./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor252888400 <...> Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. execve("./syz-executor252888400", ["./syz-executor252888400"], 0x7ffc6b9a4840 /* 10 vars */) = 0 brk(NULL) = 0x55558cc36000 brk(0x55558cc36d00) = 0x55558cc36d00 arch_prctl(ARCH_SET_FS, 0x55558cc36380) = 0 set_tid_address(0x55558cc36650) = 5058 set_robust_list(0x55558cc36660, 24) = 0 rseq(0x55558cc36ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor252888400", 4096) = 27 getrandom("\x85\x8f\x7f\x1d\x6b\xd6\x94\x0c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558cc36d00 brk(0x55558cc57d00) = 0x55558cc57d00 brk(0x55558cc58000) = 0x55558cc58000 mprotect(0x7f187536b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f186ce00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f186ce00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfsplus", MS_POSIXACL, "nls=iso8859-9,umask=00000000000000000000413,nodecompose,nobarrier,force,umask=0000000000000000000033"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 56.984682][ T5058] loop0: detected capacity change from 0 to 1024 [ 57.058837][ T5058] hfsplus: trying to free free bnode 0(1) [ 57.065307][ T5058] [ 57.067627][ T5058] ============================================ [ 57.073754][ T5058] WARNING: possible recursive locking detected [ 57.079882][ T5058] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 57.086532][ T5058] -------------------------------------------- [ 57.092662][ T5058] syz-executor252/5058 is trying to acquire lock: [ 57.099064][ T5058] ffff888023db07c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0 [ 57.109930][ T5058] [ 57.109930][ T5058] but task is already holding lock: [ 57.117267][ T5058] ffff888023db1c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 57.128382][ T5058] [ 57.128382][ T5058] other info that might help us debug this: [ 57.136413][ T5058] Possible unsafe locking scenario: [ 57.136413][ T5058] [ 57.143837][ T5058] CPU0 [ 57.147107][ T5058] ---- [ 57.150363][ T5058] lock(&HFSPLUS_I(inode)->extents_lock); [ 57.156148][ T5058] lock(&HFSPLUS_I(inode)->extents_lock); [ 57.161932][ T5058] [ 57.161932][ T5058] *** DEADLOCK *** [ 57.161932][ T5058] [ 57.170067][ T5058] May be due to missing lock nesting notation [ 57.170067][ T5058] [ 57.178357][ T5058] 6 locks held by syz-executor252/5058: [ 57.183875][ T5058] #0: ffff888047e7a420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 57.192985][ T5058] #1: ffff888023db1080 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: do_unlinkat+0x26a/0x830 [ 57.203224][ T5058] #2: ffff888023db1e00 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: vfs_unlink+0xe4/0x600 [ 57.213371][ T5058] #3: ffff888023b7c998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x161/0x790 [ 57.222850][ T5058] #4: ffff888023db1c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50 [ 57.234389][ T5058] #5: ffff888023b7c8f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbb/0x4e0 [ 57.244377][ T5058] [ 57.244377][ T5058] stack backtrace: [ 57.250241][ T5058] CPU: 0 PID: 5058 Comm: syz-executor252 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 57.260291][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.270322][ T5058] Call Trace: [ 57.273584][ T5058] [ 57.276498][ T5058] dump_stack_lvl+0x241/0x360 [ 57.281167][ T5058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.286342][ T5058] ? print_deadlock_bug+0x479/0x620 [ 57.291517][ T5058] ? _find_first_zero_bit+0xd4/0x100 [ 57.296780][ T5058] validate_chain+0x15c1/0x58e0 [ 57.301619][ T5058] ? __pfx_stack_trace_save+0x10/0x10 [ 57.307421][ T5058] ? check_noncircular+0x259/0x4a0 [ 57.312524][ T5058] ? __pfx_validate_chain+0x10/0x10 [ 57.317708][ T5058] ? __pfx_check_noncircular+0x10/0x10 [ 57.323163][ T5058] ? lockdep_unlock+0x16a/0x300 [ 57.327997][ T5058] ? __pfx_lockdep_unlock+0x10/0x10 [ 57.333190][ T5058] ? add_lock_to_list+0x1de/0x2e0 [ 57.338540][ T5058] ? look_up_lock_class+0x77/0x160 [ 57.343657][ T5058] ? register_lock_class+0x102/0x980 [ 57.348921][ T5058] ? validate_chain+0x15a2/0x58e0 [ 57.353923][ T5058] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 57.360057][ T5058] ? __pfx_register_lock_class+0x10/0x10 [ 57.365862][ T5058] ? mark_lock+0x9a/0x350 [ 57.370172][ T5058] __lock_acquire+0x1346/0x1fd0 [ 57.375443][ T5058] lock_acquire+0x1e4/0x530 [ 57.379926][ T5058] ? hfsplus_get_block+0x383/0x14f0 [ 57.385384][ T5058] ? __pfx_lock_acquire+0x10/0x10 [ 57.390390][ T5058] ? __pfx___might_resched+0x10/0x10 [ 57.395663][ T5058] ? do_read_cache_page+0x30/0x200 [ 57.400754][ T5058] ? __pfx_register_lock_class+0x10/0x10 [ 57.406365][ T5058] ? hfsplus_delete_inode+0x174/0x220 [ 57.411715][ T5058] ? vfs_unlink+0x365/0x600 [ 57.416196][ T5058] ? do_unlinkat+0x4ae/0x830 [ 57.420777][ T5058] __mutex_lock+0x136/0xd70 [ 57.425262][ T5058] ? hfsplus_get_block+0x383/0x14f0 [ 57.430460][ T5058] ? hfsplus_get_block+0x383/0x14f0 [ 57.435640][ T5058] ? __pfx___mutex_lock+0x10/0x10 [ 57.440824][ T5058] hfsplus_get_block+0x383/0x14f0 [ 57.445849][ T5058] ? __pfx_hfsplus_get_block+0x10/0x10 [ 57.451286][ T5058] ? _raw_spin_unlock+0x28/0x50 [ 57.456116][ T5058] ? create_empty_buffers+0x53e/0x740 [ 57.461470][ T5058] block_read_full_folio+0x42e/0xe10 [ 57.466748][ T5058] ? __pfx_hfsplus_get_block+0x10/0x10 [ 57.472185][ T5058] ? __pfx_block_read_full_folio+0x10/0x10 [ 57.477970][ T5058] ? __pfx_lru_add_fn+0x10/0x10 [ 57.482797][ T5058] ? folio_add_lru+0x4b3/0x9e0 [ 57.487539][ T5058] ? folio_add_lru+0x27b/0x9e0 [ 57.492290][ T5058] filemap_read_folio+0x1a0/0x790 [ 57.497304][ T5058] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 57.502932][ T5058] ? __pfx_filemap_read_folio+0x10/0x10 [ 57.508454][ T5058] ? __filemap_get_folio+0x935/0xbc0 [ 57.513717][ T5058] do_read_cache_folio+0x134/0x820 [ 57.518805][ T5058] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 57.524334][ T5058] do_read_cache_page+0x30/0x200 [ 57.529250][ T5058] hfsplus_block_free+0x128/0x4e0 [ 57.534248][ T5058] ? __kmalloc+0x251/0x4a0 [ 57.538645][ T5058] hfsplus_free_extents+0x17a/0xae0 [ 57.543827][ T5058] hfsplus_file_truncate+0x7d0/0xb50 [ 57.549095][ T5058] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 57.554889][ T5058] ? smk_access+0x4ab/0x4e0 [ 57.559370][ T5058] ? hfsplus_unlink+0x161/0x790 [ 57.564204][ T5058] hfsplus_delete_inode+0x174/0x220 [ 57.569380][ T5058] hfsplus_unlink+0x512/0x790 [ 57.574037][ T5058] ? __pfx_smack_inode_unlink+0x10/0x10 [ 57.579576][ T5058] ? __pfx_hfsplus_unlink+0x10/0x10 [ 57.584754][ T5058] ? __down_write_common+0x162/0x200 [ 57.590021][ T5058] ? bpf_lsm_inode_unlink+0x9/0x10 [ 57.595111][ T5058] ? security_inode_unlink+0xd5/0x120 [ 57.600467][ T5058] vfs_unlink+0x365/0x600 [ 57.604780][ T5058] do_unlinkat+0x4ae/0x830 [ 57.609189][ T5058] ? __pfx_do_unlinkat+0x10/0x10 [ 57.614105][ T5058] ? strncpy_from_user+0x1a4/0x2f0 [ 57.619291][ T5058] __x64_sys_unlink+0x49/0x60 [ 57.623946][ T5058] do_syscall_64+0xfb/0x240 [ 57.628426][ T5058] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 57.634313][ T5058] RIP: 0033:0x7f18752f7af9 [ 57.638726][ T5058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.658323][ T5058] RSP: 002b:00007fff570226a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 57.666725][ T5058] RAX: ffffffffffffffda RBX: 00007f187534004b RCX: 00007f18752f7af9 [ 57.674770][ T5058] RDX: 00007f18752f6b91 RSI: 0000000000000000 RDI: 0000000020000000 [ 57.682734][ T5058] RBP: 00007f1875340053 R08: 0000000000000669 R09: 0000000000000000 [ 57.690683][ T5058] R10: 00007fff57022570 R11: 0000000000000246 R12: 0000000000000001 [ 57.698642][ T5058] R13: 00007fff57022888 R14: 0000000000000001 R15: 0000000000000001 [ 57.706682][ T5058] unlink("./file1") = 0 exit_group(0) = ? +++ exited with 0 +++ [ 57.710353][