program: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3000080, &(0x7f0000000280)=ANY=[], 0x1, 0x2e0, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) write$binfmt_script(r3, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x1000000, 0x100000001}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x1, @remote, @private2, 0x7800, 0x7, 0x7, 0x80}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000300)=0xc, 0x4) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x2c, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0xa5, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x85e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x40, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x3, 0x63}}]}}}]}}]}}, &(0x7f0000002c00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x0, 0x9, 0x40, 0x2}, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x6, 0x1100f, 0xf, [0x0]}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x34, &(0x7f00000002c0)=@string={0x34, 0x3, "b5dcecad5779e2ee81d81f5faa90871756435c85d0e5df6436b873d69e5d5b0ea54a7292352afd664a161e72d64b917b3a55"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x54, &(0x7f0000000340)=@string={0x54, 0x3, "1f9f5ff75d61fe821dad1cdc27db7e72e1ef8106d23f09abe56bd79419f7d9353f5b5816f383fe4611ec3ba916fe7769a247d4f0d6eb2f308c0a348bc89ea17235dbf330348e459bb843aa673550d093a66d"}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x200a}}, {0x59, &(0x7f0000000200)=@string={0x59, 0x3, "a29d0d2bf15f9c7b727e0e4b53337156ceadb882c8537478cb11189aada3783112b65bf61d3aa4b8c52418595af9cb9525caf8223b3727d331b2a8fb3ace96a25fb0d3a8bf4fb88776f1a88e7e409848702403a3d41640"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x444}}, {0xfa, &(0x7f0000002cc0)=@string={0xfa, 0x3, "525e4f13a62e27d888e45a5c7801a1c5f9bc690ef9ca40359f2b3a98b5c4997c46fe74a0e68549b2d690d66f0685855c2530a6d26d9babb03eb0f215532c6bfe02c01d43454907cd1793da9266d4cb6fec9222fef7b53d9baad3527ca02acbfaa1644c7edba81dbbb6bb573c1bef8f777ce5f69569ae03695830a9278caa03580cffebe6b0b836602a58eedd3113fda92dbb1d5d0e79681c3e8f900aade0e361120181e27f27c3ac77a36f294ce7d99562308a52cf19215e22f435cdd0c2942742829acb00d0dbfc8621e644435fe214d5e953a092c961779b3f05596b12f7e67e21da88217fdcd0192601603190257715b6c9a3d576a4a3"}}]}) syz_usb_control_io(r5, &(0x7f00000025c0)={0x2c, &(0x7f0000000440)={0x20, 0x2e, 0x5, {0x5, 0x27, "0c85f1"}}, &(0x7f00000024c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "d9246ebc5592b83e2b94142b8db0c798575385ca70590c0158b2c60897bcbe1f3b8554"}}, &(0x7f0000002500)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5c, 0xf08, 0x6, [0xff3f, 0x3f, 0xf, 0x0]}]}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0x0, 0x9, "9bd92a76", "e51ada46"}}, &(0x7f0000002580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x4, 0x40, 0x0, 0x5, 0x2}}}, &(0x7f0000002a00)={0x84, &(0x7f0000002600)={0x40, 0x15, 0x9, "fc2595045552f19d27"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0x9b}, &(0x7f00000026c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000002740)={0x40, 0x7, 0x2, 0xa1b}, &(0x7f0000002780)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000027c0)={0x40, 0xb, 0x2, "b99c"}, &(0x7f0000002800)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002840)={0x40, 0x13, 0x6, @random="26fe97f28189"}, &(0x7f0000002880)={0x40, 0x17, 0x6, @random="f271efdaf304"}, &(0x7f00000028c0)={0x40, 0x19, 0x2, "ad85"}, &(0x7f0000002900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002940)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002980)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000029c0)={0x40, 0x21, 0x1, 0xf1}}) read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_init_net_socket$rose(0xb, 0x5, 0x0) fchown(r0, r6, r7) [ 75.248112][ T5337] Bluetooth: hci0: command tx timeout [ 75.329823][ T5358] loop0: detected capacity change from 0 to 64 [ 76.187455][ T5358] [ 76.188629][ T5358] ============================================ [ 76.191256][ T5358] WARNING: possible recursive locking detected [ 76.193926][ T5358] syzkaller #0 Not tainted [ 76.195852][ T5358] -------------------------------------------- [ 76.198476][ T5358] syz.0.0/5358 is trying to acquire lock: [ 76.200966][ T5358] ffff8880313120b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200 [ 76.204964][ T5358] [ 76.204964][ T5358] but task is already holding lock: [ 76.207953][ T5358] ffff8880313120b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200 [ 76.211927][ T5358] [ 76.211927][ T5358] other info that might help us debug this: [ 76.215345][ T5358] Possible unsafe locking scenario: [ 76.215345][ T5358] [ 76.218585][ T5358] CPU0 [ 76.220048][ T5358] ---- [ 76.221507][ T5358] lock(&tree->tree_lock/1); [ 76.223492][ T5358] lock(&tree->tree_lock/1); [ 76.225508][ T5358] [ 76.225508][ T5358] *** DEADLOCK *** [ 76.225508][ T5358] [ 76.228904][ T5358] May be due to missing lock nesting notation [ 76.228904][ T5358] [ 76.232310][ T5358] 5 locks held by syz.0.0/5358: [ 76.234396][ T5358] #0: ffff888041c84428 (sb_writers#12){.+.+}-{0:0}, at: do_ftruncate+0x42a/0x540 [ 76.238309][ T5358] #1: ffff8880337f9620 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 76.242445][ T5358] #2: ffff8880337f9478 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 76.246999][ T5358] #3: ffff8880313120b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x184/0x200 [ 76.251243][ T5358] #4: ffff8880337f80f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 76.255987][ T5358] [ 76.255987][ T5358] stack backtrace: [ 76.258553][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.258575][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.258582][ T5358] Call Trace: [ 76.258588][ T5358] [ 76.258593][ T5358] dump_stack_lvl+0x189/0x250 [ 76.258612][ T5358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.258627][ T5358] ? __pfx__printk+0x10/0x10 [ 76.258642][ T5358] ? print_lock_name+0xde/0x100 [ 76.258657][ T5358] print_deadlock_bug+0x28b/0x2a0 [ 76.258670][ T5358] validate_chain+0x1a3f/0x2140 [ 76.258681][ T5358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.258734][ T5358] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.258752][ T5358] __lock_acquire+0xab9/0xd20 [ 76.258770][ T5358] ? hfs_find_init+0x184/0x200 [ 76.258780][ T5358] lock_acquire+0x120/0x360 [ 76.258795][ T5358] ? hfs_find_init+0x184/0x200 [ 76.258805][ T5358] ? cont_write_begin+0x2fd/0xb50 [ 76.258816][ T5358] ? hfs_file_truncate+0x190/0x9c0 [ 76.258831][ T5358] ? notify_change+0xb36/0xe40 [ 76.258844][ T5358] __mutex_lock+0x187/0x1350 [ 76.258859][ T5358] ? hfs_find_init+0x184/0x200 [ 76.258872][ T5358] ? hfs_find_init+0x184/0x200 [ 76.258884][ T5358] ? __pfx___mutex_lock+0x10/0x10 [ 76.258900][ T5358] ? rcu_is_watching+0x15/0xb0 [ 76.258913][ T5358] ? __kmalloc_noprof+0x29b/0x4f0 [ 76.258924][ T5358] ? hfs_find_init+0xaa/0x200 [ 76.258934][ T5358] hfs_find_init+0x184/0x200 [ 76.258948][ T5358] hfs_extend_file+0x2ee/0x1230 [ 76.258961][ T5358] ? hfs_ext_keycmp+0x1c7/0x320 [ 76.258974][ T5358] ? __pfx_hfs_ext_keycmp+0x10/0x10 [ 76.258987][ T5358] ? __pfx_hfs_extend_file+0x10/0x10 [ 76.259001][ T5358] ? __pfx___hfs_brec_find+0x10/0x10 [ 76.259013][ T5358] ? hfs_brec_find+0x3c8/0x500 [ 76.259023][ T5358] hfs_bmap_reserve+0x107/0x430 [ 76.259038][ T5358] __hfs_ext_write_extent+0x1fa/0x470 [ 76.259051][ T5358] __hfs_ext_cache_extent+0x6b/0x9b0 [ 76.259065][ T5358] ? hfs_find_init+0x184/0x200 [ 76.259074][ T5358] hfs_extend_file+0x316/0x1230 [ 76.259086][ T5358] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 76.259103][ T5358] ? __pfx_hfs_extend_file+0x10/0x10 [ 76.259116][ T5358] ? clean_bdev_aliases+0x5c9/0x6b0 [ 76.259132][ T5358] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 76.259148][ T5358] hfs_get_block+0x3d7/0xbd0 [ 76.259163][ T5358] ? __pfx_hfs_get_block+0x10/0x10 [ 76.259176][ T5358] ? do_raw_spin_unlock+0x4d/0x240 [ 76.259188][ T5358] ? _raw_spin_unlock+0x28/0x50 [ 76.259201][ T5358] __block_write_begin_int+0x6b5/0x1900 [ 76.259214][ T5358] ? folio_add_lru+0x1b2/0x3d0 [ 76.259229][ T5358] ? __pfx_hfs_get_block+0x10/0x10 [ 76.259242][ T5358] ? __pfx___block_write_begin_int+0x10/0x10 [ 76.259255][ T5358] cont_write_begin+0x789/0xb50 [ 76.259267][ T5358] ? __pfx_cont_write_begin+0x10/0x10 [ 76.259278][ T5358] ? folio_unlock+0x101/0x160 [ 76.259291][ T5358] hfs_write_begin+0x66/0xb0 [ 76.259303][ T5358] ? __pfx_hfs_get_block+0x10/0x10 [ 76.259316][ T5358] cont_write_begin+0x2fd/0xb50 [ 76.259328][ T5358] ? __pfx_cont_write_begin+0x10/0x10 [ 76.259341][ T5358] hfs_write_begin+0x66/0xb0 [ 76.259353][ T5358] ? __pfx_hfs_get_block+0x10/0x10 [ 76.259366][ T5358] hfs_file_truncate+0x190/0x9c0 [ 76.259379][ T5358] ? __up_read+0x280/0x680 [ 76.259391][ T5358] ? __pfx___up_read+0x10/0x10 [ 76.259402][ T5358] ? __pfx_hfs_file_truncate+0x10/0x10 [ 76.259416][ T5358] ? unmap_mapping_range+0xde/0x170 [ 76.259428][ T5358] ? __pfx_unmap_mapping_range+0x10/0x10 [ 76.259438][ T5358] ? pagecache_isize_extended+0x11a/0x4f0 [ 76.259451][ T5358] ? truncate_setsize+0xcf/0xf0 [ 76.259462][ T5358] hfs_inode_setattr+0x4a9/0x670 [ 76.259477][ T5358] ? try_break_deleg+0x79/0x130 [ 76.259487][ T5358] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 76.259501][ T5358] notify_change+0xb36/0xe40 [ 76.259514][ T5358] do_truncate+0x1a4/0x220 [ 76.259534][ T5358] ? __pfx_do_truncate+0x10/0x10 [ 76.259555][ T5358] do_ftruncate+0x489/0x540 [ 76.259575][ T5358] ? __pfx_do_ftruncate+0x10/0x10 [ 76.259588][ T5358] ? __fget_files+0x2a/0x420 [ 76.259603][ T5358] __x64_sys_ftruncate+0x92/0xf0 [ 76.259616][ T5358] do_syscall_64+0xfa/0x3b0 [ 76.259631][ T5358] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.259645][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.259656][ T5358] ? clear_bhb_loop+0x60/0xb0 [ 76.259668][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.259680][ T5358] RIP: 0033:0x7f3ae0b8ebe9 [ 76.259692][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.259702][ T5358] RSP: 002b:00007f3ae194f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 76.259716][ T5358] RAX: ffffffffffffffda RBX: 00007f3ae0db5fa0 RCX: 00007f3ae0b8ebe9 [ 76.259725][ T5358] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000007 [ 76.259732][ T5358] RBP: 00007f3ae0c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.259739][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.259745][ T5358] R13: 00007f3ae0db6038 R14: 00007f3ae0db5fa0 R15: 00007fff83fbeb38 [ 76.259758][ T5358] [ 76.476332][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.478668][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.274939][ T5337] Bluetooth: hci0: command tx timeout [ 79.355279][ T5337] Bluetooth: hci0: command tx timeout [ 80.395105][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.395105][ T1153] loop0: rw=1048577, sector=65, nr_sectors = 1 limit=64 [ 80.401140][ T1153] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 80.405079][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.405079][ T1153] loop0: rw=1048577, sector=66, nr_sectors = 1 limit=64 [ 80.410629][ T1153] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 80.413974][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.413974][ T1153] loop0: rw=1048577, sector=67, nr_sectors = 1 limit=64 [ 80.419725][ T1153] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 80.423237][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.423237][ T1153] loop0: rw=1048577, sector=68, nr_sectors = 1 limit=64 [ 80.429177][ T1153] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 80.432673][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.432673][ T1153] loop0: rw=1048577, sector=72, nr_sectors = 1 limit=64 [ 80.439092][ T1153] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 80.442503][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.442503][ T1153] loop0: rw=1048577, sector=73, nr_sectors = 1 limit=64 [ 80.449726][ T1153] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 80.453332][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.453332][ T1153] loop0: rw=1048577, sector=76, nr_sectors = 1 limit=64 [ 80.459555][ T1153] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 80.462956][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.462956][ T1153] loop0: rw=1048577, sector=77, nr_sectors = 1 limit=64 [ 80.469348][ T1153] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 80.475951][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.475951][ T1153] loop0: rw=1048577, sector=78, nr_sectors = 4088 limit=64 [ 80.483112][ T1153] kworker/u4:10: attempt to access beyond end of device [ 80.483112][ T1153] loop0: rw=1048577, sector=4166, nr_sectors = 1 limit=64 [ 80.489798][ T1153] Buffer I/O error on dev loop0, logical block 4166, lost async page write [ 80.493502][ T1153] Buffer I/O error on dev loop0, logical block 4167, lost async page write [ 81.434786][ T5337] Bluetooth: hci0: command tx timeout