./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3549642831 <...> Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. execve("./syz-executor3549642831", ["./syz-executor3549642831"], 0x7ffd28563f90 /* 10 vars */) = 0 brk(NULL) = 0x555556537000 brk(0x555556537d00) = 0x555556537d00 arch_prctl(ARCH_SET_FS, 0x555556537380) = 0 set_tid_address(0x555556537650) = 5072 set_robust_list(0x555556537660, 24) = 0 rseq(0x555556537ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3549642831", 4096) = 28 getrandom("\xee\xf5\x66\xed\x00\xed\xa6\x14", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556537d00 brk(0x555556558d00) = 0x555556558d00 brk(0x555556559000) = 0x555556559000 mprotect(0x7fa584044000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555556537650) = 5073 [pid 5073] set_robust_list(0x555556537660, 24) = 0 [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setsid() = 1 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5073] unshare(CLONE_NEWNS) = 0 [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5073] unshare(CLONE_NEWIPC) = 0 [pid 5073] unshare(CLONE_NEWCGROUP) = 0 [pid 5073] unshare(CLONE_NEWUTS) = 0 [pid 5073] unshare(CLONE_SYSVSEM) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "16777216", 8) = 8 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "536870912", 9) = 9 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "8192", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5073] close(3) = 0 [pid 5073] getpid() = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 75.150604][ T1088] [ 75.150604][ T1088] but task is already holding lock: [ 75.157955][ T1088] ffff8880238d20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 75.167625][ T1088] [ 75.167625][ T1088] other info that might help us debug this: [ 75.175669][ T1088] Possible unsafe locking scenario: [ 75.175669][ T1088] [ 75.183102][ T1088] CPU0 [ 75.186435][ T1088] ---- [ 75.189704][ T1088] lock(&tree->tree_lock/1); [ 75.194387][ T1088] lock(&tree->tree_lock/1); [ 75.199066][ T1088] [ 75.199066][ T1088] *** DEADLOCK *** [ 75.199066][ T1088] [ 75.207196][ T1088] May be due to missing lock nesting notation [ 75.207196][ T1088] [ 75.215500][ T1088] 5 locks held by kworker/u4:5/1088: [ 75.220774][ T1088] #0: ffff888017a91538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 75.232011][ T1088] #1: ffffc90003b8fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 75.244466][ T1088] #2: ffff88805f361c08 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_ext_write_extent+0x8e/0x1f0 [ 75.255083][ T1088] #3: ffff8880238d20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 75.265192][ T1088] #4: ffff88807b2d0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 [ 75.276679][ T1088] [ 75.276679][ T1088] stack backtrace: [ 75.282552][ T1088] CPU: 0 PID: 1088 Comm: kworker/u4:5 Not tainted 6.8.0-rc5-syzkaller #0 [ 75.290953][ T1088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 75.300998][ T1088] Workqueue: writeback wb_workfn (flush-7:0) [ 75.306995][ T1088] Call Trace: [ 75.310266][ T1088] [ 75.313187][ T1088] dump_stack_lvl+0x1e7/0x2e0 [ 75.317878][ T1088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.323078][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.327927][ T1088] ? print_deadlock_bug+0x479/0x620 [ 75.333119][ T1088] ? _find_first_zero_bit+0xd4/0x100 [ 75.338400][ T1088] validate_chain+0x15c0/0x58e0 [ 75.343259][ T1088] ? __pfx_validate_chain+0x10/0x10 [ 75.348453][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.353298][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.358140][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.362980][ T1088] ? mark_lock+0x9a/0x350 [ 75.367302][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.372147][ T1088] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 75.378130][ T1088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.384462][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.389303][ T1088] ? mark_lock+0x9a/0x350 [ 75.393625][ T1088] ? lockdep_hardirqs_on+0x98/0x140 [ 75.398822][ T1088] __lock_acquire+0x1345/0x1fd0 [ 75.403688][ T1088] lock_acquire+0x1e3/0x530 [ 75.408193][ T1088] ? hfsplus_find_init+0x14a/0x1c0 [ 75.413311][ T1088] ? __pfx_lock_acquire+0x10/0x10 [ 75.418343][ T1088] ? kthread+0x2f1/0x390 [ 75.422577][ T1088] ? ret_from_fork+0x4d/0x80 [ 75.427170][ T1088] ? __pfx___might_resched+0x10/0x10 [ 75.432479][ T1088] __mutex_lock+0x136/0xd70 [ 75.436995][ T1088] ? hfsplus_find_init+0x14a/0x1c0 [ 75.442114][ T1088] ? hfsplus_find_init+0x14a/0x1c0 [ 75.447234][ T1088] ? __pfx___mutex_lock+0x10/0x10 [ 75.452271][ T1088] ? rcu_is_watching+0x15/0xb0 [ 75.457037][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.461881][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.466722][ T1088] ? __kmalloc+0x24c/0x490 [ 75.471132][ T1088] ? hfsplus_find_init+0x85/0x1c0 [ 75.476160][ T1088] hfsplus_find_init+0x14a/0x1c0 [ 75.481098][ T1088] hfsplus_file_extend+0x454/0x1b70 [ 75.486302][ T1088] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 75.491930][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.496773][ T1088] ? rcu_is_watching+0x15/0xb0 [ 75.501538][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.506385][ T1088] ? trace_contention_end+0x3c/0x100 [ 75.511670][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.516527][ T1088] ? hfsplus_brec_find+0x19d/0x570 [ 75.521638][ T1088] ? hfsplus_find_init+0x14a/0x1c0 [ 75.526758][ T1088] hfsplus_bmap_reserve+0x105/0x4e0 [ 75.531964][ T1088] __hfsplus_ext_write_extent+0x2a4/0x5c0 [ 75.537682][ T1088] hfsplus_ext_write_extent+0x16a/0x1f0 [ 75.543310][ T1088] ? __pfx_hfsplus_ext_write_extent+0x10/0x10 [ 75.549374][ T1088] ? do_raw_spin_lock+0x14e/0x370 [ 75.554407][ T1088] hfsplus_write_inode+0x22/0x5e0 [ 75.559437][ T1088] __writeback_single_inode+0x6a1/0xfd0 [ 75.564982][ T1088] writeback_sb_inodes+0x8e3/0x1220 [ 75.570192][ T1088] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 75.575825][ T1088] ? __pfx_move_expired_inodes+0x10/0x10 [ 75.581454][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.586299][ T1088] ? queue_io+0x3d5/0x580 [ 75.590626][ T1088] wb_writeback+0x44d/0xc80 [ 75.595132][ T1088] ? __pfx_wb_writeback+0x10/0x10 [ 75.600154][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.604997][ T1088] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 75.610989][ T1088] wb_workfn+0x400/0xfb0 [ 75.615251][ T1088] ? __pfx_wb_workfn+0x10/0x10 [ 75.620014][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.624861][ T1088] ? __pfx_lock_acquire+0x10/0x10 [ 75.629884][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.634725][ T1088] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 75.640717][ T1088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.647056][ T1088] ? process_scheduled_works+0x825/0x1420 [ 75.652782][ T1088] process_scheduled_works+0x915/0x1420 [ 75.658345][ T1088] ? __pfx_process_scheduled_works+0x10/0x10 [ 75.664334][ T1088] ? srso_return_thunk+0x5/0x5f [ 75.669177][ T1088] ? assign_work+0x364/0x3d0 [ 75.673771][ T1088] worker_thread+0xa5f/0x1000 [ 75.678496][ T1088] ? __pfx_worker_thread+0x10/0x10 [ 75.683705][ T1088] kthread+0x2f1/0x390 [ 75.687768][ T1088] ? __pfx_worker_thread+0x10/0x10 [ 75.692885][ T1088] ? __pfx_kthread+0x10/0x10 [ 75.697469][ T1088] ret_from_fork+0x4d/0x80 [ 75.701910][ T1088] ? __pfx_kthread+0x10/0x10 [ 75.706523][ T1088] ret_from_fork_asm+0x1b/0x30 [ 75.711298][ T1088]