Extracting prog: 1m53.998503398s
Minimizing prog: 41.759520039s
Simplifying prog options: 0s
Extracting C: 48.587585089s
Simplifying C: 4m43.869541973s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-prctl$PR_SET_NAME
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x180000c, &(0x7f00000006c0)=ANY=[], 0x1, 0x6ea, &(0x7f0000000180)="$eJzs3UtoHOcdAPD/7Eu7Ljhy4kdaAlliSEtFbclCadVL3VKKDqGE9NDzYsux8FoOklJkUxqlj3sPOfWUHnQLPZT0bmjPDSklVx0DhVxy0k1lZmf2Ia12V7ZeTX8/MTvffK/55j87M7s7iAng/9bSTFSeRhJLM29upss72/Pt8vb8VF7cjohaRJQiKp1ZJKuRld7Op/hmmpnXT7od/2twPR+uLL79+Vc7X1S7OZWifjLQbrzawaytfIpmRJTz+UHVQ3r8ZP/qB/q7c2h/k+ptYRqw60Xg4k/P1Ss8t70DtrplH/87ex3V/CjHLXBOJbE3NH864kJE1CM6V/387FA61cGdgK2zHgAAAAAcVePoTV7Yjd3YjIsnMRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ukoiyp1ZNpWKdDOS4vn/tTwv8vQ5NP5BiJ9NdeZPT34wAAAAAAAAAHDiXt2N3diMi8XyXpLd83+t7x7/N+K9WI/lWIsbsRmt2IiNWIu5iJju66i22drYWJvLWkZcHtHyVnw6pOWtw8d4+5i3GQAAAAAAAADOufqY8gfVg3m/jaXe/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPkohyZ5ZNl4v0dJQqEVEv6m1FfBoRtbMd7ZEkwzKfnv44AAAA4LnUBxeT+gRtXng/dmMzLhbLe0n2nf9q9n25Hu/FamzESmxEO5bjbv4dOv3WX9rZnm/vbM8/TKeD/f74yyMNPesxOr89DF/zy1mNRtyLlSznRtyJJPYypbyXl3e259P5w+Hj+iAdU/Kj3IjRlPvSd9OXa59k6T8O/opQOdImPqPSoSXTWWm1G5HZfGxpi0tFBIZHYmDvDHubVEauaS5K3V9+Lo9e0/CYfzB6my/sqzX0l5s+U2PKj8/+SNyKUncPXR0diYhv/+3jX95vrz64f299ZtwmnbH3x9bYH4n5vkhc+xpFYrzZLBJXustL8bP4RczEl1NvxVqsxK+iFRux3CzKW/n7OX2dHh2pzy70L701biTpMdnsnr+GjakZA2OKZvw0S7XitWyfXoyVSOJRRCzHG9nfrZjrng16e/jKBEd9aYIzbZ/r38lm3TBF4/C6f5msy+OSxvVSX1z7z7nTWVl/Ti9KLw6NUnGtm/x61KfyrTyR9vC7kdeH07Y/EnN9kXjpsPdLJ6R/zq4m6+3VB2v3W+9OuL7X83l6HP1hgqvE6Um35sWo5xt3KXtNsmNqNit7qXuFHYxXLb/j0lE6UHal265zpP48HsXdgSP1+7EQC7GY1b6a1a4euGKlZde6PQ2ew9Oy9JNWpXtjp//z1qNodz4PAXC+XfjuhVrjP41/Nj5q/L5xv/Fm/SdTP5h6pRbVf1R/WJktv156JflrfBS/6X3/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt364ycPWu328trwRGl4UTK6Vau9VzxIbESdgUSSPypngsrJ+uMne2M7HJ0onhz3jM2PM1E8hm985ebIfirPNYxka//+qo/fF8VTniZYRXIg4GnjZw5dseZeTvUc7Mr9iebxdVi8YfuKjv7ubQzbX+WIGFZ5zImjfBxnH+As3dx4+O7N9cdPvrfysPXO8jvLq9WFhcXZxYU35m/eW2kvz3Ze+xqcysNvgdPQ/3GiqxYRr45vO+JBrQAAAAAAAAAAAMAJOo3/hTjrbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ty3NROVpJDE3e2M2Xd7Znm+nU5Hu1axERCkikl9HJH+PuB2dKab7uksOW8+HK4tvf/7Vzhe9vipF/VLE1qHtJrOVT9GMiHI+P67+7ozvr9ZLTg0pTrqRSQN2vQgcnLX/BgAA//+Swe0F")
prctl$PR_SET_NAME(0xf, 0x0)
program crashed: possible deadlock in hfsplus_get_block
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m3.313148125s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x180000c, &(0x7f00000006c0)=ANY=[], 0x1, 0x6ea, &(0x7f0000000180)="$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")
program crashed: possible deadlock in hfsplus_get_block
extracting C reproducer
testing compiled C program (duration=1m3.313148125s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
simplifying C reproducer
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=1m3.313148125s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: possible deadlock in hfsplus_get_block
reproducing took 8m8.215173891s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
============================================
WARNING: possible recursive locking detected
6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 Not tainted
--------------------------------------------
syz-executor257/5310 is trying to acquire lock:
ffff88803f079548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0 fs/hfsplus/extents.c:260
but task is already holding lock:
ffff88803f0787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&HFSPLUS_I(inode)->extents_lock);
lock(&HFSPLUS_I(inode)->extents_lock);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor257/5310:
#0: ffff888035fa40e0 (&type->s_umount_key#42/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 fs/super.c:344
#1: ffff88804000b198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1380/0x1ca0 fs/hfsplus/super.c:559
#2: ffff8880402720b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#3: ffff88803f0787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#4: ffff88804000b0f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x9e/0x8c0 fs/hfsplus/bitmap.c:35
stack backtrace:
CPU: 0 UID: 0 PID: 5310 Comm: syz-executor257 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3037
check_deadlock kernel/locking/lockdep.c:3089 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3891
__lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
__mutex_lock_common kernel/locking/mutex.c:608 [inline]
__mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752
hfsplus_get_block+0x383/0x14f0 fs/hfsplus/extents.c:260
block_read_full_folio+0x418/0xcd0 fs/buffer.c:2401
filemap_read_folio+0x14b/0x630 mm/filemap.c:2367
do_read_cache_folio+0x3f5/0x850 mm/filemap.c:3825
do_read_cache_page+0x30/0x200 mm/filemap.c:3891
read_mapping_page include/linux/pagemap.h:1005 [inline]
hfsplus_block_allocate+0xee/0x8c0 fs/hfsplus/bitmap.c:37
hfsplus_file_extend+0xade/0x1b70 fs/hfsplus/extents.c:469
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
hfsplus_create_cat+0x1b0/0x1b70 fs/hfsplus/catalog.c:272
hfsplus_fill_super+0x13ee/0x1ca0 fs/hfsplus/super.c:566
mount_bdev+0x20a/0x2d0 fs/super.c:1693
legacy_get_tree+0xee/0x190 fs/fs_context.c:662
vfs_get_tree+0x90/0x2b0 fs/super.c:1814
do_new_mount+0x2be/0xb40 fs/namespace.c:3507
do_mount fs/namespace.c:3847 [inline]
__do_sys_mount fs/namespace.c:4057 [inline]
__se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4034
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc149f63dea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdab4b8048 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffdab4b8060 RCX: 00007fc149f63dea
RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffdab4b8060
RBP: 0000000000000004 R08: 00007ffdab4b80a0 R09: 00000000000006e4
R10: 000000000180000c R11: 0000000000000286 R12: 000000000180000c
R13: 00007ffdab4b80a0 R14: 0000000000000003 R15: 0000000000080000
final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
============================================
WARNING: possible recursive locking detected
6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 Not tainted
--------------------------------------------
syz-executor257/5310 is trying to acquire lock:
ffff88803f079548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0 fs/hfsplus/extents.c:260
but task is already holding lock:
ffff88803f0787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&HFSPLUS_I(inode)->extents_lock);
lock(&HFSPLUS_I(inode)->extents_lock);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor257/5310:
#0: ffff888035fa40e0 (&type->s_umount_key#42/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 fs/super.c:344
#1: ffff88804000b198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1380/0x1ca0 fs/hfsplus/super.c:559
#2: ffff8880402720b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#3: ffff88803f0787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#4: ffff88804000b0f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x9e/0x8c0 fs/hfsplus/bitmap.c:35
stack backtrace:
CPU: 0 UID: 0 PID: 5310 Comm: syz-executor257 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3037
check_deadlock kernel/locking/lockdep.c:3089 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3891
__lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
__mutex_lock_common kernel/locking/mutex.c:608 [inline]
__mutex_lock+0x136/0xd70 kernel/locking/mutex.c:752
hfsplus_get_block+0x383/0x14f0 fs/hfsplus/extents.c:260
block_read_full_folio+0x418/0xcd0 fs/buffer.c:2401
filemap_read_folio+0x14b/0x630 mm/filemap.c:2367
do_read_cache_folio+0x3f5/0x850 mm/filemap.c:3825
do_read_cache_page+0x30/0x200 mm/filemap.c:3891
read_mapping_page include/linux/pagemap.h:1005 [inline]
hfsplus_block_allocate+0xee/0x8c0 fs/hfsplus/bitmap.c:37
hfsplus_file_extend+0xade/0x1b70 fs/hfsplus/extents.c:469
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
hfsplus_create_cat+0x1b0/0x1b70 fs/hfsplus/catalog.c:272
hfsplus_fill_super+0x13ee/0x1ca0 fs/hfsplus/super.c:566
mount_bdev+0x20a/0x2d0 fs/super.c:1693
legacy_get_tree+0xee/0x190 fs/fs_context.c:662
vfs_get_tree+0x90/0x2b0 fs/super.c:1814
do_new_mount+0x2be/0xb40 fs/namespace.c:3507
do_mount fs/namespace.c:3847 [inline]
__do_sys_mount fs/namespace.c:4057 [inline]
__se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4034
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc149f63dea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdab4b8048 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffdab4b8060 RCX: 00007fc149f63dea
RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffdab4b8060
RBP: 0000000000000004 R08: 00007ffdab4b80a0 R09: 00000000000006e4
R10: 000000000180000c R11: 0000000000000286 R12: 000000000180000c
R13: 00007ffdab4b80a0 R14: 0000000000000003 R15: 0000000000080000