Extracting prog: 3m50.944379322s
Minimizing prog: 30m23.975308204s
Simplifying prog options: 2m57.661991976s
Extracting C: 2m7.834953447s
Simplifying C: 8m19.169985071s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mknod
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
mknod(0x0, 0x0, 0x0)
program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mknod
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
mknod(0x0, 0x0, 0x0)
program crashed: possible deadlock in hfs_find_init
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program crashed: possible deadlock in hfs_find_init
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0), 0x208e24b)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program crashed: possible deadlock in hfs_find_init
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
program crashed: possible deadlock in hfs_find_init
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program crashed: possible deadlock in hfs_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$eJzs3c9rE00cx/HPbNImfVr65HlaETyIVAP2Ilov4iUi+SM8idqkUFwqaos/8FDFk4i9e/df8G8QL4rguZ48ied6kJWZnWSzSTZJpcm2+n6BYbOzs/OdzM7OzIJdAfhrXa3vvrn41f4zUkEF6cVlKZBUloqSjul4eWtjc30zbDYGnaigk6U4l1Gc0/Qcs7rR7Je1LJ/Dq9hvRc117sN4RFF05UveQSB3rvdHhfTOU+5OUPK90yWWc4ovy9P9Z/k+I2l7HMEcIWZPe3qo+bzjAADky8Tje+DH+Tk/fw8CqeqHfTcbP2zj/+/ayzuAsYsGpnaM/65dI2Pb/V+XlKz33BLOpgetVeIoJU91fZ9WfGWlZpdm2KrSxRLMrK2HzXOrd8JGoGeqeR2HLbrPRnzptgyJdqnP2nSA9tlmMg8x/WeUs64OU7YOK3H8DySl4l8YWOIYmPfmo7luKnqtRnv+V4yMbSbXUpWulorjP599RlfLij1K/rZRq9WC1CH/uUJO+BK8IbUsq5BV4rQ/Z+oBQWVYnC7X/1254tpdGJJroW+uFbe9rCAj12Iql63N2nr4LruoiTCvzDWzpG96q3rH/D+w8VU1sGcmvcZU46HA/eK2d6ZbtkOx6lPcyLH1efdJvL+3u7R/xVJW6D8G39OwDy91S5c0f//R49uFMGzesxs3Q3u5uo32nrtzfiNsTj2XOpMOy4a2kz0lRU7Pwa1BaZKBLR/oCe39o0+S7VjJHtvLxl4vex84BO2e30b9w8FcSK1pQyrpZxRFE6zOju8Y3Un53ZowOUmj5x0JcmLnXSZe/yXrlWI82bMflb7z9BEfBPgzRnaO3V7BJXmjeEYu6Z99reBms1dwvWuunjWjW3OdPiudGb3Eio/zD2Hq+qQbPP8HAAAAAAAAAAAAAAAAAAA4aibx/yXyriMAAAAAAAAAAAAAAAAAAAAAAEdd+/2/ar3/V6O9/7f7VSyF+E+CH8j7f3c2xPt/gfH7FQAA//9kIneW")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program crashed: possible deadlock in hfs_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000040)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x2e0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
program crashed: possible deadlock in hfs_find_init
validation run: crashed=true
reproducing took 54m36.411344445s
repro crashed as (corrupted=false):
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand
option from the mount to silence this warning.
=======================================================
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5983 is trying to acquire lock:
ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
but task is already holding lock:
ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz.0.17/5983:
#0: ffff88803051c420 (sb_writers#12){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
#0: ffff88803051c420 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 fs/read_write.c:682
#1: ffff888030699620 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#1: ffff888030699620 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 mm/filemap.c:4454
#2: ffff888030699478 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1540 fs/hfs/extent.c:397
#3: ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
#4: ffff8880306980f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1540 fs/hfs/extent.c:397
stack backtrace:
CPU: 1 UID: 0 PID: 5983 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x107/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
hfs_ext_read_extent fs/hfs/extent.c:200 [inline]
hfs_extend_file+0x2f6/0x1540 fs/hfs/extent.c:401
hfs_bmap_reserve+0x107/0x430 fs/hfs/btree.c:269
__hfs_ext_write_extent+0x1fa/0x470 fs/hfs/extent.c:121
__hfs_ext_cache_extent+0x6b/0x9b0 fs/hfs/extent.c:174
hfs_ext_read_extent fs/hfs/extent.c:202 [inline]
hfs_extend_file+0x31e/0x1540 fs/hfs/extent.c:401
hfs_get_block+0x3d7/0xbd0 fs/hfs/extent.c:353
__block_write_begin_int+0x6b5/0x1900 fs/buffer.c:2145
block_write_begin fs/buffer.c:2256 [inline]
cont_write_begin+0x78c/0xb50 fs/buffer.c:2594
hfs_write_begin+0x66/0xb0 fs/hfs/inode.c:53
generic_perform_write+0x2c5/0x900 mm/filemap.c:4314
generic_file_write_iter+0x117/0x550 mm/filemap.c:4457
new_sync_write fs/read_write.c:593 [inline]
vfs_write+0x5c9/0xb30 fs/read_write.c:686
ksys_write+0x145/0x250 fs/read_write.c:738
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff8e498f749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffefe5add88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007ff8e4be5fa0 RCX: 00007ff8e498f749
RDX: 000000000208e24b RSI: 00002000000001c0 RDI: 0000000000000004
RBP: 00007ff8e4a13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff8e4be5fa0 R14: 00007ff8e4be5fa0 R15: 0000000000000003
final repro crashed as (corrupted=false):
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand
option from the mount to silence this warning.
=======================================================
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5983 is trying to acquire lock:
ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
but task is already holding lock:
ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz.0.17/5983:
#0: ffff88803051c420 (sb_writers#12){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
#0: ffff88803051c420 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 fs/read_write.c:682
#1: ffff888030699620 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#1: ffff888030699620 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 mm/filemap.c:4454
#2: ffff888030699478 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1540 fs/hfs/extent.c:397
#3: ffff888079f920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
#4: ffff8880306980f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1540 fs/hfs/extent.c:397
stack backtrace:
CPU: 1 UID: 0 PID: 5983 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x107/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfs_find_init+0x18e/0x300 fs/hfs/bfind.c:-1
hfs_ext_read_extent fs/hfs/extent.c:200 [inline]
hfs_extend_file+0x2f6/0x1540 fs/hfs/extent.c:401
hfs_bmap_reserve+0x107/0x430 fs/hfs/btree.c:269
__hfs_ext_write_extent+0x1fa/0x470 fs/hfs/extent.c:121
__hfs_ext_cache_extent+0x6b/0x9b0 fs/hfs/extent.c:174
hfs_ext_read_extent fs/hfs/extent.c:202 [inline]
hfs_extend_file+0x31e/0x1540 fs/hfs/extent.c:401
hfs_get_block+0x3d7/0xbd0 fs/hfs/extent.c:353
__block_write_begin_int+0x6b5/0x1900 fs/buffer.c:2145
block_write_begin fs/buffer.c:2256 [inline]
cont_write_begin+0x78c/0xb50 fs/buffer.c:2594
hfs_write_begin+0x66/0xb0 fs/hfs/inode.c:53
generic_perform_write+0x2c5/0x900 mm/filemap.c:4314
generic_file_write_iter+0x117/0x550 mm/filemap.c:4457
new_sync_write fs/read_write.c:593 [inline]
vfs_write+0x5c9/0xb30 fs/read_write.c:686
ksys_write+0x145/0x250 fs/read_write.c:738
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff8e498f749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffefe5add88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007ff8e4be5fa0 RCX: 00007ff8e498f749
RDX: 000000000208e24b RSI: 00002000000001c0 RDI: 0000000000000004
RBP: 00007ff8e4a13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff8e4be5fa0 R14: 00007ff8e4be5fa0 R15: 0000000000000003