./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1151531986 <...> DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b forked to background, child pid 4644 [ 30.517622][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.528691][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. execve("./syz-executor1151531986", ["./syz-executor1151531986"], 0x7ffd06a820a0 /* 10 vars */) = 0 brk(NULL) = 0x555555eea000 brk(0x555555eeac40) = 0x555555eeac40 arch_prctl(ARCH_SET_FS, 0x555555eea300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1151531986", 4096) = 28 brk(0x555555f0bc40) = 0x555555f0bc40 brk(0x555555f0c000) = 0x555555f0c000 mprotect(0x7ff7c1ed8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x555555eea5d0) = 5068 [pid 5068] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setsid() = 1 [pid 5068] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5068] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5068] unshare(CLONE_NEWNS) = 0 [pid 5068] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5068] unshare(CLONE_NEWIPC) = 0 [pid 5068] unshare(CLONE_NEWCGROUP) = 0 [pid 5068] unshare(CLONE_NEWUTS) = 0 [pid 5068] unshare(CLONE_SYSVSEM) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "16777216", 8) = 8 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "536870912", 9) = 9 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "8192", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5068] close(3) = 0 [pid 5068] getpid() = 1 [pid 5068] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x167/0x1e0 [ 50.192334][ T49] [ 50.192334][ T49] but task is already holding lock: [ 50.199687][ T49] ffff8880289280b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x167/0x1e0 [ 50.208987][ T49] [ 50.208987][ T49] other info that might help us debug this: [ 50.217040][ T49] Possible unsafe locking scenario: [ 50.217040][ T49] [ 50.224465][ T49] CPU0 [ 50.227723][ T49] ---- [ 50.230983][ T49] lock(&tree->tree_lock/1); [ 50.235644][ T49] lock(&tree->tree_lock/1); [ 50.240314][ T49] [ 50.240314][ T49] *** DEADLOCK *** [ 50.240314][ T49] [ 50.248446][ T49] May be due to missing lock nesting notation [ 50.248446][ T49] [ 50.256738][ T49] 4 locks held by kworker/u4:3/49: [ 50.261825][ T49] #0: ffff8881451eb138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 [ 50.272325][ T49] #1: ffffc90000ba7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 [ 50.284051][ T49] #2: ffff8880289280b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x167/0x1e0 [ 50.293789][ T49] #3: ffff888079f380f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xde/0x1420 [ 50.304992][ T49] [ 50.304992][ T49] stack backtrace: [ 50.310860][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted 6.2.0-rc5-syzkaller #0 [ 50.319078][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 50.329131][ T49] Workqueue: writeback wb_workfn (flush-7:0) [ 50.335115][ T49] Call Trace: [ 50.338395][ T49] [ 50.341313][ T49] dump_stack_lvl+0x1b1/0x290 [ 50.346008][ T49] ? nf_tcp_handle_invalid+0x630/0x630 [ 50.351465][ T49] ? panic+0x710/0x710 [ 50.355532][ T49] ? lockdep_unlock+0x144/0x2e0 [ 50.360383][ T49] ? print_tainted+0x141/0x160 [ 50.365146][ T49] ? lockdep_print_held_locks+0x10f/0x1b0 [ 50.370861][ T49] validate_chain+0x4843/0x6ae0 [ 50.375693][ T49] ? add_lock_to_list+0x1c7/0x2d0 [ 50.380698][ T49] ? validate_chain+0x1478/0x6ae0 [ 50.385717][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.391095][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.396458][ T49] ? lockdep_unlock+0x144/0x2e0 [ 50.401306][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.406667][ T49] ? add_lock_to_list+0x1c7/0x2d0 [ 50.411689][ T49] ? validate_chain+0x1478/0x6ae0 [ 50.416713][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.422069][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.427435][ T49] ? ret_from_fork+0x1f/0x30 [ 50.432007][ T49] ? stack_trace_save+0x104/0x1e0 [ 50.437026][ T49] ? stack_trace_snprint+0xf0/0xf0 [ 50.442124][ T49] ? check_noncircular+0x1aa/0x390 [ 50.447216][ T49] ? validate_chain+0x177/0x6ae0 [ 50.452138][ T49] ? lockdep_lock+0x290/0x290 [ 50.456794][ T49] ? add_lock_to_list+0x1c7/0x2d0 [ 50.461802][ T49] ? validate_chain+0x1478/0x6ae0 [ 50.466805][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.472179][ T49] ? validate_chain+0x177/0x6ae0 [ 50.477097][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.482451][ T49] ? add_chain_block+0x850/0x850 [ 50.487368][ T49] ? lockdep_lock+0x102/0x290 [ 50.492027][ T49] ? lockdep_unlock+0x144/0x2e0 [ 50.496857][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.502209][ T49] ? validate_chain+0x177/0x6ae0 [ 50.507127][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.512482][ T49] ? _find_first_zero_bit+0xe8/0x110 [ 50.517760][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.523122][ T49] ? validate_chain+0x177/0x6ae0 [ 50.528045][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.533398][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.538747][ T49] ? unwind_next_frame+0x10d7/0x24c0 [ 50.544031][ T49] ? validate_chain+0x177/0x6ae0 [ 50.548950][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.554306][ T49] ? validate_chain+0x177/0x6ae0 [ 50.559242][ T49] ? validate_chain+0x177/0x6ae0 [ 50.564162][ T49] ? validate_chain+0x177/0x6ae0 [ 50.569080][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.574433][ T49] ? validate_chain+0x177/0x6ae0 [ 50.579350][ T49] ? validate_chain+0x177/0x6ae0 [ 50.584269][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.589625][ T49] ? validate_chain+0x177/0x6ae0 [ 50.594540][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.599906][ T49] ? validate_chain+0x177/0x6ae0 [ 50.604826][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.610183][ T49] ? validate_chain+0x177/0x6ae0 [ 50.615100][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.620450][ T49] ? reacquire_held_locks+0x650/0x650 [ 50.625802][ T49] ? validate_chain+0x177/0x6ae0 [ 50.630720][ T49] ? validate_chain+0x177/0x6ae0 [ 50.635640][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.641263][ T49] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.647239][ T49] ? __stack_depot_save+0x41c/0x4a0 [ 50.652415][ T49] ? trace_lock_release+0x95/0x220 [ 50.657593][ T49] ? mark_lock+0x9a/0x350 [ 50.661904][ T49] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 50.667865][ T49] ? print_irqtrace_events+0x220/0x220 [ 50.673315][ T49] ? mark_lock+0x9a/0x350 [ 50.677627][ T49] __lock_acquire+0x1292/0x1f60 [ 50.682464][ T49] lock_acquire+0x182/0x3c0 [ 50.686954][ T49] ? hfs_find_init+0x167/0x1e0 [ 50.691718][ T49] ? read_lock_is_recursive+0x10/0x10 [ 50.697080][ T49] ? __kasan_kmalloc+0x97/0xb0 [ 50.701827][ T49] ? __kmalloc+0xaf/0x190 [ 50.706135][ T49] ? hfs_extend_file+0x2f8/0x1420 [ 50.711158][ T49] ? hfs_bmap_reserve+0xfa/0x410 [ 50.716074][ T49] ? __might_sleep+0xc0/0xc0 [ 50.720659][ T49] ? __writeback_single_inode+0x4d6/0x670 [ 50.726359][ T49] ? writeback_sb_inodes+0x812/0x1050 [ 50.731709][ T49] ? wb_writeback+0x41f/0x7b0 [ 50.736380][ T49] ? wb_workfn+0x3cb/0xef0 [ 50.740776][ T49] ? process_one_work+0x877/0xdb0 [ 50.745797][ T49] ? worker_thread+0xb14/0x1330 [ 50.750627][ T49] ? kthread+0x266/0x300 [ 50.754849][ T49] ? ret_from_fork+0x1f/0x30 [ 50.759421][ T49] ? hfs_find_init+0x8b/0x1e0 [ 50.764612][ T49] __mutex_lock_common+0x1bd/0x26e0 [ 50.769793][ T49] ? hfs_find_init+0x167/0x1e0 [ 50.774536][ T49] ? __mutex_lock_common+0x45f/0x26e0 [ 50.779889][ T49] ? hfs_find_init+0x167/0x1e0 [ 50.784641][ T49] ? mutex_lock_io_nested+0x60/0x60 [ 50.789830][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.795459][ T49] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.801434][ T49] ? __kmem_cache_alloc_node+0x21a/0x340 [ 50.807066][ T49] ? hfs_find_init+0x8b/0x1e0 [ 50.811726][ T49] ? trace_kmalloc+0x30/0xf0 [ 50.816298][ T49] ? __kmalloc+0xcc/0x190 [ 50.820611][ T49] mutex_lock_nested+0x17/0x20 [ 50.825358][ T49] hfs_find_init+0x167/0x1e0 [ 50.829932][ T49] hfs_extend_file+0x2f8/0x1420 [ 50.834782][ T49] ? hfs_get_block+0xbb0/0xbb0 [ 50.839540][ T49] ? hfs_find_init+0x8b/0x1e0 [ 50.844212][ T49] ? trace_contention_end+0x72/0x1d0 [ 50.849489][ T49] ? __mutex_lock_common+0x45f/0x26e0 [ 50.854862][ T49] ? hfs_brec_find+0x17a/0x520 [ 50.859612][ T49] ? mutex_lock_io_nested+0x60/0x60 [ 50.864863][ T49] hfs_bmap_reserve+0xfa/0x410 [ 50.869644][ T49] __hfs_ext_write_extent+0x1ea/0x460 [ 50.875031][ T49] hfs_ext_write_extent+0x13e/0x1b0 [ 50.880228][ T49] ? hfs_ext_keycmp+0x300/0x300 [ 50.885077][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.890702][ T49] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.896681][ T49] hfs_write_inode+0x8d/0xaf0 [ 50.901342][ T49] ? trace_lock_release+0x95/0x220 [ 50.906435][ T49] ? hfs_inode_write_fork+0x1b0/0x1b0 [ 50.911827][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.917479][ T49] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.923451][ T49] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.928636][ T49] __writeback_single_inode+0x4d6/0x670 [ 50.934165][ T49] writeback_sb_inodes+0x812/0x1050 [ 50.939348][ T49] ? __lock_acquire+0x1f60/0x1f60 [ 50.944361][ T49] ? queue_io+0x400/0x400 [ 50.948672][ T49] ? queue_io+0x382/0x400 [ 50.952996][ T49] ? trace_writeback_queue_io+0xe8/0x2d0 [ 50.958638][ T49] wb_writeback+0x41f/0x7b0 [ 50.963142][ T49] ? trace_writeback_exec+0x2c0/0x2c0 [ 50.968501][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.974117][ T49] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.979301][ T49] wb_workfn+0x3cb/0xef0 [ 50.983527][ T49] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 50.989230][ T49] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.994846][ T49] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 51.000805][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 51.006683][ T49] ? do_raw_spin_unlock+0x134/0x8a0 [ 51.011865][ T49] process_one_work+0x877/0xdb0 [ 51.016700][ T49] ? worker_detach_from_pool+0x260/0x260 [ 51.022312][ T49] ? _raw_spin_lock_irq+0xba/0xf0 [ 51.027319][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 51.032846][ T49] worker_thread+0xb14/0x1330 [ 51.037506][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 51.043397][ T49] kthread+0x266/0x300 [ 51.047464][ T49] ? rcu_lock_release+0x20/0x20 [ 51.052308][ T49] ? kthread_blkcg+0xd0/0xd0 [ 51.056897][ T49] ret_from_fork+0x1f/0x30 [ 51.061319][ T49]