./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor175572708
<...>
Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts.
execve("./syz-executor175572708", ["./syz-executor175572708"], 0x7ffd6adfb220 /* 10 vars */) = 0
brk(NULL) = 0x5555669dd000
brk(0x5555669ddd00) = 0x5555669ddd00
arch_prctl(ARCH_SET_FS, 0x5555669dd380) = 0
set_tid_address(0x5555669dd650) = 5861
set_robust_list(0x5555669dd660, 24) = 0
rseq(0x5555669ddca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor175572708", 4096) = 27
getrandom("\x43\x93\x7f\x7f\x5a\x6b\xfd\x24", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555669ddd00
brk(0x5555669fed00) = 0x5555669fed00
brk(0x5555669ff000) = 0x5555669ff000
mprotect(0x7f12ae326000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555669dd650) = 5862
./strace-static-x86_64: Process 5862 attached
[pid 5862] set_robust_list(0x5555669dd660, 24) = 0
[pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5862] setpgid(0, 0) = 0
[pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5862] write(3, "1000", 4) = 4
[pid 5862] close(3) = 0
[pid 5862] write(1, "executing program\n", 18executing program
) = 18
[pid 5862] memfd_create("syzkaller", 0) = 3
[pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f12a5e00000
[pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
[pid 5862] munmap(0x7f12a5e00000, 138412032) = 0
[pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5862] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5862] close(3) = 0
[pid 5862] close(4) = 0
[pid 5862] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[ 95.542915][ T5862] loop0: detected capacity change from 0 to 64
[ 95.561535][ T5862] =======================================================
[ 95.561535][ T5862] WARNING: The mand mount option has been deprecated and
[ 95.561535][ T5862] and is ignored by this kernel. Remove the mand
[ 95.561535][ T5862] option from the mount to silence this warning.
[pid 5862] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "hfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_STRICTATIME|MS_LAZYTIME, "umask=00000000000000000001336,file_umask=00000000000000000001340,gid=0x0000000000000000,codepage=iso"...) = 0
[pid 5862] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
[pid 5862] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
[pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5862] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4
[pid 5862] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[ 95.561535][ T5862] =======================================================
[ 95.612027][ T30] audit: type=1800 audit(1755137682.604:2): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor175" name="bus" dev="loop0" ino=21 res=0 errno=0
[ 95.740812][ T5862]
[ 95.743277][ T5862] ============================================
[ 95.749412][ T5862] WARNING: possible recursive locking detected
[ 95.755736][ T5862] 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 Not tainted
[ 95.762856][ T5862] --------------------------------------------
[ 95.768994][ T5862] syz-executor175/5862 is trying to acquire lock:
[ 95.775412][ T5862] ffff888032fb60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200
[ 95.784858][ T5862]
[ 95.784858][ T5862] but task is already holding lock:
[ 95.792407][ T5862] ffff888032fb60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200
[ 95.801765][ T5862]
[ 95.801765][ T5862] other info that might help us debug this:
[ 95.810113][ T5862] Possible unsafe locking scenario:
[ 95.810113][ T5862]
[ 95.817657][ T5862] CPU0
[ 95.821008][ T5862] ----
[ 95.824271][ T5862] lock(&tree->tree_lock/1);
[ 95.829051][ T5862] lock(&tree->tree_lock/1);
[ 95.833738][ T5862]
[ 95.833738][ T5862] *** DEADLOCK ***
[ 95.833738][ T5862]
[ 95.841888][ T5862] May be due to missing lock nesting notation
[ 95.841888][ T5862]
[ 95.850577][ T5862] 5 locks held by syz-executor175/5862:
[ 95.856198][ T5862] #0: ffff888079436428 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
[ 95.865140][ T5862] #1: ffff8880278f9620 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550
[ 95.876651][ T5862] #2: ffff8880278f9478 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230
[ 95.887416][ T5862] #3: ffff888032fb60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200
[ 95.897338][ T5862] #4: ffff8880278f80f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230
[ 95.908807][ T5862]
[ 95.908807][ T5862] stack backtrace:
[ 95.914698][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor175 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full)
[ 95.914728][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 95.914743][ T5862] Call Trace:
[ 95.914757][ T5862]
[ 95.914768][ T5862] dump_stack_lvl+0x189/0x250
[ 95.914810][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10
[ 95.914837][ T5862] ? __pfx__printk+0x10/0x10
[ 95.914883][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.914914][ T5862] ? print_lock_name+0xde/0x100
[ 95.914946][ T5862] print_deadlock_bug+0x28b/0x2a0
[ 95.914977][ T5862] validate_chain+0x1a3f/0x2140
[ 95.915000][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915027][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915051][ T5862] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 95.915109][ T5862] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 95.915139][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915166][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915194][ T5862] __lock_acquire+0xab9/0xd20
[ 95.915241][ T5862] ? hfs_find_init+0x184/0x200
[ 95.915271][ T5862] lock_acquire+0x120/0x360
[ 95.915303][ T5862] ? hfs_find_init+0x184/0x200
[ 95.915329][ T5862] ? generic_perform_write+0x2c5/0x900
[ 95.915360][ T5862] ? vfs_write+0x5c9/0xb30
[ 95.915395][ T5862] ? do_syscall_64+0xfa/0x3b0
[ 95.915442][ T5862] __mutex_lock+0x187/0x1360
[ 95.915482][ T5862] ? hfs_find_init+0x184/0x200
[ 95.915514][ T5862] ? hfs_find_init+0x184/0x200
[ 95.915540][ T5862] ? __pfx___mutex_lock+0x10/0x10
[ 95.915574][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915599][ T5862] ? rcu_is_watching+0x15/0xb0
[ 95.915623][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915648][ T5862] ? __kmalloc_noprof+0x29b/0x4f0
[ 95.915688][ T5862] ? hfs_find_init+0xaa/0x200
[ 95.915714][ T5862] hfs_find_init+0x184/0x200
[ 95.915741][ T5862] hfs_extend_file+0x2ee/0x1230
[ 95.915786][ T5862] ? __pfx_hfs_extend_file+0x10/0x10
[ 95.915818][ T5862] ? __pfx___mutex_trylock_common+0x10/0x10
[ 95.915842][ T5862] ? do_syscall_64+0xfa/0x3b0
[ 95.915878][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915903][ T5862] ? rcu_is_watching+0x15/0xb0
[ 95.915926][ T5862] ? __mutex_lock+0x335/0x1360
[ 95.915958][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.915982][ T5862] ? hfs_brec_find+0x18e/0x500
[ 95.916010][ T5862] hfs_bmap_reserve+0x107/0x430
[ 95.916048][ T5862] __hfs_ext_write_extent+0x1fa/0x470
[ 95.916084][ T5862] __hfs_ext_cache_extent+0x6b/0x9b0
[ 95.916119][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916143][ T5862] ? hfs_find_init+0x184/0x200
[ 95.916169][ T5862] hfs_extend_file+0x316/0x1230
[ 95.916201][ T5862] ? __pfx_filemap_get_folios_tag+0x10/0x10
[ 95.916229][ T5862] ? __pfx_hfs_extend_file+0x10/0x10
[ 95.916264][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916289][ T5862] ? clean_bdev_aliases+0x5c9/0x6b0
[ 95.916322][ T5862] ? __pfx_clean_bdev_aliases+0x10/0x10
[ 95.916350][ T5862] hfs_get_block+0x3d7/0xbd0
[ 95.916388][ T5862] ? __pfx_hfs_get_block+0x10/0x10
[ 95.916420][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916445][ T5862] ? do_raw_spin_unlock+0x122/0x240
[ 95.916478][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916503][ T5862] ? _raw_spin_unlock+0x28/0x50
[ 95.916528][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916556][ T5862] __block_write_begin_int+0x6b5/0x1900
[ 95.916589][ T5862] ? folio_add_lru+0x1b2/0x3d0
[ 95.916615][ T5862] ? __pfx_hfs_get_block+0x10/0x10
[ 95.916648][ T5862] ? __pfx___block_write_begin_int+0x10/0x10
[ 95.916678][ T5862] cont_write_begin+0x789/0xb50
[ 95.916713][ T5862] ? __pfx_cont_write_begin+0x10/0x10
[ 95.916737][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916762][ T5862] ? __pfx___might_resched+0x10/0x10
[ 95.916784][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916810][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.916834][ T5862] ? folio_unlock+0x101/0x160
[ 95.916890][ T5862] hfs_write_begin+0x66/0xb0
[ 95.916923][ T5862] ? __pfx_hfs_get_block+0x10/0x10
[ 95.916956][ T5862] generic_perform_write+0x2c5/0x900
[ 95.916991][ T5862] ? __pfx_generic_perform_write+0x10/0x10
[ 95.917017][ T5862] ? file_update_time+0x2da/0x490
[ 95.917047][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917071][ T5862] ? __generic_file_write_iter+0xf9/0x230
[ 95.917096][ T5862] ? generic_file_write_iter+0x103/0x550
[ 95.917123][ T5862] generic_file_write_iter+0x117/0x550
[ 95.917149][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917175][ T5862] ? __pfx_generic_file_write_iter+0x10/0x10
[ 95.917202][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917226][ T5862] ? rcu_is_watching+0x15/0xb0
[ 95.917246][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917272][ T5862] ? __pfx_aa_file_perm+0x10/0x10
[ 95.917302][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917327][ T5862] ? __lock_acquire+0xab9/0xd20
[ 95.917370][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917398][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917422][ T5862] ? rcu_read_lock_any_held+0xb3/0x120
[ 95.917449][ T5862] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 95.917480][ T5862] vfs_write+0x5c9/0xb30
[ 95.917517][ T5862] ? __pfx_generic_file_write_iter+0x10/0x10
[ 95.917544][ T5862] ? __pfx_vfs_write+0x10/0x10
[ 95.917574][ T5862] ? _raw_spin_unlock_irq+0x23/0x50
[ 95.917602][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917627][ T5862] ? _raw_spin_unlock_irq+0x2e/0x50
[ 95.917652][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917679][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917705][ T5862] ksys_write+0x145/0x250
[ 95.917736][ T5862] ? __pfx_ksys_write+0x10/0x10
[ 95.917764][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917807][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917832][ T5862] do_syscall_64+0xfa/0x3b0
[ 95.917875][ T5862] ? lockdep_hardirqs_on+0x9c/0x150
[ 95.917914][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.917935][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.917960][ T5862] ? exc_page_fault+0x9f/0xf0
[ 95.917989][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.918011][ T5862] RIP: 0033:0x7f12ae2b1fd9
[ 95.918034][ T5862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 95.918053][ T5862] RSP: 002b:00007ffde545c718 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.918076][ T5862] RAX: ffffffffffffffda RBX: 00007f12ae2fb09a RCX: 00007f12ae2b1fd9
[ 95.918092][ T5862] RDX: 000000000208e24b RSI: 0000200000000080 RDI: 0000000000000005
[ 95.918107][ T5862] RBP: 00007f12ae2fb0a2 R08: 00005555669de4c0 R09: 00005555669de4c0
[ 95.918123][ T5862] R10: 00005555669de4c0 R11: 0000000000000246 R12: 00007ffde545c740
[ 95.918138][ T5862] R13: 00007ffde545c968 R14: 431bde82d7b634db R15: 00007f12ae2fb03b
[ 95.918162][ T5862]
[ 97.085194][ T10] cfg80211: failed to load regulatory.db
[pid 5862] write(5, "\x23\x21\x20\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651
[pid 5861] kill(-5862, SIGKILL) = 0
[pid 5861] kill(5862, SIGKILL) = 0
[pid 5861] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 5861] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid 5861] getdents64(3, 0x5555669de6f0 /* 2 entries */, 32768) = 48
[pid 5861] getdents64(3, 0x5555669de6f0 /* 0 entries */, 32768) = 0
[pid 5861] close(3) = 0