program: syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x30000c8, &(0x7f0000000100)=ANY=[], 0x11, 0x2d1, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = open(&(0x7f0000000240)='./bus\x00', 0x34d142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ftruncate(r0, 0x2007ffc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x77) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x30000c8, &(0x7f0000000100)=ANY=[], 0x11, 0x2d1, &(0x7f0000000280)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) open(&(0x7f0000000240)='./bus\x00', 0x34d142, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) (async) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) ftruncate(r0, 0x2007ffc) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async) fallocate(r2, 0x0, 0x0, 0x77) (async) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) (async) [ 86.384988][ T4652] Bluetooth: hci0: command tx timeout [ 86.436080][ T5324] loop0: detected capacity change from 0 to 64 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 86.467955][ T5324] ======================================================= [ 86.467955][ T5324] WARNING: The mand mount option has been deprecated and [ 86.467955][ T5324] and is ignored by this kernel. Remove the mand [ 86.467955][ T5324] option from the mount to silence this warning. [ 86.467955][ T5324] ======================================================= [ 87.254786][ T5324] hfs: request for non-existent node 8 in B*Tree [ 87.258636][ T5324] hfs: request for non-existent node 8 in B*Tree [ 87.291159][ T5324] [ 87.292308][ T5324] ====================================================== [ 87.295238][ T5324] WARNING: possible circular locking dependency detected [ 87.298228][ T5324] syzkaller #0 Not tainted [ 87.300050][ T5324] ------------------------------------------------------ [ 87.302390][ T5324] syz.0.0/5324 is trying to acquire lock: [ 87.304761][ T5324] ffff8880136ac0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 87.308606][ T5324] [ 87.308606][ T5324] but task is already holding lock: [ 87.311705][ T5324] ffff88801267ba20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 87.316775][ T5324] [ 87.316775][ T5324] which lock already depends on the new lock. [ 87.316775][ T5324] [ 87.320648][ T5324] [ 87.320648][ T5324] the existing dependency chain (in reverse order) is: [ 87.324934][ T5324] [ 87.324934][ T5324] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 87.329124][ T5324] __mutex_lock+0x19d/0x1550 [ 87.331402][ T5324] hfs_extend_file+0xf9/0x1680 [ 87.333718][ T5324] hfs_bmap_reserve+0x108/0x430 [ 87.336011][ T5324] __hfs_ext_write_extent+0x1fc/0x470 [ 87.338545][ T5324] __hfs_ext_cache_extent+0x6e/0x9b0 [ 87.341035][ T5324] hfs_extend_file+0x3a0/0x1680 [ 87.343391][ T5324] hfs_get_block+0x401/0xbe0 [ 87.345585][ T5324] __block_write_begin_int+0x6c2/0x1900 [ 87.348297][ T5324] cont_write_begin+0x71b/0xac0 [ 87.351044][ T5324] hfs_write_begin+0x66/0xb0 [ 87.353358][ T5324] cont_write_begin+0x2d6/0xac0 [ 87.355657][ T5324] hfs_write_begin+0x66/0xb0 [ 87.357868][ T5324] generic_perform_write+0x2d5/0x8f0 [ 87.360358][ T5324] generic_file_write_iter+0xae/0x330 [ 87.362884][ T5324] vfs_write+0x612/0xba0 [ 87.364954][ T5324] __x64_sys_pwrite64+0x196/0x220 [ 87.367327][ T5324] do_syscall_64+0x174/0x580 [ 87.369458][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.372017][ T5324] [ 87.372017][ T5324] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 87.375201][ T5324] __lock_acquire+0x1520/0x2cf0 [ 87.377398][ T5324] lock_acquire+0x106/0x350 [ 87.379428][ T5324] __mutex_lock+0x19d/0x1550 [ 87.381570][ T5324] hfs_find_init+0x18d/0x300 [ 87.383733][ T5324] hfs_extend_file+0x35f/0x1680 [ 87.385700][ T5324] hfs_bmap_reserve+0x108/0x430 [ 87.387504][ T5324] hfs_cat_create+0x221/0x810 [ 87.389418][ T5324] hfs_create+0x78/0xe0 [ 87.391018][ T5324] path_openat+0x133a/0x3830 [ 87.392880][ T5324] do_file_open+0x23e/0x4a0 [ 87.394733][ T5324] do_sys_openat2+0x115/0x200 [ 87.396510][ T5324] __x64_sys_open+0x11e/0x150 [ 87.398278][ T5324] do_syscall_64+0x174/0x580 [ 87.399970][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.402480][ T5324] [ 87.402480][ T5324] other info that might help us debug this: [ 87.402480][ T5324] [ 87.406433][ T5324] Possible unsafe locking scenario: [ 87.406433][ T5324] [ 87.409345][ T5324] CPU0 CPU1 [ 87.411490][ T5324] ---- ---- [ 87.413587][ T5324] lock(&HFS_I(tree->inode)->extents_lock); [ 87.415893][ T5324] lock(&tree->tree_lock/1); [ 87.418774][ T5324] lock(&HFS_I(tree->inode)->extents_lock); [ 87.422253][ T5324] lock(&tree->tree_lock/1); [ 87.424207][ T5324] [ 87.424207][ T5324] *** DEADLOCK *** [ 87.424207][ T5324] [ 87.427544][ T5324] 4 locks held by syz.0.0/5324: [ 87.429484][ T5324] #0: ffff88801f4b8450 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 87.433389][ T5324] #1: ffff88801267b600 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: path_openat+0xae3/0x3830 [ 87.437515][ T5324] #2: ffff8880136aa0a8 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 87.441223][ T5324] #3: ffff88801267ba20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 87.445421][ T5324] [ 87.445421][ T5324] stack backtrace: [ 87.447695][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.447705][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.447710][ T5324] Call Trace: [ 87.447715][ T5324] [ 87.447718][ T5324] dump_stack_lvl+0xe8/0x150 [ 87.447732][ T5324] print_circular_bug+0x2e1/0x300 [ 87.447741][ T5324] check_noncircular+0x12e/0x150 [ 87.447748][ T5324] __lock_acquire+0x1520/0x2cf0 [ 87.447758][ T5324] ? stack_depot_save_flags+0x3ec/0x800 [ 87.447812][ T5324] ? __kmalloc_noprof+0x1ad/0x720 [ 87.447823][ T5324] ? kasan_save_track+0x4f/0x80 [ 87.447834][ T5324] ? kasan_save_track+0x3e/0x80 [ 87.447844][ T5324] ? __kasan_kmalloc+0x93/0xb0 [ 87.447854][ T5324] ? __kmalloc_noprof+0x375/0x720 [ 87.447864][ T5324] ? hfs_find_init+0x9d/0x300 [ 87.447872][ T5324] ? hfs_extend_file+0x35f/0x1680 [ 87.447883][ T5324] ? hfs_bmap_reserve+0x108/0x430 [ 87.447892][ T5324] ? hfs_cat_create+0x221/0x810 [ 87.447902][ T5324] ? hfs_create+0x78/0xe0 [ 87.447912][ T5324] ? path_openat+0x133a/0x3830 [ 87.447926][ T5324] ? hfs_find_init+0x18d/0x300 [ 87.447933][ T5324] lock_acquire+0x106/0x350 [ 87.447941][ T5324] ? hfs_find_init+0x18d/0x300 [ 87.447948][ T5324] __mutex_lock+0x19d/0x1550 [ 87.447956][ T5324] ? hfs_find_init+0x18d/0x300 [ 87.447963][ T5324] ? hfs_find_init+0x18d/0x300 [ 87.447969][ T5324] ? __pfx___mutex_lock+0x10/0x10 [ 87.447975][ T5324] ? trace_kmalloc+0x2a/0xf0 [ 87.447982][ T5324] ? __kmalloc_noprof+0x396/0x720 [ 87.447988][ T5324] ? __kmalloc_noprof+0x1ad/0x720 [ 87.447994][ T5324] ? hfs_find_init+0x9d/0x300 [ 87.448001][ T5324] hfs_find_init+0x18d/0x300 [ 87.448007][ T5324] hfs_extend_file+0x35f/0x1680 [ 87.448015][ T5324] ? __pfx___mutex_trylock_common+0x10/0x10 [ 87.448022][ T5324] ? __pfx_hfs_extend_file+0x10/0x10 [ 87.448029][ T5324] ? __mutex_lock+0x30d/0x1550 [ 87.448037][ T5324] ? hfs_find_init+0x18d/0x300 [ 87.448043][ T5324] ? __pfx___mutex_lock+0x10/0x10 [ 87.448049][ T5324] ? trace_kmalloc+0x2a/0xf0 [ 87.448056][ T5324] hfs_bmap_reserve+0x108/0x430 [ 87.448065][ T5324] hfs_cat_create+0x221/0x810 [ 87.448072][ T5324] ? __pfx_hfs_cat_create+0x10/0x10 [ 87.448079][ T5324] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.448088][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 87.448093][ T5324] ? hfs_new_inode+0x8b8/0xc10 [ 87.448102][ T5324] hfs_create+0x78/0xe0 [ 87.448109][ T5324] ? __pfx_hfs_create+0x10/0x10 [ 87.448138][ T5324] path_openat+0x133a/0x3830 [ 87.448169][ T5324] do_file_open+0x23e/0x4a0 [ 87.448182][ T5324] ? __pfx_do_file_open+0x10/0x10 [ 87.448199][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 87.448208][ T5324] ? alloc_fd+0x651/0x6c0 [ 87.448216][ T5324] do_sys_openat2+0x115/0x200 [ 87.448236][ T5324] ? __se_sys_futex+0x3a8/0x450 [ 87.448246][ T5324] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.448257][ T5324] ? rcu_is_watching+0x15/0xb0 [ 87.448267][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.448277][ T5324] __x64_sys_open+0x11e/0x150 [ 87.448288][ T5324] do_syscall_64+0x174/0x580 [ 87.448299][ T5324] ? trace_irq_disable+0x3b/0x140 [ 87.448312][ T5324] ? clear_bhb_loop+0x40/0x90 [ 87.448322][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.448330][ T5324] RIP: 0033:0x7f15f0b9e019 [ 87.448337][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.448343][ T5324] RSP: 002b:00007f15f1a89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.448350][ T5324] RAX: ffffffffffffffda RBX: 00007f15f0e25fa0 RCX: 00007f15f0b9e019 [ 87.448355][ T5324] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000180 [ 87.448359][ T5324] RBP: 00007f15f0c3500c R08: 0000000000000000 R09: 0000000000000000 [ 87.448363][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.448367][ T5324] R13: 00007f15f0e26038 R14: 00007f15f0e25fa0 R15: 00007ffeade775b8 [ 87.448373][ T5324] [ 87.632740][ T5325] syz.0.0: attempt to access beyond end of device [ 87.632740][ T5325] loop0: rw=8388608, sector=27869, nr_sectors = 1 limit=64 [ 87.638522][ T5325] Buffer I/O error on dev loop0, logical block 27869, async page read [ 87.641839][ T5325] syz.0.0: attempt to access beyond end of device [ 87.641839][ T5325] loop0: rw=8388608, sector=27874, nr_sectors = 1 limit=64 [ 87.647761][ T5325] Buffer I/O error on dev loop0, logical block 27874, async page read [ 87.650779][ T5325] syz.0.0: attempt to access beyond end of device [ 87.650779][ T5325] loop0: rw=8388608, sector=27876, nr_sectors = 1 limit=64 [ 87.658470][ T5325] Buffer I/O error on dev loop0, logical block 27876, async page read [ 87.662599][ T5325] syz.0.0: attempt to access beyond end of device [ 87.662599][ T5325] loop0: rw=8388608, sector=27877, nr_sectors = 1 limit=64 [ 87.667879][ T5325] Buffer I/O error on dev loop0, logical block 27877, async page read