./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2123314518 <...> syzkaller syzkaller login: [ 44.230124][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 44.230140][ T26] audit: type=1400 audit(1687520979.250:77): avc: denied { transition } for pid=4841 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.258899][ T26] audit: type=1400 audit(1687520979.250:78): avc: denied { noatsecure } for pid=4841 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.278470][ T26] audit: type=1400 audit(1687520979.260:79): avc: denied { write } for pid=4841 comm="sh" path="pipe:[29682]" dev="pipefs" ino=29682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.301152][ T26] audit: type=1400 audit(1687520979.260:80): avc: denied { rlimitinh } for pid=4841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.320183][ T26] audit: type=1400 audit(1687520979.260:81): avc: denied { siginh } for pid=4841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.103368][ T26] audit: type=1400 audit(1687520980.130:82): avc: denied { read } for pid=4428 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.142' (ECDSA) to the list of known hosts. execve("./syz-executor2123314518", ["./syz-executor2123314518"], 0x7ffd20c22b50 /* 10 vars */) = 0 brk(NULL) = 0x555556760000 brk(0x555556760c40) = 0x555556760c40 arch_prctl(ARCH_SET_FS, 0x555556760300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2123314518", 4096) = 28 brk(0x555556781c40) = 0x555556781c40 brk(0x555556782000) = 0x555556782000 mprotect(0x7f4a988a6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567605d0) = 4992 ./strace-static-x86_64: Process 4992 attached [pid 4992] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 4992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4992] setsid() = 1 [pid 4992] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 4992] unshare(CLONE_NEWNS) = 0 [pid 4992] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 4992] unshare(CLONE_NEWIPC) = 0 [pid 4992] unshare(CLONE_NEWCGROUP) = 0 [pid 4992] unshare(CLONE_NEWUTS) = 0 [ 59.916563][ T26] audit: type=1400 audit(1687520994.940:83): avc: denied { write } for pid=4988 comm="strace-static-x" path="pipe:[28670]" dev="pipefs" ino=28670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 59.945757][ T26] audit: type=1400 audit(1687520994.970:84): avc: denied { execmem } for pid=4991 comm="syz-executor212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 4992] unshare(CLONE_SYSVSEM) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "16777216", 8) = 8 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "536870912", 9) = 9 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "8192", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024 1048576 500 1024", 21) = 21 [pid 4992] close(3) = 0 [pid 4992] getpid() = 1 [pid 4992] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 4996] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4995] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 6 [pid 4992] clone(child_stack=0x20000000, flags=0) = 7 [pid 4992] clone(child_stack=0x20000000, flags=0) = 8 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 4997 attached [pid 4997] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 9 [pid 4992] clone(child_stack=0x20000000, flags=0) = 10 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 4998 attached [pid 4998] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 11 [pid 4992] clone(child_stack=0x20000000, flags=0) = 12 [ 60.106454][ T4992] loop0: detected capacity change from 0 to 1024 [ 60.112851][ T26] audit: type=1400 audit(1687520995.080:91): avc: denied { mounton } for pid=4992 comm="syz-executor212" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.142256][ T26] audit: type=1400 audit(1687520995.080:92): avc: denied { mount } for pid=4992 comm="syz-executor212" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [pid 4992] clone(child_stack=0x20000000, flags=0) = 13 [pid 4992] clone(child_stack=0x20000000, flags=0) = 14 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5003 attached [pid 5003] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4998] +++ killed by SIGSEGV +++ ./strace-static-x86_64: Process 4999 attached [pid 4999] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 15 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5006 attached ./strace-static-x86_64: Process 5000 attached ./strace-static-x86_64: Process 5001 attached [pid 5000] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5006] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5002 attached [pid 5001] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5002] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5007 attached [pid 5007] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [ 60.222098][ T5000] [ 60.224462][ T5000] ====================================================== [ 60.231483][ T5000] WARNING: possible circular locking dependency detected [ 60.238501][ T5000] 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 Not tainted [ 60.245529][ T5000] ------------------------------------------------------ [ 60.252551][ T5000] syz-executor212/5000 is trying to acquire lock: [ 60.258967][ T5000] ffff88802a9beec8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1bf/0xf90 [ 60.269982][ T5000] [pid 4992] <... clone resumed>) = 16 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5008 attached [pid 5008] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 17 [pid 4992] clone(child_stack=0x20000000, flags=0) = 18 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5010 attached [pid 5010] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 19 [pid 4992] clone(child_stack=0x20000000, flags=0) = 20 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5012 attached [pid 5012] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 21 [pid 4992] clone(child_stack=0x20000000, flags=0) = 22 [pid 4992] clone(child_stack=0x20000000, flags=0) = 23 [pid 4992] clone(child_stack=0x20000000, flags=0) = 24 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5014 attached [pid 5014] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 25 [pid 4992] clone(child_stack=0x20000000, flags=0) = 26 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5016 attached [pid 5016] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5015 attached [pid 5015] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5017 attached [pid 5017] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 27 [pid 4992] clone(child_stack=0x20000000, flags=0) = 28 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5020 attached [pid 5020] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 29 [pid 4992] clone(child_stack=0x20000000, flags=0) = 30 [pid 4992] clone(child_stack=0x20000000, flags=0) = 31 [pid 4992] clone(child_stack=0x20000000, flags=0) = 32 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5021 attached [pid 5021] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 33 [pid 4992] clone(child_stack=0x20000000, flags=0) = 34 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5024 attached [pid 5024] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5023 attached [pid 5023] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 35 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5026 attached [pid 5026] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 36 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5027 attached [pid 5027] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 37 [pid 4992] clone(child_stack=0x20000000, flags=0) = 38 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5029 attached [pid 5029] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 39 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5030 attached [pid 5030] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 40 [pid 4992] clone(child_stack=0x20000000, flags=0) = 41 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5032 attached [pid 5032] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 42 [pid 4992] clone(child_stack=0x20000000, flags=0) = 43 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5033 attached [pid 5033] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 44 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5035 attached [pid 5035] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 45 [pid 4992] clone(child_stack=0x20000000, flags=0) = 46 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5036 attached [pid 5036] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 47 [pid 4992] clone(child_stack=0x20000000, flags=0) = 48 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5038 attached [pid 5038] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5040 attached [pid 5040] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 49 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5039 attached [pid 5039] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5042 attached [pid 5042] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 50 [pid 4992] clone(child_stack=0x20000000, flags=0) = 51 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5043 attached [pid 5043] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 52 [pid 4992] clone(child_stack=0x20000000, flags=0) = 53 [pid 4992] clone(child_stack=0x20000000, flags=0) = 54 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5045 attached [pid 5045] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 55 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5044 attached [pid 5044] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 56 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5048 attached [pid 5048] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 57 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5047 attached [pid 5047] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5049 attached [pid 5049] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 58 [pid 4992] clone(child_stack=0x20000000, flags=0) = 59 [pid 4992] clone(child_stack=0x20000000, flags=0) = 60 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5051 attached [pid 5051] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 61 [pid 4992] clone(child_stack=0x20000000, flags=0) = 62 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5054 attached [pid 5054] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 63 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5052 attached [pid 5052] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5053 attached [pid 5053] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 64 [pid 4992] clone(child_stack=0x20000000, flags=0) = 65 [pid 4992] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5056 attached [pid 5056] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5057 attached [pid 5057] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 4992] <... clone resumed>) = 66 [pid 4992] exit_group(1) = ? ./strace-static-x86_64: Process 5058 attached [pid 5058] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5004 attached [pid 5004] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5005 attached [pid 5005] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5009 attached [pid 5009] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5011 attached [pid 5011] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5013 attached [pid 5013] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5018 attached [ 60.269982][ T5000] but task is already holding lock: [ 60.277351][ T5000] ffff888028f3a0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x1bb/0x230 [ 60.286867][ T5000] [ 60.286867][ T5000] which lock already depends on the new lock. [ 60.286867][ T5000] [ 60.297272][ T5000] [ 60.297272][ T5000] the existing dependency chain (in reverse order) is: [ 60.306291][ T5000] [ 60.306291][ T5000] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 60.314043][ T5000] __mutex_lock+0x12f/0x1350 [pid 5018] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5019 attached [pid 5019] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5022 attached [pid 5022] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5025 attached [pid 5025] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5028 attached [pid 5028] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5031 attached [pid 5031] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5034 attached [pid 5034] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5037 attached [pid 5037] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5041 attached [pid 5041] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5046 attached [pid 5046] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5050 attached [pid 5050] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5055 attached [pid 5055] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5059 attached [pid 5059] +++ killed by SIGKILL +++ [ 60.319196][ T5000] hfsplus_file_truncate+0xe93/0x10e0 [ 60.325119][ T5000] hfsplus_setattr+0x1f2/0x320 [ 60.330430][ T5000] notify_change+0xb2c/0x1180 [ 60.335656][ T5000] do_truncate+0x143/0x200 [ 60.340617][ T5000] path_openat+0x2083/0x2750 [ 60.345722][ T5000] do_filp_open+0x1ba/0x410 [ 60.350733][ T5000] do_sys_openat2+0x16d/0x4c0 [ 60.355912][ T5000] __x64_sys_creat+0xcd/0x120 [ 60.361090][ T5000] do_syscall_64+0x39/0xb0 [ 60.366017][ T5000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.372432][ T5000] [ 60.372432][ T5000] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 60.381447][ T5000] __lock_acquire+0x2fcd/0x5f30 [ 60.386807][ T5000] lock_acquire+0x1b1/0x520 [ 60.391828][ T5000] __mutex_lock+0x12f/0x1350 [ 60.396929][ T5000] hfsplus_file_extend+0x1bf/0xf90 [ 60.402552][ T5000] hfsplus_bmap_reserve+0x31c/0x410 [ 60.408264][ T5000] hfsplus_rename_cat+0x271/0x1270 [ 60.413889][ T5000] hfsplus_unlink+0x4ad/0x830 [ 60.419078][ T5000] vfs_unlink+0x355/0x930 [ 60.423919][ T5000] do_unlinkat+0x3e3/0x680 [ 60.428846][ T5000] do_coredump+0x182a/0x4020 [ 60.433941][ T5000] get_signal+0x1c02/0x25b0 [ 60.438948][ T5000] arch_do_signal_or_restart+0x79/0x5c0 [ 60.444999][ T5000] exit_to_user_mode_prepare+0x11f/0x240 [ 60.451140][ T5000] irqentry_exit_to_user_mode+0x9/0x40 [ 60.457107][ T5000] exc_page_fault+0xc0/0x170 [ 60.462205][ T5000] asm_exc_page_fault+0x26/0x30 [ 60.467558][ T5000] [ 60.467558][ T5000] other info that might help us debug this: [ 60.467558][ T5000] [ 60.477761][ T5000] Possible unsafe locking scenario: [ 60.477761][ T5000] [ 60.485189][ T5000] CPU0 CPU1 [ 60.490532][ T5000] ---- ---- [ 60.495877][ T5000] lock(&tree->tree_lock); [ 60.500362][ T5000] lock(&HFSPLUS_I(inode)->extents_lock); [ 60.508665][ T5000] lock(&tree->tree_lock); [ 60.515667][ T5000] lock(&HFSPLUS_I(inode)->extents_lock); [ 60.521453][ T5000] [ 60.521453][ T5000] *** DEADLOCK *** [ 60.521453][ T5000] [ 60.529573][ T5000] 5 locks held by syz-executor212/5000: [ 60.535095][ T5000] #0: ffff888028f40460 (sb_writers#10){.+.+}-{0:0}, at: do_unlinkat+0x190/0x680 [ 60.544221][ T5000] #1: ffff8880187c2a40 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: do_unlinkat+0x280/0x680 [ 60.554474][ T5000] #2: ffff88802aed4a80 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: vfs_unlink+0xd9/0x930 [ 60.564640][ T5000] #3: ffff88807713f198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x151/0x830 [ 60.574107][ T5000] #4: ffff888028f3a0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x1bb/0x230 [ 60.583999][ T5000] [ 60.583999][ T5000] stack backtrace: [ 60.589865][ T5000] CPU: 0 PID: 5000 Comm: syz-executor212 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 [ 60.600255][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 60.610291][ T5000] Call Trace: [ 60.613554][ T5000] [ 60.616467][ T5000] dump_stack_lvl+0xd9/0x150 [ 60.621044][ T5000] check_noncircular+0x25f/0x2e0 [ 60.625969][ T5000] ? register_lock_class+0xbe/0x1120 [ 60.631239][ T5000] ? print_circular_bug+0x730/0x730 [ 60.636421][ T5000] ? stack_trace_save+0x90/0xc0 [ 60.641257][ T5000] __lock_acquire+0x2fcd/0x5f30 [ 60.646093][ T5000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.652058][ T5000] ? unwind_next_frame+0xdf3/0x1e30 [ 60.657239][ T5000] ? __module_text_address+0x4f/0x190 [ 60.662620][ T5000] lock_acquire+0x1b1/0x520 [ 60.667114][ T5000] ? hfsplus_file_extend+0x1bf/0xf90 [ 60.672388][ T5000] ? lock_sync+0x190/0x190 [ 60.676791][ T5000] __mutex_lock+0x12f/0x1350 [ 60.681367][ T5000] ? hfsplus_file_extend+0x1bf/0xf90 [ 60.686641][ T5000] ? hfsplus_file_extend+0x1bf/0xf90 [ 60.691918][ T5000] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 60.697449][ T5000] ? lock_sync+0x190/0x190 [ 60.701851][ T5000] ? irqentry_exit_to_user_mode+0x9/0x40 [ 60.707468][ T5000] ? exc_page_fault+0xc0/0x170 [ 60.712217][ T5000] hfsplus_file_extend+0x1bf/0xf90 [ 60.717319][ T5000] ? __mutex_lock+0x231/0x1350 [ 60.722068][ T5000] ? hfsplus_free_fork+0x7d0/0x7d0 [ 60.727166][ T5000] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 60.732698][ T5000] hfsplus_bmap_reserve+0x31c/0x410 [ 60.737887][ T5000] hfsplus_rename_cat+0x271/0x1270 [ 60.742985][ T5000] ? tomoyo_path_perm+0x256/0x430 [ 60.748012][ T5000] ? tomoyo_path_unlink+0x92/0xd0 [ 60.753028][ T5000] ? security_path_unlink+0xdb/0x150 [ 60.758300][ T5000] ? do_unlinkat+0x37a/0x680 [ 60.762883][ T5000] ? do_coredump+0x182a/0x4020 [ 60.767628][ T5000] ? get_signal+0x1c02/0x25b0 [ 60.772290][ T5000] ? arch_do_signal_or_restart+0x79/0x5c0 [ 60.778001][ T5000] ? exit_to_user_mode_prepare+0x11f/0x240 [ 60.783807][ T5000] ? hfsplus_delete_cat+0xe40/0xe40 [ 60.788997][ T5000] ? number+0x7e3/0xad0 [ 60.793140][ T5000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.799022][ T5000] ? put_dec+0xd0/0xd0 [ 60.803079][ T5000] ? fill_ptr_key+0x30/0x30 [ 60.807566][ T5000] ? lock_sync+0x190/0x190 [ 60.811972][ T5000] ? vsnprintf+0x4df/0x1710 [ 60.816465][ T5000] ? pointer+0xc50/0xc50 [ 60.820693][ T5000] ? hfsplus_unlink+0x151/0x830 [ 60.825532][ T5000] ? sprintf+0xc4/0x100 [ 60.829678][ T5000] ? snprintf+0x100/0x100 [ 60.833997][ T5000] ? avc_has_perm+0xfe/0x1a0 [ 60.838569][ T5000] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 60.843922][ T5000] ? lock_sync+0x190/0x190 [ 60.848322][ T5000] hfsplus_unlink+0x4ad/0x830 [ 60.852991][ T5000] ? hfsplus_symlink+0x2e0/0x2e0 [ 60.857917][ T5000] ? down_write+0x14f/0x200 [ 60.862409][ T5000] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 60.868392][ T5000] vfs_unlink+0x355/0x930 [ 60.872709][ T5000] do_unlinkat+0x3e3/0x680 [ 60.877115][ T5000] ? __ia32_sys_rmdir+0x110/0x110 [ 60.882130][ T5000] ? rcu_is_watching+0x12/0xb0 [ 60.886885][ T5000] do_coredump+0x182a/0x4020 [ 60.891459][ T5000] ? dump_emit+0x340/0x340 [ 60.895861][ T5000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.901829][ T5000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.907796][ T5000] ? lock_sync+0x190/0x190 [ 60.912197][ T5000] ? find_held_lock+0x2d/0x110 [ 60.916945][ T5000] ? cpt_write_infoframe+0x510/0x5b0 [ 60.922215][ T5000] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.927402][ T5000] get_signal+0x1c02/0x25b0 [ 60.931901][ T5000] ? exit_signals+0x910/0x910 [ 60.936569][ T5000] ? force_sig_fault+0xb6/0xf0 [ 60.941323][ T5000] ? force_sig+0xe0/0xe0 [ 60.945549][ T5000] arch_do_signal_or_restart+0x79/0x5c0 [ 60.951078][ T5000] ? get_sigframe_size+0x10/0x10 [ 60.955997][ T5000] ? rcu_is_watching+0x12/0xb0 [ 60.960760][ T5000] exit_to_user_mode_prepare+0x11f/0x240 [ 60.966380][ T5000] irqentry_exit_to_user_mode+0x9/0x40 [ 60.971827][ T5000] exc_page_fault+0xc0/0x170 [ 60.976400][ T5000] asm_exc_page_fault+0x26/0x30 [ 60.981234][ T5000] RIP: 0033:0x0 [ 60.984673][ T5000] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 60.992025][ T5000] RSP: 002b:0000000020000008 EFLAGS: 00010217 [ 60.998076][ T5000] RAX: 0000000000000000 RBX: 000000000000003c RCX: 00007f4a98838259 [ 61.006035][ T5000] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 61.013991][ T5000] RBP: 00007ffd53a57c88 R08: 0000000000000000 R09: 00007f4a988a6e40 [pid 5000] +++ killed by SIGKILL +++ [pid 4999] +++ killed by SIGKILL +++ [pid 4996] +++ killed by SIGKILL +++ [pid 5007] +++ killed by SIGKILL +++ [pid 5006] +++ killed by SIGKILL +++ [pid 5003] +++ killed by SIGSEGV (core dumped) +++ [pid 5002] +++ killed by SIGKILL +++ [pid 5001] +++ killed by SIGKILL +++ [pid 4995] +++ killed by SIGKILL +++ [pid 5008] +++ killed by SIGKILL +++ [pid 4997] +++ killed by SIGSEGV (core dumped) +++ [pid 5012] +++ killed by SIGKILL +++ [pid 5010] +++ killed by SIGKILL +++ [pid 5016] +++ killed by SIGKILL +++ [pid 5014] +++ killed by SIGKILL +++ [pid 5017] +++ killed by SIGKILL +++ [pid 5015] +++ killed by SIGKILL +++ [pid 5021] +++ killed by SIGKILL +++ [pid 5020] +++ killed by SIGKILL +++ [pid 5024] +++ killed by SIGKILL +++ [pid 5023] +++ killed by SIGKILL +++ [pid 5029] +++ killed by SIGKILL +++ [pid 5027] +++ killed by SIGKILL +++ [pid 5026] +++ killed by SIGKILL +++ [pid 5033] +++ killed by SIGKILL +++ [pid 5032] +++ killed by SIGKILL +++ [pid 5030] +++ killed by SIGKILL +++ [pid 5036] +++ killed by SIGKILL +++ [pid 5035] +++ killed by SIGKILL +++ [pid 5040] +++ killed by SIGKILL +++ [pid 5038] +++ killed by SIGKILL +++ [pid 5042] +++ killed by SIGKILL +++ [pid 5039] +++ killed by SIGKILL +++ [pid 5045] +++ killed by SIGKILL +++ [pid 5043] +++ killed by SIGKILL +++ [pid 5048] +++ killed by SIGKILL +++ [pid 5044] +++ killed by SIGKILL +++ [pid 5047] +++ killed by SIGKILL +++ [pid 5049] +++ killed by SIGKILL +++ [ 61.021951][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd53a57c90 [ 61.029907][ T5000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.037868][ T5000] [pid 5054] +++ killed by SIGKILL +++ [pid 5051] +++ killed by SIGKILL +++ [pid 5053] +++ killed by SIGKILL +++ [pid 5052] +++ killed by SIGKILL +++ [pid 5056] +++ killed by SIGKILL +++ [pid 5057] +++ killed by SIGKILL +++ [pid 4992] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4992, si_uid=0, si_status=1, si_utime=0, si_stime=22 /* 0.22 s */} --- exit_group(0) = ? +++ exited with 0 +++