [pid 5786] set_robust_list(0x55557e300660, 24 [pid 5785] <... clone resumed>, child_tidptr=0x55557e300650) = 5786 [pid 5786] <... set_robust_list resumed>) = 0 [pid 5786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5786] setpgid(0, 0) = 0 [pid 5786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5786] write(3, "1000", 4) = 4 executing program [pid 5786] close(3) = 0 [pid 5786] write(1, "executing program\n", 18) = 18 [pid 5786] memfd_create("syzkaller", 0) = 3 [pid 5786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f40000000 [pid 5786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5786] munmap(0x7f0f40000000, 138412032) = 0 [pid 5786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5786] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5786] close(3) = 0 [pid 5786] close(4) = 0 [pid 5786] mkdir("./file1", 0777) = 0 [pid 5786] mount("/dev/loop0", "./file1", "hfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_NOATIME|MS_REC, "") = 0 [pid 5786] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5786] chdir("./file1") = 0 [pid 5786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 178.659523][ T5786] loop0: detected capacity change from 0 to 64 [pid 5786] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 4 [ 178.727258][ T5786] ===================================================== [ 178.734676][ T5786] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x836/0xca0 [ 178.742779][ T5786] hfs_find_set_zero_bits+0x836/0xca0 [ 178.748337][ T5786] hfs_vbm_search_free+0x141/0x530 [ 178.753714][ T5786] hfs_extend_file+0x69e/0x19f0 [ 178.758764][ T5786] hfs_get_block+0x3d8/0xf50 [ 178.763619][ T5786] __block_write_begin_int+0xa6b/0x2f80 [ 178.769345][ T5786] cont_write_begin+0xf82/0x1940 [ 178.774548][ T5786] hfs_write_begin+0x85/0x120 [ 178.779418][ T5786] generic_perform_write+0x4d8/0x1080 [ 178.785083][ T5786] __generic_file_write_iter+0x207/0x460 [ 178.790927][ T5786] generic_file_write_iter+0x10c/0x940 [ 178.797099][ T5786] vfs_write+0xb34/0x1540 [ 178.801679][ T5786] ksys_write+0x240/0x4b0 [ 178.806105][ T5786] __x64_sys_write+0x93/0xe0 [ 178.810832][ T5786] x64_sys_call+0x3161/0x3c30 [ 178.815706][ T5786] do_syscall_64+0xcd/0x1e0 [ 178.820352][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.826461][ T5786] [ 178.828875][ T5786] Uninit was created at: [ 178.833455][ T5786] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 178.839014][ T5786] hfs_mdb_get+0x1bce/0x28a0 [ 178.843824][ T5786] hfs_fill_super+0x424/0xb00 [ 178.848634][ T5786] get_tree_bdev_flags+0x6ec/0x910 [ 178.853947][ T5786] get_tree_bdev+0x37/0x50 [ 178.858497][ T5786] hfs_get_tree+0x34/0x40 [ 178.863156][ T5786] vfs_get_tree+0xb1/0x5a0 [ 178.867713][ T5786] do_new_mount+0x71f/0x15e0 [ 178.872575][ T5786] path_mount+0x742/0x1f10 [ 178.877136][ T5786] __se_sys_mount+0x71f/0x800 [ 178.881994][ T5786] __x64_sys_mount+0xe4/0x150 [ 178.886849][ T5786] x64_sys_call+0x39bf/0x3c30 [ 178.891825][ T5786] do_syscall_64+0xcd/0x1e0 [ 178.896456][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.902567][ T5786] [ 178.904976][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor101 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 178.916309][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.926523][ T5786] ===================================================== [ 178.933628][ T5786] Disabling lock debugging due to kernel taint [ 178.939863][ T5786] Kernel panic - not syncing: kmsan.panic set ... [ 178.946462][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor101 Tainted: G B 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 178.959170][ T5786] Tainted: [B]=BAD_PAGE [ 178.963372][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.973504][ T5786] Call Trace: [ 178.976844][ T5786] [ 178.979834][ T5786] dump_stack_lvl+0x216/0x2d0 [ 178.984613][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 178.990544][ T5786] dump_stack+0x1e/0x24 [ 178.994778][ T5786] panic+0x4e2/0xcf0 [ 178.998809][ T5786] ? kmsan_get_metadata+0x81/0x1c0 [ 179.004038][ T5786] kmsan_report+0x2c7/0x2d0 [ 179.008638][ T5786] ? stack_depot_save_flags+0x2c/0x750 [ 179.014230][ T5786] ? __msan_warning+0x95/0x120 [ 179.019093][ T5786] ? hfs_find_set_zero_bits+0x836/0xca0 [ 179.024757][ T5786] ? hfs_vbm_search_free+0x141/0x530 [ 179.030153][ T5786] ? hfs_extend_file+0x69e/0x19f0 [ 179.035308][ T5786] ? hfs_get_block+0x3d8/0xf50 [ 179.040243][ T5786] ? __block_write_begin_int+0xa6b/0x2f80 [ 179.046103][ T5786] ? cont_write_begin+0xf82/0x1940 [ 179.051406][ T5786] ? hfs_write_begin+0x85/0x120 [ 179.056371][ T5786] ? generic_perform_write+0x4d8/0x1080 [ 179.062040][ T5786] ? __generic_file_write_iter+0x207/0x460 [ 179.067979][ T5786] ? generic_file_write_iter+0x10c/0x940 [ 179.073736][ T5786] ? vfs_write+0xb34/0x1540 [ 179.078322][ T5786] ? ksys_write+0x240/0x4b0 [ 179.082913][ T5786] ? __x64_sys_write+0x93/0xe0 [ 179.087765][ T5786] ? x64_sys_call+0x3161/0x3c30 [ 179.092711][ T5786] ? do_syscall_64+0xcd/0x1e0 [ 179.097468][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.103673][ T5786] ? kmsan_slab_free+0xd0/0x140 [ 179.108671][ T5786] ? kfree+0x240/0xdb0 [ 179.112846][ T5786] ? hfs_find_exit+0x4e/0xb0 [ 179.117529][ T5786] ? hfs_extend_file+0x467/0x19f0 [ 179.122662][ T5786] ? hfs_get_block+0x3d8/0xf50 [ 179.127531][ T5786] ? __block_write_begin_int+0xa6b/0x2f80 [ 179.133368][ T5786] ? cont_write_begin+0xf82/0x1940 [ 179.138591][ T5786] ? hfs_write_begin+0x85/0x120 [ 179.143562][ T5786] ? generic_perform_write+0x4d8/0x1080 [ 179.149256][ T5786] ? __generic_file_write_iter+0x207/0x460 [ 179.155247][ T5786] ? generic_file_write_iter+0x10c/0x940 [ 179.160997][ T5786] ? vfs_write+0xb34/0x1540 [ 179.165589][ T5786] ? ksys_write+0x240/0x4b0 [ 179.170173][ T5786] ? __x64_sys_write+0x93/0xe0 [ 179.175021][ T5786] ? x64_sys_call+0x3161/0x3c30 [ 179.179990][ T5786] ? do_syscall_64+0xcd/0x1e0 [ 179.184758][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.190942][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.196247][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.202159][ T5786] ? kfree+0x1a7/0xdb0 [ 179.206366][ T5786] ? filter_irq_stacks+0x60/0x1a0 [ 179.211513][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.216830][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.222804][ T5786] __msan_warning+0x95/0x120 [ 179.227488][ T5786] hfs_find_set_zero_bits+0x836/0xca0 [ 179.232985][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.238298][ T5786] hfs_vbm_search_free+0x141/0x530 [ 179.243516][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.248823][ T5786] hfs_extend_file+0x69e/0x19f0 [ 179.253804][ T5786] ? __mark_inode_dirty+0x35d/0x11a0 [ 179.259201][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.264504][ T5786] hfs_get_block+0x3d8/0xf50 [ 179.269218][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.275158][ T5786] __block_write_begin_int+0xa6b/0x2f80 [ 179.280883][ T5786] ? __pfx_hfs_get_block+0x10/0x10 [ 179.286161][ T5786] cont_write_begin+0xf82/0x1940 [ 179.291206][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.296615][ T5786] hfs_write_begin+0x85/0x120 [ 179.301493][ T5786] ? __pfx_hfs_get_block+0x10/0x10 [ 179.306766][ T5786] ? __pfx_hfs_write_begin+0x10/0x10 [ 179.312175][ T5786] generic_perform_write+0x4d8/0x1080 [ 179.317691][ T5786] __generic_file_write_iter+0x207/0x460 [ 179.323456][ T5786] generic_file_write_iter+0x10c/0x940 [ 179.329046][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.334385][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.340326][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.345637][ T5786] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 179.351547][ T5786] ? vfs_write+0x53b/0x1540 [ 179.356134][ T5786] ? filter_irq_stacks+0x60/0x1a0 [ 179.361289][ T5786] ? stack_depot_save_flags+0x2c/0x750 [ 179.366928][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.372245][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.377542][ T5786] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 179.384008][ T5786] vfs_write+0xb34/0x1540 [ 179.388430][ T5786] ? __pfx_generic_file_write_iter+0x10/0x10 [ 179.394540][ T5786] ksys_write+0x240/0x4b0 [ 179.398974][ T5786] ? kmsan_get_metadata+0x13e/0x1c0 [ 179.404356][ T5786] __x64_sys_write+0x93/0xe0 [ 179.409036][ T5786] x64_sys_call+0x3161/0x3c30 [ 179.413815][ T5786] do_syscall_64+0xcd/0x1e0 [ 179.418446][ T5786] ? clear_bhb_loop+0x25/0x80 [ 179.423401][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.429422][ T5786] RIP: 0033:0x7f0f485f6ad9 [ 179.433919][ T5786] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 179.453635][ T5786] RSP: 002b:00007ffd9a807cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.462157][ T5786] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f0f485f6ad9 [ 179.470209][ T5786] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 179.478278][ T5786] RBP: 00007f0f4866a5f0 R08: 000055557e3014c0 R09: 000055557e3014c0 [ 179.486374][ T5786] R10: 0000000000000272 R11: 0000000000000246 R12: 00007ffd9a807d20 [ 179.494419][ T5786] R13: 00007ffd9a807f48 R14: 431bde82d7b634db R15: 00007f0f4863f03b [ 179.502485][ T5786] [ 179.505845][ T5786] Kernel Offset: disabled [ 179.510226][ T5786] Rebooting in 86400 seconds..