program: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0xf, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r3}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000200)={0x26, 0x400}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbDbrbFqCmyZtQJVqNRIgIhI7VgrmQkAI5VChqhw4W4nTWNmkxXGRWyHq8PfaQw+cUDnkgjghcY9UOHCBW04gHyshcekFc1o0s7P2+i/rNPFu2s8nmn3vzZt57ze/2Zn9Y0Ub4DPryrk076fIlXOvrJTttXuznbV7s7f69SQTSVaTZpJGkuI/3W73w+RyUmwMU2wrd3h/ce61Bx+vfdRrNeul2r6x337b1NutJr9tDKxerZdMJTlSl5/AlvGufuLxio3ILyc5W5cwckeTdLf40V+f3ugZ0N5t72OHEiPweBXV6+a1f2xfP5kcry/08n1A71Wx95o9Jla3tCYeai8AAAB48gzzGfjz61nPSnHiEMIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAT4XVjd//L4tqafTrUyn6v//fqtelro+XFw+2+f3HFQcAAAAAAAAAHKIX17OelZzot7tF9Tf/l6rGqerxqbyVO1nIUs5nJfNZznKWMpNkcmCg1sr88vLSzBB7Xtx1z4v/J9CJumw/muMGAAAAAAAAgE+Zn+XK5t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHBTJkV6R4u7A6sk0mkmOJWmVK1aTv/frT7L7ow4AAAAADsFEsp6VnOi3u0VOJXmu+g7gWN7K7SxnMcvpZCHXqu8Fep/6G2v3Zjtr92ZvlcvOcb/97wOFUY2Y3ncPu898ptqinetZrNacz9W8kU6upVHtWTpTx9MfdSCuY0nuljEV36oNGdm1uiyP/L263OHdAx3sXg74ZcpklZGjGxmZrmMrs/FM/8zsfoYOeHa2zzSTxmCwW2ZqbT2Yh8r58bosj+dXe+V8JLZn4uLAs++5/XOefPlPf/jhdF0fn0MazpG67FaP7Z2ZmB3IxPPDZOJG5/bNG9fvnHvSMrHDdJWJ0xvtK/lefpBzmcqrWcpifpz5LGchU/luVZuvT34xcMnvkanLW1qv7hXBb+rbd6t+hvZOVhnTg6Fjeqna90QW8/28kWtZyMvVv4uZyddzKZcyN3CGT+9/hqurvrHHVd/93I4DKAM/+5W60U7y67ocD2V4zwzkdfCeO1n1Da7ZzNLJIbJ0wHtj84t1pZzj53U5HrZnYmYgE8/un4nfVbeVO53bN5duzL853HQn36sr5XX0y2RqtDeS1rb6yfJkVa2tz46y79ld+2aqvlMbfY0dfac3+npX6uqeV2qrfg+3c6SLVd/zu/bNVn1nBvp2e78FwNg7/tXjrfa/2n9rf9D+RftG+5Vj35n4xsQLrRz989FvNqePfKnxQvHHfJCfbn7+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt6dt9+5Od/pLCz1Kq0kVaXb7b67teuglWY9w0BXsfukj7qSqX8+VU6zS1f/58we4+zbK194Ojmsuca38t9ut1uvKfbY5vd/GZtEdWtjkboRVUZzPwIOz4XlW29euPP2O19bvDX/+sLrC7fnLl2am5679PLsheuLnYXp3uOoowQeh80X/VFHAgAAAAAAAAAAAAzrMP47waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyXTmX5v0UmZk+P1221+7NdsqlX9/cspmkkaT4SVJ8mFxOb8nkwHDFXvO8vzj32oOP1z7aHKvZ376x337DWa2XTCU50ivvPqrxrtblvor9DqHYOMIyYWf7iYNR+18AAAD///fgA7k=") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000080)=0x3f) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x20, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42890}, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000002740)=ANY=[], 0x1, 0x5f7d, &(0x7f00000278c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c842, 0x67) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r11, r12, 0x0, 0xfffe82) r13 = creat(&(0x7f0000000280)='./file2\x00', 0x144) write(r13, &(0x7f0000000180)="2cd8", 0x2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x400) [ 102.232894][ T5305] Bluetooth: hci0: command tx timeout [ 102.391567][ T5328] loop0: detected capacity change from 0 to 1024 [ 102.457302][ T24] audit: type=1800 audit(1774549979.614:2): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="bus" dev="loop0" ino=0 res=0 errno=0 [ 102.492678][ T5328] Trying to write to read-only block-device loop0 [ 103.023673][ T24] audit: type=1800 audit(1774549980.184:3): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 103.052690][ T5327] [ 103.054074][ T5327] ====================================================== [ 103.057586][ T5327] WARNING: possible circular locking dependency detected [ 103.060889][ T5327] syzkaller #0 Not tainted [ 103.062716][ T5327] ------------------------------------------------------ [ 103.065595][ T5327] syz.0.0/5327 is trying to acquire lock: [ 103.068261][ T5327] ffff88801f3d40b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 103.072448][ T5327] [ 103.072448][ T5327] but task is already holding lock: [ 103.075546][ T5327] ffff888012459c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2b3/0xc30 [ 103.080510][ T5327] [ 103.080510][ T5327] which lock already depends on the new lock. [ 103.080510][ T5327] [ 103.086026][ T5327] [ 103.086026][ T5327] the existing dependency chain (in reverse order) is: [ 103.089728][ T5327] [ 103.089728][ T5327] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 103.093455][ T5327] __mutex_lock+0x19f/0x1300 [ 103.095648][ T5327] hfsplus_file_extend+0x215/0x1d70 [ 103.098447][ T5327] hfsplus_bmap_reserve+0x125/0x510 [ 103.101660][ T5327] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 103.104900][ T5327] __hfsplus_ext_cache_extent+0x89/0xe30 [ 103.107649][ T5327] hfsplus_file_extend+0x4af/0x1d70 [ 103.110166][ T5327] hfsplus_get_block+0x42c/0x1670 [ 103.112579][ T5327] __block_write_begin_int+0x6c6/0x1910 [ 103.115243][ T5327] cont_write_begin+0x737/0xae0 [ 103.117884][ T5327] hfsplus_write_begin+0x66/0xb0 [ 103.120644][ T5327] generic_perform_write+0x2e2/0x8f0 [ 103.123524][ T5327] generic_file_write_iter+0x14a/0x680 [ 103.126205][ T5327] vfs_write+0x61d/0xb90 [ 103.128318][ T5327] ksys_write+0x150/0x270 [ 103.130359][ T5327] do_syscall_64+0x14d/0xf80 [ 103.133058][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.137048][ T5327] [ 103.137048][ T5327] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 103.140785][ T5327] __lock_acquire+0x15a5/0x2cf0 [ 103.143444][ T5327] lock_acquire+0xf0/0x2e0 [ 103.145756][ T5327] __mutex_lock+0x19f/0x1300 [ 103.148230][ T5327] hfsplus_find_init+0x168/0x2d0 [ 103.150951][ T5327] hfsplus_file_truncate+0x39b/0xc30 [ 103.153842][ T5327] hfsplus_file_release+0xea/0x3e0 [ 103.156582][ T5327] __fput+0x44f/0xa70 [ 103.158707][ T5327] task_work_run+0x1d9/0x270 [ 103.160991][ T5327] exit_to_user_mode_loop+0xed/0x480 [ 103.163642][ T5327] do_syscall_64+0x32d/0xf80 [ 103.166170][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.169491][ T5327] [ 103.169491][ T5327] other info that might help us debug this: [ 103.169491][ T5327] [ 103.174053][ T5327] Possible unsafe locking scenario: [ 103.174053][ T5327] [ 103.177339][ T5327] CPU0 CPU1 [ 103.180276][ T5327] ---- ---- [ 103.183327][ T5327] lock(&HFSPLUS_I(inode)->extents_lock); [ 103.186422][ T5327] lock(&tree->tree_lock/1); [ 103.189597][ T5327] lock(&HFSPLUS_I(inode)->extents_lock); [ 103.193421][ T5327] lock(&tree->tree_lock/1); [ 103.195576][ T5327] [ 103.195576][ T5327] *** DEADLOCK *** [ 103.195576][ T5327] [ 103.199261][ T5327] 2 locks held by syz.0.0/5327: [ 103.201648][ T5327] #0: ffff888012459df8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: hfsplus_file_release+0xe2/0x3e0 [ 103.209024][ T5327] #1: ffff888012459c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2b3/0xc30 [ 103.214372][ T5327] [ 103.214372][ T5327] stack backtrace: [ 103.217271][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.217293][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.217341][ T5327] Call Trace: [ 103.217358][ T5327] [ 103.217366][ T5327] dump_stack_lvl+0xe8/0x150 [ 103.217388][ T5327] print_circular_bug+0x2e1/0x300 [ 103.217408][ T5327] check_noncircular+0x12e/0x150 [ 103.217425][ T5327] __lock_acquire+0x15a5/0x2cf0 [ 103.217436][ T5327] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.217453][ T5327] ? kasan_save_track+0x4f/0x80 [ 103.217461][ T5327] ? kasan_save_track+0x3e/0x80 [ 103.217469][ T5327] ? __kasan_kmalloc+0x93/0xb0 [ 103.217476][ T5327] ? __kmalloc_noprof+0x35c/0x760 [ 103.217491][ T5327] ? hfsplus_find_init+0x8c/0x2d0 [ 103.217504][ T5327] ? hfsplus_file_truncate+0x39b/0xc30 [ 103.217512][ T5327] ? hfsplus_file_release+0xea/0x3e0 [ 103.217526][ T5327] lock_acquire+0xf0/0x2e0 [ 103.217537][ T5327] ? hfsplus_find_init+0x168/0x2d0 [ 103.217548][ T5327] __mutex_lock+0x19f/0x1300 [ 103.217558][ T5327] ? hfsplus_find_init+0x168/0x2d0 [ 103.217569][ T5327] ? hfsplus_find_init+0x168/0x2d0 [ 103.217580][ T5327] ? __pfx___mutex_lock+0x10/0x10 [ 103.217590][ T5327] ? rcu_is_watching+0x15/0xb0 [ 103.217604][ T5327] ? __kmalloc_noprof+0x37d/0x760 [ 103.217618][ T5327] ? hfsplus_find_init+0x8c/0x2d0 [ 103.217629][ T5327] ? __kmalloc_noprof+0x1b8/0x760 [ 103.217643][ T5327] hfsplus_find_init+0x168/0x2d0 [ 103.217654][ T5327] hfsplus_file_truncate+0x39b/0xc30 [ 103.217667][ T5327] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 103.217678][ T5327] ? down_write+0x16d/0x200 [ 103.217689][ T5327] ? __pfx_down_write+0x10/0x10 [ 103.217704][ T5327] hfsplus_file_release+0xea/0x3e0 [ 103.217717][ T5327] ? __fput+0x440/0xa70 [ 103.217731][ T5327] ? __pfx_hfsplus_file_release+0x10/0x10 [ 103.217744][ T5327] __fput+0x44f/0xa70 [ 103.217758][ T5327] task_work_run+0x1d9/0x270 [ 103.217771][ T5327] ? __pfx_task_work_run+0x10/0x10 [ 103.217782][ T5327] exit_to_user_mode_loop+0xed/0x480 [ 103.217795][ T5327] ? rcu_is_watching+0x15/0xb0 [ 103.217810][ T5327] do_syscall_64+0x32d/0xf80 [ 103.217821][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.217830][ T5327] ? clear_bhb_loop+0x40/0x90 [ 103.217841][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.217851][ T5327] RIP: 0033:0x7fa03f19c799 [ 103.217870][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.217879][ T5327] RSP: 002b:00007ffe7c42e998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 103.217894][ T5327] RAX: 0000000000000000 RBX: 00007ffe7c42ea80 RCX: 00007fa03f19c799 [ 103.217900][ T5327] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 103.217906][ T5327] RBP: 0000000000018eed R08: 0000000000000001 R09: 0000000000000000 [ 103.217912][ T5327] R10: 00007fa03efff02c R11: 0000000000000246 R12: 00007ffe7c42eac0 [ 103.217919][ T5327] R13: 00007fa03f415fac R14: 0000000000019203 R15: 00007fa03f415fa0 [ 103.217928][ T5327]