program: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="83f229d20a760cbe729408402783ec8eb24b1b547b4d05a5ca83a90945bd467c36db5e7d35b38f755440591ba3fc012c9ef119319c48a06d27ff4d6fb54c019e81944e9cdce4b36a834c7be30e8c8238770c22a1b36fcbbf343e9f8b9b439a0fec57e6216e736bc6c19c73b9602ae492a7b778c2e864c8f5b045bce99562deaac7dc693fa96d3d60a2c64a573b439dffcb055efe68a38282d23514f8ca3ca06b95b8f14d1f4a39c6f279e1a08aad59b55e915cc403a0221ab0638725ba469133c69baf348aa3ab4d902e68a26d5d10619cc0314d424ba0e07a83733a625a47", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = open$dir(0x0, 0x80000, 0x8a) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/469, @ANYRES64=r1, @ANYRES8=r2, @ANYRESHEX=r3, @ANYRES32=0x0], 0x0, 0x2e, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/469, @ANYRES64=r1, @ANYRES8=r2, @ANYRESHEX=r3, @ANYRES32=0x0], 0x0, 0x2e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x63f, &(0x7f0000003300)="$eJzs3c1rHOcdB/DvrGRZssFRGttxSyAihrRU1NYLSqte6pZSVAglpIeehS1j4bWTSkpRQmnUN3rtIX9AetCtp0IvhYIgPbe3XHUMFHrJSTltmdlZvVjydjdeeWX38zEz8zzzzDzze347L7trxAb4v7U0ndGdFFmafnOzrO9uzzd3t+cfdMpJzidpJKPtRYqHSfFJcivtKV8tV9bdFY87zkeri29/+vnuZ+3aaD1V2ze67debrXrKVJKRejmo/m4/cX/F/gjLhF3vJA6G7VyS1hE/v3rQ0t2FJ75ugbOgqJ6bB9d8q76yJ6vLPOP1+4D2U7H9zH6mbX0x7AgAAABgwMaPr3phL3vZzKVhhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPqvbv/6f61f/x/VUpplJ0fv9/rNOe5OIQQ+1urLfNdhqnHQgAAAAAAAAAnL5X97KXzVzq1FtFGkleqyqXq/nFvJf1rGQtN7KZ5WxkI2uZTTJ5qKOxzeWNjbXZHvacO3HPuR4DnnjyMQMAAAAAAADAc+g3WTr4/38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLimSkvaimy53yZBqjScaTjJXbbSX/6pSfZTvDDgAAAACeghf2spfNXOrUW0X1mf9q9bl/PO/lYTaymo00s5I71XcB7U/9jd3t+ebu9vyDcjre7/f/01cYVY9pf/dw8pGvVVtM5G5WqzU3cjvvpJk7aVR7lq514jk5rl+XMRXfq/UY2Z16WY78j/XymJG+BtuDXjqcrDJybj8jM3VsZTZe7J6Jo6/OVr9Hmk1j/5ufy6eQ8wv1skgu/vhxOR+KOhOvps7E3KGz72r3TCRf/+uff3av+fD+vbvr02dnSH0432q1OuVHz4n5Q5l4+bnPxGEzVSau7NeX8qP8NNOZyltZy2p+keVsZCVT+WFVWq7P53I+2T1Tt47U3qrmE4+PZKx+Xdp3j/5ieq3a91JW85O8kztZyRvVv7nM5ttZyEIWD73CV3q46hv9XfXXv1EXygH+oftAn7Iyry/Wef0wOXLPnazaDq85yFKKDPreOPq1ulAe47f18mx4NBOzhzLxUvfz5U/VbWW9+fD+2r3ld3s83uv1sryOfn+mnhLl+fKV8sWqakfPjrLtpRPbZqu2y/ttjWNtV/bb/teVOla/hzve01zV9vKJbfNV27VDbSe93wLgzLvwzQtjE/+e+OfExxO/m7g38eb4D85/5/wrYzn3j3PfHZ0Zeb3xSvGXfJxfHXz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrz19z+4v9xsrqw9Umi1Wh8+punLFkbSz15//9sgj975PaIBDmewhfF+Nm6djZj7KXzRarUG0uFWl5N2YIVW7UykbkiFId+YgFN3c+PBuzfX3//gW6udR+TCwuLM4sIb8zfvrjZXZtrzIQcJnIqDh/6wIwEAAAAAAAAAAAB69TT+nGDYYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebUvTGd1JkdmZGzNlfXd7vllOnfLBlqNJGkmKXybFJ8mttKdMHuquOH6EnWr+0eri259+vvvZQV+jne0bJ+/Xj616ylSSkXo5qP5uP3F/xf4Iy4Rd7yQOhu2/AQAA///xUxF6") (async) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x63f, &(0x7f0000003300)="$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") r5 = creat(&(0x7f0000000180)='./file1\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$BLKROSET(r6, 0x125d, &(0x7f00000001c0)=0x4) io_setup(0x4, &(0x7f0000000200)) (async) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0xfffffffe, 0x16}]) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000000)={{@any, 0xffffffff}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaabbbbb9bbbbbbbb8847"], 0x0) [ 94.611680][ T4637] Bluetooth: hci0: command tx timeout [ 94.843251][ T5311] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 94.857793][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.862408][ T5311] team0: Port device bond0 added [ 94.890530][ T5312] loop0: detected capacity change from 0 to 1024 [ 94.975481][ T5311] hfsplus: can't free extent: start 2889, count 1 [ 95.003320][ T5312] [ 95.004456][ T5312] ============================================ [ 95.006928][ T5312] WARNING: possible recursive locking detected [ 95.009317][ T5312] syzkaller #0 Not tainted [ 95.011124][ T5312] -------------------------------------------- [ 95.013654][ T5312] syz.0.0/5312 is trying to acquire lock: [ 95.016036][ T5312] ffff888050fe8740 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 95.020824][ T5312] [ 95.020824][ T5312] but task is already holding lock: [ 95.024021][ T5312] ffff888050fda040 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 95.028759][ T5312] [ 95.028759][ T5312] other info that might help us debug this: [ 95.032230][ T5312] Possible unsafe locking scenario: [ 95.032230][ T5312] [ 95.035522][ T5312] CPU0 [ 95.037014][ T5312] ---- [ 95.038475][ T5312] lock(&HFSPLUS_I(inode)->extents_lock); [ 95.040936][ T5312] lock(&HFSPLUS_I(inode)->extents_lock); [ 95.043500][ T5312] [ 95.043500][ T5312] *** DEADLOCK *** [ 95.043500][ T5312] [ 95.046718][ T5312] May be due to missing lock nesting notation [ 95.046718][ T5312] [ 95.050229][ T5312] locks held by syz.0.0/5312: 3, last CPU#0: [ 95.052847][ T5312] #0: ffff888050fda1d8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: generic_file_write_iter+0x82/0x330 [ 95.057535][ T5312] #1: ffff888050fda040 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 95.062086][ T5312] #2: ffff88803ffea0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x179/0x2e0 [ 95.065912][ T5312] [ 95.065912][ T5312] stack backtrace: [ 95.068207][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.068217][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.068222][ T5312] Call Trace: [ 95.068227][ T5312] [ 95.068232][ T5312] dump_stack_lvl+0xe8/0x150 [ 95.068250][ T5312] print_deadlock_bug+0x279/0x290 [ 95.068262][ T5312] __lock_acquire+0x24df/0x2cf0 [ 95.068283][ T5312] ? __pfx_hlock_conflict+0x10/0x10 [ 95.068293][ T5312] ? check_path+0x21/0x40 [ 95.068301][ T5312] ? check_noncircular+0xda/0x150 [ 95.068312][ T5312] ? hfsplus_file_extend+0x21c/0x1df0 [ 95.068325][ T5312] lock_acquire+0x106/0x350 [ 95.068339][ T5312] ? hfsplus_file_extend+0x21c/0x1df0 [ 95.068355][ T5312] __mutex_lock+0x19d/0x1550 [ 95.068405][ T5312] ? hfsplus_file_extend+0x21c/0x1df0 [ 95.068413][ T5312] ? __bfs+0x153/0x290 [ 95.068421][ T5312] ? __pfx_hlock_conflict+0x10/0x10 [ 95.068428][ T5312] ? check_path+0x21/0x40 [ 95.068433][ T5312] ? hfsplus_file_extend+0x21c/0x1df0 [ 95.068441][ T5312] ? __pfx___mutex_lock+0x10/0x10 [ 95.068449][ T5312] ? stack_depot_save_flags+0x404/0x7f0 [ 95.068490][ T5312] hfsplus_file_extend+0x21c/0x1df0 [ 95.068505][ T5312] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 95.068517][ T5312] ? __pfx___mutex_trylock_common+0x10/0x10 [ 95.068528][ T5312] ? rcu_is_watching+0x16/0xb0 [ 95.068538][ T5312] ? trace_contention_end+0x3d/0x140 [ 95.068550][ T5312] ? __asan_memset+0x22/0x50 [ 95.068560][ T5312] ? hfsplus_brec_find+0x19a/0x510 [ 95.068572][ T5312] hfsplus_bmap_reserve+0x170/0x590 [ 95.068583][ T5312] __hfsplus_ext_write_extent+0x295/0x690 [ 95.068592][ T5312] __hfsplus_ext_cache_extent+0x81/0xbd0 [ 95.068601][ T5312] ? hfsplus_find_init+0x179/0x2e0 [ 95.068607][ T5312] hfsplus_file_extend+0x502/0x1df0 [ 95.068617][ T5312] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 95.068625][ T5312] ? clean_bdev_aliases+0x62e/0x750 [ 95.068634][ T5312] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 95.068643][ T5312] hfsplus_get_block+0x41f/0x1610 [ 95.068652][ T5312] ? __pfx_hfsplus_get_block+0x10/0x10 [ 95.068660][ T5312] ? do_raw_spin_unlock+0x4d/0x200 [ 95.068667][ T5312] ? _raw_spin_unlock+0x28/0x50 [ 95.068673][ T5312] ? create_empty_buffers+0x460/0x520 [ 95.068681][ T5312] __block_write_begin_int+0x6c2/0x1900 [ 95.068691][ T5312] ? __pfx_hfsplus_get_block+0x10/0x10 [ 95.068699][ T5312] ? __pfx___block_write_begin_int+0x10/0x10 [ 95.068708][ T5312] cont_write_begin+0x71b/0xac0 [ 95.068717][ T5312] ? __pfx_cont_write_begin+0x10/0x10 [ 95.068725][ T5312] ? rcu_is_watching+0x16/0xb0 [ 95.068734][ T5312] hfsplus_write_begin+0x126/0x1e0 [ 95.068744][ T5312] ? __pfx_hfsplus_get_block+0x10/0x10 [ 95.068757][ T5312] generic_perform_write+0x2d5/0x8f0 [ 95.068770][ T5312] ? __pfx_generic_perform_write+0x10/0x10 [ 95.068778][ T5312] ? file_update_time_flags+0x1e0/0x440 [ 95.068790][ T5312] ? __generic_file_write_iter+0xf9/0x230 [ 95.068800][ T5312] ? generic_file_write_iter+0x9a/0x330 [ 95.068810][ T5312] generic_file_write_iter+0xae/0x330 [ 95.068821][ T5312] aio_write+0x5d0/0x870 [ 95.068834][ T5312] ? __pfx_aio_write+0x10/0x10 [ 95.068844][ T5312] ? __might_fault+0xaf/0x130 [ 95.068857][ T5312] io_submit_one+0x798/0x13d0 [ 95.068864][ T5312] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.068872][ T5312] ? irqentry_exit+0x218/0x910 [ 95.068879][ T5312] ? __pfx_io_submit_one+0x10/0x10 [ 95.068886][ T5312] ? __might_fault+0xaf/0x130 [ 95.068896][ T5312] ? __might_fault+0xaf/0x130 [ 95.068905][ T5312] __se_sys_io_submit+0x195/0x340 [ 95.068911][ T5312] ? __pfx___se_sys_io_submit+0x10/0x10 [ 95.068919][ T5312] do_syscall_64+0x166/0x520 [ 95.068927][ T5312] ? trace_irq_disable+0x3b/0x140 [ 95.068935][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.068942][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 95.068949][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.068956][ T5312] RIP: 0033:0x7f0d0579e159 [ 95.068964][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.068969][ T5312] RSP: 002b:00007f0d06586fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.068977][ T5312] RAX: ffffffffffffffda RBX: 00007f0d05a26090 RCX: 00007f0d0579e159 [ 95.068983][ T5312] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f0d06565000 [ 95.068989][ T5312] RBP: 00007f0d05835024 R08: 0000000000000000 R09: 0000000000000000 [ 95.068995][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.069000][ T5312] R13: 00007f0d05a26128 R14: 00007f0d05a26090 R15: 00007ffd4b904348 [ 95.069010][ T5312] [ 95.259742][ T5311] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 95.271583][ T5311] syz_tun: entered promiscuous mode [ 95.276857][ T5311] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 95.280994][ T5312] Trying to write to read-only block-device loop0