./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor810213398
<...>
Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts.
execve("./syz-executor810213398", ["./syz-executor810213398"], 0x7ffc7146f7e0 /* 10 vars */) = 0
brk(NULL) = 0x555556aad000
brk(0x555556aadd00) = 0x555556aadd00
arch_prctl(ARCH_SET_FS, 0x555556aad380) = 0
set_tid_address(0x555556aad650) = 5081
set_robust_list(0x555556aad660, 24) = 0
rseq(0x555556aadca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor810213398", 4096) = 27
getrandom("\xfb\xbc\xee\xdc\x28\x1b\x34\x5f", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556aadd00
brk(0x555556aced00) = 0x555556aced00
brk(0x555556acf000) = 0x555556acf000
mprotect(0x7f84e3d06000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84db800000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7f84db800000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file1", 0777) = 0
mount("/dev/loop0", "./file1", "hfsplus", MS_NODIRATIME|MS_I_VERSION, "") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 54.054135][ T5081] loop0: detected capacity change from 0 to 1024
[ 54.115061][ T5081]
[ 54.117408][ T5081] ============================================
[ 54.123540][ T5081] WARNING: possible recursive locking detected
[ 54.129664][ T5081] 6.10.0-rc2-syzkaller-00269-g96e09b8f8166 #0 Not tainted
[ 54.136747][ T5081] --------------------------------------------
[ 54.142876][ T5081] syz-executor810/5081 is trying to acquire lock:
[ 54.149267][ T5081] ffff88801e281548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0
[ 54.160143][ T5081]
[ 54.160143][ T5081] but task is already holding lock:
[ 54.167490][ T5081] ffff88801e282988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50
[ 54.178605][ T5081]
[ 54.178605][ T5081] other info that might help us debug this:
[ 54.186643][ T5081] Possible unsafe locking scenario:
[ 54.186643][ T5081]
[ 54.194076][ T5081] CPU0
[ 54.197354][ T5081] ----
[ 54.200619][ T5081] lock(&HFSPLUS_I(inode)->extents_lock);
[ 54.206412][ T5081] lock(&HFSPLUS_I(inode)->extents_lock);
[ 54.212214][ T5081]
[ 54.212214][ T5081] *** DEADLOCK ***
[ 54.212214][ T5081]
[ 54.220344][ T5081] May be due to missing lock nesting notation
[ 54.220344][ T5081]
[ 54.228646][ T5081] 4 locks held by syz-executor810/5081:
[ 54.234169][ T5081] #0: ffff888023b16420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[ 54.243301][ T5081] #1: ffff88801e282b80 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: do_truncate+0x20c/0x310
[ 54.253643][ T5081] #2: ffff88801e282988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2da/0xb50
[ 54.265198][ T5081] #3: ffff8880220430f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbb/0x4e0
[ 54.275188][ T5081]
[ 54.275188][ T5081] stack backtrace:
[ 54.281079][ T5081] CPU: 1 PID: 5081 Comm: syz-executor810 Not tainted 6.10.0-rc2-syzkaller-00269-g96e09b8f8166 #0
[ 54.291574][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 54.301624][ T5081] Call Trace:
[ 54.304892][ T5081] <TASK>
[ 54.307806][ T5081] dump_stack_lvl+0x241/0x360
[ 54.312477][ T5081] ? __pfx_dump_stack_lvl+0x10/0x10
[ 54.317669][ T5081] ? print_deadlock_bug+0x479/0x620
[ 54.322854][ T5081] validate_chain+0x15d3/0x5900
[ 54.327696][ T5081] ? stack_trace_save+0x118/0x1d0
[ 54.332707][ T5081] ? __pfx_stack_trace_save+0x10/0x10
[ 54.338072][ T5081] ? check_noncircular+0x259/0x4a0
[ 54.343185][ T5081] ? __pfx_validate_chain+0x10/0x10
[ 54.348373][ T5081] ? __pfx_check_noncircular+0x10/0x10
[ 54.353822][ T5081] ? lockdep_unlock+0x16a/0x300
[ 54.358656][ T5081] ? __pfx_lockdep_unlock+0x10/0x10
[ 54.363837][ T5081] ? add_lock_to_list+0x1de/0x2e0
[ 54.368845][ T5081] ? look_up_lock_class+0x77/0x160
[ 54.373943][ T5081] ? register_lock_class+0x102/0x980
[ 54.379223][ T5081] ? validate_chain+0x15b1/0x5900
[ 54.384239][ T5081] ? is_bpf_text_address+0x26/0x2a0
[ 54.389422][ T5081] ? __pfx_register_lock_class+0x10/0x10
[ 54.395039][ T5081] ? mark_lock+0x9a/0x350
[ 54.399353][ T5081] __lock_acquire+0x1346/0x1fd0
[ 54.404196][ T5081] lock_acquire+0x1ed/0x550
[ 54.408681][ T5081] ? hfsplus_get_block+0x383/0x14f0
[ 54.414037][ T5081] ? __pfx_lock_acquire+0x10/0x10
[ 54.419046][ T5081] ? __pfx___might_resched+0x10/0x10
[ 54.424314][ T5081] ? create_empty_buffers+0x3a/0x740
[ 54.429588][ T5081] ? __pfx_register_lock_class+0x10/0x10
[ 54.435211][ T5081] ? do_read_cache_page+0x30/0x200
[ 54.440308][ T5081] ? hfsplus_free_extents+0x17a/0xae0
[ 54.445666][ T5081] ? hfsplus_file_truncate+0x7d0/0xb50
[ 54.451111][ T5081] __mutex_lock+0x136/0xd70
[ 54.455606][ T5081] ? hfsplus_get_block+0x383/0x14f0
[ 54.460788][ T5081] ? hfsplus_get_block+0x383/0x14f0
[ 54.465968][ T5081] ? __pfx___mutex_lock+0x10/0x10
[ 54.470983][ T5081] hfsplus_get_block+0x383/0x14f0
[ 54.476003][ T5081] ? __pfx_hfsplus_get_block+0x10/0x10
[ 54.481451][ T5081] ? _raw_spin_unlock+0x28/0x50
[ 54.486291][ T5081] ? create_empty_buffers+0x53e/0x740
[ 54.491652][ T5081] block_read_full_folio+0x42e/0xe10
[ 54.496928][ T5081] ? __pfx_hfsplus_get_block+0x10/0x10
[ 54.502383][ T5081] ? __pfx_block_read_full_folio+0x10/0x10
[ 54.508204][ T5081] ? __pfx_lru_add_fn+0x10/0x10
[ 54.513045][ T5081] ? folio_add_lru+0x4b3/0x9e0
[ 54.517794][ T5081] ? folio_add_lru+0x27b/0x9e0
[ 54.522545][ T5081] filemap_read_folio+0x1a0/0x790
[ 54.527554][ T5081] ? __pfx_hfsplus_read_folio+0x10/0x10
[ 54.533087][ T5081] ? __pfx_filemap_read_folio+0x10/0x10
[ 54.538618][ T5081] ? __filemap_get_folio+0x926/0xbb0
[ 54.543885][ T5081] do_read_cache_folio+0x134/0x820
[ 54.548979][ T5081] ? __pfx_hfsplus_read_folio+0x10/0x10
[ 54.554511][ T5081] do_read_cache_page+0x30/0x200
[ 54.559434][ T5081] hfsplus_block_free+0x128/0x4e0
[ 54.564445][ T5081] ? hfsplus_find_init+0x85/0x1c0
[ 54.569454][ T5081] hfsplus_free_extents+0x17a/0xae0
[ 54.574635][ T5081] hfsplus_file_truncate+0x7d0/0xb50
[ 54.579908][ T5081] ? __pfx_hfsplus_file_truncate+0x10/0x10
[ 54.585694][ T5081] ? unmap_mapping_range+0xf8/0x290
[ 54.590875][ T5081] ? __pfx_unmap_mapping_range+0x10/0x10
[ 54.596489][ T5081] ? setattr_prepare+0x1f5/0xb20
[ 54.601413][ T5081] ? truncate_setsize+0xcf/0xf0
[ 54.606250][ T5081] hfsplus_setattr+0x1ce/0x280
[ 54.611000][ T5081] ? __pfx_hfsplus_setattr+0x10/0x10
[ 54.616272][ T5081] notify_change+0xb9d/0xe70
[ 54.620850][ T5081] do_truncate+0x220/0x310
[ 54.625256][ T5081] ? __pfx_do_truncate+0x10/0x10
[ 54.630187][ T5081] ? bpf_lsm_path_truncate+0x9/0x10
[ 54.635371][ T5081] vfs_truncate+0x2e1/0x3b0
[ 54.639863][ T5081] do_sys_truncate+0xde/0x190
[ 54.644523][ T5081] ? __pfx_do_sys_truncate+0x10/0x10
[ 54.649794][ T5081] ? do_syscall_64+0x100/0x230
[ 54.654544][ T5081] do_syscall_64+0xf3/0x230
[ 54.659028][ T5081] ? clear_bhb_loop+0x35/0x90
[ 54.663691][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 54.669579][ T5081] RIP: 0033:0x7f84e3c935f9
[ 54.673979][ T5081] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.693563][ T5081] RSP: 002b:00007ffc96db99d8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[ 54.701958][ T5081] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f84e3c935f9
truncate("./file1", 0) = 0
exit_group(0) = ?
+++ exited with 0 +++
[ 54.709911][ T5081] RDX: 00007f84e3c92691 RSI: 0000000000000000 RDI: 0000000020000000