Extracting prog: 2m18.281162097s Minimizing prog: 4m39.283474091s Simplifying prog options: 0s Extracting C: 2m22.056006495s Simplifying C: 8m50.992844271s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000200)='./file2\x00', 0x10108d4, &(0x7f00000000c0)=ANY=[], 0xfb, 0x65e, &(0x7f00000012c0)="$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") open(&(0x7f00000001c0)='./file0/file0\x00', 0x200, 0x54) program crashed: possible deadlock in hfsplus_get_block single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=45.525816076s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000200)='./file2\x00', 0x10108d4, &(0x7f00000000c0)=ANY=[], 0xfb, 0x65e, &(0x7f00000012c0)="$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") program did not crash testing program (duration=45.525816076s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open detailed listing: executing program 0: open(&(0x7f00000001c0)='./file0/file0\x00', 0x200, 0x54) program did not crash testing program (duration=45.525816076s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000200)='./file2\x00', 0x10108d4, &(0x7f00000000c0)=ANY=[], 0xfb, 0x65e, &(0x7f00000012c0)="$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") open(0x0, 0x200, 0x54) program did not crash extracting C reproducer testing compiled C program (duration=45.525816076s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block simplifying C reproducer testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block testing compiled C program (duration=45.525816076s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open program crashed: possible deadlock in hfsplus_get_block reproducing took 18m10.613520873s repro crashed as (corrupted=false): WARNING: The mand mount option has been deprecated and and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= ============================================ WARNING: possible recursive locking detected 5.15.184-syzkaller #0 Not tainted -------------------------------------------- syz-executor245/4166 is trying to acquire lock: ffff888079901548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39b/0x1530 fs/hfsplus/extents.c:260 but task is already holding lock: ffff888079ad8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40 fs/hfsplus/extents.c:577 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&HFSPLUS_I(inode)->extents_lock); lock(&HFSPLUS_I(inode)->extents_lock); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by syz-executor245/4166: #0: ffff88801abce460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377 #1: ffff888079ad9080 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline] #1: ffff888079ad9080 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x183/0x220 fs/open.c:63 #2: ffff888079ad8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40 fs/hfsplus/extents.c:577 #3: ffff888079c978f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xc1/0x4d0 fs/hfsplus/bitmap.c:182 stack backtrace: CPU: 0 PID: 4166 Comm: syz-executor245 Not tainted 5.15.184-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106 __lock_acquire+0x1227/0x7c60 kernel/locking/lockdep.c:-1 lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623 __mutex_lock_common+0x1eb/0x2390 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 hfsplus_get_block+0x39b/0x1530 fs/hfsplus/extents.c:260 block_read_full_page+0x2e8/0xd10 fs/buffer.c:2290 do_read_cache_page+0x8a1/0x1030 mm/filemap.c:-1 read_mapping_page include/linux/pagemap.h:515 [inline] hfsplus_block_free+0x125/0x4d0 fs/hfsplus/bitmap.c:185 hfsplus_free_extents+0x176/0xac0 fs/hfsplus/extents.c:363 hfsplus_file_truncate+0x745/0xb40 fs/hfsplus/extents.c:592 hfsplus_setattr+0x1c0/0x280 fs/hfsplus/inode.c:267 notify_change+0xbcd/0xee0 fs/attr.c:505 do_truncate+0x197/0x220 fs/open.c:65 handle_truncate fs/namei.c:3265 [inline] do_open fs/namei.c:3612 [inline] path_openat+0x28af/0x2f30 fs/namei.c:3742 do_filp_open+0x1b3/0x3e0 fs/namei.c:3769 do_sys_openat2+0x142/0x4a0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_open fs/open.c:1277 [inline] __se_sys_open fs/open.c:1273 [inline] __x64_sys_open+0x11b/0x140 fs/open.c:1273 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f8abb8b6679 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcb3c11558 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ffcb3c11738 RCX: 00007f8abb8b6679 RDX: 0000000000000054 RSI: 0000000000000200 RDI: 00002000000001c0 RBP: 00007f8abb929610 R08: 0000000000000658 R09: 0000000000000000 R10: 00007ffcb3c11420 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffcb3c11728 R14: 0000000000000001 R15: 0000000000000001 final repro crashed as (corrupted=false): WARNING: The mand mount option has been deprecated and and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= ============================================ WARNING: possible recursive locking detected 5.15.184-syzkaller #0 Not tainted -------------------------------------------- syz-executor245/4166 is trying to acquire lock: ffff888079901548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39b/0x1530 fs/hfsplus/extents.c:260 but task is already holding lock: ffff888079ad8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40 fs/hfsplus/extents.c:577 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&HFSPLUS_I(inode)->extents_lock); lock(&HFSPLUS_I(inode)->extents_lock); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by syz-executor245/4166: #0: ffff88801abce460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:377 #1: ffff888079ad9080 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:787 [inline] #1: ffff888079ad9080 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x183/0x220 fs/open.c:63 #2: ffff888079ad8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40 fs/hfsplus/extents.c:577 #3: ffff888079c978f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xc1/0x4d0 fs/hfsplus/bitmap.c:182 stack backtrace: CPU: 0 PID: 4166 Comm: syz-executor245 Not tainted 5.15.184-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106 __lock_acquire+0x1227/0x7c60 kernel/locking/lockdep.c:-1 lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623 __mutex_lock_common+0x1eb/0x2390 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 hfsplus_get_block+0x39b/0x1530 fs/hfsplus/extents.c:260 block_read_full_page+0x2e8/0xd10 fs/buffer.c:2290 do_read_cache_page+0x8a1/0x1030 mm/filemap.c:-1 read_mapping_page include/linux/pagemap.h:515 [inline] hfsplus_block_free+0x125/0x4d0 fs/hfsplus/bitmap.c:185 hfsplus_free_extents+0x176/0xac0 fs/hfsplus/extents.c:363 hfsplus_file_truncate+0x745/0xb40 fs/hfsplus/extents.c:592 hfsplus_setattr+0x1c0/0x280 fs/hfsplus/inode.c:267 notify_change+0xbcd/0xee0 fs/attr.c:505 do_truncate+0x197/0x220 fs/open.c:65 handle_truncate fs/namei.c:3265 [inline] do_open fs/namei.c:3612 [inline] path_openat+0x28af/0x2f30 fs/namei.c:3742 do_filp_open+0x1b3/0x3e0 fs/namei.c:3769 do_sys_openat2+0x142/0x4a0 fs/open.c:1253 do_sys_open fs/open.c:1269 [inline] __do_sys_open fs/open.c:1277 [inline] __se_sys_open fs/open.c:1273 [inline] __x64_sys_open+0x11b/0x140 fs/open.c:1273 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f8abb8b6679 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcb3c11558 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ffcb3c11738 RCX: 00007f8abb8b6679 RDX: 0000000000000054 RSI: 0000000000000200 RDI: 00002000000001c0 RBP: 00007f8abb929610 R08: 0000000000000658 R09: 0000000000000000 R10: 00007ffcb3c11420 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffcb3c11728 R14: 0000000000000001 R15: 0000000000000001