./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3377496072 <...> forked to background, child pid 4641 no interfaces have a carrier [ 27.558187][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.568078][ T4642] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. execve("./syz-executor3377496072", ["./syz-executor3377496072"], 0x7ffcf78f2460 /* 10 vars */) = 0 brk(NULL) = 0x555556eb6000 brk(0x555556eb6c40) = 0x555556eb6c40 arch_prctl(ARCH_SET_FS, 0x555556eb6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3377496072", 4096) = 28 brk(0x555556ed7c40) = 0x555556ed7c40 brk(0x555556ed8000) = 0x555556ed8000 mprotect(0x7f4bfd944000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4bf548a000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f4bf548a000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfsplus", MS_SYNCHRONOUS|MS_RELATIME|MS_I_VERSION|MS_LAZYTIME, "force") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 syzkaller login: [ 55.071196][ T5063] loop0: detected capacity change from 0 to 1024 [ 55.092733][ T5063] [ 55.095081][ T5063] ============================================ [ 55.101310][ T5063] WARNING: possible recursive locking detected [ 55.107459][ T5063] 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 Not tainted [ 55.114120][ T5063] -------------------------------------------- [ 55.120242][ T5063] syz-executor337/5063 is trying to acquire lock: [ 55.126630][ T5063] ffff888028b69548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x27b/0x9b0 [ 55.137510][ T5063] [ 55.137510][ T5063] but task is already holding lock: [ 55.144852][ T5063] ffff88802a9787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x205/0x10d0 [ 55.156228][ T5063] [ 55.156228][ T5063] other info that might help us debug this: [ 55.164531][ T5063] Possible unsafe locking scenario: [ 55.164531][ T5063] [ 55.171957][ T5063] CPU0 [ 55.175210][ T5063] ---- [ 55.178570][ T5063] lock(&HFSPLUS_I(inode)->extents_lock); [ 55.184373][ T5063] lock(&HFSPLUS_I(inode)->extents_lock); [ 55.190170][ T5063] [ 55.190170][ T5063] *** DEADLOCK *** [ 55.190170][ T5063] [ 55.198296][ T5063] May be due to missing lock nesting notation [ 55.198296][ T5063] [ 55.206690][ T5063] 4 locks held by syz-executor337/5063: [ 55.212231][ T5063] #0: ffff888028e10460 (sb_writers#9){.+.+}-{0:0}, at: path_openat+0x19b3/0x2a50 [ 55.221442][ T5063] #1: ffff88802a9789c0 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 55.231958][ T5063] #2: ffff88802a9787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x205/0x10d0 [ 55.243684][ T5063] #3: ffff88807a6e40f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xdd/0x500 [ 55.253671][ T5063] [ 55.253671][ T5063] stack backtrace: [ 55.259707][ T5063] CPU: 1 PID: 5063 Comm: syz-executor337 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 55.269765][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.279808][ T5063] Call Trace: [ 55.283072][ T5063] [ 55.285984][ T5063] dump_stack_lvl+0xd1/0x138 [ 55.290644][ T5063] __lock_acquire.cold+0x116/0x3a7 [ 55.295739][ T5063] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 55.301697][ T5063] ? save_trace+0x43/0xad0 [ 55.306098][ T5063] ? create_page_buffers+0x440/0x640 [ 55.311364][ T5063] lock_acquire+0x1e3/0x630 [ 55.315849][ T5063] ? hfsplus_get_block+0x27b/0x9b0 [ 55.320950][ T5063] ? lock_release+0x810/0x810 [ 55.325609][ T5063] __mutex_lock+0x12f/0x1360 [ 55.330188][ T5063] ? hfsplus_get_block+0x27b/0x9b0 [ 55.335283][ T5063] ? hfsplus_get_block+0x27b/0x9b0 [ 55.340389][ T5063] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 55.345935][ T5063] ? find_held_lock+0x2d/0x110 [ 55.350688][ T5063] ? create_page_buffers+0x440/0x640 [ 55.355971][ T5063] ? lock_downgrade+0x6e0/0x6e0 [ 55.360801][ T5063] hfsplus_get_block+0x27b/0x9b0 [ 55.365736][ T5063] block_read_full_folio+0x35b/0x9d0 [ 55.371002][ T5063] ? hfsplus_file_extend+0xf60/0xf60 [ 55.376291][ T5063] ? create_page_buffers+0x640/0x640 [ 55.381559][ T5063] ? folio_flags.constprop.0+0x53/0x150 [ 55.387086][ T5063] ? folio_add_lru+0x37b/0x680 [ 55.391828][ T5063] ? hfsplus_bmap+0x30/0x30 [ 55.396311][ T5063] filemap_read_folio+0xdb/0x2c0 [ 55.401232][ T5063] ? __folio_lock_killable+0x20/0x20 [ 55.406519][ T5063] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 55.412065][ T5063] ? __mutex_lock+0x231/0x1360 [ 55.416813][ T5063] do_read_cache_folio+0x1df/0x510 [ 55.421908][ T5063] ? hfsplus_bmap+0x30/0x30 [ 55.426414][ T5063] read_cache_page+0x5d/0x160 [ 55.431086][ T5063] hfsplus_block_free+0x13d/0x500 [ 55.436094][ T5063] ? hfsplus_find_init+0x95/0x230 [ 55.441102][ T5063] hfsplus_free_extents+0x1ff/0x4f0 [ 55.446282][ T5063] hfsplus_file_truncate+0xe36/0x10d0 [ 55.451641][ T5063] ? hfsplus_get_block+0x9b0/0x9b0 [ 55.456735][ T5063] ? unmap_mapping_pages+0x270/0x270 [ 55.462005][ T5063] ? setattr_prepare+0x13c/0xc30 [ 55.466927][ T5063] hfsplus_setattr+0x1f2/0x320 [ 55.471674][ T5063] ? hfsplus_file_fsync+0x5b0/0x5b0 [ 55.476870][ T5063] notify_change+0xca7/0x1420 [ 55.481534][ T5063] ? do_truncate+0x143/0x200 [ 55.486108][ T5063] do_truncate+0x143/0x200 [ 55.490514][ T5063] ? file_open_root+0x430/0x430 [ 55.495348][ T5063] ? process_measurement+0x18b0/0x18b0 [ 55.500786][ T5063] ? hfsplus_getattr+0x2e0/0x2e0 [ 55.505709][ T5063] path_openat+0x2157/0x2a50 [ 55.510283][ T5063] ? path_lookupat+0x840/0x840 [ 55.515032][ T5063] do_filp_open+0x1ba/0x410 [ 55.519520][ T5063] ? may_open_dev+0xf0/0xf0 [ 55.524006][ T5063] ? find_held_lock+0x2d/0x110 [ 55.528755][ T5063] ? do_raw_spin_lock+0x124/0x2b0 [ 55.533758][ T5063] ? rwlock_bug.part.0+0x90/0x90 [ 55.538672][ T5063] ? _raw_spin_unlock+0x28/0x40 [ 55.543505][ T5063] ? alloc_fd+0x2d8/0x6d0 [ 55.547823][ T5063] do_sys_openat2+0x16d/0x4c0 [ 55.552478][ T5063] ? find_held_lock+0x2d/0x110 [ 55.557231][ T5063] ? build_open_flags+0x6f0/0x6f0 [ 55.562232][ T5063] ? ptrace_notify+0xfe/0x140 [ 55.566886][ T5063] ? lock_downgrade+0x6e0/0x6e0 [ 55.571719][ T5063] __x64_sys_creat+0xcd/0x120 [ 55.576372][ T5063] ? __x64_compat_sys_openat+0x1f0/0x1f0 [ 55.581997][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50 [ 55.587174][ T5063] ? ptrace_notify+0xfe/0x140 [ 55.591842][ T5063] ? syscall_trace_enter.constprop.0+0xb0/0x250 [ 55.598066][ T5063] do_syscall_64+0x39/0xb0 [ 55.602470][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.608433][ T5063] RIP: 0033:0x7f4bfd8d6a69 [ 55.612827][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.632418][ T5063] RSP: 002b:00007ffd95262598 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 55.640830][ T5063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4bfd8d6a69 [ 55.648780][ T5063] RDX: 00007f4bfd894e53 RSI: 0000000000000000 RDI: 0000000020000080 [ 55.656761][ T5063] RBP: 00007f4bfd896070 R08: 000000000000060a R09: 0000000000000000 [ 55.664730][ T5063] R10: 00007ffd95262460 R11: 0000000000000246 R12: 00007f4bfd896100 [ 55.672856][ T5063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.680811][ T5063] [ 55.684009][ T5063] hfsplus: request for non-existent node 31668 in B*Tree [ 55.691284][ T5063] hfsplus: request for non-existent node 31668 in B*Tree [ 55.698352][ T5063] hfsplus: request for non-existent node 31668 in B*Tree [ 55.705440][ T5063] hfsplus: request for non-existent node 31668 in B*Tree [ 55.712850][ T5063] hfsplus: request for non-existent node 31668 in B*Tree creat("./file0/file0", 000) = 4 exit_group(0) = ? +++ exited with 0 +++ [ 55.719846][ T5063] hfsplus: request for non-ex