program: syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x30000c8, &(0x7f0000000100)=ANY=[], 0x11, 0x2d1, &(0x7f0000000280)="$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") r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000580)={'HL\x00'}, &(0x7f00000005c0)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000580)={'HL\x00'}, &(0x7f00000005c0)=0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000640)={[0x8]}) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000640)={[0x8]}) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ftruncate(r1, 0x2007ffc) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) (async) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x37) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x37) syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x80100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe0d, 0x0, &(0x7f0000000740)="480766573f03a315cf41d5a7a21619cb0f97d1279c7000e9f0b78e75bcb713562c3edc8d5cfe7a204a89c797c4509dd89437b6430110ce325699f693ec8ef63cfd81c4b4f8af9b6ec69071d60524edec926b7980dd386a4937ee66007eadd2dcac5b6f2e1c924c773156cc95127c35fb2c355440dee660321c9d233858c8ff044305d0b47acf2fd82b78f822994f876a94af43259fae57682e78f9c9c02c865b232cef5e5533178016523ddbd67e55fc91d34e34931ffdad1edc908fa432ce2f25999a1a51a15adafe139acb60b1c1e8188230e071a11730a5feef182dd9add59553eadc40aaf456060ac2c79aa2a08f4fcd79e2eddc398349775d8452de37a2566ce0f203312dbfa4d7f8faaee4b8c4e757fcdf7d937ba41d162de25032265969e5945493f68bb95d8d2766deb1e1385167c2b07d44b6df041172d35d3619ebb66b523bfb761a4d5a197a51bb13e13e069f3fa765d1b8ea2442cd78d25bcd9c36d2a29ac1275b9737efa02e663020fc281b7408b21d676bd8785dd0426cbcbc3e3e5a26da026ab912732242ccf4b44a43107c177e8495fd93cce470c41a2b0655f33f7c6f2a7f6c8e156aafee7fd7582ba0c427414166eef8da398c1d2e57fe7c23c8f4267468e93ec61cdf62f9c1b2e466474f1139d114e482949abc9c55da4fe26113b458b7e01fbbb839f322b5e7a73295fe8184573dd1ec78e5b49245296fdbc6eb1fd011ea9567c7cf657341f267725ba6934527036bd29b3d9d006a646d6281e9f4a9df20ea584d903455a0d635a98f99c71d83113f12a207fb04042049cbff138a1a0368c7cee815bed31df6d22b90ca53119ef80b7e4dca475bb52a466df67eaa08e7872bf9e96f8eec27dd3408f93e0ac1104c4fc5655ce679874d3b04a8d1062c3db1f59f0f2221e04451f4f4825c37a934c15309060fd0c330b2cc07c575c71af35c8d05a2ea95b207be72cf741db4da74b75bf415e85cc15c84b49bcee0b98eb99745c5704c0852298433d063a6da86a6858761fe75a761fe04b8b51bc21e4011fd8ddda52ee94406e98a920701c10bc1e65818857966797dd9149790eb3298046e900fc74e630a8fd7fdbe0f590b1c7d2fc726f66b0234a2678c028cac48ee202617059efcee5ee882e79e42f38b0cd9851fd9717b69e22b362a1f85d044bc74891b02da3da99c9354eec3aeedf0c39e4ce024523af4f6767363b31d93fc81d142cf0478fbaeff209c81424c741225ac049d59db3aa1b44591c2c85c8d35967b6ed9772b440ec7b2d8b4feb42615bc0c42c267726d583acbfbbc46307dd252f78edbcd5ac222b20137510baf2b477f04179e5b7d7546624e3e91146936441071aba7fb237b197cbe849f28a381fe20f99110a395b3b8c50f68c28ef73ea94540b8f8aaa4cb695bab411534cd9947b33ea5c9714d6949154a5cddc90f772b41784ffbc3c773f83ed2a97ad9bfd22d9887fd48ca9ce57dba080bfac5b236cd7306bbf6e4055865c3e786ced4519ee51a0204a8aba05b984439386548b1f64c43ecf941d713649d1fcad369c01e07549cfa467694e78ed0efc6032fb5aecebd01ae33b3a7f3b8ad35e9dde6bf59b1d923853c156b4116fb18648dff032c411df146975debe9108f428b7a3a526224abb8a7bb817c7e274813e8fba4b4113f411825d310aa7c314175319e274c10848f714a020d2898a11dd8dd47a5488a59342f06301188cb0b616d4082468b5373f8555dc0710d5809f5a0cafa8948f9a9ad3bd1ee3020c5b793fd16035d44eb2fe7de0693c2feb9758e9a0e7849daaa94b33a0fcbaa6c5ce21b50d3bc2b52e6c4519ff9d34410ac243554c2864549ba7960e630ccc3b917a437a73e3cdc5e6c8dbc73f88e1cf459acb963c79f3cea976fdef7178fe14dd98a9f9f2ec3ca6d4973020e294511c65079de1bf8de6bf9ab509f590a8b553ee34a995fc7c3c23f0eb9eb3a307659aa13f6ed509d76e0726ba29ff9499c42b3683075e49b4b2c41f7b74ef7776570ce6653f2ba78b59ac023a6e01f42c3bd5bb927c4dc67d7be53a10103df6405f862e57127b7e9955144e00d0560b41a06852446a13d745f8af1bd9c7fe133a48aedc26cc0a7fe024ba218880a74c436379d5166d1a7797ef83e6f0e66ba7d9456a38e1df15ff8d2498ec2bd81de6ce1611dc0dc278fd26084f806f114b852ae2728e1a2456a8e64d195882bd5c34ba0ce688cc5a1f3d962afe8cab8995977406f596ccf6a460f01cad49d15d2fc2cf139c1c0c30865a5dcd30984de231c9de0012fb7239fe9fb0b8cdae475b47a5e2408d93a49b7b0c573b72accd8e827575355f1236005a16ac2887575dc2df1f5275a5f0278b9d4d66b4a311051bca1fef248e20e0075ae1c0094dd3844fa3af0b83c84320473bc8de175b8c77842da65b957a5ea89178adf978c6d215f02b11318adec1b93a61195cf54abf6b9308b9dc986489c1f5f06cb7362b632db8ec678908f73fd52af4b223955adc6c341b22f45b3b5c59979baa31d330a7db0278b8e8e3fd3d4cf9323fd1f1f5a12512fcbe07a0af9bedeb404d777a80e523a201be96337f233420f85ecd4ef240880813284bdae267181666bed62aba89278f36b48a8613510ffcd804a6d46b50385f4d990eff0f2364e5e16ddeeb77e9e371933e8484c5d12d27373a6275d739e3615ad4da335b4fe6f9e7a370abc72a32cbe18f31a0c6c965b0844de4720f40231502680121bb40bbbdb81731255e2a1ef49d331e040226cad9fa372e76dde503a522380027e8dfd101f6b9bf8db200967d14d65bbf73bef83e9de4da1d69b270c9933286cc2c0e209e343877542bf4d95b37a27df7dee781104fa51f7b55a6d81d3052be85ff5c7f00d2800bcfa7854a7e38475eda16ddd8976e1916170d40c808f8c9186f12444fc877cb84f64ff6718b2e3e6e7002e40601c2864616865abd21b54bf7350fa5ff3e90e88377708ad13f44568bc5aff8d4329dfeae6a01ab7f93271009e4bef53025ec55393fb0973846360bbf20cb0ce5ede307661e7be6fb2f06be20f702e00583d01d778bce59e73fa604e1c0bc27a9f6377dde6f3862a3d8636596373783c00a21846a81bbe0ad42e7d17b9d4dc781421805e471cd9c0c40ce7b4330ff7450c979baeffc1515405b5b14889dbb8d6b5c1e5df5323a7f9f18e29a0bbad1a9cf52553a0d5174c7754fe8f5a82cbc5389bdebaafd2a752110a37b16c70c18ceeedc021fae6d5ed9e67bbc3bd686c91fa3aad9b097574c2f09682493dcd928bf6f51355781dcf92330e32a2a43e730cb7ea0d1c4b0dfb5ab998a34fac6c2f9c4e9f66e89cc6189b413a9893e54ee74e4d0e3e0b48dde53ecceec5248b1b721f9907fdccfd1df01dcade84c0ff3f711fbfe6255ce473ee0e5ba25044dbc5ebcb8f8363b5a81f7039f890cdd9cf1902a47110dd29d6c79dc5661fa57e1dfd437d43e00b50d9888f86ff1ea9cfdeba9984780981ec858c5e1e43feadbe6c07ac0a2ad62bff6f16c5ba11d9f7f52f019121cab87f3ec20c72608869b303547e3eda287430f8f09bc5c7d4b80a8244ac284376a439039bc1ca197ec77b7fa27637d780141d51cd05b448425add6991ad922e3a8e91330967c42628f18b3cc63cf56aa219a64894e5967e29c2e4e8043408820fe0d360f74fb9f69ecd425a0f67fe55169b2e95928ecd49f06c13cb2e2a5aa8ae5299b8e05121851c1440c37c4444ae3e5a363fc8425639e5af733b112c8950a80fe88f2d6ef2fc9e5a6a1547f064b51c4663deac497255260d86362cdbf32c2bababc71711851c0c14e48d4d201461975a1e66614dd04ad85b650e3a78fcd0c06cc0f6377aa3467f318fa96d2aa9ec86d6cfd5808195d2a3a75f69b078b87b680807a26157d4356c0245da05a02f917a07ba57b67ef110d382c9021f5f40b8798bec0ddfe322ef045bee64e6b725654418bc7facb67fd5eeac4592387652afeca2947b99e9de740d4e42929ca1a4d83bd12a3f32cab9192bdea2d4c5a2f5cc2063ff859cb78c8f6fb8eb84a3b14fa477343474360e9b304b9d5d9ddddb2c37f1f455dd6739e0de53271d803bf0b649966f74939eb53fc0edd8d8fe2ce9d63ee9ecf640b53d0546d067f8b008a4b87f45bc6560adfd01260bd1fd0f53bafd1ca02962afeba7a32ceeca5d33a25b7741cb9293488e30adc657a4a8cadb346e6170d6666743478b9c399e7ff029ac9896d7be39be1327986e2503f28fe9df4a69d3ab33b4486e8ff075f3eb3a2e9c4348fecbbeafc1d291ccc53adb14f30744a0a15831911f534458307801e7ff62dc849985dcc6966e6a210dae2acd1e7f3c9d6fc605420c0bd5c2d49c6bb19ae4817d8617a204915fa3f04e044471932dc36e90ba10ed4ba52a4282dfe1f653037c1e41505bef20617f61487a3b3031ccf5c649b138cf35012719f8c61cff1415b3ad4b0e4622e31b8123393190af2dce1ff0d827a27dfb63dc68b279159e3a225478588f358a254bbb2f09b450fde51126c760191c5cb066f39ff44e2b0d77520f13b7cfbef43db9f0939801968b5dfc032594654a739aafb5cada9768240e20e3adbca6152fa99980714bacd9911db2fc41a6c04e662d062436c8901939804e9566af368adffdbbc4b6fefb29181522c86ff3aa93d6c047ee9de1aac728350868dcfbc0be93deef9e1cb495863b5ffc339df15a7b144039b5e9539d5898f7c86bc2743e9c85c3a2dd786934051c295360e9858eba035c669510f293de4912c2bf3d764b12c66c3db5fec44ce1005593bcf6a92e5e3ad2435183bc36de21e856313adf0631e586b4d616c63d59547566c49f50e08adf0bc1908e727bc32d50d1a65ac20267d548b57c0846544eda4030ee74db5715d142b2db2be7f539f4af35b69efc948d536a4b973e3d51eb09e8a38901070dad262e1e9744bbb681d17c1345999508f9e929da70a3a2b395940ee45ecc99b2e7ca6caee051d9445de136d53242fd0b20fb642e2d3007c6a06df47d6a359012e67587a0e7b2815b2ecc738d63940187f221066d0e45418974a35da46ad8b26227", 0x0, 0x5, 0x0, 0x3}, 0x50) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/198, &(0x7f0000000140)=""/80, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9fe5e08cccc90000afaf463e7768da9c2a64ee058df82b8c00000000000000000000000002000000000077093a4add41df492829cfcc8b550b182c8e8c12617d847f74675bf50037135e5b4d12a7de3c235419cf4ec0a1033c6ad810b949e9ab1caea90d7d5e6441a49c05c3f8011327fa891a2821ffb3d3a17633acd796faafecab95b0696781dc7a8862c2b3093ef32ccb473ab310c62c9e541fa46e28f4e7679660d05a0f57"], 0x0, 0x1a, 0x0, 0x6}, 0x28) [ 86.867972][ T4648] Bluetooth: hci0: command tx timeout [ 86.961347][ T5321] loop0: detected capacity change from 0 to 64 [ 86.979166][ T5321] ======================================================= [ 86.979166][ T5321] WARNING: The mand mount option has been deprecated and [ 86.979166][ T5321] and is ignored by this kernel. Remove the mand [ 86.979166][ T5321] option from the mount to silence this warning. [ 86.979166][ T5321] ======================================================= [ 87.155235][ T25] audit: type=1800 audit(1785480894.079:2): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 87.982313][ T5325] hfs: request for non-existent node 8 in B*Tree [ 87.985304][ T5325] hfs: request for non-existent node 8 in B*Tree [ 87.994909][ T5325] [ 87.996096][ T5325] ====================================================== [ 87.999151][ T5325] WARNING: possible circular locking dependency detected [ 88.002164][ T5325] syzkaller #0 Not tainted [ 88.004640][ T5325] ------------------------------------------------------ [ 88.007953][ T5325] syz.0.0/5325 is trying to acquire lock: [ 88.010482][ T5325] ffff88803761c0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 88.014308][ T5325] [ 88.014308][ T5325] but task is already holding lock: [ 88.017269][ T5325] ffff888052c37a20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 88.021941][ T5325] [ 88.021941][ T5325] which lock already depends on the new lock. [ 88.021941][ T5325] [ 88.027660][ T5325] [ 88.027660][ T5325] the existing dependency chain (in reverse order) is: [ 88.031632][ T5325] [ 88.031632][ T5325] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 88.035470][ T5325] __mutex_lock+0x19d/0x1550 [ 88.037753][ T5325] hfs_extend_file+0xf9/0x1680 [ 88.040083][ T5325] hfs_bmap_reserve+0x108/0x430 [ 88.042336][ T5325] __hfs_ext_write_extent+0x1fc/0x470 [ 88.045409][ T5325] __hfs_ext_cache_extent+0x6e/0x9b0 [ 88.048985][ T5325] hfs_extend_file+0x3a0/0x1680 [ 88.051699][ T5325] hfs_get_block+0x401/0xbe0 [ 88.054141][ T5325] __block_write_begin_int+0x6c2/0x1900 [ 88.056723][ T5325] cont_write_begin+0x71b/0xac0 [ 88.058956][ T5325] hfs_write_begin+0x66/0xb0 [ 88.061162][ T5325] cont_write_begin+0x2d6/0xac0 [ 88.063469][ T5325] hfs_write_begin+0x66/0xb0 [ 88.065354][ T5325] generic_perform_write+0x2d5/0x8f0 [ 88.067890][ T5325] generic_file_write_iter+0xae/0x330 [ 88.071705][ T5325] vfs_write+0x612/0xba0 [ 88.074186][ T5325] __x64_sys_pwrite64+0x196/0x220 [ 88.076439][ T5325] do_syscall_64+0x174/0x580 [ 88.078642][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.081543][ T5325] [ 88.081543][ T5325] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 88.085110][ T5325] __lock_acquire+0x1520/0x2cf0 [ 88.087258][ T5325] lock_acquire+0x106/0x350 [ 88.089627][ T5325] __mutex_lock+0x19d/0x1550 [ 88.092160][ T5325] hfs_find_init+0x18d/0x300 [ 88.095077][ T5325] hfs_extend_file+0x35f/0x1680 [ 88.097745][ T5325] hfs_bmap_reserve+0x108/0x430 [ 88.100116][ T5325] hfs_cat_create+0x221/0x810 [ 88.102404][ T5325] hfs_mkdir+0x79/0xe0 [ 88.104492][ T5325] vfs_mkdir+0x406/0x620 [ 88.106490][ T5325] filename_mkdirat+0x285/0x510 [ 88.108991][ T5325] __se_sys_mkdir+0x34/0x150 [ 88.111729][ T5325] do_syscall_64+0x174/0x580 [ 88.114288][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.117220][ T5325] [ 88.117220][ T5325] other info that might help us debug this: [ 88.117220][ T5325] [ 88.121450][ T5325] Possible unsafe locking scenario: [ 88.121450][ T5325] [ 88.125001][ T5325] CPU0 CPU1 [ 88.127881][ T5325] ---- ---- [ 88.130686][ T5325] lock(&HFS_I(tree->inode)->extents_lock); [ 88.133292][ T5325] lock(&tree->tree_lock/1); [ 88.136381][ T5325] lock(&HFS_I(tree->inode)->extents_lock); [ 88.140419][ T5325] lock(&tree->tree_lock/1); [ 88.143265][ T5325] [ 88.143265][ T5325] *** DEADLOCK *** [ 88.143265][ T5325] [ 88.147103][ T5325] 4 locks held by syz.0.0/5325: [ 88.149267][ T5325] #0: ffff8880122de450 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 88.153295][ T5325] #1: ffff888052c37600 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 88.157825][ T5325] #2: ffff88803761a0a8 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 88.162803][ T5325] #3: ffff888052c37a20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 88.167813][ T5325] [ 88.167813][ T5325] stack backtrace: [ 88.170315][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.170331][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.170337][ T5325] Call Trace: [ 88.170346][ T5325] [ 88.170352][ T5325] dump_stack_lvl+0xe8/0x150 [ 88.170371][ T5325] print_circular_bug+0x2e1/0x300 [ 88.170387][ T5325] check_noncircular+0x12e/0x150 [ 88.170397][ T5325] __lock_acquire+0x1520/0x2cf0 [ 88.170414][ T5325] ? stack_depot_save_flags+0x3ec/0x800 [ 88.170475][ T5325] ? __kmalloc_noprof+0x1ad/0x720 [ 88.170487][ T5325] ? kasan_save_track+0x4f/0x80 [ 88.170497][ T5325] ? kasan_save_track+0x3e/0x80 [ 88.170506][ T5325] ? __kasan_kmalloc+0x93/0xb0 [ 88.170515][ T5325] ? __kmalloc_noprof+0x375/0x720 [ 88.170523][ T5325] ? hfs_find_init+0x9d/0x300 [ 88.170535][ T5325] ? hfs_extend_file+0x35f/0x1680 [ 88.170545][ T5325] ? hfs_bmap_reserve+0x108/0x430 [ 88.170554][ T5325] ? hfs_cat_create+0x221/0x810 [ 88.170563][ T5325] ? hfs_mkdir+0x79/0xe0 [ 88.170572][ T5325] ? vfs_mkdir+0x406/0x620 [ 88.170585][ T5325] ? hfs_find_init+0x18d/0x300 [ 88.170593][ T5325] lock_acquire+0x106/0x350 [ 88.170605][ T5325] ? hfs_find_init+0x18d/0x300 [ 88.170617][ T5325] __mutex_lock+0x19d/0x1550 [ 88.170631][ T5325] ? hfs_find_init+0x18d/0x300 [ 88.170641][ T5325] ? hfs_find_init+0x18d/0x300 [ 88.170650][ T5325] ? __pfx___mutex_lock+0x10/0x10 [ 88.170660][ T5325] ? trace_kmalloc+0x2a/0xf0 [ 88.170671][ T5325] ? __kmalloc_noprof+0x396/0x720 [ 88.170682][ T5325] ? __kmalloc_noprof+0x1ad/0x720 [ 88.170690][ T5325] ? hfs_find_init+0x9d/0x300 [ 88.170699][ T5325] hfs_find_init+0x18d/0x300 [ 88.170708][ T5325] hfs_extend_file+0x35f/0x1680 [ 88.170724][ T5325] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.170734][ T5325] ? __pfx_hfs_extend_file+0x10/0x10 [ 88.170745][ T5325] ? __mutex_lock+0x30d/0x1550 [ 88.170756][ T5325] ? hfs_find_init+0x18d/0x300 [ 88.170764][ T5325] ? __pfx___mutex_lock+0x10/0x10 [ 88.170774][ T5325] ? trace_kmalloc+0x2a/0xf0 [ 88.170783][ T5325] hfs_bmap_reserve+0x108/0x430 [ 88.170795][ T5325] hfs_cat_create+0x221/0x810 [ 88.170805][ T5325] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.170815][ T5325] ? __pfx_hfs_cat_create+0x10/0x10 [ 88.170828][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 88.170837][ T5325] ? hfs_new_inode+0x8b8/0xc10 [ 88.170851][ T5325] hfs_mkdir+0x79/0xe0 [ 88.170861][ T5325] vfs_mkdir+0x406/0x620 [ 88.170883][ T5325] filename_mkdirat+0x285/0x510 [ 88.170903][ T5325] ? __pfx_filename_mkdirat+0x10/0x10 [ 88.170918][ T5325] ? do_getname+0x151/0x250 [ 88.170930][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.170941][ T5325] __se_sys_mkdir+0x34/0x150 [ 88.170951][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.170962][ T5325] do_syscall_64+0x174/0x580 [ 88.170974][ T5325] ? trace_irq_disable+0x3b/0x140 [ 88.170989][ T5325] ? clear_bhb_loop+0x40/0x90 [ 88.171001][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.171012][ T5325] RIP: 0033:0x7f699979e019 [ 88.171023][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.171032][ T5325] RSP: 002b:00007f699a5e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 88.171045][ T5325] RAX: ffffffffffffffda RBX: 00007f6999a26180 RCX: 00007f699979e019 [ 88.171053][ T5325] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000100 [ 88.171060][ T5325] RBP: 00007f699983500c R08: 0000000000000000 R09: 0000000000000000 [ 88.171066][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.171072][ T5325] R13: 00007f6999a26218 R14: 00007f6999a26180 R15: 00007ffcf32e65d8 [ 88.171084][ T5325]