Extracting prog: 1m12.103000288s
Minimizing prog: 6m35.907831785s
Simplifying prog options: 0s
Extracting C: 50.036789132s
Simplifying C: 12m32.279709878s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program crashed: possible deadlock in hfsplus_find_init
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=1m8.128032676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$eJzs3UtsHGcdAPD/rNfr3QCp06ZJQZG6aqSCsEjsGBfMhYAQ+FChqhw4rxKnsbxxKnuLnAgRh8edQw+IUznkVnFA5R4JzlSVUCVOPnCohNQDPfmAtGhmZx/2rnfX8RP6+1kz8818z/nPzsw+ZE0An1tLM1F8Gkkszby+ma5v/+PfzUwrux4RpYgoRBRbi0jWspxSfPFK3ExTX0435s0l+/Xz7srimx9/tv1Ja62YT1n5ZFi9AUr9m7byKaoRMZEv+5T3a/GDvd3vau/Wfu2NrbuHacCu5suI3x+qVTi0Zp+tTt77f8/mw6of5LwFzqikdd/sMx1xrvfWmV8dCic3suOxddoDAAAAgIOqHLzKczuxE5tx/jiGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+v8uf/J/lUaKerkbSf/1/Kt0WePoNGPwjxo6nW8unxDwYAAAAAAAAAjt3LO7ETm3G+vd5Mst/8X+n5jf8L8U5sxHKsx7XYjFo0ohHrMRcR0z0NlTZrjcb6XFYz4uKQmjfiw96apYhoNNZv7D/Gm0e90wAAAAAAAABwtpVH5K9O9m/7ZSx1f/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICzIImYaC2y6WI7PR2FYkSU2+W2Ij6MiNLpjvZAkkEbn578OAAAAOBQyrtXk/IYdZ57FDuxGefb680k+8x/Kfu8XI53Yi0asRKNqMdy3M4/Q6ef+gvbT+br20/m76VTf7vf+/RAQ89ajNZ3D4N7fikrUYk7sZJtuRa3IolmppC38tL2k/l0eW/wuB6nY0q+mxsymome9O10dvmDLP3b3d8iFA+0i8+osG/OdJY72YnIbD62tMaFdgQGR2Lk0SkO7WkuCp1vfi4O72lwzB8P6HKymzy3p9TAb25Oxd5I3IhC5whdGh6JiK/++f2f3q2vrd69szFzdnZpoEcjS3Qi8c32ZaYbictjR6Jy1AM/QpNjlpvN9v3FzvpS/DB+EjPx6dQbsR4r8bOoRSOWq+38Wv56TufTwyP10bnetTdGjSQ9J6ud69egMVVj15iiGj/IUrV4JTum52MlkrgfEcvxWvZ3I+Y6V4PuEX5xjLO+MMaVtsfVr2WLTphiyGvjj+M1eVTSuF7oiWvvNXc6y+vd0o3S8wOj1L7X9V8by6NvKsWv5Im0hV8NvT+ctL2RmOuJxAv7vV5aIf1DM51v1NdW1+/W3h6zv1fzZXoe/eZM3SVK8Tiej3K+cxeyeZKdU7PZ0X+hc5x3x6uU/+LSUtib96Pfdeq1ztQfx/24vetM/VYsxEIsZi1dykpP9t2x0rzLnZZ68+azvPSdVrHzw07v+637UW+9HwLgbDv39XOlyr8qf6u8V/l15W7l9fL3p749daUUk3+d/E5xduLVwpXkT/Fe/KL7+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh2Gw8ertbq9eX1wYnC4KxkeK1avdl+kNiQMrsSSf6onDEKJxsPHjZHNjg8MZUP7wC1/nPQvh7FWIXbj1EbWngqHq7Wqofa5eGJZGvv8SqPPhbtpzyN0UXSF/C08jOPud1zd8vksYTlcInq0TXYfsH2ZI3/6v3nl1qVm8mA4zUREYNqjbhwtJ5xdZaf4weMcL1x7+3rGw8efmPlXu2t5beW1yYXFhZnFxdem79+Z6W+PNua91Q4kYffAieh9+1ERykiXh5d180fAAAAAAAAAAAATsdJ/C/Eae8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L9taSaKTyOJudlrs+n69pP5ejq1092SxYgoRETy84jkLxE3ozXFdE9zyX79vLuy+ObHn21/0m2rGBOt8oWIrX3rjWcrn6IakTabLY+qvVuj2yt1k1MDspNOZNKAXW0HDk7bfwMAAP//YsruLQ==")
open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
program did not crash
testing program (duration=1m8.128032676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
ftruncate(0xffffffffffffffff, 0x2007ffb)
program did not crash
testing program (duration=1m8.128032676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-ftruncate
detailed listing:
executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program did not crash
testing program (duration=1m8.128032676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$eJzs3UtsHGcdAPD/rNfr3QCp06ZJQZG6aqSCsEjsGBfMhYAQ+FChqhw4rxKnsbxxKnuLnAgRh8edQw+IUznkVnFA5R4JzlSVUCVOPnCohNQDPfmAtGhmZx/2rnfX8RP6+1kz8818z/nPzsw+ZE0An1tLM1F8Gkkszby+ma5v/+PfzUwrux4RpYgoRBRbi0jWspxSfPFK3ExTX0435s0l+/Xz7srimx9/tv1Ja62YT1n5ZFi9AUr9m7byKaoRMZEv+5T3a/GDvd3vau/Wfu2NrbuHacCu5suI3x+qVTi0Zp+tTt77f8/mw6of5LwFzqikdd/sMx1xrvfWmV8dCic3suOxddoDAAAAgIOqHLzKczuxE5tx/jiGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+v8uf/J/lUaKerkbSf/1/Kt0WePoNGPwjxo6nW8unxDwYAAAAAAAAAjt3LO7ETm3G+vd5Mst/8X+n5jf8L8U5sxHKsx7XYjFo0ohHrMRcR0z0NlTZrjcb6XFYz4uKQmjfiw96apYhoNNZv7D/Gm0e90wAAAAAAAABwtpVH5K9O9m/7ZSx1f/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICzIImYaC2y6WI7PR2FYkSU2+W2Ij6MiNLpjvZAkkEbn578OAAAAOBQyrtXk/IYdZ57FDuxGefb680k+8x/Kfu8XI53Yi0asRKNqMdy3M4/Q6ef+gvbT+br20/m76VTf7vf+/RAQ89ajNZ3D4N7fikrUYk7sZJtuRa3IolmppC38tL2k/l0eW/wuB6nY0q+mxsymome9O10dvmDLP3b3d8iFA+0i8+osG/OdJY72YnIbD62tMaFdgQGR2Lk0SkO7WkuCp1vfi4O72lwzB8P6HKymzy3p9TAb25Oxd5I3IhC5whdGh6JiK/++f2f3q2vrd69szFzdnZpoEcjS3Qi8c32ZaYbictjR6Jy1AM/QpNjlpvN9v3FzvpS/DB+EjPx6dQbsR4r8bOoRSOWq+38Wv56TufTwyP10bnetTdGjSQ9J6ud69egMVVj15iiGj/IUrV4JTum52MlkrgfEcvxWvZ3I+Y6V4PuEX5xjLO+MMaVtsfVr2WLTphiyGvjj+M1eVTSuF7oiWvvNXc6y+vd0o3S8wOj1L7X9V8by6NvKsWv5Im0hV8NvT+ctL2RmOuJxAv7vV5aIf1DM51v1NdW1+/W3h6zv1fzZXoe/eZM3SVK8Tiej3K+cxeyeZKdU7PZ0X+hc5x3x6uU/+LSUtib96Pfdeq1ztQfx/24vetM/VYsxEIsZi1dykpP9t2x0rzLnZZ68+azvPSdVrHzw07v+637UW+9HwLgbDv39XOlyr8qf6u8V/l15W7l9fL3p749daUUk3+d/E5xduLVwpXkT/Fe/KL7+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh2Gw8ertbq9eX1wYnC4KxkeK1avdl+kNiQMrsSSf6onDEKJxsPHjZHNjg8MZUP7wC1/nPQvh7FWIXbj1EbWngqHq7Wqofa5eGJZGvv8SqPPhbtpzyN0UXSF/C08jOPud1zd8vksYTlcInq0TXYfsH2ZI3/6v3nl1qVm8mA4zUREYNqjbhwtJ5xdZaf4weMcL1x7+3rGw8efmPlXu2t5beW1yYXFhZnFxdem79+Z6W+PNua91Q4kYffAieh9+1ERykiXh5d180fAAAAAAAAAAAATsdJ/C/Eae8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L9taSaKTyOJudlrs+n69pP5ejq1092SxYgoRETy84jkLxE3ozXFdE9zyX79vLuy+ObHn21/0m2rGBOt8oWIrX3rjWcrn6IakTabLY+qvVuj2yt1k1MDspNOZNKAXW0HDk7bfwMAAP//YsruLQ==")
r0 = open(0x0, 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program did not crash
extracting C reproducer
testing compiled C program (duration=1m8.128032676s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
simplifying C reproducer
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=1m8.128032676s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
reproducing took 21m10.327345833s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
============================================
WARNING: possible recursive locking detected
6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Not tainted
--------------------------------------------
syz-executor402/5816 is trying to acquire lock:
ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor402/5816:
#0: ffff88802538c420 (sb_writers#9){.+.+}-{0:0}, at: do_ftruncate+0x44f/0x540 fs/open.c:191
#1: ffff888079fa89b8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:877 [inline]
#1: ffff888079fa89b8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x20c/0x310 fs/open.c:63
#2: ffff888079fa87c8 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#3: ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#4: ffff888024140108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
stack backtrace:
CPU: 0 UID: 0 PID: 5816 Comm: syz-executor402 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3039
check_deadlock kernel/locking/lockdep.c:3091 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3893
__lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x454/0x1b70 fs/hfsplus/extents.c:462
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x2a4/0x5c0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x84/0xe10 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x48c/0x1b70 fs/hfsplus/extents.c:462
hfsplus_get_block+0x406/0x14f0 fs/hfsplus/extents.c:245
__block_write_begin_int+0x692/0x19a0 fs/buffer.c:2116
block_write_begin fs/buffer.c:2226 [inline]
cont_write_begin+0x77f/0xb40 fs/buffer.c:2577
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
cont_expand_zero fs/buffer.c:2504 [inline]
cont_write_begin+0x32b/0xb40 fs/buffer.c:2567
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
generic_cont_expand_simple+0x18f/0x2b0 fs/buffer.c:2468
hfsplus_setattr+0x16d/0x270 fs/hfsplus/inode.c:258
notify_change+0xbca/0xe90 fs/attr.c:552
do_truncate+0x220/0x310 fs/open.c:65
do_ftruncate+0x4a1/0x540 fs/open.c:192
do_sys_ftruncate fs/open.c:207 [inline]
__do_sys_ftruncate fs/open.c:212 [inline]
__se_sys_ftruncate fs/open.c:210 [inline]
__x64_sys_ftruncate+0x94/0xf0 fs/open.c:210
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fddec1c4ad9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd8c71a68 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddec1c4ad9
RDX: 00007fddec1c4ad9 RSI: 0000000002007ffb RDI: 0000000000000004
RBP: 00007fddec2385f0 R08: 000055557113e4c0 R09: 000055557113e4c0
R10: 0000000000000703 R11: 0000000000000246 R12: 00007ffcd8c71a90
R13: 00007ffcd8c71cb8 R14: 431bde82d7b634db R15: 00007fddec20d03b
final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
============================================
WARNING: possible recursive locking detected
6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Not tainted
--------------------------------------------
syz-executor402/5816 is trying to acquire lock:
ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor402/5816:
#0: ffff88802538c420 (sb_writers#9){.+.+}-{0:0}, at: do_ftruncate+0x44f/0x540 fs/open.c:191
#1: ffff888079fa89b8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:877 [inline]
#1: ffff888079fa89b8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x20c/0x310 fs/open.c:63
#2: ffff888079fa87c8 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
#3: ffff88803380e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
#4: ffff888024140108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21b/0x1b70 fs/hfsplus/extents.c:458
stack backtrace:
CPU: 0 UID: 0 PID: 5816 Comm: syz-executor402 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3039
check_deadlock kernel/locking/lockdep.c:3091 [inline]
validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3893
__lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
hfsplus_find_init+0x14a/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x454/0x1b70 fs/hfsplus/extents.c:462
hfsplus_bmap_reserve+0x105/0x4e0 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x2a4/0x5c0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x84/0xe10 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x48c/0x1b70 fs/hfsplus/extents.c:462
hfsplus_get_block+0x406/0x14f0 fs/hfsplus/extents.c:245
__block_write_begin_int+0x692/0x19a0 fs/buffer.c:2116
block_write_begin fs/buffer.c:2226 [inline]
cont_write_begin+0x77f/0xb40 fs/buffer.c:2577
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
cont_expand_zero fs/buffer.c:2504 [inline]
cont_write_begin+0x32b/0xb40 fs/buffer.c:2567
hfsplus_write_begin+0x68/0xb0 fs/hfsplus/inode.c:46
generic_cont_expand_simple+0x18f/0x2b0 fs/buffer.c:2468
hfsplus_setattr+0x16d/0x270 fs/hfsplus/inode.c:258
notify_change+0xbca/0xe90 fs/attr.c:552
do_truncate+0x220/0x310 fs/open.c:65
do_ftruncate+0x4a1/0x540 fs/open.c:192
do_sys_ftruncate fs/open.c:207 [inline]
__do_sys_ftruncate fs/open.c:212 [inline]
__se_sys_ftruncate fs/open.c:210 [inline]
__x64_sys_ftruncate+0x94/0xf0 fs/open.c:210
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fddec1c4ad9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcd8c71a68 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddec1c4ad9
RDX: 00007fddec1c4ad9 RSI: 0000000002007ffb RDI: 0000000000000004
RBP: 00007fddec2385f0 R08: 000055557113e4c0 R09: 000055557113e4c0
R10: 0000000000000703 R11: 0000000000000246 R12: 00007ffcd8c71a90
R13: 00007ffcd8c71cb8 R14: 431bde82d7b634db R15: 00007fddec20d03b