program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) (async) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000280)={[{@nospace_cache}, {@nodatacow}, {@nobarrier}, {@noautodefrag}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x2001004c, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRES8], 0xfe, 0x1516, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = syz_clone(0x6080000, &(0x7f0000000400)="3607b529d803ab5da326ef912390321a6aa53d59d314f4d76e013b6cf073d05bf2f86e33b1434022677d1efce3d71f38d43e943ed062e5b890eb8a568627046e945099a0a827f3e517b94ba66437ef38a300fe9857425b583cd4d9719de2b82d71c6451ecbf67b8e8d23dac51812d48be89e5a727380dc25126360fee0fad2e96a400da05bd11e641105e6a37a966457aa90594637267d5ac877cc0a54a01f739666934800a4da4693da7bfdef9a0dbb65619105c5bcd8f583e7eb27933c04070d", 0xc1, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)="d9e900d60baa64933c5b9c25fd75c88b824b8533c858d6d618951145971fe02a898f55cc02388880ca25dd5c2da4e049cc5228ab2f592b") syz_open_procfs(r6, &(0x7f0000000380)='fdinfo\x00') r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) (async) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) (async) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) [ 85.020340][ T5323] Bluetooth: hci0: command tx timeout [ 85.142329][ T5352] loop0: detected capacity change from 0 to 1024 [ 85.439860][ T5352] overlayfs: failed to resolve './file0': -2 [ 85.442694][ T5353] capability: warning: `syz.0.0' uses deprecated v2 capabilities in a way that may be insecure [ 85.455091][ T25] audit: type=1800 audit(1767544178.512:2): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 85.517694][ T5353] loop0: detected capacity change from 1024 to 64 [ 85.523737][ T5356] [ 85.524811][ T5356] ====================================================== [ 85.527827][ T5356] WARNING: possible circular locking dependency detected [ 85.530745][ T5356] syzkaller #0 Not tainted [ 85.532715][ T5356] ------------------------------------------------------ [ 85.535627][ T5356] syz.0.0/5356 is trying to acquire lock: [ 85.538249][ T5356] ffff88801238c108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 [ 85.543308][ T5356] [ 85.543308][ T5356] but task is already holding lock: [ 85.546572][ T5356] ffff8880404600b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 85.550644][ T5356] [ 85.550644][ T5356] which lock already depends on the new lock. [ 85.550644][ T5356] [ 85.555066][ T5356] [ 85.555066][ T5356] the existing dependency chain (in reverse order) is: [ 85.558991][ T5356] [ 85.558991][ T5356] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.562364][ T5356] __mutex_lock+0x187/0x1350 [ 85.564480][ T5356] hfsplus_find_init+0x168/0x2d0 [ 85.566894][ T5356] hfsplus_get_block+0x8dc/0x1600 [ 85.569260][ T5356] block_read_full_folio+0x29f/0x830 [ 85.571781][ T5356] read_pages+0x35d/0x580 [ 85.573797][ T5356] page_cache_ra_unbounded+0x750/0x990 [ 85.576382][ T5356] filemap_get_pages+0x468/0x1dc0 [ 85.578984][ T5356] filemap_read+0x3f6/0x11a0 [ 85.581279][ T5356] __kernel_read+0x4cf/0x960 [ 85.583641][ T5356] integrity_kernel_read+0x89/0xd0 [ 85.586185][ T5356] ima_calc_file_hash+0x85e/0x16f0 [ 85.588751][ T5356] ima_collect_measurement+0x428/0x8f0 [ 85.591277][ T5356] process_measurement+0x111e/0x1a70 [ 85.593626][ T5356] ima_file_check+0xd9/0x130 [ 85.595682][ T5356] security_file_post_open+0xbb/0x290 [ 85.598147][ T5356] path_openat+0x3456/0x3dd0 [ 85.600235][ T5356] do_filp_open+0x1fa/0x410 [ 85.602297][ T5356] do_sys_openat2+0x121/0x200 [ 85.604453][ T5356] __x64_sys_openat+0x138/0x170 [ 85.606652][ T5356] do_syscall_64+0xec/0xf80 [ 85.608920][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.611771][ T5356] [ 85.611771][ T5356] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.615335][ T5356] __lock_acquire+0x15a6/0x2cf0 [ 85.617690][ T5356] lock_acquire+0x107/0x340 [ 85.619944][ T5356] __mutex_lock+0x187/0x1350 [ 85.622204][ T5356] hfsplus_file_extend+0x1f8/0x1c30 [ 85.624555][ T5356] hfsplus_bmap_reserve+0x125/0x510 [ 85.627162][ T5356] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.629687][ T5356] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.632162][ T5356] hfsplus_file_extend+0x437/0x1c30 [ 85.634606][ T5356] hfsplus_get_block+0x40a/0x1600 [ 85.637054][ T5356] __block_write_begin_int+0x6b5/0x1900 [ 85.639676][ T5356] cont_write_begin+0x78c/0xb50 [ 85.642076][ T5356] hfsplus_write_begin+0x66/0xb0 [ 85.644407][ T5356] cont_write_begin+0x2fd/0xb50 [ 85.646934][ T5356] hfsplus_write_begin+0x66/0xb0 [ 85.649482][ T5356] generic_perform_write+0x2c5/0x900 [ 85.652030][ T5356] generic_file_write_iter+0x117/0x550 [ 85.654625][ T5356] __kernel_write_iter+0x428/0x910 [ 85.657069][ T5356] dump_user_range+0x8a0/0xc90 [ 85.659487][ T5356] elf_core_dump+0x3369/0x3960 [ 85.662432][ T5356] coredump_write+0x1121/0x18b0 [ 85.665044][ T5356] vfs_coredump+0x3321/0x3e60 [ 85.667387][ T5356] get_signal+0x1108/0x1340 [ 85.669597][ T5356] arch_do_signal_or_restart+0x9a/0x7a0 [ 85.672281][ T5356] irqentry_exit+0x178/0x670 [ 85.674649][ T5356] exc_general_protection+0x171/0x1f0 [ 85.677233][ T5356] asm_exc_general_protection+0x26/0x30 [ 85.680415][ T5356] [ 85.680415][ T5356] other info that might help us debug this: [ 85.680415][ T5356] [ 85.685717][ T5356] Possible unsafe locking scenario: [ 85.685717][ T5356] [ 85.689636][ T5356] CPU0 CPU1 [ 85.692084][ T5356] ---- ---- [ 85.694515][ T5356] lock(&tree->tree_lock/1); [ 85.697007][ T5356] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.701570][ T5356] lock(&tree->tree_lock/1); [ 85.705366][ T5356] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.708010][ T5356] [ 85.708010][ T5356] *** DEADLOCK *** [ 85.708010][ T5356] [ 85.711594][ T5356] 4 locks held by syz.0.0/5356: [ 85.713718][ T5356] #0: ffff888034e7a420 (sb_writers#12){.+.+}-{0:0}, at: vfs_coredump+0x3321/0x3e60 [ 85.717765][ T5356] #1: ffff8880118289b8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 [ 85.722515][ T5356] #2: ffff8880118287c8 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c30 [ 85.726880][ T5356] #3: ffff8880404600b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 85.731007][ T5356] [ 85.731007][ T5356] stack backtrace: [ 85.733674][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.733689][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.733696][ T5356] Call Trace: [ 85.733703][ T5356] [ 85.733709][ T5356] dump_stack_lvl+0xe8/0x150 [ 85.733727][ T5356] print_circular_bug+0x2e2/0x300 [ 85.733741][ T5356] check_noncircular+0x12e/0x150 [ 85.733754][ T5356] __lock_acquire+0x15a6/0x2cf0 [ 85.733764][ T5356] ? rcu_is_watching+0x15/0xb0 [ 85.733777][ T5356] ? __kasan_check_byte+0x12/0x40 [ 85.733788][ T5356] ? rcu_is_watching+0x15/0xb0 [ 85.733799][ T5356] ? lock_release+0x4b/0x3b0 [ 85.733808][ T5356] ? lock_release+0x4b/0x3b0 [ 85.733818][ T5356] ? hfsplus_file_extend+0x1f8/0x1c30 [ 85.733829][ T5356] lock_acquire+0x107/0x340 [ 85.733837][ T5356] ? hfsplus_file_extend+0x1f8/0x1c30 [ 85.733850][ T5356] __mutex_lock+0x187/0x1350 [ 85.733861][ T5356] ? hfsplus_file_extend+0x1f8/0x1c30 [ 85.733871][ T5356] ? stack_trace_save+0x9c/0xe0 [ 85.733886][ T5356] ? __pfx_stack_trace_save+0x10/0x10 [ 85.733900][ T5356] ? hfsplus_file_extend+0x1f8/0x1c30 [ 85.733909][ T5356] ? check_noncircular+0xda/0x150 [ 85.733921][ T5356] ? __pfx___mutex_lock+0x10/0x10 [ 85.733930][ T5356] ? add_lock_to_list+0xc7/0x100 [ 85.733943][ T5356] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 85.733959][ T5356] hfsplus_file_extend+0x1f8/0x1c30 [ 85.733971][ T5356] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.733982][ T5356] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.733994][ T5356] ? rcu_is_watching+0x15/0xb0 [ 85.734004][ T5356] ? trace_contention_end+0x39/0x100 [ 85.734016][ T5356] ? __asan_memset+0x22/0x50 [ 85.734028][ T5356] ? hfsplus_brec_find+0x1a9/0x510 [ 85.734042][ T5356] hfsplus_bmap_reserve+0x125/0x510 [ 85.734058][ T5356] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.734071][ T5356] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.734083][ T5356] hfsplus_file_extend+0x437/0x1c30 [ 85.734096][ T5356] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.734109][ T5356] ? clean_bdev_aliases+0x5c9/0x6b0 [ 85.734125][ T5356] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 85.734139][ T5356] hfsplus_get_block+0x40a/0x1600 [ 85.734153][ T5356] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.734163][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 85.734176][ T5356] ? _raw_spin_unlock+0x28/0x50 [ 85.734192][ T5356] __block_write_begin_int+0x6b5/0x1900 [ 85.734211][ T5356] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.734225][ T5356] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.734243][ T5356] cont_write_begin+0x78c/0xb50 [ 85.734260][ T5356] ? __pfx_cont_write_begin+0x10/0x10 [ 85.734273][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734283][ T5356] ? xas_set_mark+0x2e7/0x4b0 [ 85.734301][ T5356] hfsplus_write_begin+0x66/0xb0 [ 85.734310][ T5356] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.734322][ T5356] cont_write_begin+0x2fd/0xb50 [ 85.734340][ T5356] ? __pfx_cont_write_begin+0x10/0x10 [ 85.734356][ T5356] ? lockdep_hardirqs_on+0x7b/0x110 [ 85.734367][ T5356] hfsplus_write_begin+0x66/0xb0 [ 85.734377][ T5356] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.734391][ T5356] generic_perform_write+0x2c5/0x900 [ 85.734403][ T5356] ? __pfx_generic_perform_write+0x10/0x10 [ 85.734412][ T5356] ? file_update_time_flags+0x2cb/0x4e0 [ 85.734427][ T5356] ? __generic_file_write_iter+0xf9/0x230 [ 85.734435][ T5356] ? generic_file_write_iter+0x103/0x550 [ 85.734444][ T5356] generic_file_write_iter+0x117/0x550 [ 85.734454][ T5356] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.734463][ T5356] ? follow_page_pte+0xd03/0x13e0 [ 85.734476][ T5356] ? __pfx_follow_page_pte+0x10/0x10 [ 85.734487][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734498][ T5356] ? __get_user_pages+0x2837/0x29f0 [ 85.734512][ T5356] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.734522][ T5356] __kernel_write_iter+0x428/0x910 [ 85.734539][ T5356] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.734549][ T5356] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.734563][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 85.734577][ T5356] ? __asan_memset+0x22/0x50 [ 85.734588][ T5356] ? iov_iter_bvec+0xb8/0x180 [ 85.734598][ T5356] dump_user_range+0x8a0/0xc90 [ 85.734611][ T5356] ? __pfx_dump_user_range+0x10/0x10 [ 85.734622][ T5356] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 85.734634][ T5356] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 85.734646][ T5356] ? dump_emit+0xa6/0xe0 [ 85.734656][ T5356] ? elf_core_dump+0x2cd0/0x3960 [ 85.734669][ T5356] elf_core_dump+0x3369/0x3960 [ 85.734686][ T5356] ? __pfx_elf_core_dump+0x10/0x10 [ 85.734698][ T5356] ? kasan_save_track+0x4f/0x80 [ 85.734713][ T5356] ? kasan_save_track+0x3e/0x80 [ 85.734725][ T5356] ? __kasan_kmalloc+0x93/0xb0 [ 85.734733][ T5356] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 85.734747][ T5356] ? coredump_write+0x343/0x18b0 [ 85.734757][ T5356] ? vfs_coredump+0x3321/0x3e60 [ 85.734766][ T5356] ? get_signal+0x1108/0x1340 [ 85.734774][ T5356] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 85.734788][ T5356] ? irqentry_exit+0x178/0x670 [ 85.734796][ T5356] ? exc_general_protection+0x171/0x1f0 [ 85.734807][ T5356] ? asm_exc_general_protection+0x26/0x30 [ 85.734818][ T5356] ? mas_ascend+0x2f4/0x830 [ 85.734835][ T5356] ? vfs_coredump+0x3321/0x3e60 [ 85.734845][ T5356] ? 0xffffffffff600000 [ 85.734855][ T5356] coredump_write+0x1121/0x18b0 [ 85.734870][ T5356] ? __pfx_coredump_write+0x10/0x10 [ 85.734883][ T5356] ? unshare_files+0xa9/0x140 [ 85.734898][ T5356] vfs_coredump+0x3321/0x3e60 [ 85.734914][ T5356] ? __pfx_vfs_coredump+0x10/0x10 [ 85.734926][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734936][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734947][ T5356] ? rep_stos_alternative+0xf/0x80 [ 85.734960][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734969][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734979][ T5356] ? __lock_acquire+0x6b6/0x2cf0 [ 85.734989][ T5356] ? unwind_next_frame+0xa5/0x23d0 [ 85.735000][ T5356] ? lock_acquire+0x107/0x340 [ 85.735010][ T5356] ? unwind_next_frame+0xa5/0x23d0 [ 85.735021][ T5356] ? is_bpf_text_address+0x26/0x2b0 [ 85.735035][ T5356] ? lock_acquire+0x107/0x340 [ 85.735046][ T5356] ? is_bpf_text_address+0x26/0x2b0 [ 85.735063][ T5356] ? is_bpf_text_address+0x292/0x2b0 [ 85.735078][ T5356] ? is_bpf_text_address+0x26/0x2b0 [ 85.735094][ T5356] ? kernel_text_address+0xa5/0xe0 [ 85.735110][ T5356] ? __kernel_text_address+0xd/0x40 [ 85.735122][ T5356] ? unwind_get_return_address+0x4d/0x90 [ 85.735132][ T5356] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.735147][ T5356] ? arch_stack_walk+0xfc/0x150 [ 85.735160][ T5356] ? stack_trace_save+0x9c/0xe0 [ 85.735173][ T5356] ? __pfx_stack_trace_save+0x10/0x10 [ 85.735187][ T5356] ? stack_depot_save_flags+0x33/0x810 [ 85.735201][ T5356] ? kasan_save_track+0x4f/0x80 [ 85.735213][ T5356] ? kasan_save_track+0x3e/0x80 [ 85.735226][ T5356] ? kasan_save_free_info+0x46/0x50 [ 85.735238][ T5356] ? __kasan_slab_free+0x5c/0x80 [ 85.735253][ T5356] ? kmem_cache_free+0x197/0x620 [ 85.735267][ T5356] ? get_signal+0xa4b/0x1340 [ 85.735276][ T5356] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 85.735300][ T5356] ? irqentry_exit+0x178/0x670 [ 85.735308][ T5356] ? exc_general_protection+0x171/0x1f0 [ 85.735319][ T5356] ? asm_exc_general_protection+0x26/0x30 [ 85.735338][ T5356] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.735352][ T5356] get_signal+0x1108/0x1340 [ 85.735364][ T5356] arch_do_signal_or_restart+0x9a/0x7a0 [ 85.735376][ T5356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.735390][ T5356] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.735404][ T5356] ? force_sig+0xc9/0x120 [ 85.735418][ T5356] irqentry_exit+0x178/0x670 [ 85.735427][ T5356] ? rcu_is_watching+0x15/0xb0 [ 85.735440][ T5356] exc_general_protection+0x171/0x1f0 [ 85.735454][ T5356] asm_exc_general_protection+0x26/0x30 [ 85.735465][ T5356] RIP: 0033:0x7f3ec318f7d1 [ 85.735477][ T5356] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 85.735486][ T5356] RSP: 002b:00002000000004c0 EFLAGS: 00010217 [ 85.735496][ T5356] RAX: 0000000000000000 RBX: 00007f3ec33e5fa0 RCX: 00007f3ec318f7c9 [ 85.735503][ T5356] RDX: 00002000000001c0 RSI: 00002000000004c0 RDI: 0000000006080000 [ 85.735510][ T5356] RBP: 00007f3ec3213f91 R08: 0000200000000340 R09: 0000200000000340 [ 85.735516][ T5356] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 85.735522][ T5356] R13: 00007f3ec33e6038 R14: 00007f3ec33e5fa0 R15: 00007ffe5775c538 [ 85.735532][ T5356] [ 86.109378][ T5356] syz.0.0: attempt to access beyond end of device [ 86.109378][ T5356] loop0: rw=8390665, sector=1018, nr_sectors = 4 limit=64 [ 86.150078][ T5356] syz.0.0 (5356) used greatest stack depth: 18536 bytes left