Extracting prog: 2m44.393028522s
Minimizing prog: 24m56.090642354s
Simplifying prog options: 0s
Extracting C: 30.184786718s
Simplifying C: 5m51.211811922s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program crashed: possible deadlock in hfsplus_find_init
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
ftruncate(0xffffffffffffffff, 0x2007ffb)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-ftruncate
detailed listing:
executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$eJzs3UtsHGcdAPD/rNfr3QCp06ZJQZG6aqSCsEjsGBfMhYAQ+FChqhw4rxKnsbxxKnuLnAgRh8edQw+IUznkVnFA5R4JzlSVUCVOPnCohNQDPfmAtGhmZx/2rnfX8RP6+1kz8818z/nPzsw+ZE0An1tLM1F8Gkkszby+ma5v/+PfzUwrux4RpYgoRBRbi0jWspxSfPFK3ExTX0435s0l+/Xz7srimx9/tv1Ja62YT1n5ZFi9AUr9m7byKaoRMZEv+5T3a/GDvd3vau/Wfu2NrbuHacCu5suI3x+qVTi0Zp+tTt77f8/mw6of5LwFzqikdd/sMx1xrvfWmV8dCic3suOxddoDAAAAgIOqHLzKczuxE5tx/jiGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+v8uf/J/lUaKerkbSf/1/Kt0WePoNGPwjxo6nW8unxDwYAAAAAAAAAjt3LO7ETm3G+vd5Mst/8X+n5jf8L8U5sxHKsx7XYjFo0ohHrMRcR0z0NlTZrjcb6XFYz4uKQmjfiw96apYhoNNZv7D/Gm0e90wAAAAAAAABwtpVH5K9O9m/7ZSx1f/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICzIImYaC2y6WI7PR2FYkSU2+W2Ij6MiNLpjvZAkkEbn578OAAAAOBQyrtXk/IYdZ57FDuxGefb680k+8x/Kfu8XI53Yi0asRKNqMdy3M4/Q6ef+gvbT+br20/m76VTf7vf+/RAQ89ajNZ3D4N7fikrUYk7sZJtuRa3IolmppC38tL2k/l0eW/wuB6nY0q+mxsymome9O10dvmDLP3b3d8iFA+0i8+osG/OdJY72YnIbD62tMaFdgQGR2Lk0SkO7WkuCp1vfi4O72lwzB8P6HKymzy3p9TAb25Oxd5I3IhC5whdGh6JiK/++f2f3q2vrd69szFzdnZpoEcjS3Qi8c32ZaYbictjR6Jy1AM/QpNjlpvN9v3FzvpS/DB+EjPx6dQbsR4r8bOoRSOWq+38Wv56TufTwyP10bnetTdGjSQ9J6ud69egMVVj15iiGj/IUrV4JTum52MlkrgfEcvxWvZ3I+Y6V4PuEX5xjLO+MMaVtsfVr2WLTphiyGvjj+M1eVTSuF7oiWvvNXc6y+vd0o3S8wOj1L7X9V8by6NvKsWv5Im0hV8NvT+ctL2RmOuJxAv7vV5aIf1DM51v1NdW1+/W3h6zv1fzZXoe/eZM3SVK8Tiej3K+cxeyeZKdU7PZ0X+hc5x3x6uU/+LSUtib96Pfdeq1ztQfx/24vetM/VYsxEIsZi1dykpP9t2x0rzLnZZ68+azvPSdVrHzw07v+637UW+9HwLgbDv39XOlyr8qf6u8V/l15W7l9fL3p749daUUk3+d/E5xduLVwpXkT/Fe/KL7+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh2Gw8ertbq9eX1wYnC4KxkeK1avdl+kNiQMrsSSf6onDEKJxsPHjZHNjg8MZUP7wC1/nPQvh7FWIXbj1EbWngqHq7Wqofa5eGJZGvv8SqPPhbtpzyN0UXSF/C08jOPud1zd8vksYTlcInq0TXYfsH2ZI3/6v3nl1qVm8mA4zUREYNqjbhwtJ5xdZaf4weMcL1x7+3rGw8efmPlXu2t5beW1yYXFhZnFxdem79+Z6W+PNua91Q4kYffAieh9+1ERykiXh5d180fAAAAAAAAAAAATsdJ/C/Eae8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L9taSaKTyOJudlrs+n69pP5ejq1092SxYgoRETy84jkLxE3ozXFdE9zyX79vLuy+ObHn21/0m2rGBOt8oWIrX3rjWcrn6IakTabLY+qvVuj2yt1k1MDspNOZNKAXW0HDk7bfwMAAP//YsruLQ==")
r0 = open(0x0, 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
program crashed: possible deadlock in hfsplus_find_init
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program crashed: possible deadlock in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program crashed: possible deadlock in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-open-ftruncate
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x1, 0x709, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
program crashed: possible deadlock in hfsplus_find_init
validation run: crashed=true
reproducing took 36m44.726240992s
repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5468 is trying to acquire lock:
ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz.0.17/5468:
#0: ffff888011204420 (sb_writers#12){.+.+}-{0:0}, at: class_super_write_constructor include/linux/fs/super.h:128 [inline]
#0: ffff888011204420 (sb_writers#12){.+.+}-{0:0}, at: do_ftruncate+0x446/0x560 fs/open.c:194
#1: ffff88801a1a2b78 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock_killable include/linux/fs.h:1032 [inline]
#1: ffff88801a1a2b78 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x171/0x220 fs/open.c:63
#2: ffff88801a1a2988 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 fs/hfsplus/extents.c:453
#3: ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
#4: ffff88801a1a0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 fs/hfsplus/extents.c:453
stack backtrace:
CPU: 0 UID: 0 PID: 5468 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x107/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x40e/0x1c30 fs/hfsplus/extents.c:457
hfsplus_bmap_reserve+0x125/0x510 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x28d/0x5b0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x89/0xe30 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x437/0x1c30 fs/hfsplus/extents.c:457
hfsplus_get_block+0x40a/0x1600 fs/hfsplus/extents.c:245
__block_write_begin_int+0x6b5/0x1900 fs/buffer.c:2145
block_write_begin fs/buffer.c:2256 [inline]
cont_write_begin+0x78c/0xb50 fs/buffer.c:2594
hfsplus_write_begin+0x66/0xb0 fs/hfsplus/inode.c:48
cont_expand_zero fs/buffer.c:2522 [inline]
cont_write_begin+0x2fd/0xb50 fs/buffer.c:2584
hfsplus_write_begin+0x66/0xb0 fs/hfsplus/inode.c:48
generic_cont_expand_simple+0x13f/0x210 fs/buffer.c:2485
hfsplus_setattr+0x169/0x270 fs/hfsplus/inode.c:280
notify_change+0xc1a/0xf40 fs/attr.c:546
do_truncate+0x1a4/0x220 fs/open.c:68
do_ftruncate+0x4a5/0x560 fs/open.c:195
do_sys_ftruncate fs/open.c:207 [inline]
__do_sys_ftruncate fs/open.c:212 [inline]
__se_sys_ftruncate fs/open.c:210 [inline]
__x64_sys_ftruncate+0x92/0xf0 fs/open.c:210
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f046ed8f7c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc1aee1d68 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007f046efe5fa0 RCX: 00007f046ed8f7c9
RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 0000000000000004
RBP: 00007f046ee13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f046efe5fa0 R14: 00007f046efe5fa0 R15: 0000000000000002
final repro crashed as (corrupted=false):
============================================
WARNING: possible recursive locking detected
syzkaller #0 Not tainted
--------------------------------------------
syz.0.17/5468 is trying to acquire lock:
ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
but task is already holding lock:
ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&tree->tree_lock/1);
lock(&tree->tree_lock/1);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz.0.17/5468:
#0: ffff888011204420 (sb_writers#12){.+.+}-{0:0}, at: class_super_write_constructor include/linux/fs/super.h:128 [inline]
#0: ffff888011204420 (sb_writers#12){.+.+}-{0:0}, at: do_ftruncate+0x446/0x560 fs/open.c:194
#1: ffff88801a1a2b78 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock_killable include/linux/fs.h:1032 [inline]
#1: ffff88801a1a2b78 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x171/0x220 fs/open.c:63
#2: ffff88801a1a2988 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 fs/hfsplus/extents.c:453
#3: ffff8880460280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
#4: ffff88801a1a0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 fs/hfsplus/extents.c:453
stack backtrace:
CPU: 0 UID: 0 PID: 5468 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
print_deadlock_bug+0x279/0x290 kernel/locking/lockdep.c:3041
check_deadlock kernel/locking/lockdep.c:3093 [inline]
validate_chain kernel/locking/lockdep.c:3895 [inline]
__lock_acquire+0x2540/0x2cf0 kernel/locking/lockdep.c:5237
lock_acquire+0x107/0x340 kernel/locking/lockdep.c:5868
__mutex_lock_common kernel/locking/mutex.c:614 [inline]
__mutex_lock+0x187/0x1350 kernel/locking/mutex.c:776
hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
hfsplus_ext_read_extent fs/hfsplus/extents.c:216 [inline]
hfsplus_file_extend+0x40e/0x1c30 fs/hfsplus/extents.c:457
hfsplus_bmap_reserve+0x125/0x510 fs/hfsplus/btree.c:358
__hfsplus_ext_write_extent+0x28d/0x5b0 fs/hfsplus/extents.c:104
__hfsplus_ext_cache_extent+0x89/0xe30 fs/hfsplus/extents.c:186
hfsplus_ext_read_extent fs/hfsplus/extents.c:218 [inline]
hfsplus_file_extend+0x437/0x1c30 fs/hfsplus/extents.c:457
hfsplus_get_block+0x40a/0x1600 fs/hfsplus/extents.c:245
__block_write_begin_int+0x6b5/0x1900 fs/buffer.c:2145
block_write_begin fs/buffer.c:2256 [inline]
cont_write_begin+0x78c/0xb50 fs/buffer.c:2594
hfsplus_write_begin+0x66/0xb0 fs/hfsplus/inode.c:48
cont_expand_zero fs/buffer.c:2522 [inline]
cont_write_begin+0x2fd/0xb50 fs/buffer.c:2584
hfsplus_write_begin+0x66/0xb0 fs/hfsplus/inode.c:48
generic_cont_expand_simple+0x13f/0x210 fs/buffer.c:2485
hfsplus_setattr+0x169/0x270 fs/hfsplus/inode.c:280
notify_change+0xc1a/0xf40 fs/attr.c:546
do_truncate+0x1a4/0x220 fs/open.c:68
do_ftruncate+0x4a5/0x560 fs/open.c:195
do_sys_ftruncate fs/open.c:207 [inline]
__do_sys_ftruncate fs/open.c:212 [inline]
__se_sys_ftruncate fs/open.c:210 [inline]
__x64_sys_ftruncate+0x92/0xf0 fs/open.c:210
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f046ed8f7c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc1aee1d68 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007f046efe5fa0 RCX: 00007f046ed8f7c9
RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 0000000000000004
RBP: 00007f046ee13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f046efe5fa0 R14: 00007f046efe5fa0 R15: 0000000000000002