Extracting prog: 3m8.587651526s
Minimizing prog: 12m20.47020629s
Simplifying prog options: 0s
Extracting C: 30.768684709s
Simplifying C: 10m42.061537173s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program crashed: possible deadlock in hfsplus_get_block
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$eJzs3c9rHOcdB+DPrFay1gVHSewkLS0V9qElprZWmzg6FOqWUnQIJdBLLjkIW46F10qQlKKEUuT+vPY/SEqRzz31UHowpOdeexT0kEOhd91UZnZWWluyIsWKdpU8D7z7vjPvvO+875fZVzuziA3wtTX/dsYfpcj81TfXy+2tzU53a7Nzv19Oci5JI2n2shTLSfFpcjO9lG+WO+vuiqed552P35j7rP3wQVI0e301+8c3Dmt3NBt1ynSSsTo/qf5uPb2/naN1V+zOsAzYlX7gYNh29tk4TvNnfN8Co2wqOZ9ksv4ckHp1aAx5WM/sWKscAAAAnFHPbWc767kw7HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWVIkY72sSo1+eTpF//f/J+p9qctn2qNhDwAAAAAAAAAATsB3t7Od9Vzob+8U1Xf+l6uNi9XrN/JBVrOY5FrWs5C1rGUl7SRTAx1NrC+sra20D2y5MtCySDYeH0Kv5ewpTBYAAAAAAAAAvrp+k/m97/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAUFMlYL6vSxX55Ko1mkskkE+VxG8k/+uWz7NGwBwAAAACn4LntbGc9F/rbO0V1z/9Sdd8/mQ+ynLUsZS3dLOZ29Sygd9ff2NrsdLc2O/fLtL/fH//vWMOoekzv2cPBZ56pjri022I+P8svcjXTeSsrWcovs5C1LGY6P61KCykyVT+9mOqP8+Dx3nxs663PG+sr1UhauZOlamzXcivvpZvbaVRzqI45/IwPyugUP6odMUa367yc0Z/qfDRMVREZ343ITB37MhrPHx6JY14nT56pncbuM6iL/z75mJ+v8zLWfxjpmM8OXH0vHR7z5PJ/vvO3u93le3fvrF4dnSl9QU9GojMQiZe/VpGYqKPRW0WPt1pertpeyFJ+nvdyO4t5PXN5PbN5La9lJnO5MRDXS0dY3xrHe69d+X5daCX5Y52PhjKuzw/EdXClm6rqBvf0olReTC+c/F+B5rfqQnmO39b5aHgyEu2B6+XF/ZFoDjT98075utpdvrdyd+H9I57ve3VeRvr3I7U2l9fLC+lP8fGro6x78cC6dlV3cbeusa/u0m7d571TJ+rPcPt7mq3qXj6wrlPVvTJQd9CnHABG1N532udfPT/R+m/rX61PWr9r3W29OfmTc3Pnvj2R8X82/z7218bDxg+LV/NJfr13/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxxqx9+dG+h2/8ZgG53caW35ytW+EtGYhgKI1VoJakKk/X1v/+Y/q9VDXuoRy2M56Q6HNKCBJya62v337+++uFHP1i6v/Du4ruLy51O+8bs3I252RvX7yx1F2d6r8MeJvAl2PujP+yRAAAAAAAAAAAAAEd1Gv+WMOw5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfb/NsZf5Qi7ZlrM+X21manW6Z+ee/IZpJGkuJXSfFpcjO9lKmB7oqnneedj9+Y+6z98MFeX83+8Y3D2h3NRp0ynWSszk+qv1vP3F+xO8MyYFf6gYNh+38AAAD//5zxAnU=")
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
program crashed: possible deadlock in hfsplus_get_block
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program crashed: possible deadlock in hfsplus_get_block
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program crashed: possible deadlock in hfsplus_get_block
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_clone
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340), 0x3, 0x608, &(0x7f0000000c40)="$eJzs3c9rHOcdB+DPrFay1gVHSewkLS0V9qElprZWmzg6FOqWUnQIJdBLLjkIW46F10qQlKKEUuT+vPY/SEqRzz31UHowpOdeexT0kEOhd91UZnZWWluyIsWKdpU8D7z7vjPvvO+875fZVzuziA3wtTX/dsYfpcj81TfXy+2tzU53a7Nzv19Oci5JI2n2shTLSfFpcjO9lG+WO+vuiqed552P35j7rP3wQVI0e301+8c3Dmt3NBt1ynSSsTo/qf5uPb2/naN1V+zOsAzYlX7gYNh29tk4TvNnfN8Co2wqOZ9ksv4ckHp1aAx5WM/sWKscAAAAnFHPbWc767kw7HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWVIkY72sSo1+eTpF//f/J+p9qctn2qNhDwAAAAAAAAAATsB3t7Od9Vzob+8U1Xf+l6uNi9XrN/JBVrOY5FrWs5C1rGUl7SRTAx1NrC+sra20D2y5MtCySDYeH0Kv5ewpTBYAAAAAAAAAvrp+k/m97/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAUFMlYL6vSxX55Ko1mkskkE+VxG8k/+uWz7NGwBwAAAACn4LntbGc9F/rbO0V1z/9Sdd8/mQ+ynLUsZS3dLOZ29Sygd9ff2NrsdLc2O/fLtL/fH//vWMOoekzv2cPBZ56pjri022I+P8svcjXTeSsrWcovs5C1LGY6P61KCykyVT+9mOqP8+Dx3nxs663PG+sr1UhauZOlamzXcivvpZvbaVRzqI45/IwPyugUP6odMUa367yc0Z/qfDRMVREZ343ITB37MhrPHx6JY14nT56pncbuM6iL/z75mJ+v8zLWfxjpmM8OXH0vHR7z5PJ/vvO3u93le3fvrF4dnSl9QU9GojMQiZe/VpGYqKPRW0WPt1pertpeyFJ+nvdyO4t5PXN5PbN5La9lJnO5MRDXS0dY3xrHe69d+X5daCX5Y52PhjKuzw/EdXClm6rqBvf0olReTC+c/F+B5rfqQnmO39b5aHgyEu2B6+XF/ZFoDjT98075utpdvrdyd+H9I57ve3VeRvr3I7U2l9fLC+lP8fGro6x78cC6dlV3cbeusa/u0m7d571TJ+rPcPt7mq3qXj6wrlPVvTJQd9CnHABG1N532udfPT/R+m/rX61PWr9r3W29OfmTc3Pnvj2R8X82/z7218bDxg+LV/NJfr13/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxxqx9+dG+h2/8ZgG53caW35ytW+EtGYhgKI1VoJakKk/X1v/+Y/q9VDXuoRy2M56Q6HNKCBJya62v337+++uFHP1i6v/Du4ruLy51O+8bs3I252RvX7yx1F2d6r8MeJvAl2PujP+yRAAAAAAAAAAAAAEd1Gv+WMOw5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfb/NsZf5Qi7ZlrM+X21manW6Z+ee/IZpJGkuJXSfFpcjO9lKmB7oqnneedj9+Y+6z98MFeX83+8Y3D2h3NRp0ynWSszk+qv1vP3F+xO8MyYFf6gYNh+38AAAD//5zxAnU=")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
program crashed: possible deadlock in hfsplus_get_block
validation run: crashed=true
reproducing took 29m58.395285789s
repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz-executor/5449 is trying to acquire lock:
ffff888011071548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x15d0 fs/hfsplus/extents.c:260
but task is already holding lock:
ffff888011072988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x290/0xbd0 fs/hfsplus/extents.c:573
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&HFSPLUS_I(inode)->extents_lock);
lock(&HFSPLUS_I(inode)->extents_lock);
*** DEADLOCK ***
May be due to missing lock nesting notation
6 locks held by syz-executor/5449:
#0: ffff888011a8a420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:499
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2864 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2875 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x560 fs/namei.c:5420
#2: ffff888011072b78 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#2: ffff888011072b78 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: vfs_unlink+0xef/0x640 fs/namei.c:5355
#3: ffff8880590c0998 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_unlink+0x160/0x730 fs/hfsplus/dir.c:370
#4: ffff888011072988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x290/0xbd0 fs/hfsplus/extents.c:573
#5: ffff8880590c08f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xc7/0x5f0 fs/hfsplus/bitmap.c:182
stack backtrace:
CPU: 0 UID: 0 PID: 5449 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x117/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfsplus_get_block+0x398/0x15d0 fs/hfsplus/extents.c:260
block_read_full_folio+0x29f/0x830 fs/buffer.c:2420
filemap_read_folio+0x117/0x380 mm/filemap.c:2489
do_read_cache_folio+0x350/0x590 mm/filemap.c:4082
do_read_cache_page mm/filemap.c:4148 [inline]
read_cache_page+0x5d/0x170 mm/filemap.c:4157
read_mapping_page include/linux/pagemap.h:1003 [inline]
hfsplus_block_free+0x134/0x5f0 fs/hfsplus/bitmap.c:185
hfsplus_free_extents+0x121/0xa50 fs/hfsplus/extents.c:360
hfsplus_file_truncate+0x737/0xbd0 fs/hfsplus/extents.c:588
hfsplus_delete_inode+0x180/0x230 fs/hfsplus/inode.c:-1
hfsplus_unlink+0x4e3/0x730 fs/hfsplus/dir.c:405
vfs_unlink+0x380/0x640 fs/namei.c:5369
do_unlinkat+0x2cf/0x560 fs/namei.c:5439
__do_sys_unlink fs/namei.c:5474 [inline]
__se_sys_unlink fs/namei.c:5472 [inline]
__x64_sys_unlink+0x47/0x50 fs/namei.c:5472
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5bd058ed77
Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffea4a150c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bd058ed77
RDX: 00007ffea4a150f0 RSI: 00007ffea4a15180 RDI: 00007ffea4a15180
RBP: 00007ffea4a15180 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffea4a16270
R13: 00007f5bd0613d7d R14: 0000000000019411 R15: 00007ffea4a17340
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 144, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 131, count 2
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 133, count 1
hfsplus: invalid extended attribute record
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 134, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 135, count 9
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 144, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 131, count 2
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 133, count 1
hfsplus: invalid extended attribute record
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 134, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 135, count 9
final repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz-executor/5449 is trying to acquire lock:
ffff888011071548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x15d0 fs/hfsplus/extents.c:260
but task is already holding lock:
ffff888011072988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x290/0xbd0 fs/hfsplus/extents.c:573
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&HFSPLUS_I(inode)->extents_lock);
lock(&HFSPLUS_I(inode)->extents_lock);
*** DEADLOCK ***
May be due to missing lock nesting notation
6 locks held by syz-executor/5449:
#0: ffff888011a8a420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:499
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2864 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2875 [inline]
#1: ffff888011071df8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x560 fs/namei.c:5420
#2: ffff888011072b78 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#2: ffff888011072b78 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: vfs_unlink+0xef/0x640 fs/namei.c:5355
#3: ffff8880590c0998 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_unlink+0x160/0x730 fs/hfsplus/dir.c:370
#4: ffff888011072988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x290/0xbd0 fs/hfsplus/extents.c:573
#5: ffff8880590c08f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xc7/0x5f0 fs/hfsplus/bitmap.c:182
stack backtrace:
CPU: 0 UID: 0 PID: 5449 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x117/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfsplus_get_block+0x398/0x15d0 fs/hfsplus/extents.c:260
block_read_full_folio+0x29f/0x830 fs/buffer.c:2420
filemap_read_folio+0x117/0x380 mm/filemap.c:2489
do_read_cache_folio+0x350/0x590 mm/filemap.c:4082
do_read_cache_page mm/filemap.c:4148 [inline]
read_cache_page+0x5d/0x170 mm/filemap.c:4157
read_mapping_page include/linux/pagemap.h:1003 [inline]
hfsplus_block_free+0x134/0x5f0 fs/hfsplus/bitmap.c:185
hfsplus_free_extents+0x121/0xa50 fs/hfsplus/extents.c:360
hfsplus_file_truncate+0x737/0xbd0 fs/hfsplus/extents.c:588
hfsplus_delete_inode+0x180/0x230 fs/hfsplus/inode.c:-1
hfsplus_unlink+0x4e3/0x730 fs/hfsplus/dir.c:405
vfs_unlink+0x380/0x640 fs/namei.c:5369
do_unlinkat+0x2cf/0x560 fs/namei.c:5439
__do_sys_unlink fs/namei.c:5474 [inline]
__se_sys_unlink fs/namei.c:5472 [inline]
__x64_sys_unlink+0x47/0x50 fs/namei.c:5472
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5bd058ed77
Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffea4a150c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bd058ed77
RDX: 00007ffea4a150f0 RSI: 00007ffea4a15180 RDI: 00007ffea4a15180
RBP: 00007ffea4a15180 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffea4a16270
R13: 00007f5bd0613d7d R14: 0000000000019411 R15: 00007ffea4a17340
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 144, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 131, count 2
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 133, count 1
hfsplus: invalid extended attribute record
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 134, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 135, count 9
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 144, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 131, count 2
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 133, count 1
hfsplus: invalid extended attribute record
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 134, count 1
hfsplus: unable to mark blocks free: error -5
hfsplus: can't free extent: start 135, count 9