Extracting prog: 3m16.619537822s
Minimizing prog: 31m11.66282855s
Simplifying prog options: 0s
Extracting C: 42.504887669s
Simplifying C: 6m33.535872312s
1 programs, timeouts [30s 6m0s]
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)
program crashed: possible deadlock in hfsplus_find_init
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-write$cgroup_type
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$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")
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0xf642e7e)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-write$cgroup_type
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$eJzs3cFvHFcdB/DvrNeON1TBaRMaoSKsRBSkiMSJlUK4YBBCOVSoKoeercRprG6SKnFRWiFIAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P2rr2214m9TujnE43fe/PevPnNmzczu+tYG+AL68rZNB+kyJWzr98ry2ur8+211fkjdXU7SZlvJM1ukuJWUjxMFsr6om9JX7rFR8uX3/z00dpn3VKzXqr2E+vbTY8U8pB93K+XzNb9zQ7dcnKk/rt9VeHlhSRX63TQ1Kh9DTQsB+1MncKh62xxfy+bb3u9A8++3tOpKJ+bxdZrfyY5Wj+Zq9cEdYvGWIM8AHu6ywEAAMBz6pPbhx0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH+q7/+vkmpp1GlmU/S+/3+qt67OP4MWRm754EDjAAAAAAAAAIDx+PrjPM69HOuVO0X1O//TVeFEPu8kX8p7uZul3Mm53MtiVrKSO7mQZKavo6l7iysrdy6sb1kavuXFoVteHNcRAwAAAAAAAMD/pV+ltfH7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBYUyUQ3qZYTdZqZNJrZqMv95F9Jpg473j0ohq18MP44AAAA4KlMP8E2X36cx7mXY71yp6je83+ler88nfdyKytZzkraWcq1+j10+a6/sbY6315bnb9ZLmV5sN8f/GdPYUzVPUxUpWF7PlW1aOV6lqs153K1CuZaGt19n0lO9eLpi6vPh2VMxfdrI0bWrIe13NkftvsUYV8MfhTR2KFlayO4ZH1E5urYyi2Pd0egqD6oSTaPxK5npzlQmql6nVzf04U01j/5OXEAY360Tsvj+e2BjvlerY9EI9VIXOzNvvKa2Xkkkm/+7c9v3WjfeufG9btnn51D2sXENus3z4n5vpF4+bkeieYe289VI3FyvXwlP85PczazeSN3spyfZTErWUqnrl+s53P5c2bnkVoYKL2xWyRT9XnpnrNRYprNj6rcYk5X2x7LcorczrUs5bXq38VcyHdyKZdyue8Mn9w27urYqqu+sfmq753pvw8N/sy36kx5d/vdxl1uYacj3m527pfuvb8c1+N949qd9Y/WWx3vuw7m+kbpxd7oTA7t/Enujc2v1plyH7/e5TkxXjP1SJQXUO8p0Yvupe5INKtn0dZ5/sdOuV3atzqdG4vvbtP//U3lV+u0nFarX9utdc/wU7G/yvnyYqbrO8ng7CjrXlq/y/TVdTbmcrdu8IlbbneyqiuK3pX6k9yuJsDWK3Wqfg23taeLVd3LQ+vmq7pTfXUDr7dyO+1cG8P4AfAk/vnWenYmR6da/2590vq49ZvWjdbr0z888t0jr0xl8h+T32vOTbzaeKX4az7OLzbe/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/u7vsfvLPYbi/dGZ5pbF81kGll85rtej4yvJ+i/kKfEfZ1EJned3/tW4fTSQbWVN9zNPbjam0OY0um88tkDPHc/kans7Gm9yWCwxv/vsw0RzoXCwNr/rK1ww/3GGox2nVxgJlGxrvTiQyfAId0QwLG5vzKzXfP333/g28v31x8e+ntpVuTly5dnrt86bX589eX20tz3Z+HHSVwEDYe+ocdCQAAAAAAAAAAADCqYX8YcPqF3f5oZJTMlP9ZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyLK2fTfJAiF+bOzZXltdX5drn08hstm0kajaT4eVI8TBbSXTLT112RPz1MZ8h+Plq+/Oanj9Y+2+ir2W2fNOp0ezvXJrlfL5lNMlGnT2Ggv6tP3V/x394xlAP2eafTWXi6+GB//C8AAP//CMjyxQ==")
r0 = creat(0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$cgroup_type(r0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat-write$cgroup_type
program crashed: possible deadlock in hfsplus_find_init
reproducing took 41m44.32314933s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: xattr searching failed
============================================
WARNING: possible recursive locking detected
6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 Not tainted
--------------------------------------------
syz-executor162/5097 is trying to acquire lock:
ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor162/5097:
#0: ffff8880339ea420 (sb_writers#9){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2931 [inline]
#0: ffff8880339ea420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 fs/read_write.c:679
#1: ffff88803f02ab78 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:815 [inline]
#1: ffff88803f02ab78 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: generic_file_write_iter+0x82/0x310 mm/filemap.c:4178
#2: ffff88803f02a988 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#3: ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#4: ffff88803f028108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
stack backtrace:
CPU: 0 UID: 0 PID: 5097 Comm: syz-executor162 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3037
check_deadlock kernel/locking/lockdep.c:3089 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3891
__lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
__mutex_lock_common kernel/locking/mutex.c:608 [inline]
__mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752
hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x454/0x1b70 fs/hfsplus/extents.c:462
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x2a4/0x5c0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x84/0xe10 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x48c/0x1b70 fs/hfsplus/extents.c:462
hfsplus_get_block+0x406/0x14f0 fs/hfsplus/extents.c:245
__block_write_begin_int+0x50c/0x1a70 fs/buffer.c:2121
block_write_begin fs/buffer.c:2231 [inline]
cont_write_begin+0x6e2/0x9d0 fs/buffer.c:2582
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
generic_perform_write+0x344/0x6d0 mm/filemap.c:4054
generic_file_write_iter+0xae/0x310 mm/filemap.c:4181
new_sync_write fs/read_write.c:590 [inline]
vfs_write+0xa6d/0xc90 fs/read_write.c:683
ksys_write+0x183/0x2b0 fs/read_write.c:736
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7275004a99
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff8af25e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7275004a99
RDX: 000000000f642e7e RSI: 0000000020000200 RDI: 0000000000000004
RBP: 00007f72750785f0 R08: 00005555696c54c0 R09: 00005555696c54c0
R10: 00000000000006d6 R11: 0000000000000246 R12: 00007fff8af25ec0
R13: 00007fff8af260e8 R14: 431bde82d7b634db R15: 00007f727504d03b
final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: xattr searching failed
============================================
WARNING: possible recursive locking detected
6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 Not tainted
--------------------------------------------
syz-executor162/5097 is trying to acquire lock:
ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor162/5097:
#0: ffff8880339ea420 (sb_writers#9){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2931 [inline]
#0: ffff8880339ea420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 fs/read_write.c:679
#1: ffff88803f02ab78 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:815 [inline]
#1: ffff88803f02ab78 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: generic_file_write_iter+0x82/0x310 mm/filemap.c:4178
#2: ffff88803f02a988 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#3: ffff88803a7d40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#4: ffff88803f028108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
stack backtrace:
CPU: 0 UID: 0 PID: 5097 Comm: syz-executor162 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3037
check_deadlock kernel/locking/lockdep.c:3089 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3891
__lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
__mutex_lock_common kernel/locking/mutex.c:608 [inline]
__mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752
hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x454/0x1b70 fs/hfsplus/extents.c:462
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x2a4/0x5c0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x84/0xe10 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x48c/0x1b70 fs/hfsplus/extents.c:462
hfsplus_get_block+0x406/0x14f0 fs/hfsplus/extents.c:245
__block_write_begin_int+0x50c/0x1a70 fs/buffer.c:2121
block_write_begin fs/buffer.c:2231 [inline]
cont_write_begin+0x6e2/0x9d0 fs/buffer.c:2582
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
generic_perform_write+0x344/0x6d0 mm/filemap.c:4054
generic_file_write_iter+0xae/0x310 mm/filemap.c:4181
new_sync_write fs/read_write.c:590 [inline]
vfs_write+0xa6d/0xc90 fs/read_write.c:683
ksys_write+0x183/0x2b0 fs/read_write.c:736
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7275004a99
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff8af25e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7275004a99
RDX: 000000000f642e7e RSI: 0000000020000200 RDI: 0000000000000004
RBP: 00007f72750785f0 R08: 00005555696c54c0 R09: 00005555696c54c0
R10: 00000000000006d6 R11: 0000000000000246 R12: 00007fff8af25ec0
R13: 00007fff8af260e8 R14: 431bde82d7b634db R15: 00007f727504d03b