./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor716997353
<...>
Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts.
execve("./syz-executor716997353", ["./syz-executor716997353"], 0x7fffd6560730 /* 10 vars */) = 0
brk(NULL) = 0x55558e805000
brk(0x55558e805d00) = 0x55558e805d00
arch_prctl(ARCH_SET_FS, 0x55558e805380) = 0
set_tid_address(0x55558e805650) = 5174
set_robust_list(0x55558e805660, 24) = 0
rseq(0x55558e805ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor716997353", 4096) = 27
getrandom("\xdb\x71\x02\xab\x9f\x2d\xa6\x12", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558e805d00
brk(0x55558e826d00) = 0x55558e826d00
brk(0x55558e827000) = 0x55558e827000
mprotect(0x7f41dfb88000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558e805650) = 5175
./strace-static-x86_64: Process 5175 attached
[pid 5175] set_robust_list(0x55558e805660, 24) = 0
[pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5175] setpgid(0, 0) = 0
[pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5175] write(3, "1000", 4) = 4
[pid 5175] close(3) = 0
[pid 5175] write(1, "executing program\n", 18executing program
) = 18
[pid 5175] memfd_create("syzkaller", 0) = 3
[pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41d7600000
[pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid 5175] munmap(0x7f41d7600000, 138412032) = 0
[pid 5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5175] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5175] close(3) = 0
[pid 5175] close(4) = 0
[pid 5175] mkdir("./file0", 0777) = 0
[pid 5175] mount("/dev/loop0", "./file0", "hfsplus", 0, "nls=iso8859-13,gid=0x0000000000000000,gid=0x0000000000000000,barrier,nobarrier,") = 0
[pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5175] chdir("./file0") = 0
[pid 5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 160.474393][ T5175] loop0: detected capacity change from 0 to 1024
[pid 5175] mkdirat(AT_FDCWD, "./file6", 000) = 0
[ 160.538804][ T5175] =====================================================
[ 160.546173][ T5175] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x10f0/0x1340
[ 160.554193][ T5175] hfsplus_delete_cat+0x10f0/0x1340
[ 160.559613][ T5175] hfsplus_rmdir+0x140/0x2e0
[ 160.564639][ T5175] vfs_rmdir+0x5bf/0x800
[ 160.569064][ T5175] do_rmdir+0x630/0x8b0
[ 160.573519][ T5175] __x64_sys_unlinkat+0x1ba/0x220
[ 160.578716][ T5175] x64_sys_call+0x2981/0x3c10
[ 160.583620][ T5175] do_syscall_64+0xcd/0x1e0
[ 160.588333][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.594507][ T5175]
[ 160.596917][ T5175] Uninit was stored to memory at:
[ 160.602243][ T5175] hfsplus_create_cat+0x17f6/0x1800
[ 160.607889][ T5175] hfsplus_mknod+0x201/0x560
[ 160.613039][ T5175] hfsplus_mkdir+0x58/0x70
[ 160.617634][ T5175] vfs_mkdir+0x4a0/0x780
[ 160.622127][ T5175] do_mkdirat+0x529/0x810
[ 160.626615][ T5175] __x64_sys_mkdirat+0xc6/0x120
[ 160.631826][ T5175] x64_sys_call+0x39e5/0x3c10
[ 160.636672][ T5175] do_syscall_64+0xcd/0x1e0
[ 160.641405][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.647500][ T5175]
[ 160.649901][ T5175] Uninit was stored to memory at:
[ 160.655718][ T5175] hfsplus_create_cat+0x17f6/0x1800
[ 160.661199][ T5175] hfsplus_fill_super+0x227f/0x2700
[ 160.666557][ T5175] mount_bdev+0x39a/0x520
[ 160.671105][ T5175] hfsplus_mount+0x4d/0x60
[ 160.675788][ T5175] legacy_get_tree+0x114/0x290
[ 160.680791][ T5175] vfs_get_tree+0xa7/0x570
[ 160.685379][ T5175] do_new_mount+0x71f/0x15e0
[ 160.690239][ T5175] path_mount+0x742/0x1f10
[ 160.694790][ T5175] __se_sys_mount+0x722/0x810
[ 160.699553][ T5175] __x64_sys_mount+0xe4/0x150
[ 160.704413][ T5175] x64_sys_call+0xed5/0x3c10
[ 160.709172][ T5175] do_syscall_64+0xcd/0x1e0
[ 160.713913][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.720098][ T5175]
[ 160.722481][ T5175] Uninit was created at:
[ 160.726847][ T5175] __alloc_pages_noprof+0x9d6/0xe70
[ 160.732252][ T5175] allocate_slab+0x203/0x1220
[ 160.737114][ T5175] ___slab_alloc+0x12ef/0x35e0
[ 160.742134][ T5175] kmem_cache_alloc_lru_noprof+0x584/0xb30
[ 160.748116][ T5175] hfsplus_alloc_inode+0x5a/0xd0
[ 160.753283][ T5175] alloc_inode+0x86/0x460
[ 160.757779][ T5175] iget_locked+0x2a7/0xf20
[ 160.762405][ T5175] hfsplus_iget+0x59/0xaf0
[ 160.766968][ T5175] hfsplus_btree_open+0x13e/0x1d00
[ 160.772323][ T5175] hfsplus_fill_super+0x1113/0x2700
[ 160.777670][ T5175] mount_bdev+0x39a/0x520
[ 160.782188][ T5175] hfsplus_mount+0x4d/0x60
[ 160.786765][ T5175] legacy_get_tree+0x114/0x290
[ 160.791790][ T5175] vfs_get_tree+0xa7/0x570
[ 160.796437][ T5175] do_new_mount+0x71f/0x15e0
[ 160.801310][ T5175] path_mount+0x742/0x1f10
[ 160.805862][ T5175] __se_sys_mount+0x722/0x810
[ 160.810751][ T5175] __x64_sys_mount+0xe4/0x150
[ 160.815591][ T5175] x64_sys_call+0xed5/0x3c10
[ 160.820463][ T5175] do_syscall_64+0xcd/0x1e0
[ 160.825152][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.831419][ T5175]
[ 160.833852][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz-executor716 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0
[ 160.845029][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 160.855337][ T5175] =====================================================
[ 160.862493][ T5175] Disabling lock debugging due to kernel taint
[ 160.868733][ T5175] Kernel panic - not syncing: kmsan.panic set ...
[ 160.875214][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz-executor716 Tainted: G B 6.10.0-syzkaller-12562-g1722389b0d86 #0
[ 160.887570][ T5175] Tainted: [B]=BAD_PAGE
[ 160.891805][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 160.901938][ T5175] Call Trace:
[ 160.905274][ T5175] <TASK>
[ 160.908255][ T5175] dump_stack_lvl+0x216/0x2d0
[ 160.913062][ T5175] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 160.918995][ T5175] dump_stack+0x1e/0x30
[ 160.923289][ T5175] panic+0x4e2/0xcd0
[ 160.927353][ T5175] ? kmsan_get_metadata+0xf1/0x1c0
[ 160.932587][ T5175] kmsan_report+0x2c7/0x2d0
[ 160.937215][ T5175] ? __msan_warning+0x95/0x120
[ 160.942079][ T5175] ? hfsplus_delete_cat+0x10f0/0x1340
[ 160.947570][ T5175] ? hfsplus_rmdir+0x140/0x2e0
[ 160.952454][ T5175] ? vfs_rmdir+0x5bf/0x800
[ 160.956984][ T5175] ? do_rmdir+0x630/0x8b0
[ 160.961422][ T5175] ? __x64_sys_unlinkat+0x1ba/0x220
[ 160.966714][ T5175] ? x64_sys_call+0x2981/0x3c10
[ 160.971671][ T5175] ? do_syscall_64+0xcd/0x1e0
[ 160.976461][ T5175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.982656][ T5175] ? hfsplus_bnode_dump+0xca0/0xcd0
[ 160.987945][ T5175] ? set_page_dirty+0xa5/0x220
[ 160.992814][ T5175] ? kmsan_get_metadata+0x13e/0x1c0
[ 160.998136][ T5175] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 161.004157][ T5175] ? hfsplus_brec_remove+0x91d/0x9d0
[ 161.009548][ T5175] ? kmsan_get_metadata+0x13e/0x1c0
[ 161.014862][ T5175] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 161.020794][ T5175] __msan_warning+0x95/0x120
[ 161.025488][ T5175] hfsplus_delete_cat+0x10f0/0x1340
[ 161.030819][ T5175] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 161.036751][ T5175] ? kmsan_get_metadata+0x13e/0x1c0
[ 161.042080][ T5175] hfsplus_rmdir+0x140/0x2e0
[ 161.046807][ T5175] ? __pfx_hfsplus_rmdir+0x10/0x10
[ 161.052107][ T5175] vfs_rmdir+0x5bf/0x800
[ 161.056445][ T5175] do_rmdir+0x630/0x8b0
[ 161.060711][ T5175] __x64_sys_unlinkat+0x1ba/0x220
[ 161.065837][ T5175] x64_sys_call+0x2981/0x3c10
[ 161.070625][ T5175] do_syscall_64+0xcd/0x1e0
[ 161.075241][ T5175] ? clear_bhb_loop+0x25/0x80
[ 161.080023][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 161.086107][ T5175] RIP: 0033:0x7f41dfb13dd9
[ 161.090698][ T5175] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 161.110468][ T5175] RSP: 002b:00007ffcd2826258 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[ 161.118985][ T5175] RAX: ffffffffffffffda RBX: 0036656c69662f2e RCX: 00007f41dfb13dd9
[ 161.127040][ T5175] RDX: 0000000000000200 RSI: 00000000200001c0 RDI: 00000000ffffff9c
[ 161.135089][ T5175] RBP: 00007f41dfb885f0 R08: 000055558e8064c0 R09: 000055558e8064c0
[ 161.143144][ T5175] R10: 00000000000005db R11: 0000000000000246 R12: 00007ffcd2826280
[ 161.151194][ T5175] R13: 00007ffcd28264a8 R14: 431bde82d7b634db R15: 00007f41dfb5d03b
[ 161.159261][ T5175] </TASK>
[ 161.162595][ T5175] Kernel Offset: disabled
[ 161.166994][ T5175] Rebooting in 86400 seconds..