program: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) pread64(r0, 0x0, 0x0, 0x9) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1000, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x3004048, &(0x7f0000000100)=ANY=[], 0x11, 0x2c6, &(0x7f0000005bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) creat(&(0x7f0000000300)='./bus\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0x18, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x8, 0x7fffffff, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x1, 0xa, 0xfffffffa}}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)={0x1210, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_MODES_OURS={0x1170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'workdir'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'upperdir'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'overlay\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%\']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'metacopy=on'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23b29753}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'hfs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%.:)^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaeb}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'workdir'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe6}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "9e9c90ad94d0e2ca97326f681fdfd3005a382b410341ebab76b617b63f04479fcc5011798924a97dfad1822daf725d7c34c9cce8598ef6de825b4f8bb2f0"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "236c72255444e235d2bda11ac234b60c7822e2ee9bad82e2b8dc326e938ad546e7f18b7040f1caead953ee7cecb150c835eb9c74e04a4a8c616d9d491795704f8f94f17fc6ca760efc76dadefdb6021df090b49009aa3daa5f92c6907a61801320fc553f76d5e5f00bf7a16cdfc83a57686d0a9439e23ba639732b6c7c145a427068d580f56cc52be12b548185049f95d3b0016de4ebe99607d333a1e99254cd6ec41a2784bd3e91a7b726b23e804bf5f95d234a661ad9415a2eff8bd6a5fba6f59a9a14369ec8a5e6300933fca367731303e9d5b763e3f0b1ad622fdcd087dae0358ec6d852739e4e901cfae97b7fd1b1cc85486afdc899a899f5ad91bcaad83a0d51b0ba0af0d16b09ecc184ad8efd01051837660dc52a7d212d2b3ec25307886b7e1dc7f8a81013d14d61e1e03c5c65bc6964af8b7426ada15b5dc779eb02562d080b1edb8a9779af7d8c378ef5bfa8dbec5904b8bdedc70dc85327995ed435876a19d11b095e715ff6cd7044b6844dc75787fd41143af01eb0ebf3c41898b36262854b5c34e21f7ffd7ceec5579e7a07723c6326b05a88ff5bd08c4cb7c4c5157d4a0ceda6f7bf13c1d7173f83d2c08151ae298b142fd2497917c5a7029096ba4a2aad4ce3ed18e2a085693b4d99aaa4ab08f884a82fc2bc63bac27325168126343fd38b1c51a3834c340512bf4ef35a47077b60b72922f0811077a1e1c0ef39973023a60d9ea8c93c6044476bcfb36db21b33d3439e7bc0478a5e145b22cee3d0af6ad676e50950218864690457487316f4d4deaee7155a701ab1f359c5810f3a643632b823990a1e8f27946244904d0b8b666d673d88fe6e96fd35bb192c1a01419de7ee8faa69288b87dea6d7f7177605c654fec13ba4ce8958468a9d76d8379878c72bee8edf9a9c9c438d4e844fd642cf96e89650bcc814125f15e7326c863907da34acd063dd59878e6aa7557aa587f54a98068985a43c389752a3cf16c1c7830e7b202673b658df00ff6bfea14f840de9f31c61434e1d99c37ebd028025a174bdaf8a5a163de8bf6209f8c78294192bbd212324d62435c65ae02e120e81cbc4b9f15fe048a2bf90c297db1e1383fd4afce868cca855130640ed61694e82e9b9fb7929ce84f4442dc5876e26b7b887124dc727936b80fd59eb44e48cd639ef46487dfd783255599530c40b910757a561fecc61bd8eb8b04bd16c9d51e2fdc696573fd24674c0f2448c33bc1e4452674e63116bb0d894664ddbe52e4375353dfe6e6411938805b06a94a2ef5adf3de723edeed890e93c61168846e37c8c5af51e592e6146ce4900a2071fbdc21fc58bf2c4c8fcba98b605f2e5639f2fc09377a3fea90a667f531480ef1ca06a269ebe0998486c3ed75fa91df898b2ce60269ae042cb129b5ec03de3f161f9c474bc89c724183889b6e7ca357626cf0e44cda107d1b4e037e6ae3c74492da1af63bcaa56d9e9c3a85a5f686793532e95683d314a2eea004a6d2ebf4e53d9970515577b6d622a3be5313fb6b752dc09955af68c122e9e6aabdf9f860f1939383ed4deb44ffe719feef942ccfb77f1b44428377b4b6f9d752afaeefdf7b6a1200b04fe319ad9f5bb938dfe1e079fae01a0eff4bc3dc5481bbcd261f9d051322ea15a690a1cad567a6c04a2b6a3c35924ff9443731adb1187e3ae7863f679cdd7318818c1638596b65fb46446355e214cd8c3606373e0537365e2233de398bd5bb7a6c65acba1c0e4ae3509ab5b0b8d9279a2bf16863487d74bd873fcedaa471c02a4a3f631c8d81ccf6472d29df8d894654baec363fbd1e89b670f6e59a01e7b49b3ccc2eb9fd83d66db22e7d4c7edfcb7702b40b9d2f910375fb33f6866ff52cfe4ec4a1a3e4a4b44988ac782cd11db172bb6cb391cec8452231afe19c14ba38c2a7321493452c340cf1465e1f0474c46c09fa36e415e52e791b8d38e92520fc7c726827833d7691d800df43de5170a6f8dedb82c1303c43f87d12be48f0ed5b95976060a04eddb863dcfbae41535bf04da4ab05299abceacc15d38e768cfeb2b5639a571e63cce159c5ec43562161fb92f4fae18a258dc2a20a7a9d3691b40912a2bafc6854c034bfa487118c8c701d0ede4c4c830b2536cb3e57340fefbe872b68ae204740d17c0883a8a84338ec3a95c99c24f5f2a1eea186414dabcb59ab42ad7a1872bf78b81516c0254bd3f4e3bdd2b6fc094aa3fbcbaf0a3d6f0685823552f35d9023e37e79608d0370118cdb3f67fcd8ce651e6a904d66db9e4c6d650d4b47df05154753b39ee50753f9059e859cb7af3fd1589aaee0c89af0e91f7b0036af67c580407ac47f92067e1c0e87804f871b1623421d74c3f5c48177d1d20c6085b1a574fe9f67f3e897dc098a32fb0e68935a96f98bb25c3dfd41e4d7493e38f99afc43899c7ef8d59afd81c131463d285150e5c67c9049a567bd6832123b860e9880e5dec6a283eae49826bbb2f85e768750fa009d5adf319c34af6685b3af700721eaa1f570f6a89369a22fa7db629a4bd16fcf1c639ec3003510abf4bc11efc48e6158ad34f5f9a72fb088e5e158e4a81db9e5d6da58e4f9b1118f7f50237f61080785874c5664bae6383e1fae26cb66961d98a105b92f57b7f1d1a7256ecb1966502204b1bd7736691782b21ff981879c239efdd4aa847f094bbd90db41bb61acc3b7c65ccd6e0519d0b4868dc4424c875683b665f866286663390cd644f13affbad78ba6213c22959f39549d692417806dca20c107d574bc96425cda3d22fbe876daf68d08ba4cf1b6a94343286fedb0d161f2b80c21bec01e8e4db3ae64ab8ec787ae8d6f9d83c93e1f3af11708cfd8bd29d743c53223e57572415a68bf26d62eb2646a568d82ef909fb43a5eb4a991ded57e0b54752f105854d50b75c9b8bf9e4128d25fe22931970c4ee9a70369fa1c33faa7af832048d3c99b989c554cfcedfea58b616a7186212e9e5d9c60027c3d4e50c5a39a649a94bf69784c4712b77789a134be516290a42c7770c193c10c083ec39b02fb2301c2c2d56f8a02044704dba41494dfc0530e3f7b73824db4bc50cf736556facd1b9f52e9e98111d2607ad50d16f30be639e34e6864d32dcf900e1567d91d0cca6f02f4369fd548393cd7c17dbfb61f397db224c7e991ec62dd311179e745a3bb361131b989f290256df14c36624a029fdadea60e8d4ac97aded0e4fc6283241efb9b002b9b86c8ae34c75c81cb3c6d1e3d7fb86d4fb2fc19bdcfaa64c0a853cf77c6d9dded33f9b0ed1b7b4466e0ff62b0e1999b1233c71aae761ae16287c79f9173b947c4e84f944fd8d2d68e82942b46f496b1fa1f23a646fd8b5974ccfd9f10ecb6e24ddd9381fd2e22cf577e36f406ba3c8acc128828727683fd4ff7ce86733ca8d8995096122264a563b994ba2ae39aa8b42e54322fbe3ceba5fcf98e80e1e28d8f9ee2f345cc41d80bd9ca11d10549aef110b4e7a7eff92beab6465ac3d81b9a73d73fec841fb202d715505365e1f1c51430116cd45ccbc59628443528853b53001994f3992685076e47455abd8bea97bf7dcc3f178bf1b7b23ed872690313db7c538e75b925a65c9b2d9ea5c9be24efad94cf9e590c0ee81d89a0a119b47fcc92aa72aee48098c6276d8af54586111a2cf64d11aa825f1e2340889fbf813f2f4d4976df55d226149841000b80cdb0aeaa5ecdb8184169b016abc0b679a0c945e11aa93609c4f961f5aff24fed3fb0a0e14102772560c29c3e13cc9d575c5b9f47f085cb47c6c39f664d2221002d8f7b828f9cca903e666f4d134cb4f30ead26414073912f0dacd26717676b14b21070db1c0ee56f830aa2adaf643ebc75b4b3274d57c79f2f79aa509917a8eb67f4830b357af0e88c5e85adda10735528a4c7249e3225a3e9387fea2af8048836b4b6c6825759bfe9f6086cc53212664cdec481309fae9f92510edea54abeac5c517c404f715e05b74b1e35a82a6904cca26b8f82dd08db20cd7ca7d3a8ea2ecbe937a62496d58c259202bd6d01362b66b7da941f96728fabde95807d53287a8e273dbc9802e1ae26c722771b752ef71bdddc4a21277bfcef9dfb8b4308eee3f96926959416b2f3d96f5e229df3c1b7a4098e9e153ab36440dc07031f033f5e38f5f6a17bc7a069bdd1a4f1ee04c1b283e6c7407acf211a69014ceddfa7780bf7955f10507429d82c98f6572405068bf168f2cea8af90d29da5d9fa1be6683576a24f7f39d5803a05a376ea5867ae2c1800dd1c6bdb9d235d31c24f32844b56efd158f578d051d3d0d4de7ce3b988e66ab44445a975ad25f1c201d236d71317bffbdfd53628478e98be4bb514f00e86b7f6c553702bf56dc7ca123385fb805b0681c69ba0efb16596f65394ec08c16f6a1ee9514b28200c012cf04a02b7ceb205fe7758504eadfe816380c458efcc2b8e5993914b0dbc175473624015b14edd2c0b7b6119cf7077fbc7bb852bf4229353b5fbd10842fb438caf96cbbd934947d8ce2684db36e545c35f0f579bbeb2b09d684340284b1d829fd269f601e9958f632291261e32d772842927e8ae862128c54d8679c9868deec18e8ea65973f2364ca25a33d12fd4f19529d3edc6b93dc49105ea4004f51d46fd9509c41c7967dbab93935ca9266bcb89bc7ed59bf78749f41612a9691a0f6f80b33bf5d45ece4b06eb9f50549ee52030946fb146658388dc63131d3cfdb76708330ee4dcbddb668b4af1face711481cc4d67fc43f950b8ffcdb664ddc683aa9e06d08e9cf081081410e56bb8a4d809f20989c58c152e0b90da8fa7e7feee405f8032260f179c287d0aa9e3029913736262a90a6a8ec61b8f978afe4e129aa145687f9f2e0622fe7c9b6c2067edcf10d59f5cf3dce3bea00fb352461b5dc6812458ef7caab42940e7cb24db4309f93449b259856b20e0a16d4f7cb24d8a2fb7107fa47af19d6a1a81fbd31a908c8a575e2fb12caa1b3ba64fdb307f7e949425ddac3cf2f0f61776ca97b76617a55edb189296e7d8de3bebb262e41e2bda40c4ccc6aa5e8d03f38edf5336632d82f22bf8771a600adadacfa3f9ba480fe57172c60a9e8b97beaafa3b2be24ce2bd37bd0a8f2d574c7ae9f37768576dd66b9461b38e8caa809f40308a58b33f352f9a647f6c83b43815d6fbbc58668ee155cad9cc03ebc09caf2cedf760bfb5c02f8d86fe9b4547261dae541f325e2a1f0806db4d74963f05fad9cc9d46333bedff783197a90d6b97ff658d1d65eca74887e9c04dd5d95fbb9ba5b4ae770ba294c94c47f4b52d486c76efa7aa7b6c6fe90f215db7ac026f46ba0e1cace8a08681ce022b8edbf4c06f1420cdc07ddceb6d9bd006f6e4eb7ebff363146476601ba653da5774dcf3c8a1b3b6a4df0dd7dfb12527fead8298a8d16e5d9f1e4388f241035cc4edf4af48d4ae2cc8cc55dd0ff9ab71c3ba872d63d3fd112761fe3d8b77e4e716aca9f85544c5833c00257bf731f0043552144339d0b44685971ac5008432272e2e3264189207d944469cf22c59349f2b27bb6258030650ddd75bb8bb2dc675fb6e3bb52236202809411a7dfcb3878685ca0d7012050184299f113d2cab2399c318b570ea2856a3d99a53ab00f2719a064868279a5c28f7899df2c1a54c2091ebd9c7ab6574e9a7469f2e2ee3917309abd826eb3c5ff89f5ca2446e6ef90c8283b060b67cfe0cc58da437d6eea92c6f47840e6b12d68202ad592cae34d93cbcb59653e8c8626e9362c7b6bc7b697ce50eb06459ae7ccaf49e7ff3e91"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x4800}, 0x4c014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@metacopy_on}]}) [ 74.549873][ T45] Bluetooth: hci0: command tx timeout [ 74.685304][ T5314] loop0: detected capacity change from 0 to 64 [ 74.701570][ T5314] ======================================================= [ 74.701570][ T5314] WARNING: The mand mount option has been deprecated and [ 74.701570][ T5314] and is ignored by this kernel. Remove the mand [ 74.701570][ T5314] option from the mount to silence this warning. [ 74.701570][ T5314] ======================================================= [ 75.536653][ T5314] hfs: request for non-existent node 8 in B*Tree [ 75.539664][ T5314] hfs: request for non-existent node 8 in B*Tree [ 75.579230][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.579230][ T12] loop0: rw=8388609, sector=4169, nr_sectors = 1 limit=64 [ 75.604793][ T12] Buffer I/O error on dev loop0, logical block 4169, lost async page write [ 75.608419][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.608419][ T12] loop0: rw=8388609, sector=4170, nr_sectors = 1 limit=64 [ 75.614745][ T5313] [ 75.615841][ T5313] ====================================================== [ 75.618748][ T5313] WARNING: possible circular locking dependency detected [ 75.621601][ T5313] syzkaller #0 Not tainted [ 75.623287][ T5313] ------------------------------------------------------ [ 75.626201][ T5313] syz.0.0/5313 is trying to acquire lock: [ 75.628406][ T5313] ffff888034bd20b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 75.632138][ T5313] [ 75.632138][ T5313] but task is already holding lock: [ 75.635118][ T5313] ffff8880430241f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 75.639340][ T5313] [ 75.639340][ T5313] which lock already depends on the new lock. [ 75.639340][ T5313] [ 75.643646][ T5313] [ 75.643646][ T5313] the existing dependency chain (in reverse order) is: [ 75.647088][ T5313] [ 75.647088][ T5313] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 75.650690][ T5313] __mutex_lock+0x19f/0x1300 [ 75.652888][ T5313] hfs_extend_file+0xf2/0x15e0 [ 75.654724][ T5313] hfs_bmap_reserve+0x107/0x430 [ 75.656796][ T5313] __hfs_ext_write_extent+0x1fa/0x470 [ 75.659446][ T5313] __hfs_ext_cache_extent+0x6b/0x9b0 [ 75.661854][ T5313] hfs_extend_file+0x39b/0x15e0 [ 75.664027][ T5313] hfs_get_block+0x412/0xc50 [ 75.666067][ T5313] __block_write_begin_int+0x6c6/0x1910 [ 75.668297][ T5313] cont_write_begin+0x737/0xae0 [ 75.670214][ T5313] hfs_write_begin+0x66/0xb0 [ 75.672252][ T5313] cont_write_begin+0x2e7/0xae0 [ 75.674407][ T5313] hfs_write_begin+0x66/0xb0 [ 75.676547][ T5313] generic_perform_write+0x2e2/0x8f0 [ 75.679107][ T5313] generic_file_write_iter+0x14a/0x680 [ 75.681668][ T5313] vfs_write+0x61d/0xb90 [ 75.683772][ T5313] __x64_sys_pwrite64+0x199/0x230 [ 75.686151][ T5313] do_syscall_64+0x14d/0xf80 [ 75.688164][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.690648][ T5313] [ 75.690648][ T5313] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 75.694168][ T5313] __lock_acquire+0x15a5/0x2cf0 [ 75.696191][ T5313] lock_acquire+0xf0/0x2e0 [ 75.697989][ T5313] __mutex_lock+0x19f/0x1300 [ 75.699921][ T5313] hfs_find_init+0x18e/0x300 [ 75.702092][ T5313] hfs_extend_file+0x35c/0x15e0 [ 75.704512][ T5313] hfs_bmap_reserve+0x107/0x430 [ 75.706916][ T5313] hfs_cat_create+0x20f/0x800 [ 75.709213][ T5313] hfs_mkdir+0x79/0xe0 [ 75.711284][ T5313] vfs_mkdir+0x413/0x630 [ 75.713509][ T5313] filename_mkdirat+0x285/0x510 [ 75.715726][ T5313] __se_sys_mkdir+0x34/0x150 [ 75.718086][ T5313] do_syscall_64+0x14d/0xf80 [ 75.720430][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.722797][ T5313] [ 75.722797][ T5313] other info that might help us debug this: [ 75.722797][ T5313] [ 75.727253][ T5313] Possible unsafe locking scenario: [ 75.727253][ T5313] [ 75.730225][ T5313] CPU0 CPU1 [ 75.732691][ T5313] ---- ---- [ 75.735082][ T5313] lock(&HFS_I(tree->inode)->extents_lock); [ 75.737596][ T5313] lock(&tree->tree_lock/1); [ 75.740791][ T5313] lock(&HFS_I(tree->inode)->extents_lock); [ 75.744695][ T5313] lock(&tree->tree_lock/1); [ 75.746815][ T5313] [ 75.746815][ T5313] *** DEADLOCK *** [ 75.746815][ T5313] [ 75.750662][ T5313] 4 locks held by syz.0.0/5313: [ 75.752486][ T5313] #0: ffff888034bd4420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 75.756147][ T5313] #1: ffff888043023d20 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 75.760818][ T5313] #2: ffff888034bd00b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 75.765096][ T5313] #3: ffff8880430241f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 75.769884][ T5313] [ 75.769884][ T5313] stack backtrace: [ 75.772466][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.772479][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.772485][ T5313] Call Trace: [ 75.772490][ T5313] [ 75.772494][ T5313] dump_stack_lvl+0xe8/0x150 [ 75.772508][ T5313] print_circular_bug+0x2e1/0x300 [ 75.772521][ T5313] check_noncircular+0x12e/0x150 [ 75.772534][ T5313] __lock_acquire+0x15a5/0x2cf0 [ 75.772544][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 75.772557][ T5313] ? kasan_save_track+0x4f/0x80 [ 75.772567][ T5313] ? kasan_save_track+0x3e/0x80 [ 75.772576][ T5313] ? __kasan_kmalloc+0x93/0xb0 [ 75.772586][ T5313] ? __kmalloc_noprof+0x35c/0x760 [ 75.772595][ T5313] ? hfs_find_init+0xaa/0x300 [ 75.772605][ T5313] ? hfs_extend_file+0x35c/0x15e0 [ 75.772612][ T5313] ? hfs_bmap_reserve+0x107/0x430 [ 75.772619][ T5313] lock_acquire+0xf0/0x2e0 [ 75.772628][ T5313] ? hfs_find_init+0x18e/0x300 [ 75.772639][ T5313] __mutex_lock+0x19f/0x1300 [ 75.772650][ T5313] ? hfs_find_init+0x18e/0x300 [ 75.772660][ T5313] ? hfs_find_init+0x18e/0x300 [ 75.772670][ T5313] ? __pfx___mutex_lock+0x10/0x10 [ 75.772680][ T5313] ? rcu_is_watching+0x15/0xb0 [ 75.772691][ T5313] ? __kmalloc_noprof+0x37d/0x760 [ 75.772706][ T5313] ? hfs_find_init+0xaa/0x300 [ 75.772717][ T5313] ? __kmalloc_noprof+0x1b8/0x760 [ 75.772732][ T5313] hfs_find_init+0x18e/0x300 [ 75.772746][ T5313] hfs_extend_file+0x35c/0x15e0 [ 75.772758][ T5313] ? __pfx_hfs_extend_file+0x10/0x10 [ 75.772765][ T5313] ? __mutex_lock+0x319/0x1300 [ 75.772776][ T5313] ? __pfx___mutex_lock+0x10/0x10 [ 75.772787][ T5313] ? rcu_is_watching+0x15/0xb0 [ 75.772796][ T5313] hfs_bmap_reserve+0x107/0x430 [ 75.772805][ T5313] hfs_cat_create+0x20f/0x800 [ 75.772812][ T5313] ? do_raw_spin_lock+0x12b/0x2f0 [ 75.772819][ T5313] ? __pfx_hfs_cat_create+0x10/0x10 [ 75.772827][ T5313] ? hfs_new_inode+0x92d/0xc70 [ 75.772836][ T5313] hfs_mkdir+0x79/0xe0 [ 75.772843][ T5313] vfs_mkdir+0x413/0x630 [ 75.772855][ T5313] filename_mkdirat+0x285/0x510 [ 75.772861][ T5313] ? __pfx_filename_mkdirat+0x10/0x10 [ 75.772868][ T5313] ? do_getname+0x151/0x250 [ 75.772875][ T5313] __se_sys_mkdir+0x34/0x150 [ 75.772882][ T5313] do_syscall_64+0x14d/0xf80 [ 75.772892][ T5313] ? trace_irq_disable+0x3b/0x150 [ 75.772902][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.772909][ T5313] ? clear_bhb_loop+0x40/0x90 [ 75.772916][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.772924][ T5313] RIP: 0033:0x7fc47339c799 [ 75.772933][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.772939][ T5313] RSP: 002b:00007fc4742da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 75.772947][ T5313] RAX: ffffffffffffffda RBX: 00007fc473615fa0 RCX: 00007fc47339c799 [ 75.772952][ T5313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 75.772956][ T5313] RBP: 00007fc473432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 75.772960][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.772965][ T5313] R13: 00007fc473616038 R14: 00007fc473615fa0 R15: 00007fffa286a398 [ 75.772972][ T5313] [ 75.915808][ T12] Buffer I/O error on dev loop0, logical block 4170, lost async page write [ 75.919731][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.919731][ T12] loop0: rw=8388609, sector=4172, nr_sectors = 1 limit=64 [ 75.925487][ T12] Buffer I/O error on dev loop0, logical block 4172, lost async page write [ 75.928804][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.928804][ T12] loop0: rw=8388609, sector=4173, nr_sectors = 1 limit=64 [ 75.934517][ T12] Buffer I/O error on dev loop0, logical block 4173, lost async page write [ 75.938221][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.938221][ T12] loop0: rw=8388609, sector=4174, nr_sectors = 1 limit=64 [ 75.943764][ T12] Buffer I/O error on dev loop0, logical block 4174, lost async page write [ 75.947417][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.947417][ T12] loop0: rw=8388609, sector=4175, nr_sectors = 1 limit=64 [ 75.953935][ T12] Buffer I/O error on dev loop0, logical block 4175, lost async page write [ 75.957685][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.957685][ T12] loop0: rw=8388609, sector=4176, nr_sectors = 1 limit=64 [ 75.962475][ T12] Buffer I/O error on dev loop0, logical block 4176, lost async page write [ 75.965889][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.965889][ T12] loop0: rw=8388609, sector=4177, nr_sectors = 1 limit=64 [ 75.971324][ T12] Buffer I/O error on dev loop0, logical block 4177, lost async page write [ 75.981014][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.981014][ T12] loop0: rw=8388609, sector=4200, nr_sectors = 1 limit=64 [ 75.986116][ T12] Buffer I/O error on dev loop0, logical block 4200, lost async page write [ 75.992485][ T12] kworker/u4:0: attempt to access beyond end of device [ 75.992485][ T12] loop0: rw=8388609, sector=4201, nr_sectors = 1 limit=64 [ 75.998785][ T12] Buffer I/O error on dev loop0, logical block 4201, lost async page write [ 76.016561][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.0'. [ 76.024507][ T5314] vlan2: entered promiscuous mode [ 76.026747][ T5314] bridge0: entered promiscuous mode