./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1139840454 <...> Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. execve("./syz-executor1139840454", ["./syz-executor1139840454"], 0x7ffcd60f70c0 /* 10 vars */) = 0 brk(NULL) = 0x55556abd6000 brk(0x55556abd6d00) = 0x55556abd6d00 arch_prctl(ARCH_SET_FS, 0x55556abd6380) = 0 set_tid_address(0x55556abd6650) = 5835 set_robust_list(0x55556abd6660, 24) = 0 rseq(0x55556abd6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1139840454", 4096) = 28 getrandom("\xae\x0b\xd6\xd7\xe7\xcc\x5f\x8c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556abd6d00 brk(0x55556abf7d00) = 0x55556abf7d00 brk(0x55556abf8000) = 0x55556abf8000 mprotect(0x7f6f491c2000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f40c00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f6f40c00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "hfsplus", 0, "part=0x000000000000500f,nodecompose,decompose,part=0x000000000000000c,uid=0x0000000000000000,barrier"...) = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 87.784160][ T5835] loop0: detected capacity change from 0 to 1024 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 87.877387][ T5835] [ 87.879749][ T5835] ============================================ [ 87.886155][ T5835] WARNING: possible recursive locking detected [ 87.892302][ T5835] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted [ 87.899400][ T5835] -------------------------------------------- [ 87.905539][ T5835] syz-executor113/5835 is trying to acquire lock: [ 87.911942][ T5835] ffff888034c51548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 87.922868][ T5835] [ 87.922868][ T5835] but task is already holding lock: [ 87.930232][ T5835] ffff888034c52988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x294/0xb40 [ 87.941379][ T5835] [ 87.941379][ T5835] other info that might help us debug this: [ 87.949442][ T5835] Possible unsafe locking scenario: [ 87.949442][ T5835] [ 87.956892][ T5835] CPU0 [ 87.960171][ T5835] ---- [ 87.963452][ T5835] lock(&HFSPLUS_I(inode)->extents_lock); [ 87.969262][ T5835] lock(&HFSPLUS_I(inode)->extents_lock); [ 87.975085][ T5835] [ 87.975085][ T5835] *** DEADLOCK *** [ 87.975085][ T5835] [ 87.983228][ T5835] May be due to missing lock nesting notation [ 87.983228][ T5835] [ 87.991636][ T5835] 4 locks held by syz-executor113/5835: [ 87.997182][ T5835] #0: ffff8880293e8428 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 88.006513][ T5835] #1: ffff888034c52b78 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 88.016887][ T5835] #2: ffff888034c52988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x294/0xb40 [ 88.028467][ T5835] #3: ffff8880283338f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xbe/0x550 [ 88.038487][ T5835] [ 88.038487][ T5835] stack backtrace: [ 88.044374][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor113 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 88.044392][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.044402][ T5835] Call Trace: [ 88.044409][ T5835] [ 88.044417][ T5835] dump_stack_lvl+0x189/0x250 [ 88.044435][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.044450][ T5835] ? __pfx__printk+0x10/0x10 [ 88.044465][ T5835] ? __kasan_check_byte+0x12/0x40 [ 88.044486][ T5835] ? print_lock_name+0xde/0x100 [ 88.044504][ T5835] print_deadlock_bug+0x28b/0x2a0 [ 88.044521][ T5835] validate_chain+0x1a3f/0x2140 [ 88.044541][ T5835] ? is_bpf_text_address+0x292/0x2b0 [ 88.044555][ T5835] ? is_bpf_text_address+0x26/0x2b0 [ 88.044567][ T5835] ? look_up_lock_class+0x74/0x170 [ 88.044596][ T5835] ? register_lock_class+0x51/0x320 [ 88.044609][ T5835] __lock_acquire+0xab9/0xd20 [ 88.044624][ T5835] ? hfsplus_get_block+0x39e/0x1530 [ 88.044637][ T5835] lock_acquire+0x120/0x360 [ 88.044649][ T5835] ? hfsplus_get_block+0x39e/0x1530 [ 88.044663][ T5835] ? __pfx_hlock_conflict+0x10/0x10 [ 88.044681][ T5835] __mutex_lock+0x182/0xe80 [ 88.044693][ T5835] ? hfsplus_get_block+0x39e/0x1530 [ 88.044707][ T5835] ? lockdep_unlock+0x89/0x120 [ 88.044726][ T5835] ? validate_chain+0x897/0x2140 [ 88.044741][ T5835] ? hfsplus_get_block+0x39e/0x1530 [ 88.044755][ T5835] ? __pfx___mutex_lock+0x10/0x10 [ 88.044773][ T5835] hfsplus_get_block+0x39e/0x1530 [ 88.044791][ T5835] ? __pfx_hfsplus_get_block+0x10/0x10 [ 88.044805][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 88.044823][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 88.044842][ T5835] block_read_full_folio+0x29c/0x830 [ 88.044860][ T5835] ? __pfx_hfsplus_get_block+0x10/0x10 [ 88.044874][ T5835] filemap_read_folio+0x114/0x380 [ 88.044894][ T5835] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 88.044915][ T5835] ? __pfx_filemap_read_folio+0x10/0x10 [ 88.044934][ T5835] ? filemap_add_folio+0x1af/0x270 [ 88.044951][ T5835] do_read_cache_folio+0x350/0x590 [ 88.044970][ T5835] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 88.044992][ T5835] read_cache_page+0x5d/0x170 [ 88.045011][ T5835] hfsplus_block_free+0x121/0x550 [ 88.045033][ T5835] hfsplus_free_extents+0x176/0xae0 [ 88.045049][ T5835] hfsplus_file_truncate+0x736/0xb40 [ 88.045067][ T5835] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 88.045082][ T5835] ? unmap_mapping_range+0xde/0x170 [ 88.045100][ T5835] ? __pfx_unmap_mapping_range+0x10/0x10 [ 88.045117][ T5835] ? truncate_setsize+0xcf/0xf0 [ 88.045130][ T5835] hfsplus_setattr+0x1c4/0x270 [ 88.045143][ T5835] ? __pfx_hfsplus_setattr+0x10/0x10 [ 88.045157][ T5835] notify_change+0xb33/0xe40 [ 88.045178][ T5835] do_truncate+0x1a4/0x220 [ 88.045197][ T5835] ? __pfx_do_truncate+0x10/0x10 [ 88.045220][ T5835] path_openat+0x306c/0x3830 [ 88.045247][ T5835] ? __pfx_path_openat+0x10/0x10 [ 88.045262][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.045288][ T5835] do_filp_open+0x1fa/0x410 [ 88.045303][ T5835] ? __lock_acquire+0xab9/0xd20 [ 88.045316][ T5835] ? __pfx_do_filp_open+0x10/0x10 [ 88.045338][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 88.045355][ T5835] ? alloc_fd+0x64c/0x6c0 [ 88.045377][ T5835] do_sys_openat2+0x121/0x1c0 [ 88.045393][ T5835] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.045409][ T5835] ? rcu_is_watching+0x15/0xb0 [ 88.045426][ T5835] __x64_sys_creat+0x8f/0xc0 [ 88.045442][ T5835] do_syscall_64+0xfa/0x3b0 [ 88.045454][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.045473][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.045486][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 88.045501][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.045514][ T5835] RIP: 0033:0x7f6f4914e9f9 [ 88.045529][ T5835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.045540][ T5835] RSP: 002b:00007fff21b4ceb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 88.045555][ T5835] RAX: ffffffffffffffda RBX: 00007f6f4919705e RCX: 00007f6f4914e9f9 [ 88.045565][ T5835] RDX: 00007f6f4914da91 RSI: 0000000000000000 RDI: 0000200000000000 [ 88.045574][ T5835] RBP: 0000200000000000 R08: 00000000000005ee R09: 0000000000000000 [ 88.045583][ T5835] R10: 00007fff21b4cd80 R11: 0000000000000246 R12: 0031656c69662f2e [ 88.045592][ T5835] R13: 00007fff21b4d098 R14: 0000000000000001 R15: 0000000000000001 [ 88.045606][ T5835] creat("./file1", 000) = 4 exit_group(0) = ? +++ exited with 0 +++ [ 88.475071][ T5835] hfsplus: unable to mark blocks fre