program: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f09002c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104a5d3eaff1a766dce0c557b956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6f2, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r0, 0xee72) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f09002c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104a5d3eaff1a766dce0c557b956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6f2, &(0x7f00000001c0)="$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") (async) open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) (async) ftruncate(r0, 0xee72) (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) [ 75.937943][ T4689] Bluetooth: hci0: command tx timeout [ 76.059513][ T5341] loop0: detected capacity change from 0 to 1024 [ 76.130217][ T5341] [ 76.131315][ T5341] ============================================ [ 76.134084][ T5341] WARNING: possible recursive locking detected [ 76.136806][ T5341] syzkaller #0 Not tainted [ 76.138732][ T5341] -------------------------------------------- [ 76.141531][ T5341] syz.0.0/5341 is trying to acquire lock: [ 76.144072][ T5341] ffff8880400e20b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 76.148381][ T5341] [ 76.148381][ T5341] but task is already holding lock: [ 76.151578][ T5341] ffff8880400e20b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 76.155733][ T5341] [ 76.155733][ T5341] other info that might help us debug this: [ 76.159189][ T5341] Possible unsafe locking scenario: [ 76.159189][ T5341] [ 76.162877][ T5341] CPU0 [ 76.164739][ T5341] ---- [ 76.166371][ T5341] lock(&tree->tree_lock/1); [ 76.168400][ T5341] lock(&tree->tree_lock/1); [ 76.170443][ T5341] [ 76.170443][ T5341] *** DEADLOCK *** [ 76.170443][ T5341] [ 76.173922][ T5341] May be due to missing lock nesting notation [ 76.173922][ T5341] [ 76.177286][ T5341] 5 locks held by syz.0.0/5341: [ 76.179170][ T5341] #0: ffff88804324a420 (sb_writers#12){.+.+}-{0:0}, at: do_ftruncate+0x446/0x560 [ 76.182828][ T5341] #1: ffff8880425b2b78 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 76.187214][ T5341] #2: ffff8880425b2988 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 [ 76.191775][ T5341] #3: ffff8880400e20b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 76.196097][ T5341] #4: ffff8880425b0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 [ 76.201130][ T5341] [ 76.201130][ T5341] stack backtrace: [ 76.203760][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.203775][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.203781][ T5341] Call Trace: [ 76.203789][ T5341] [ 76.203795][ T5341] dump_stack_lvl+0xe8/0x150 [ 76.203820][ T5341] print_deadlock_bug+0x279/0x290 [ 76.203833][ T5341] __lock_acquire+0x2540/0x2cf0 [ 76.203843][ T5341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 76.203900][ T5341] ? lockdep_hardirqs_on+0x7b/0x110 [ 76.203909][ T5341] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 76.203921][ T5341] ? stack_depot_save_flags+0x3f3/0x810 [ 76.203937][ T5341] ? hfsplus_find_init+0x168/0x2d0 [ 76.203950][ T5341] lock_acquire+0x107/0x340 [ 76.203959][ T5341] ? hfsplus_find_init+0x168/0x2d0 [ 76.203975][ T5341] __mutex_lock+0x187/0x1350 [ 76.203984][ T5341] ? hfsplus_find_init+0x168/0x2d0 [ 76.203999][ T5341] ? hfsplus_find_init+0x168/0x2d0 [ 76.204012][ T5341] ? __pfx___mutex_lock+0x10/0x10 [ 76.204023][ T5341] ? rcu_is_watching+0x15/0xb0 [ 76.204035][ T5341] ? trace_kmalloc+0x1f/0xb0 [ 76.204047][ T5341] ? __kmalloc_noprof+0x43e/0x800 [ 76.204060][ T5341] ? hfsplus_find_init+0x8c/0x2d0 [ 76.204073][ T5341] hfsplus_find_init+0x168/0x2d0 [ 76.204087][ T5341] hfsplus_file_extend+0x40e/0x1c30 [ 76.204100][ T5341] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 76.204110][ T5341] ? __pfx___mutex_trylock_common+0x10/0x10 [ 76.204123][ T5341] ? rcu_is_watching+0x15/0xb0 [ 76.204134][ T5341] ? __asan_memset+0x22/0x50 [ 76.204147][ T5341] ? hfsplus_brec_find+0x1a9/0x510 [ 76.204161][ T5341] hfsplus_bmap_reserve+0x125/0x510 [ 76.204176][ T5341] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 76.204188][ T5341] __hfsplus_ext_cache_extent+0x89/0xe30 [ 76.204200][ T5341] hfsplus_file_extend+0x437/0x1c30 [ 76.204213][ T5341] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 76.204224][ T5341] ? clean_bdev_aliases+0x5d0/0x6b0 [ 76.204239][ T5341] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 76.204253][ T5341] hfsplus_get_block+0x40a/0x1600 [ 76.204266][ T5341] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.204276][ T5341] ? do_raw_spin_unlock+0x4d/0x240 [ 76.204290][ T5341] ? _raw_spin_unlock+0x28/0x50 [ 76.204302][ T5341] __block_write_begin_int+0x6b5/0x1900 [ 76.204318][ T5341] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.204329][ T5341] ? __pfx___block_write_begin_int+0x10/0x10 [ 76.204344][ T5341] cont_write_begin+0x78c/0xb50 [ 76.204360][ T5341] ? __pfx_cont_write_begin+0x10/0x10 [ 76.204374][ T5341] ? folio_unlock+0x101/0x160 [ 76.204387][ T5341] hfsplus_write_begin+0x66/0xb0 [ 76.204397][ T5341] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.204407][ T5341] cont_write_begin+0x2fd/0xb50 [ 76.204423][ T5341] ? __pfx_cont_write_begin+0x10/0x10 [ 76.204438][ T5341] hfsplus_write_begin+0x66/0xb0 [ 76.204447][ T5341] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.204457][ T5341] generic_cont_expand_simple+0x13f/0x210 [ 76.204471][ T5341] ? __pfx_inode_dio_wait+0x10/0x10 [ 76.204483][ T5341] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 76.204498][ T5341] ? setattr_prepare+0x1e7/0xac0 [ 76.204511][ T5341] ? __pfx_current_time+0x10/0x10 [ 76.204522][ T5341] hfsplus_setattr+0x169/0x270 [ 76.204533][ T5341] ? __pfx_hfsplus_setattr+0x10/0x10 [ 76.204543][ T5341] notify_change+0xc1a/0xf40 [ 76.204558][ T5341] do_truncate+0x1a4/0x220 [ 76.204573][ T5341] ? __pfx_do_truncate+0x10/0x10 [ 76.204589][ T5341] do_ftruncate+0x4a5/0x560 [ 76.204603][ T5341] ? __pfx_do_ftruncate+0x10/0x10 [ 76.204616][ T5341] ? __fget_files+0x2a/0x420 [ 76.204627][ T5341] __x64_sys_ftruncate+0x92/0xf0 [ 76.204640][ T5341] do_syscall_64+0xec/0xf80 [ 76.204649][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.204658][ T5341] ? trace_irq_disable+0x37/0x100 [ 76.204671][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 76.204681][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.204691][ T5341] RIP: 0033:0x7f57f698f7c9 [ 76.204702][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.204710][ T5341] RSP: 002b:00007f57f7881038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 76.204721][ T5341] RAX: ffffffffffffffda RBX: 00007f57f6be5fa0 RCX: 00007f57f698f7c9 [ 76.204728][ T5341] RDX: 0000000000000000 RSI: 000000000000ee72 RDI: 0000000000000004 [ 76.204734][ T5341] RBP: 00007f57f6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.204740][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.204745][ T5341] R13: 00007f57f6be6038 R14: 00007f57f6be5fa0 R15: 00007ffef434d268 [ 76.204754][ T5341] [ 76.403120][ T1048] hfsplus: b-tree write err: -5, ino 4 [ 78.009094][ T4689] Bluetooth: hci0: command tx timeout [ 80.088347][ T4689] Bluetooth: hci0: command tx timeout [ 81.449623][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.452155][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.168359][ T4689] Bluetooth: hci0: command tx timeout