program: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2040, 0x100) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x8800000) [ 86.115064][ T5291] Bluetooth: hci0: command tx timeout [ 86.196279][ T5328] loop0: detected capacity change from 0 to 64 [ 86.374644][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.374644][ T85] loop0: rw=8388609, sector=163, nr_sectors = 1 limit=64 [ 86.401681][ T85] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 86.423234][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.423234][ T85] loop0: rw=8388609, sector=167, nr_sectors = 1 limit=64 [ 86.457101][ T85] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 86.475098][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.475098][ T85] loop0: rw=8388609, sector=169, nr_sectors = 1 limit=64 [ 86.496722][ T85] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 86.511096][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.511096][ T85] loop0: rw=8388609, sector=171, nr_sectors = 1 limit=64 [ 86.526911][ T85] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 86.534817][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.534817][ T85] loop0: rw=8388609, sector=172, nr_sectors = 1 limit=64 [ 86.546816][ T85] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 86.558494][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.558494][ T85] loop0: rw=8388609, sector=173, nr_sectors = 1 limit=64 [ 86.576577][ T802] cfg80211: failed to load regulatory.db [ 86.583702][ T85] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 86.600764][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.600764][ T85] loop0: rw=8388609, sector=174, nr_sectors = 1 limit=64 [ 86.625980][ T85] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 86.644405][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.644405][ T85] loop0: rw=8388609, sector=175, nr_sectors = 1 limit=64 [ 86.668320][ T85] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 86.686336][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.686336][ T85] loop0: rw=8388609, sector=176, nr_sectors = 1 limit=64 [ 86.703514][ T85] Buffer I/O error on dev loop0, logical block 176, lost async page write [ 86.711613][ T85] kworker/u4:5: attempt to access beyond end of device [ 86.711613][ T85] loop0: rw=8388609, sector=177, nr_sectors = 1 limit=64 [ 86.723263][ T85] Buffer I/O error on dev loop0, logical block 177, lost async page write [ 87.638961][ T5328] [ 87.640060][ T5328] ====================================================== [ 87.643226][ T5328] WARNING: possible circular locking dependency detected [ 87.646169][ T5328] syzkaller #0 Not tainted [ 87.648041][ T5328] ------------------------------------------------------ [ 87.650928][ T5328] syz.0.0/5328 is trying to acquire lock: [ 87.653329][ T5328] ffff88801fca00a0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 87.657756][ T5328] [ 87.657756][ T5328] but task is already holding lock: [ 87.660899][ T5328] ffff88801fc980a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 87.664884][ T5328] [ 87.664884][ T5328] which lock already depends on the new lock. [ 87.664884][ T5328] [ 87.669305][ T5328] [ 87.669305][ T5328] the existing dependency chain (in reverse order) is: [ 87.673188][ T5328] [ 87.673188][ T5328] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 87.676497][ T5328] __mutex_lock+0x19d/0x1550 [ 87.678742][ T5328] hfs_find_init+0x18d/0x300 [ 87.680879][ T5328] hfs_extend_file+0x35f/0x1680 [ 87.683278][ T5328] hfs_bmap_reserve+0x108/0x430 [ 87.685455][ T5328] hfs_cat_create+0x221/0x810 [ 87.687623][ T5328] hfs_mkdir+0x79/0xe0 [ 87.689656][ T5328] vfs_mkdir+0x406/0x620 [ 87.691693][ T5328] filename_mkdirat+0x285/0x510 [ 87.693973][ T5328] __se_sys_mkdir+0x34/0x150 [ 87.696247][ T5328] do_syscall_64+0x174/0x580 [ 87.698443][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.701340][ T5328] [ 87.701340][ T5328] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 87.705469][ T5328] __lock_acquire+0x1520/0x2cf0 [ 87.707880][ T5328] lock_acquire+0x106/0x350 [ 87.710117][ T5328] __mutex_lock+0x19d/0x1550 [ 87.712393][ T5328] hfs_extend_file+0xf9/0x1680 [ 87.714690][ T5328] hfs_bmap_reserve+0x108/0x430 [ 87.717062][ T5328] __hfs_ext_write_extent+0x1fc/0x470 [ 87.719662][ T5328] __hfs_ext_cache_extent+0x6e/0x9b0 [ 87.722257][ T5328] hfs_extend_file+0x3a0/0x1680 [ 87.724573][ T5328] hfs_get_block+0x401/0xbe0 [ 87.726801][ T5328] __block_write_begin_int+0x6c2/0x1900 [ 87.729505][ T5328] cont_write_begin+0x71b/0xac0 [ 87.731890][ T5328] hfs_write_begin+0x66/0xb0 [ 87.734142][ T5328] cont_write_begin+0x2d6/0xac0 [ 87.736434][ T5328] hfs_write_begin+0x66/0xb0 [ 87.738595][ T5328] hfs_file_truncate+0x1cf/0xb60 [ 87.740910][ T5328] hfs_inode_setattr+0x49a/0x6c0 [ 87.743365][ T5328] notify_change+0xbba/0xea0 [ 87.745584][ T5328] do_truncate+0x1c2/0x250 [ 87.747763][ T5328] vfs_truncate+0x4b4/0x540 [ 87.749953][ T5328] ksys_truncate+0xf3/0x1c0 [ 87.752252][ T5328] __x64_sys_truncate+0x5b/0x70 [ 87.754608][ T5328] do_syscall_64+0x174/0x580 [ 87.756871][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.759702][ T5328] [ 87.759702][ T5328] other info that might help us debug this: [ 87.759702][ T5328] [ 87.764119][ T5328] Possible unsafe locking scenario: [ 87.764119][ T5328] [ 87.767359][ T5328] CPU0 CPU1 [ 87.769694][ T5328] ---- ---- [ 87.772059][ T5328] lock(&tree->tree_lock/1); [ 87.774152][ T5328] lock(&HFS_I(tree->inode)->extents_lock); [ 87.777799][ T5328] lock(&tree->tree_lock/1); [ 87.780951][ T5328] lock(&HFS_I(tree->inode)->extents_lock); [ 87.783628][ T5328] [ 87.783628][ T5328] *** DEADLOCK *** [ 87.783628][ T5328] [ 87.787153][ T5328] 4 locks held by syz.0.0/5328: [ 87.789310][ T5328] #0: ffff88801fdec450 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 87.793355][ T5328] #1: ffff88801fdfb040 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 87.797701][ T5328] #2: ffff88801fdfaea0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 87.802251][ T5328] #3: ffff88801fc980a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 87.806410][ T5328] [ 87.806410][ T5328] stack backtrace: [ 87.808975][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.808991][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.808999][ T5328] Call Trace: [ 87.809006][ T5328] [ 87.809013][ T5328] dump_stack_lvl+0xe8/0x150 [ 87.809034][ T5328] print_circular_bug+0x2e1/0x300 [ 87.809049][ T5328] check_noncircular+0x12e/0x150 [ 87.809062][ T5328] __lock_acquire+0x1520/0x2cf0 [ 87.809081][ T5328] ? unwind_next_frame+0x8f/0x2550 [ 87.809097][ T5328] ? hfs_extend_file+0xf9/0x1680 [ 87.809110][ T5328] lock_acquire+0x106/0x350 [ 87.809125][ T5328] ? hfs_extend_file+0xf9/0x1680 [ 87.809139][ T5328] __mutex_lock+0x19d/0x1550 [ 87.809152][ T5328] ? hfs_extend_file+0xf9/0x1680 [ 87.809164][ T5328] ? __lock_acquire+0x683/0x2cf0 [ 87.809178][ T5328] ? __kernel_text_address+0xd/0x30 [ 87.809189][ T5328] ? unwind_get_return_address+0x4d/0x90 [ 87.809200][ T5328] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.809215][ T5328] ? arch_stack_walk+0xfb/0x150 [ 87.809227][ T5328] ? hfs_extend_file+0xf9/0x1680 [ 87.809241][ T5328] ? __pfx___mutex_lock+0x10/0x10 [ 87.809255][ T5328] ? hfs_bnode_read_u8+0x8b/0xd0 [ 87.809268][ T5328] hfs_extend_file+0xf9/0x1680 [ 87.809279][ T5328] ? __asan_memcpy+0x40/0x70 [ 87.809291][ T5328] ? hfs_bnode_read+0x3c0/0x800 [ 87.809301][ T5328] ? hfs_ext_keycmp+0x1c7/0x320 [ 87.809314][ T5328] ? __pfx_hfs_extend_file+0x10/0x10 [ 87.809326][ T5328] ? __hfs_brec_find+0x335/0x510 [ 87.809338][ T5328] ? __pfx___hfs_brec_find+0x10/0x10 [ 87.809348][ T5328] ? do_raw_spin_unlock+0x4d/0x210 [ 87.809360][ T5328] ? hfs_brec_find+0x3cc/0x510 [ 87.809370][ T5328] hfs_bmap_reserve+0x108/0x430 [ 87.809386][ T5328] __hfs_ext_write_extent+0x1fc/0x470 [ 87.809401][ T5328] __hfs_ext_cache_extent+0x6e/0x9b0 [ 87.809413][ T5328] ? hfs_find_init+0x18d/0x300 [ 87.809423][ T5328] hfs_extend_file+0x3a0/0x1680 [ 87.809436][ T5328] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 87.809449][ T5328] ? __pfx_hfs_extend_file+0x10/0x10 [ 87.809463][ T5328] ? clean_bdev_aliases+0x62e/0x750 [ 87.809478][ T5328] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 87.809491][ T5328] hfs_get_block+0x401/0xbe0 [ 87.809507][ T5328] ? __pfx_hfs_get_block+0x10/0x10 [ 87.809519][ T5328] ? do_raw_spin_unlock+0x4d/0x210 [ 87.809533][ T5328] ? _raw_spin_unlock+0x28/0x50 [ 87.809549][ T5328] ? create_empty_buffers+0x460/0x520 [ 87.809562][ T5328] __block_write_begin_int+0x6c2/0x1900 [ 87.809577][ T5328] ? filemap_add_folio+0x350/0x530 [ 87.809591][ T5328] ? __pfx_hfs_get_block+0x10/0x10 [ 87.809605][ T5328] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.809619][ T5328] cont_write_begin+0x71b/0xac0 [ 87.809635][ T5328] ? __pfx_cont_write_begin+0x10/0x10 [ 87.809649][ T5328] hfs_write_begin+0x66/0xb0 [ 87.809662][ T5328] ? __pfx_hfs_get_block+0x10/0x10 [ 87.809676][ T5328] cont_write_begin+0x2d6/0xac0 [ 87.809691][ T5328] ? __pfx_cont_write_begin+0x10/0x10 [ 87.809706][ T5328] hfs_write_begin+0x66/0xb0 [ 87.809719][ T5328] ? __pfx_hfs_get_block+0x10/0x10 [ 87.809733][ T5328] hfs_file_truncate+0x1cf/0xb60 [ 87.809749][ T5328] ? __up_read+0x29c/0x930 [ 87.809763][ T5328] ? __pfx_hfs_file_truncate+0x10/0x10 [ 87.809778][ T5328] ? unmap_mapping_range+0xe6/0x180 [ 87.809796][ T5328] ? __pfx_unmap_mapping_range+0x10/0x10 [ 87.809812][ T5328] ? setattr_prepare+0x228/0xb50 [ 87.809823][ T5328] ? truncate_setsize+0xcf/0xf0 [ 87.809840][ T5328] hfs_inode_setattr+0x49a/0x6c0 [ 87.809862][ T5328] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 87.809877][ T5328] notify_change+0xbba/0xea0 [ 87.809890][ T5328] do_truncate+0x1c2/0x250 [ 87.809909][ T5328] ? __pfx_do_truncate+0x10/0x10 [ 87.809925][ T5328] ? apparmor_path_truncate+0x230/0x2c0 [ 87.810019][ T5328] vfs_truncate+0x4b4/0x540 [ 87.810036][ T5328] ? __pfx_vfs_truncate+0x10/0x10 [ 87.810053][ T5328] ? do_getname+0x151/0x250 [ 87.810066][ T5328] ksys_truncate+0xf3/0x1c0 [ 87.810082][ T5328] ? __pfx_ksys_truncate+0x10/0x10 [ 87.810100][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.810113][ T5328] __x64_sys_truncate+0x5b/0x70 [ 87.810130][ T5328] do_syscall_64+0x174/0x580 [ 87.810143][ T5328] ? trace_irq_disable+0x3b/0x140 [ 87.810164][ T5328] ? clear_bhb_loop+0x40/0x90 [ 87.810175][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.810187][ T5328] RIP: 0033:0x7fcfcd39de99 [ 87.810199][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.810210][ T5328] RSP: 002b:00007fcfce2e7fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 87.810222][ T5328] RAX: ffffffffffffffda RBX: 00007fcfcd625fa0 RCX: 00007fcfcd39de99 [ 87.810230][ T5328] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000200000000100 [ 87.810237][ T5328] RBP: 00007fcfcd433eaf R08: 0000000000000000 R09: 0000000000000000 [ 87.810244][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.810254][ T5328] R13: 00007fcfcd626038 R14: 00007fcfcd625fa0 R15: 00007fff6d757a58 [ 87.810266][ T5328] [ 88.148318][ T5291] Bluetooth: hci0: command tx timeout [ 90.228505][ T5291] Bluetooth: hci0: command tx timeout