./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3215744877
<...>
Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts.
execve("./syz-executor3215744877", ["./syz-executor3215744877"], 0x7fff80d54d80 /* 10 vars */) = 0
brk(NULL) = 0x55557198b000
brk(0x55557198bd00) = 0x55557198bd00
arch_prctl(ARCH_SET_FS, 0x55557198b380) = 0
set_tid_address(0x55557198b650) = 5057
set_robust_list(0x55557198b660, 24) = 0
rseq(0x55557198bca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3215744877", 4096) = 28
getrandom("\xfb\x51\xde\xd4\xc1\x89\x64\x52", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55557198bd00
brk(0x5555719acd00) = 0x5555719acd00
brk(0x5555719ad000) = 0x5555719ad000
mprotect(0x7f49a5be8000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f499d600000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7f499d600000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[ 61.202534][ T5057] loop0: detected capacity change from 0 to 64
mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "hfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_STRICTATIME|MS_LAZYTIME, "umask=00000000000000000001336,file_umask=00000000000000000001340,gid=0x0000000000000000,codepage=iso"...) = 0
openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4
[ 61.255151][ T5057] =======================================================
[ 61.255151][ T5057] WARNING: The mand mount option has been deprecated and
[ 61.255151][ T5057] and is ignored by this kernel. Remove the mand
[ 61.255151][ T5057] option from the mount to silence this warning.
[ 61.255151][ T5057] =======================================================
open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5
[ 61.322168][ T28] audit: type=1800 audit(1712660265.226:2): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor321" name="bus" dev="loop0" ino=21 res=0 errno=0
[ 61.396903][ T5057]
[ 61.399258][ T5057] ============================================
[ 61.405392][ T5057] WARNING: possible recursive locking detected
[ 61.411711][ T5057] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted
[ 61.418466][ T5057] --------------------------------------------
[ 61.424730][ T5057] syz-executor321/5057 is trying to acquire lock:
[ 61.431395][ T5057] ffff8880237e20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16e/0x1f0
[ 61.440981][ T5057]
[ 61.440981][ T5057] but task is already holding lock:
[ 61.448500][ T5057] ffff8880237e20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16e/0x1f0
[ 61.457956][ T5057]
[ 61.457956][ T5057] other info that might help us debug this:
[ 61.466077][ T5057] Possible unsafe locking scenario:
[ 61.466077][ T5057]
[ 61.473589][ T5057] CPU0
[ 61.477119][ T5057] ----
[ 61.480551][ T5057] lock(&tree->tree_lock/1);
[ 61.485217][ T5057] lock(&tree->tree_lock/1);
[ 61.489990][ T5057]
[ 61.489990][ T5057] *** DEADLOCK ***
[ 61.489990][ T5057]
[ 61.498213][ T5057] May be due to missing lock nesting notation
[ 61.498213][ T5057]
[ 61.506703][ T5057] 5 locks held by syz-executor321/5057:
[ 61.512228][ T5057] #0: ffff8880237e0420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0
[ 61.521086][ T5057] #1: ffff888011809628 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x310
[ 61.532747][ T5057] #2: ffff888011809478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1450
[ 61.543491][ T5057] #3: ffff8880237e20b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16e/0x1f0
[ 61.553737][ T5057] #4: ffff8880118080f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1450
[ 61.565036][ T5057]
[ 61.565036][ T5057] stack backtrace:
[ 61.571029][ T5057] CPU: 1 PID: 5057 Comm: syz-executor321 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 61.581248][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 61.591565][ T5057] Call Trace:
[ 61.594849][ T5057] <TASK>
[ 61.597801][ T5057] dump_stack_lvl+0x241/0x360
[ 61.602625][ T5057] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.607897][ T5057] ? print_deadlock_bug+0x479/0x620
[ 61.613135][ T5057] ? _find_first_zero_bit+0xd4/0x100
[ 61.618515][ T5057] validate_chain+0x15c1/0x58e0
[ 61.623389][ T5057] ? __lock_acquire+0x1346/0x1fd0
[ 61.628414][ T5057] ? __pfx_validate_chain+0x10/0x10
[ 61.633614][ T5057] ? mark_lock+0x9a/0x350
[ 61.637949][ T5057] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 61.643919][ T5057] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.650243][ T5057] ? mark_lock+0x9a/0x350
[ 61.654675][ T5057] __lock_acquire+0x1346/0x1fd0
[ 61.659532][ T5057] lock_acquire+0x1e4/0x530
[ 61.664024][ T5057] ? hfs_find_init+0x16e/0x1f0
[ 61.668862][ T5057] ? __pfx_lock_acquire+0x10/0x10
[ 61.673958][ T5057] ? generic_file_write_iter+0xaf/0x310
[ 61.679660][ T5057] ? vfs_write+0xa84/0xcb0
[ 61.684079][ T5057] ? __pfx___might_resched+0x10/0x10
[ 61.689364][ T5057] __mutex_lock+0x136/0xd70
[ 61.693852][ T5057] ? hfs_find_init+0x16e/0x1f0
[ 61.698598][ T5057] ? hfs_find_init+0x16e/0x1f0
[ 61.703347][ T5057] ? __pfx___mutex_lock+0x10/0x10
[ 61.708357][ T5057] ? trace_kmalloc+0x1f/0xb0
[ 61.713015][ T5057] ? __kmalloc+0x251/0x4a0
[ 61.717532][ T5057] hfs_find_init+0x16e/0x1f0
[ 61.722110][ T5057] hfs_extend_file+0x31b/0x1450
[ 61.726958][ T5057] ? __pfx_hfs_extend_file+0x10/0x10
[ 61.732334][ T5057] ? __mutex_trylock_common+0x183/0x2e0
[ 61.737866][ T5057] ? __pfx___mutex_trylock_common+0x10/0x10
[ 61.743739][ T5057] ? rcu_is_watching+0x15/0xb0
[ 61.748482][ T5057] ? hfs_brec_find+0x197/0x580
[ 61.753230][ T5057] hfs_bmap_reserve+0xd9/0x400
[ 61.757982][ T5057] __hfs_ext_write_extent+0x22e/0x4f0
[ 61.763343][ T5057] __hfs_ext_cache_extent+0x6a/0x990
[ 61.768605][ T5057] ? hfs_find_init+0x16e/0x1f0
[ 61.773351][ T5057] hfs_extend_file+0x344/0x1450
[ 61.778179][ T5057] ? filemap_get_folios_tag+0x1a9/0x900
[ 61.783730][ T5057] ? __pfx_hfs_extend_file+0x10/0x10
[ 61.789081][ T5057] ? filemap_get_folios_tag+0x1a9/0x900
[ 61.794626][ T5057] ? __pfx_filemap_get_folios_tag+0x10/0x10
[ 61.800540][ T5057] ? clean_bdev_aliases+0x63a/0x800
[ 61.805830][ T5057] hfs_get_block+0x3e4/0xb60
[ 61.810502][ T5057] ? __pfx_hfs_get_block+0x10/0x10
[ 61.815690][ T5057] ? create_empty_buffers+0x53e/0x740
[ 61.821065][ T5057] ? folio_batch_add_and_move+0x165/0x2b0
[ 61.826856][ T5057] __block_write_begin_int+0x50c/0x1a70
[ 61.832559][ T5057] ? __pfx_hfs_get_block+0x10/0x10
[ 61.837655][ T5057] ? __pfx___block_write_begin_int+0x10/0x10
[ 61.843700][ T5057] ? __pfx_hfs_get_block+0x10/0x10
[ 61.848853][ T5057] block_write_begin+0x9b/0x1e0
[ 61.853712][ T5057] cont_write_begin+0x645/0x890
[ 61.859088][ T5057] ? fault_in_readable+0x165/0x2b0
[ 61.864184][ T5057] ? __pfx_cont_write_begin+0x10/0x10
[ 61.869548][ T5057] ? fault_in_readable+0x1a6/0x2b0
[ 61.874650][ T5057] ? __pfx_fault_in_readable+0x10/0x10
[ 61.880097][ T5057] hfs_write_begin+0x8a/0xd0
[ 61.884668][ T5057] ? __pfx_hfs_get_block+0x10/0x10
[ 61.889772][ T5057] generic_perform_write+0x322/0x640
[ 61.895158][ T5057] ? __pfx_generic_perform_write+0x10/0x10
[ 61.900968][ T5057] ? __generic_file_write_iter+0x105/0x230
[ 61.906786][ T5057] generic_file_write_iter+0xaf/0x310
[ 61.912345][ T5057] vfs_write+0xa84/0xcb0
[ 61.916596][ T5057] ? __pfx_vfs_write+0x10/0x10
[ 61.921436][ T5057] ? lockdep_hardirqs_on+0x99/0x150
[ 61.926746][ T5057] ? __fdget_pos+0x272/0x320
[ 61.931749][ T5057] ksys_write+0x1a0/0x2c0
[ 61.936061][ T5057] ? __pfx_ksys_write+0x10/0x10
[ 61.941188][ T5057] ? do_syscall_64+0x10a/0x240
[ 61.945931][ T5057] ? syscall_trace_enter+0x5f/0x150
[ 61.951200][ T5057] do_syscall_64+0xfb/0x240
[ 61.955708][ T5057] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 61.961759][ T5057] RIP: 0033:0x7f49a5b75af9
[ 61.966210][ T5057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.986347][ T5057] RSP: 002b:00007ffd18201a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 61.994923][ T5057] RAX: ffffffffffffffda RBX: 00007f49a5bbe04b RCX: 00007f49a5b75af9
[ 62.002964][ T5057] RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000005
[ 62.010915][ T5057] RBP: 00007f49a5bbe053 R08: 0000000000000000 R09: 00000000000b05f8
[ 62.018955][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 62.028091][ T5057] R13: 00007ffd18201c48 R14: 0000000000000001 R15: 0000000000000001
[ 62.036150][ T5057] </TASK>