./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1256025580
<...>
Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts.
execve("./syz-executor1256025580", ["./syz-executor1256025580"], 0x7ffccf98ae90 /* 10 vars */) = 0
brk(NULL) = 0x5555878f0000
brk(0x5555878f0d00) = 0x5555878f0d00
arch_prctl(ARCH_SET_FS, 0x5555878f0380) = 0
set_tid_address(0x5555878f0650) = 5827
set_robust_list(0x5555878f0660, 24) = 0
rseq(0x5555878f0ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1256025580", 4096) = 28
getrandom("\x33\xf8\x78\x9d\xfa\xcf\x93\x83", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555878f0d00
brk(0x555587911d00) = 0x555587911d00
brk(0x555587912000) = 0x555587912000
mprotect(0x7fede8c51000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fede0600000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7fede0600000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file1", 0777) = 0
mount("/dev/loop0", "./file1", "hfsplus", 0, "part=0x0000000000000040,nodecompose,part=0x0000000000000007,part=0x000000000000000c,uid=0x0000000000"...) = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 80.046655][ T5827] loop0: detected capacity change from 0 to 1024
[ 80.114478][ T5827]
[ 80.116840][ T5827] ============================================
[ 80.123012][ T5827] WARNING: possible recursive locking detected
[ 80.129175][ T5827] 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 Not tainted
[ 80.136413][ T5827] --------------------------------------------
[ 80.142592][ T5827] syz-executor125/5827 is trying to acquire lock:
[ 80.149017][ T5827] ffff88807df01548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x383/0x14f0
[ 80.160057][ T5827]
[ 80.160057][ T5827] but task is already holding lock:
[ 80.167436][ T5827] ffff88807df02988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x30a/0xc70
[ 80.178605][ T5827]
[ 80.178605][ T5827] other info that might help us debug this:
[ 80.186679][ T5827] Possible unsafe locking scenario:
[ 80.186679][ T5827]
[ 80.194135][ T5827] CPU0
[ 80.197523][ T5827] ----
[ 80.201169][ T5827] lock(&HFSPLUS_I(inode)->extents_lock);
[ 80.206999][ T5827] lock(&HFSPLUS_I(inode)->extents_lock);
[ 80.212832][ T5827]
[ 80.212832][ T5827] *** DEADLOCK ***
[ 80.212832][ T5827]
[ 80.220980][ T5827] May be due to missing lock nesting notation
[ 80.220980][ T5827]
[ 80.229307][ T5827] 4 locks held by syz-executor125/5827:
[ 80.234854][ T5827] #0: ffff888048688420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[ 80.244132][ T5827] #1: ffff88807df02b78 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x20c/0x310
[ 80.254981][ T5827] #2: ffff88807df02988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x30a/0xc70
[ 80.266845][ T5827] #3: ffff8880289c58f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xbb/0x4e0
[ 80.276969][ T5827]
[ 80.276969][ T5827] stack backtrace:
[ 80.282874][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor125 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0
[ 80.282894][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 80.282908][ T5827] Call Trace:
[ 80.282918][ T5827] <TASK>
[ 80.282926][ T5827] dump_stack_lvl+0x241/0x360
[ 80.282957][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10
[ 80.282974][ T5827] ? __pfx__printk+0x10/0x10
[ 80.283000][ T5827] ? lockdep_unlock+0x16a/0x300
[ 80.283026][ T5827] print_deadlock_bug+0x483/0x620
[ 80.283045][ T5827] validate_chain+0x15e2/0x5920
[ 80.283062][ T5827] ? kernel_text_address+0xa7/0xe0
[ 80.283086][ T5827] ? stack_trace_save+0x118/0x1d0
[ 80.283106][ T5827] ? __pfx_validate_chain+0x10/0x10
[ 80.283122][ T5827] ? __pfx_stack_trace_save+0x10/0x10
[ 80.283141][ T5827] ? check_noncircular+0x259/0x4a0
[ 80.283160][ T5827] ? __pfx_check_noncircular+0x10/0x10
[ 80.283178][ T5827] ? lockdep_unlock+0x16a/0x300
[ 80.283199][ T5827] ? look_up_lock_class+0x77/0x170
[ 80.283225][ T5827] ? register_lock_class+0x102/0x980
[ 80.283248][ T5827] ? add_lock_to_list+0x1e8/0x2f0
[ 80.283266][ T5827] ? __pfx_register_lock_class+0x10/0x10
[ 80.283289][ T5827] ? validate_chain+0x15c0/0x5920
[ 80.283305][ T5827] ? is_bpf_text_address+0x26/0x2a0
[ 80.283331][ T5827] ? mark_lock+0x9a/0x360
[ 80.283357][ T5827] __lock_acquire+0x1397/0x2100
[ 80.283387][ T5827] lock_acquire+0x1ed/0x550
[ 80.283410][ T5827] ? hfsplus_get_block+0x383/0x14f0
[ 80.283436][ T5827] ? __pfx_lock_acquire+0x10/0x10
[ 80.283461][ T5827] ? __pfx___might_resched+0x10/0x10
[ 80.283480][ T5827] ? register_lock_class+0x102/0x980
[ 80.283505][ T5827] ? create_empty_buffers+0x3a/0x530
[ 80.283522][ T5827] ? __pfx_register_lock_class+0x10/0x10
[ 80.283545][ T5827] ? read_cache_page+0x5b/0x170
[ 80.283571][ T5827] ? hfsplus_free_extents+0x49e/0xae0
[ 80.283596][ T5827] __mutex_lock+0x19c/0x1010
[ 80.283616][ T5827] ? hfsplus_get_block+0x383/0x14f0
[ 80.283640][ T5827] ? __lock_acquire+0x1397/0x2100
[ 80.283666][ T5827] ? hfsplus_get_block+0x383/0x14f0
[ 80.283690][ T5827] ? __pfx___mutex_lock+0x10/0x10
[ 80.283718][ T5827] hfsplus_get_block+0x383/0x14f0
[ 80.283746][ T5827] ? __pfx_hfsplus_get_block+0x10/0x10
[ 80.283771][ T5827] ? _raw_spin_unlock+0x28/0x50
[ 80.283788][ T5827] ? create_empty_buffers+0x471/0x530
[ 80.283807][ T5827] block_read_full_folio+0x3ee/0xae0
[ 80.283829][ T5827] ? __pfx_hfsplus_get_block+0x10/0x10
[ 80.283852][ T5827] ? __pfx_block_read_full_folio+0x10/0x10
[ 80.283873][ T5827] ? folio_add_lru+0x187/0x230
[ 80.283900][ T5827] filemap_read_folio+0x148/0x3b0
[ 80.283925][ T5827] ? __pfx_hfsplus_read_folio+0x10/0x10
[ 80.283953][ T5827] ? __pfx_filemap_read_folio+0x10/0x10
[ 80.283978][ T5827] ? __filemap_get_folio+0x9a8/0xae0
[ 80.284003][ T5827] do_read_cache_folio+0x373/0x5b0
[ 80.284029][ T5827] ? __pfx_hfsplus_read_folio+0x10/0x10
[ 80.284050][ T5827] ? __mutex_unlock_slowpath+0x227/0x800
[ 80.284073][ T5827] read_cache_page+0x5b/0x170
[ 80.284098][ T5827] hfsplus_block_free+0x128/0x4e0
[ 80.284117][ T5827] ? rcu_is_watching+0x15/0xb0
[ 80.284136][ T5827] hfsplus_free_extents+0x49e/0xae0
[ 80.284160][ T5827] ? hfsplus_find_init+0x14a/0x1c0
[ 80.284178][ T5827] hfsplus_file_truncate+0x86c/0xc70
[ 80.284204][ T5827] ? __pfx___up_read+0x10/0x10
[ 80.284222][ T5827] ? __pfx_hfsplus_file_truncate+0x10/0x10
[ 80.284247][ T5827] ? unmap_mapping_range+0xf8/0x290
[ 80.284265][ T5827] ? __pfx_unmap_mapping_range+0x10/0x10
[ 80.284281][ T5827] ? current_time+0x29b/0x3a0
[ 80.284301][ T5827] ? truncate_setsize+0xcf/0xf0
[ 80.284318][ T5827] hfsplus_setattr+0x1bd/0x270
[ 80.284340][ T5827] ? __pfx_hfsplus_setattr+0x10/0x10
[ 80.284363][ T5827] notify_change+0xbca/0xe90
[ 80.284390][ T5827] do_truncate+0x220/0x310
[ 80.284411][ T5827] ? __pfx_do_truncate+0x10/0x10
[ 80.284431][ T5827] ? rcu_read_lock_any_held+0xb7/0x160
[ 80.284452][ T5827] ? mnt_get_write_access+0x226/0x2b0
[ 80.284473][ T5827] ? bpf_lsm_path_truncate+0x9/0x10
[ 80.284490][ T5827] vfs_truncate+0x492/0x530
[ 80.284512][ T5827] ? __pfx_vfs_truncate+0x10/0x10
[ 80.284532][ T5827] ? kmem_cache_free+0x195/0x410
[ 80.284548][ T5827] ? user_path_at+0x44/0x60
[ 80.284570][ T5827] do_sys_truncate+0xdb/0x190
[ 80.284591][ T5827] ? __pfx_do_sys_truncate+0x10/0x10
[ 80.284612][ T5827] ? do_syscall_64+0x100/0x230
[ 80.284636][ T5827] do_syscall_64+0xf3/0x230
[ 80.284659][ T5827] ? clear_bhb_loop+0x35/0x90
[ 80.284688][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.284713][ T5827] RIP: 0033:0x7fede8bdda39
[ 80.284732][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.284745][ T5827] RSP: 002b:00007ffdf5326b28 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 80.284763][ T5827] RAX: ffffffffffffffda RBX: 00007fede8c2605e RCX: 00007fede8bdda39
truncate("./file2", 521) = 0
exit_group(0) = ?
+++ exited with 0 +++
[ 80.284775][ T5827] RDX: 00007fede8bdcad1 RSI: 0000000000000209 RDI: 0000400000