./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3108713928
<...>
Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts.
execve("./syz-executor3108713928", ["./syz-executor3108713928"], 0x7fff25211d70 /* 10 vars */) = 0
brk(NULL) = 0x555565550000
brk(0x555565550d00) = 0x555565550d00
arch_prctl(ARCH_SET_FS, 0x555565550380) = 0
set_tid_address(0x555565550650) = 5838
set_robust_list(0x555565550660, 24) = 0
rseq(0x555565550ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3108713928", 4096) = 28
getrandom("\xfc\xbd\x03\x04\xc9\x7a\x6f\x88", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555565550d00
brk(0x555565571d00) = 0x555565571d00
brk(0x555565572000) = 0x555565572000
mprotect(0x7effd4e18000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached
, child_tidptr=0x555565550650) = 5840
[pid 5840] set_robust_list(0x555565550660, 24) = 0
[pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5840] setpgid(0, 0) = 0
[pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5840] write(3, "1000", 4) = 4
[pid 5840] close(3) = 0
executing program
[pid 5840] write(1, "executing program\n", 18) = 18
[pid 5840] memfd_create("syzkaller", 0) = 3
[pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7effcc800000
[pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid 5840] munmap(0x7effcc800000, 138412032) = 0
[pid 5840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5840] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5840] close(3) = 0
[pid 5840] close(4) = 0
[pid 5840] mkdir("./bus", 0777) = 0
[pid 5840] mount("/dev/loop0", "./bus", "hfsplus", MS_RDONLY|MS_NOSUID|MS_SYNCHRONOUS|MS_RELATIME, "") = 0
[pid 5840] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5840] chdir("./bus") = 0
[pid 5840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5840] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL) = 0
[ 94.434343][ T5840] loop0: detected capacity change from 0 to 1024
[pid 5840] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = 4
[ 94.506189][ T5840]
[ 94.508580][ T5840] ============================================
[ 94.514733][ T5840] WARNING: possible recursive locking detected
[ 94.520896][ T5840] 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 Not tainted
[ 94.528027][ T5840] --------------------------------------------
[ 94.534174][ T5840] syz-executor310/5840 is trying to acquire lock:
[ 94.540583][ T5840] ffff88807fe920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0
[ 94.550289][ T5840]
[ 94.550289][ T5840] but task is already holding lock:
[ 94.557656][ T5840] ffff88807fe920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0
[ 94.567442][ T5840]
[ 94.567442][ T5840] other info that might help us debug this:
[ 94.575504][ T5840] Possible unsafe locking scenario:
[ 94.575504][ T5840]
[ 94.582960][ T5840] CPU0
[ 94.586242][ T5840] ----
[ 94.589529][ T5840] lock(&tree->tree_lock/1);
[ 94.594223][ T5840] lock(&tree->tree_lock/1);
[ 94.598913][ T5840]
[ 94.598913][ T5840] *** DEADLOCK ***
[ 94.598913][ T5840]
[ 94.607059][ T5840] May be due to missing lock nesting notation
[ 94.607059][ T5840]
[ 94.615475][ T5840] 5 locks held by syz-executor310/5840:
[ 94.621057][ T5840] #0: ffff88807fe90428 (sb_writers#8){.+.+}-{0:0}, at: vfs_writev+0x288/0x960
[ 94.630061][ T5840] #1: ffff88807feaa4b8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: generic_file_write_iter+0xe3/0x540
[ 94.641401][ T5840] #2: ffff88807feaa2c8 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990
[ 94.651780][ T5840] #3: ffff88807fe920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0
[ 94.661992][ T5840] #4: ffff88807fea8108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990
[ 94.673584][ T5840]
[ 94.673584][ T5840] stack backtrace:
[ 94.679490][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor310 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full)
[ 94.679510][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 94.679525][ T5840] Call Trace:
[ 94.679535][ T5840]
[ 94.679543][ T5840] dump_stack_lvl+0x189/0x250
[ 94.679564][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10
[ 94.679581][ T5840] ? __pfx__printk+0x10/0x10
[ 94.679601][ T5840] ? print_lock_name+0xde/0x100
[ 94.679620][ T5840] print_deadlock_bug+0x28b/0x2a0
[ 94.679647][ T5840] validate_chain+0x1a3f/0x2140
[ 94.679673][ T5840] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 94.679703][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 94.679734][ T5840] __lock_acquire+0xab9/0xd20
[ 94.679750][ T5840] ? hfsplus_find_init+0x15a/0x1d0
[ 94.679764][ T5840] lock_acquire+0x120/0x360
[ 94.679776][ T5840] ? hfsplus_find_init+0x15a/0x1d0
[ 94.679791][ T5840] ? do_iter_readv_writev+0x56b/0x7f0
[ 94.679806][ T5840] ? __se_sys_pwritev2+0x179/0x290
[ 94.679821][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.679838][ T5840] __mutex_lock+0x182/0xe80
[ 94.679854][ T5840] ? hfsplus_find_init+0x15a/0x1d0
[ 94.679872][ T5840] ? hfsplus_find_init+0x15a/0x1d0
[ 94.679886][ T5840] ? __pfx___mutex_lock+0x10/0x10
[ 94.679905][ T5840] ? rcu_is_watching+0x15/0xb0
[ 94.679921][ T5840] ? __kmalloc_noprof+0x29b/0x4f0
[ 94.679935][ T5840] ? hfsplus_find_init+0x8c/0x1d0
[ 94.679952][ T5840] hfsplus_find_init+0x15a/0x1d0
[ 94.679967][ T5840] hfsplus_file_extend+0x416/0x1990
[ 94.679991][ T5840] ? __pfx_hfsplus_file_extend+0x10/0x10
[ 94.680010][ T5840] ? __mutex_trylock_common+0x153/0x260
[ 94.680029][ T5840] ? __pfx___mutex_trylock_common+0x10/0x10
[ 94.680046][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.680063][ T5840] ? trace_contention_end+0x39/0x120
[ 94.680081][ T5840] ? __mutex_lock+0x330/0xe80
[ 94.680097][ T5840] ? hfsplus_brec_find+0x191/0x500
[ 94.680114][ T5840] hfsplus_bmap_reserve+0x122/0x500
[ 94.680141][ T5840] __hfsplus_ext_write_extent+0x28d/0x5b0
[ 94.680163][ T5840] __hfsplus_ext_cache_extent+0x89/0xe30
[ 94.680186][ T5840] hfsplus_file_extend+0x444/0x1990
[ 94.680214][ T5840] ? __pfx_hfsplus_file_extend+0x10/0x10
[ 94.680236][ T5840] ? clean_bdev_aliases+0x5c9/0x6b0
[ 94.680258][ T5840] ? __pfx_clean_bdev_aliases+0x10/0x10
[ 94.680279][ T5840] hfsplus_get_block+0x411/0x1530
[ 94.680302][ T5840] ? __pfx_hfsplus_get_block+0x10/0x10
[ 94.680321][ T5840] ? do_raw_spin_unlock+0x122/0x240
[ 94.680341][ T5840] ? _raw_spin_unlock+0x28/0x50
[ 94.680366][ T5840] __block_write_begin_int+0x6b2/0x1900
[ 94.680390][ T5840] ? folio_add_lru+0x106/0x220
[ 94.680404][ T5840] ? __pfx_hfsplus_get_block+0x10/0x10
[ 94.680424][ T5840] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.680447][ T5840] cont_write_begin+0x789/0xb50
[ 94.680471][ T5840] ? __pfx_cont_write_begin+0x10/0x10
[ 94.680492][ T5840] ? folio_unlock+0x101/0x160
[ 94.680514][ T5840] hfsplus_write_begin+0x66/0xb0
[ 94.680531][ T5840] ? __pfx_hfsplus_get_block+0x10/0x10
[ 94.680551][ T5840] cont_write_begin+0x2fa/0xb50
[ 94.680575][ T5840] ? __pfx_cont_write_begin+0x10/0x10
[ 94.680598][ T5840] hfsplus_write_begin+0x66/0xb0
[ 94.680614][ T5840] ? __pfx_hfsplus_get_block+0x10/0x10
[ 94.680634][ T5840] generic_perform_write+0x2c4/0x910
[ 94.680654][ T5840] ? __pfx_generic_perform_write+0x10/0x10
[ 94.680670][ T5840] ? file_update_time+0x2da/0x490
[ 94.680692][ T5840] ? __generic_file_write_iter+0xf9/0x230
[ 94.680707][ T5840] ? generic_file_write_iter+0xfb/0x540
[ 94.680723][ T5840] generic_file_write_iter+0x10f/0x540
[ 94.680740][ T5840] ? __pfx_generic_file_write_iter+0x10/0x10
[ 94.680755][ T5840] ? __switch_to+0xd74/0x1600
[ 94.680778][ T5840] ? __lock_acquire+0xab9/0xd20
[ 94.680793][ T5840] ? finish_task_switch+0x18b/0x950
[ 94.680819][ T5840] ? finish_task_switch+0x266/0x950
[ 94.680848][ T5840] do_iter_readv_writev+0x56b/0x7f0
[ 94.680864][ T5840] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 94.680878][ T5840] ? rcu_read_lock_any_held+0xb3/0x120
[ 94.680901][ T5840] vfs_writev+0x31a/0x960
[ 94.680922][ T5840] ? __pfx_vfs_writev+0x10/0x10
[ 94.680940][ T5840] ? _raw_spin_lock_irq+0xae/0xf0
[ 94.680984][ T5840] ? _raw_spin_unlock_irq+0x2e/0x50
[ 94.681005][ T5840] __se_sys_pwritev2+0x179/0x290
[ 94.681023][ T5840] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 94.681041][ T5840] ? __x64_sys_pwritev2+0x20/0xc0
[ 94.681057][ T5840] do_syscall_64+0xfa/0x3b0
[ 94.681073][ T5840] ? lockdep_hardirqs_on+0x9c/0x150
[ 94.681088][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.681102][ T5840] ? clear_bhb_loop+0x60/0xb0
[ 94.681119][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.681134][ T5840] RIP: 0033:0x7effd4da4b99
[ 94.681151][ T5840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 94.681164][ T5840] RSP: 002b:00007ffc96f3a588 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 94.681179][ T5840] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007effd4da4b99
[ 94.681191][ T5840] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[ 94.681205][ T5840] RBP: 00007effd4e185f0 R08: 0000000000000000 R09: 0000000000000002
[ 94.681214][ T5840] R10: 0000000001ffffff R11: 0000000000000246 R12: 00007ffc96f3a5c0
[ 94.681224][ T5840] R13: 00007ffc96f3a7e8 R14: 0000200000000084 R15: 0000200000000080
[ 94.681241][ T5840]
[ 97.231552][ T121] cfg80211: failed to load regulatory.db
[pid 5840] pwritev2(4, [{iov_base="\x84", iov_len=1}], 1, 33554431, RWF_DSYNC
[pid 5838] kill(-5840, SIGKILL) = 0
[pid 5838] kill(5840, SIGKILL) = 0
[pid 5838] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid 5838] getdents64(3, 0x5555655516f0 /* 2 entries */, 32768) = 48
[pid 5838] getdents64(3, 0x5555655516f0 /* 0 entries */, 32768) = 0
[pid 5838] close(3) = 0