./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor542873332 <...> Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. execve("./syz-executor542873332", ["./syz-executor542873332"], 0x7ffc1cffed50 /* 10 vars */) = 0 brk(NULL) = 0x55558f834000 brk(0x55558f834d00) = 0x55558f834d00 arch_prctl(ARCH_SET_FS, 0x55558f834380) = 0 set_tid_address(0x55558f834650) = 5078 set_robust_list(0x55558f834660, 24) = 0 rseq(0x55558f834ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor542873332", 4096) = 27 getrandom("\x46\x53\xce\xde\x01\x88\x75\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f834d00 brk(0x55558f855d00) = 0x55558f855d00 brk(0x55558f856000) = 0x55558f856000 mprotect(0x7f0fdc703000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0fd4200000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f0fd4200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME|MS_I_VERSION, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 56.838030][ T5078] loop0: detected capacity change from 0 to 1024 [ 56.903907][ T5078] [ 56.906257][ T5078] ============================================ [ 56.912383][ T5078] WARNING: possible recursive locking detected [ 56.918512][ T5078] 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 Not tainted [ 56.925594][ T5078] -------------------------------------------- [ 56.931721][ T5078] syz-executor542/5078 is trying to acquire lock: [ 56.938118][ T5078] ffff8880464b9548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0 [ 56.948993][ T5078] [ 56.948993][ T5078] but task is already holding lock: [ 56.956337][ T5078] ffff888022768108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 56.967462][ T5078] [ 56.967462][ T5078] other info that might help us debug this: [ 56.975511][ T5078] Possible unsafe locking scenario: [ 56.975511][ T5078] [ 56.982942][ T5078] CPU0 [ 56.986216][ T5078] ---- [ 56.989479][ T5078] lock(&HFSPLUS_I(inode)->extents_lock); [ 56.995274][ T5078] lock(&HFSPLUS_I(inode)->extents_lock); [ 57.001067][ T5078] [ 57.001067][ T5078] *** DEADLOCK *** [ 57.001067][ T5078] [ 57.009197][ T5078] May be due to missing lock nesting notation [ 57.009197][ T5078] [ 57.017498][ T5078] 4 locks held by syz-executor542/5078: [ 57.023026][ T5078] #0: ffff888021eec420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 57.032165][ T5078] #1: ffff888022768300 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: do_truncate+0x20c/0x310 [ 57.042514][ T5078] #2: ffff888022768108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 57.054070][ T5078] #3: ffff88802e2840f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbb/0x4e0 [ 57.064071][ T5078] [ 57.064071][ T5078] stack backtrace: [ 57.069954][ T5078] CPU: 1 PID: 5078 Comm: syz-executor542 Not tainted 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 [ 57.080436][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 57.090592][ T5078] Call Trace: [ 57.093869][ T5078] [ 57.096792][ T5078] dump_stack_lvl+0x241/0x360 [ 57.101493][ T5078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.106804][ T5078] ? print_deadlock_bug+0x479/0x620 [ 57.112013][ T5078] validate_chain+0x15d3/0x5900 [ 57.116872][ T5078] ? stack_trace_save+0x118/0x1d0 [ 57.121892][ T5078] ? __pfx_stack_trace_save+0x10/0x10 [ 57.127251][ T5078] ? check_noncircular+0x259/0x4a0 [ 57.132444][ T5078] ? __pfx_validate_chain+0x10/0x10 [ 57.137630][ T5078] ? __pfx_check_noncircular+0x10/0x10 [ 57.143082][ T5078] ? lockdep_unlock+0x16a/0x300 [ 57.147919][ T5078] ? __pfx_lockdep_unlock+0x10/0x10 [ 57.153105][ T5078] ? add_lock_to_list+0x1de/0x2e0 [ 57.158117][ T5078] ? look_up_lock_class+0x77/0x160 [ 57.163217][ T5078] ? register_lock_class+0x102/0x980 [ 57.168486][ T5078] ? validate_chain+0x15b1/0x5900 [ 57.173498][ T5078] ? is_bpf_text_address+0x26/0x2a0 [ 57.178687][ T5078] ? __pfx_register_lock_class+0x10/0x10 [ 57.184310][ T5078] ? mark_lock+0x9a/0x350 [ 57.188627][ T5078] __lock_acquire+0x1346/0x1fd0 [ 57.193473][ T5078] lock_acquire+0x1ed/0x550 [ 57.197960][ T5078] ? hfsplus_get_block+0x383/0x14f0 [ 57.203146][ T5078] ? __pfx_lock_acquire+0x10/0x10 [ 57.208160][ T5078] ? __pfx___might_resched+0x10/0x10 [ 57.213430][ T5078] ? create_empty_buffers+0x3a/0x740 [ 57.218706][ T5078] ? __pfx_register_lock_class+0x10/0x10 [ 57.224323][ T5078] ? do_read_cache_page+0x30/0x200 [ 57.229419][ T5078] ? hfsplus_free_extents+0x17a/0xae0 [ 57.234774][ T5078] ? hfsplus_file_truncate+0x7d0/0xb50 [ 57.240220][ T5078] __mutex_lock+0x136/0xd70 [ 57.244715][ T5078] ? hfsplus_get_block+0x383/0x14f0 [ 57.249901][ T5078] ? hfsplus_get_block+0x383/0x14f0 [ 57.255088][ T5078] ? __pfx___mutex_lock+0x10/0x10 [ 57.260110][ T5078] hfsplus_get_block+0x383/0x14f0 [ 57.265126][ T5078] ? __pfx_hfsplus_get_block+0x10/0x10 [ 57.270575][ T5078] ? _raw_spin_unlock+0x28/0x50 [ 57.275415][ T5078] ? create_empty_buffers+0x53e/0x740 [ 57.280781][ T5078] block_read_full_folio+0x42e/0xe10 [ 57.286149][ T5078] ? __pfx_hfsplus_get_block+0x10/0x10 [ 57.291594][ T5078] ? __pfx_block_read_full_folio+0x10/0x10 [ 57.297407][ T5078] ? __pfx_lru_add_fn+0x10/0x10 [ 57.302249][ T5078] ? folio_add_lru+0x4b3/0x9e0 [ 57.307096][ T5078] ? folio_add_lru+0x27b/0x9e0 [ 57.311848][ T5078] filemap_read_folio+0x1a0/0x790 [ 57.316862][ T5078] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 57.322397][ T5078] ? __pfx_filemap_read_folio+0x10/0x10 [ 57.327929][ T5078] ? __filemap_get_folio+0x926/0xbb0 [ 57.333375][ T5078] do_read_cache_folio+0x134/0x820 [ 57.338474][ T5078] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 57.344013][ T5078] do_read_cache_page+0x30/0x200 [ 57.348937][ T5078] hfsplus_block_free+0x128/0x4e0 [ 57.353949][ T5078] ? hfsplus_find_init+0x85/0x1c0 [ 57.358965][ T5078] hfsplus_free_extents+0x17a/0xae0 [ 57.364352][ T5078] hfsplus_file_truncate+0x7d0/0xb50 [ 57.369662][ T5078] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 57.375459][ T5078] ? unmap_mapping_range+0xf8/0x290 [ 57.380647][ T5078] ? __pfx_unmap_mapping_range+0x10/0x10 [ 57.386269][ T5078] ? setattr_prepare+0x1f5/0xb20 [ 57.391198][ T5078] ? truncate_setsize+0xcf/0xf0 [ 57.396036][ T5078] hfsplus_setattr+0x1ce/0x280 [ 57.400797][ T5078] ? __pfx_hfsplus_setattr+0x10/0x10 [ 57.406073][ T5078] notify_change+0xb9d/0xe70 [ 57.410664][ T5078] do_truncate+0x220/0x310 [ 57.415072][ T5078] ? __pfx_do_truncate+0x10/0x10 [ 57.420009][ T5078] path_openat+0x2a3d/0x3280 [ 57.424621][ T5078] ? __pfx_path_openat+0x10/0x10 [ 57.429579][ T5078] do_filp_open+0x235/0x490 [ 57.434086][ T5078] ? __pfx_do_filp_open+0x10/0x10 [ 57.439111][ T5078] ? _raw_spin_unlock+0x28/0x50 [ 57.443951][ T5078] ? alloc_fd+0x59d/0x640 [ 57.448271][ T5078] do_sys_openat2+0x13e/0x1d0 [ 57.452943][ T5078] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.458132][ T5078] ? lockdep_hardirqs_on+0x99/0x150 [ 57.463318][ T5078] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.468505][ T5078] ? ptrace_notify+0x279/0x380 [ 57.473263][ T5078] __x64_sys_openat+0x247/0x2a0 [ 57.478110][ T5078] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.483475][ T5078] ? do_syscall_64+0x100/0x230 [ 57.488252][ T5078] do_syscall_64+0xf3/0x230 [ 57.492763][ T5078] ? clear_bhb_loop+0x35/0x90 [ 57.497449][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.503351][ T5078] RIP: 0033:0x7f0fdc6905f9 [ 57.507763][ T5078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.527356][ T5078] RSP: 002b:00007ffd4c50b9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.535785][ T5078] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f0fdc6905f9 [ 57.543744][ T5078] RDX: 0000000000000242 RSI: 0000000020000040 RDI: 00000000ffffff9c openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_TRUNC, 000) = 4 exit_group(0) = ? +++ exited with 0 +++ [ 57.551704][ T5078] RBP: 00007f0fdc703610 R08: 000000000