./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3991465908 <...> Warning: Permanently added '10.128.1.13' (ECDSA) to the list of known hosts. execve("./syz-executor3991465908", ["./syz-executor3991465908"], 0x7fffc6b42960 /* 10 vars */) = 0 brk(NULL) = 0x555555ef5000 brk(0x555555ef5c40) = 0x555555ef5c40 arch_prctl(ARCH_SET_FS, 0x555555ef5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3991465908", 4096) = 28 brk(0x555555f16c40) = 0x555555f16c40 brk(0x555555f17000) = 0x555555f17000 mprotect(0x7f6d22a5d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached , child_tidptr=0x555555ef55d0) = 5079 [pid 5079] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setsid() = 1 [pid 5079] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5079] unshare(CLONE_NEWNS) = 0 [pid 5079] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5079] unshare(CLONE_NEWIPC) = 0 [pid 5079] unshare(CLONE_NEWCGROUP) = 0 [pid 5079] unshare(CLONE_NEWUTS) = 0 [pid 5079] unshare(CLONE_SYSVSEM) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "16777216", 8) = 8 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "536870912", 9) = 9 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1024", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "8192", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1024", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1024", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5079] close(3) = 0 [pid 5079] getpid() = 1 [pid 5079] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5083] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5082] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 4 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5084 attached [pid 5084] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- syzkaller login: [ 58.454116][ T5079] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5079 'syz-executor399' [ 58.475579][ T5079] loop0: detected capacity change from 0 to 1024 [pid 5079] <... clone resumed>) = 5 [pid 5079] clone(child_stack=0x20000000, flags=0) = 6 [pid 5079] clone(child_stack=0x20000000, flags=0) = 7 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5086 attached [pid 5086] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5085 attached [pid 5085] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5087 attached [pid 5087] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 8 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5088 attached [pid 5088] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 9 [ 58.571375][ T5088] [ 58.573734][ T5088] ====================================================== [ 58.580735][ T5088] WARNING: possible circular locking dependency detected [ 58.587732][ T5088] 6.2.0-rc4-next-20230118-syzkaller #0 Not tainted [ 58.594296][ T5088] ------------------------------------------------------ [ 58.601308][ T5088] syz-executor399/5088 is trying to acquire lock: [ 58.607772][ T5088] ffff8880220d87c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1bf/0xf60 [ 58.618746][ T5088] [ 58.618746][ T5088] but task is already holding lock: [ 58.626119][ T5088] ffff88807ab540b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x1bb/0x230 [ 58.635604][ T5088] [ 58.635604][ T5088] which lock already depends on the new lock. [ 58.635604][ T5088] [ 58.646000][ T5088] [ 58.646000][ T5088] the existing dependency chain (in reverse order) is: [ 58.655093][ T5088] [ 58.655093][ T5088] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 58.662827][ T5088] __mutex_lock+0x12f/0x1350 [ 58.667983][ T5088] hfsplus_file_truncate+0xe87/0x10d0 [ 58.673877][ T5088] hfsplus_setattr+0x1f2/0x320 [ 58.679161][ T5088] notify_change+0xca7/0x1420 [ 58.684366][ T5088] do_truncate+0x143/0x200 [ 58.689290][ T5088] path_openat+0x2180/0x2b40 [ 58.694395][ T5088] do_filp_open+0x1ba/0x410 [ 58.699409][ T5088] do_sys_openat2+0x16d/0x4c0 [ 58.704596][ T5088] __x64_sys_creat+0xcd/0x120 [ 58.709874][ T5088] do_syscall_64+0x39/0xb0 [ 58.714818][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.721394][ T5088] [ 58.721394][ T5088] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 58.730424][ T5088] __lock_acquire+0x2a9d/0x5780 [ 58.735900][ T5088] lock_acquire.part.0+0x11c/0x350 [ 58.741532][ T5088] __mutex_lock+0x12f/0x1350 [ 58.746628][ T5088] hfsplus_file_extend+0x1bf/0xf60 [ 58.752351][ T5088] hfsplus_bmap_reserve+0x31c/0x410 [ 58.758252][ T5088] hfsplus_rename_cat+0x271/0x1270 [ 58.763904][ T5088] hfsplus_unlink+0x4ad/0x830 [ 58.769106][ T5088] vfs_unlink+0x355/0x930 [ 58.773961][ T5088] do_unlinkat+0x3b7/0x640 [ 58.778907][ T5088] do_coredump+0x10b9/0x3ca0 [ 58.784035][ T5088] get_signal+0x1c08/0x24f0 [ 58.789051][ T5088] arch_do_signal_or_restart+0x79/0x5c0 [ 58.795287][ T5088] exit_to_user_mode_prepare+0x11f/0x240 [ 58.801428][ T5088] irqentry_exit_to_user_mode+0x9/0x40 [ 58.807392][ T5088] exc_page_fault+0xc0/0x170 [ 58.812499][ T5088] asm_exc_page_fault+0x26/0x30 [ 58.817943][ T5088] [ 58.817943][ T5088] other info that might help us debug this: [ 58.817943][ T5088] [ 58.828265][ T5088] Possible unsafe locking scenario: [ 58.828265][ T5088] [ 58.835725][ T5088] CPU0 CPU1 [ 58.841104][ T5088] ---- ---- [ 58.846479][ T5088] lock(&tree->tree_lock); [ 58.851014][ T5088] lock(&HFSPLUS_I(inode)->extents_lock); [ 58.859796][ T5088] lock(&tree->tree_lock); [ 58.866830][ T5088] lock(&HFSPLUS_I(inode)->extents_lock); [ 58.872660][ T5088] [ 58.872660][ T5088] *** DEADLOCK *** [ 58.872660][ T5088] [ 58.880813][ T5088] 5 locks held by syz-executor399/5088: [ 58.886371][ T5088] #0: ffff88807ab50460 (sb_writers#9){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 [ 58.895475][ T5088] #1: ffff8880220dab80 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 [ 58.905809][ T5088] #2: ffff8880220dbfc0 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: vfs_unlink+0xd9/0x930 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5090 attached ./strace-static-x86_64: Process 5089 attached ) = 10 [pid 5090] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5089] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] clone(child_stack=0x20000000, flags=0) = 11 [pid 5079] clone(child_stack=0x20000000, flags=0) = 12 [pid 5079] clone(child_stack=0x20000000, flags=0) = 13 [pid 5079] clone(child_stack=0x20000000, flags=0) = 14 [pid 5079] clone(child_stack=0x20000000, flags=0) = 15 [pid 5079] clone(child_stack=0x20000000, flags=0) = 16 [pid 5079] clone(child_stack=0x20000000, flags=0) = 17 [pid 5079] clone(child_stack=0x20000000, flags=0) = 18 [pid 5079] clone(child_stack=0x20000000, flags=0) = 19 [pid 5079] clone(child_stack=0x20000000, flags=0) = 20 [pid 5079] clone(child_stack=0x20000000, flags=0) = 21 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5096 attached [pid 5096] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5098 attached [pid 5098] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 22 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5100 attached [pid 5100] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 23 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5101 attached [pid 5101] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5092 attached [pid 5092] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 24 [pid 5079] clone(child_stack=0x20000000, flags=0) = 25 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5103 attached [pid 5103] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 26 [pid 5079] clone(child_stack=0x20000000, flags=0) = 27 [pid 5079] clone(child_stack=0x20000000, flags=0) = 28 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5106 attached [pid 5106] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 29 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5105 attached [pid 5105] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 30 [pid 5079] clone(child_stack=0x20000000, flags=0) = 31 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5108 attached [pid 5108] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5109 attached [pid 5109] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 32 [pid 5079] clone(child_stack=0x20000000, flags=0) = 33 [pid 5079] clone(child_stack=0x20000000, flags=0) = 34 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5112 attached [pid 5112] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5111 attached [pid 5111] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 35 [pid 5079] clone(child_stack=0x20000000, flags=0) = 36 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5115 attached [pid 5115] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 37 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5114 attached [pid 5114] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 38 [pid 5079] clone(child_stack=0x20000000, flags=0) = 39 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5116 attached [pid 5116] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5118 attached [pid 5118] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 40 [pid 5079] clone(child_stack=0x20000000, flags=0) = 41 [pid 5079] clone(child_stack=0x20000000, flags=0) = 42 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5119 attached [pid 5119] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 43 [pid 5079] clone(child_stack=0x20000000, flags=0) = 44 [pid 5079] clone(child_stack=0x20000000, flags=0) = 45 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5123 attached [pid 5123] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5122 attached [pid 5122] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5121 attached [pid 5121] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 46 [pid 5079] clone(child_stack=0x20000000, flags=0) = 47 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5126 attached [pid 5126] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5125 attached [pid 5125] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 48 [pid 5079] clone(child_stack=0x20000000, flags=0) = 49 [pid 5079] clone(child_stack=0x20000000, flags=0) = 50 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5127 attached [pid 5127] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 51 [pid 5079] clone(child_stack=0x20000000, flags=0) = 52 [pid 5079] clone(child_stack=0x20000000, flags=0) = 53 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5130 attached [pid 5130] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5129 attached [pid 5129] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 54 [pid 5079] clone(child_stack=0x20000000, flags=0) = 55 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5132 attached [pid 5132] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5134 attached [pid 5134] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5133 attached [pid 5133] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 56 [pid 5079] clone(child_stack=0x20000000, flags=0) = 57 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5136 attached [pid 5136] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 58 [pid 5079] clone(child_stack=0x20000000, flags=0) = 59 [pid 5079] clone(child_stack=0x20000000, flags=0) = 60 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5139 attached [pid 5139] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 61 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5138 attached [pid 5138] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- ./strace-static-x86_64: Process 5137 attached [pid 5137] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 62 [pid 5079] clone(child_stack=0x20000000, flags=0) = 63 [pid 5079] clone(child_stack=0x20000000, flags=0./strace-static-x86_64: Process 5141 attached [pid 5141] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... clone resumed>) = 64 [pid 5079] clone(child_stack=0x20000000, flags=0) = 65 [pid 5079] clone(child_stack=0x20000000, flags=0) = 66 [pid 5079] exit_group(1./strace-static-x86_64: Process 5144 attached [pid 5144] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5079] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5143 attached [pid 5143] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5142 attached [pid 5142] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5146 attached [pid 5146] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5091 attached [pid 5091] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5093 attached [pid 5093] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5094 attached [pid 5094] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5095 attached [ 58.916235][ T5088] #3: ffff8880782c7998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x151/0x830 [ 58.925784][ T5088] #4: ffff88807ab540b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x1bb/0x230 [ 58.935792][ T5088] [ 58.935792][ T5088] stack backtrace: [ 58.941782][ T5088] CPU: 0 PID: 5088 Comm: syz-executor399 Not tainted 6.2.0-rc4-next-20230118-syzkaller #0 [ 58.951696][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 58.961818][ T5088] Call Trace: [ 58.965118][ T5088] [ 58.968077][ T5088] dump_stack_lvl+0xd1/0x138 [pid 5095] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5097 attached [pid 5097] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5099 attached [pid 5099] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5102 attached [pid 5102] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5104 attached [pid 5104] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5107 attached [pid 5107] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5110 attached [pid 5110] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5113 attached [pid 5113] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5117 attached [pid 5117] +++ killed by SIGKILL +++ [ 58.972799][ T5088] check_noncircular+0x25f/0x2e0 [ 58.977778][ T5088] ? register_lock_class+0xbe/0x1120 [ 58.983098][ T5088] ? print_circular_bug+0x1e0/0x1e0 [ 58.988332][ T5088] ? mark_lock.part.0+0xee/0x1910 [ 58.993397][ T5088] ? mark_lock.part.0+0xee/0x1910 [ 58.998445][ T5088] __lock_acquire+0x2a9d/0x5780 [ 59.003398][ T5088] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.009400][ T5088] ? is_bpf_text_address+0x4/0x1b0 [ 59.014706][ T5088] ? lock_acquire+0x32/0xc0 [ 59.019206][ T5088] lock_acquire.part.0+0x11c/0x350 [ 59.024331][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.029663][ T5088] ? lock_sync+0x190/0x190 [ 59.034207][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.039533][ T5088] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.045116][ T5088] ? trace_lock_acquire+0x1f1/0x290 [ 59.050353][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.055680][ T5088] ? lock_acquire+0x32/0xc0 [ 59.060216][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.065571][ T5088] __mutex_lock+0x12f/0x1350 [ 59.070205][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.075545][ T5088] ? hfsplus_file_extend+0x1bf/0xf60 [ 59.080887][ T5088] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 59.086503][ T5088] ? lock_sync+0x190/0x190 [ 59.090938][ T5088] ? hfsplus_find_init+0x1bb/0x230 [ 59.096139][ T5088] hfsplus_file_extend+0x1bf/0xf60 [ 59.101248][ T5088] ? __mutex_lock+0x231/0x1350 [ 59.106001][ T5088] ? hfsplus_free_fork+0x7d0/0x7d0 [ 59.111121][ T5088] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 59.116676][ T5088] hfsplus_bmap_reserve+0x31c/0x410 [ 59.121949][ T5088] hfsplus_rename_cat+0x271/0x1270 [ 59.127093][ T5088] ? find_held_lock+0x2d/0x110 [ 59.131871][ T5088] ? hfsplus_delete_cat+0xe40/0xe40 [ 59.137080][ T5088] ? __lock_acquire+0x16c8/0x5780 [ 59.142115][ T5088] ? number+0x7e3/0xad0 [ 59.146303][ T5088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.152214][ T5088] ? put_dec+0xd0/0xd0 [ 59.156295][ T5088] ? fill_ptr_key+0x30/0x30 [ 59.160786][ T5088] ? lock_sync+0x190/0x190 [ 59.165235][ T5088] ? hfsplus_unlink+0x151/0x830 [ 59.170108][ T5088] ? vsnprintf+0x4cd/0x16b0 [ 59.174602][ T5088] ? pointer+0xc50/0xc50 [ 59.178839][ T5088] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.184390][ T5088] ? trace_contention_end+0x1b1/0x240 [ 59.189771][ T5088] ? hfsplus_unlink+0x151/0x830 [ 59.194633][ T5088] ? sprintf+0xc4/0x100 [ 59.198779][ T5088] ? snprintf+0x100/0x100 [ 59.203102][ T5088] ? down_killable+0xa0/0xa0 [ 59.207694][ T5088] hfsplus_unlink+0x4ad/0x830 [ 59.212370][ T5088] ? hfsplus_symlink+0x2e0/0x2e0 [ 59.217303][ T5088] ? down_write_killable_nested+0x250/0x250 [ 59.223189][ T5088] vfs_unlink+0x355/0x930 [ 59.227547][ T5088] ? bpf_lsm_path_unlink+0x9/0x10 [ 59.232579][ T5088] do_unlinkat+0x3b7/0x640 [ 59.237088][ T5088] ? __ia32_sys_rmdir+0x110/0x110 [ 59.242111][ T5088] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.247659][ T5088] ? kmem_cache_alloc+0x1c5/0x320 [ 59.252775][ T5088] do_coredump+0x10b9/0x3ca0 [ 59.257353][ T5088] ? finish_task_switch.isra.0+0x2b0/0xc80 [ 59.263154][ T5088] ? dump_emit+0x340/0x340 [ 59.267587][ T5088] ? __switch_to+0x5d0/0x1110 [ 59.272254][ T5088] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.278224][ T5088] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.284192][ T5088] ? __schedule+0x25d8/0x5a70 [ 59.289128][ T5088] ? mark_held_locks+0x9f/0xe0 [ 59.293984][ T5088] ? find_held_lock+0x2d/0x110 [ 59.298744][ T5088] ? cirrus_mode_set.isra.0+0x270/0x15f0 [ 59.304401][ T5088] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.309630][ T5088] get_signal+0x1c08/0x24f0 [ 59.314136][ T5088] ? exit_signals+0x910/0x910 [ 59.318815][ T5088] ? force_sig+0xe0/0xe0 [ 59.323099][ T5088] ? pgtable_bad+0x90/0x90 [ 59.327507][ T5088] arch_do_signal_or_restart+0x79/0x5c0 [ 59.333045][ T5088] ? get_sigframe_size+0x10/0x10 [ 59.337974][ T5088] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.343616][ T5088] ? trace_irq_disable.constprop.0+0x16b/0x1e0 [ 59.349762][ T5088] exit_to_user_mode_prepare+0x11f/0x240 [ 59.355387][ T5088] irqentry_exit_to_user_mode+0x9/0x40 [ 59.360921][ T5088] exc_page_fault+0xc0/0x170 [ 59.365511][ T5088] asm_exc_page_fault+0x26/0x30 [ 59.370349][ T5088] RIP: 0033:0x0 [ 59.373790][ T5088] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 59.381237][ T5088] RSP: 002b:0000000020000008 EFLAGS: 00010217 [ 59.387374][ T5088] RAX: 0000000000000000 RBX: 000000000000003b RCX: 00007f6d229ef259 [ 59.395333][ T5088] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 59.403385][ T5088] RBP: 00007ffc78547298 R08: 0000000000000000 R09: 00007f6d22a5de40 [ 59.411353][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc785472a0 ./strace-static-x86_64: Process 5120 attached [pid 5120] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5124 attached [pid 5124] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5128 attached [pid 5128] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5131 attached [pid 5131] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5135 attached [pid 5135] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5140 attached [pid 5140] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5145 attached [pid 5145] +++ killed by SIGKILL +++ [pid 5088] +++ killed by SIGKILL +++ [pid 5085] +++ killed by SIGKILL +++ [pid 5083] +++ killed by SIGSEGV (core dumped) +++ [pid 5086] +++ killed by SIGSEGV (core dumped) +++ [pid 5084] +++ killed by SIGSEGV (core dumped) +++ [pid 5082] +++ killed by SIGSEGV (core dumped) +++ [pid 5087] +++ killed by SIGKILL +++ [pid 5089] +++ killed by SIGKILL +++ [pid 5090] +++ killed by SIGKILL +++ [pid 5096] +++ killed by SIGKILL +++ [pid 5098] +++ killed by SIGKILL +++ [pid 5101] +++ killed by SIGKILL +++ [pid 5092] +++ killed by SIGKILL +++ [pid 5103] +++ killed by SIGKILL +++ [pid 5100] +++ killed by SIGKILL +++ [pid 5106] +++ killed by SIGKILL +++ [pid 5105] +++ killed by SIGKILL +++ [pid 5109] +++ killed by SIGKILL +++ [pid 5108] +++ killed by SIGKILL +++ [pid 5112] +++ killed by SIGKILL +++ [pid 5111] +++ killed by SIGKILL +++ [pid 5115] +++ killed by SIGKILL +++ [pid 5116] +++ killed by SIGKILL +++ [pid 5114] +++ killed by SIGKILL +++ [pid 5119] +++ killed by SIGKILL +++ [pid 5118] +++ killed by SIGKILL +++ [pid 5123] +++ killed by SIGKILL +++ [pid 5122] +++ killed by SIGKILL +++ [pid 5121] +++ killed by SIGKILL +++ [pid 5126] +++ killed by SIGKILL +++ [pid 5125] +++ killed by SIGKILL +++ [pid 5127] +++ killed by SIGKILL +++ [pid 5130] +++ killed by SIGKILL +++ [pid 5129] +++ killed by SIGKILL +++ [pid 5132] +++ killed by SIGKILL +++ [pid 5134] +++ killed by SIGKILL +++ [pid 5133] +++ killed by SIGKILL +++ [pid 5139] +++ killed by SIGKILL +++ [pid 5136] +++ killed by SIGKILL +++ [pid 5138] +++ killed by SIGKILL +++ [pid 5137] +++ killed by SIGKILL +++ [pid 5141] +++ killed by SIGKILL +++ [ 59.419309][ T5088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.427296][ T5088] [ 59.441977][ T5082] syz-executor399 (5082) used greatest stack depth: 22680 bytes left [pid 5144] +++ killed by SIGKILL +++ [pid 5079] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=1, si_utime=0, si_stime=13 /* 0.13 s */} --- exit_group(0) = ? +++ exited with 0 +++