program: r0 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="747970653d4fc1f9cb2c636f6465706167653d69736f383835392d362c696f636861727365743d63703835372c71756965742c706172743d3078303030303030303030303030303030352c00"], 0x11, 0x2b6, &(0x7f0000000200)="$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") r2 = syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0d2a379b240b824f920b21981285520f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRES16=r1], 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, 0x0) close(r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r11 = openat$cgroup_devices(r9, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000540)=ANY=[@ANYRES64=r1], 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20006091}, 0x4084) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r12 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r12, &(0x7f0000001000)=""/248, 0x65) [ 86.292627][ T5329] loop0: detected capacity change from 0 to 64 [ 86.450267][ T4656] Bluetooth: hci0: command tx timeout [ 87.314896][ T5329] [ 87.316001][ T5329] ============================================ [ 87.318614][ T5329] WARNING: possible recursive locking detected [ 87.321262][ T5329] syzkaller #0 Not tainted [ 87.323177][ T5329] -------------------------------------------- [ 87.325844][ T5329] syz.0.0/5329 is trying to acquire lock: [ 87.328248][ T5329] ffff8880127a20a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 87.332273][ T5329] [ 87.332273][ T5329] but task is already holding lock: [ 87.335401][ T5329] ffff8880127a20a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 87.339337][ T5329] [ 87.339337][ T5329] other info that might help us debug this: [ 87.342598][ T5329] Possible unsafe locking scenario: [ 87.342598][ T5329] [ 87.345814][ T5329] CPU0 [ 87.347223][ T5329] ---- [ 87.348622][ T5329] lock(&tree->tree_lock/1); [ 87.350658][ T5329] lock(&tree->tree_lock/1); [ 87.352666][ T5329] [ 87.352666][ T5329] *** DEADLOCK *** [ 87.352666][ T5329] [ 87.356058][ T5329] May be due to missing lock nesting notation [ 87.356058][ T5329] [ 87.359593][ T5329] 6 locks held by syz.0.0/5329: [ 87.361655][ T5329] #0: ffff888040ff3d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 87.365476][ T5329] #1: ffff888032c40410 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 87.369176][ T5329] #2: ffff888040897490 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0x11e/0x680 [ 87.373829][ T5329] #3: ffff8880408972f0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 87.378148][ T5329] #4: ffff8880127a20a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 87.382142][ T5329] #5: ffff888038030730 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 87.386666][ T5329] [ 87.386666][ T5329] stack backtrace: [ 87.389089][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.389099][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.389104][ T5329] Call Trace: [ 87.389109][ T5329] [ 87.389113][ T5329] dump_stack_lvl+0xe8/0x150 [ 87.389123][ T5329] print_deadlock_bug+0x279/0x290 [ 87.389135][ T5329] __lock_acquire+0x253f/0x2cf0 [ 87.389147][ T5329] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.389212][ T5329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.389228][ T5329] ? stack_depot_save_flags+0x3f3/0x810 [ 87.389274][ T5329] ? kasan_save_track+0x4f/0x80 [ 87.389310][ T5329] ? kasan_save_track+0x3e/0x80 [ 87.389322][ T5329] ? hfs_find_init+0x18e/0x300 [ 87.389336][ T5329] lock_acquire+0x106/0x350 [ 87.389346][ T5329] ? hfs_find_init+0x18e/0x300 [ 87.389361][ T5329] __mutex_lock+0x1a3/0x1550 [ 87.389371][ T5329] ? hfs_find_init+0x18e/0x300 [ 87.389386][ T5329] ? hfs_find_init+0x18e/0x300 [ 87.389399][ T5329] ? __pfx___mutex_lock+0x10/0x10 [ 87.389410][ T5329] ? rcu_is_watching+0x15/0xb0 [ 87.389423][ T5329] ? __kmalloc_noprof+0x37d/0x760 [ 87.389436][ T5329] ? hfs_find_init+0xaa/0x300 [ 87.389448][ T5329] ? __kmalloc_noprof+0x1b8/0x760 [ 87.389456][ T5329] hfs_find_init+0x18e/0x300 [ 87.389465][ T5329] hfs_extend_file+0x35c/0x15e0 [ 87.389472][ T5329] ? hfs_ext_keycmp+0x1c7/0x320 [ 87.389479][ T5329] ? __pfx_hfs_extend_file+0x10/0x10 [ 87.389486][ T5329] ? __pfx___hfs_brec_find+0x10/0x10 [ 87.389496][ T5329] ? hfs_brec_find+0x3cc/0x510 [ 87.389509][ T5329] hfs_bmap_reserve+0x107/0x430 [ 87.389520][ T5329] __hfs_ext_write_extent+0x1fa/0x470 [ 87.389532][ T5329] __hfs_ext_cache_extent+0x6b/0x9b0 [ 87.389544][ T5329] ? hfs_find_init+0x18e/0x300 [ 87.389558][ T5329] hfs_extend_file+0x39b/0x15e0 [ 87.389568][ T5329] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 87.389583][ T5329] ? __pfx_hfs_extend_file+0x10/0x10 [ 87.389595][ T5329] ? clean_bdev_aliases+0x62e/0x750 [ 87.389606][ T5329] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 87.389616][ T5329] hfs_get_block+0x412/0xc50 [ 87.389624][ T5329] ? __pfx_hfs_get_block+0x10/0x10 [ 87.389630][ T5329] ? do_raw_spin_unlock+0x4d/0x210 [ 87.389640][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 87.389651][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 87.389668][ T5329] ? __pfx_hfs_get_block+0x10/0x10 [ 87.389679][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.389694][ T5329] cont_write_begin+0x737/0xae0 [ 87.389712][ T5329] ? __pfx_cont_write_begin+0x10/0x10 [ 87.389730][ T5329] hfs_write_begin+0x66/0xb0 [ 87.389739][ T5329] ? __pfx_hfs_get_block+0x10/0x10 [ 87.389750][ T5329] generic_perform_write+0x2e2/0x8f0 [ 87.389766][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 87.389780][ T5329] ? file_update_time_flags+0x219/0x4a0 [ 87.389792][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 87.389804][ T5329] ? generic_file_write_iter+0x136/0x680 [ 87.389816][ T5329] generic_file_write_iter+0x14a/0x680 [ 87.389830][ T5329] ? add_lock_to_list+0xc7/0x100 [ 87.389842][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.389855][ T5329] ? lockdep_unlock+0x5d/0xd0 [ 87.389862][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 87.389874][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 87.389893][ T5329] ? vfs_write+0x227/0xb90 [ 87.389907][ T5329] ? vfs_write+0x227/0xb90 [ 87.389945][ T5329] vfs_write+0x61d/0xb90 [ 87.389954][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 87.389963][ T5329] ? __fget_files+0x2a/0x420 [ 87.389971][ T5329] ksys_write+0x150/0x270 [ 87.389979][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 87.389987][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.389995][ T5329] do_syscall_64+0x174/0x580 [ 87.390001][ T5329] ? trace_irq_disable+0x3b/0x140 [ 87.390011][ T5329] ? clear_bhb_loop+0x40/0x90 [ 87.390019][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.390030][ T5329] RIP: 0033:0x7ff7bab9ce59 [ 87.390040][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.390049][ T5329] RSP: 002b:00007ff7bba8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.390060][ T5329] RAX: ffffffffffffffda RBX: 00007ff7bae15fa0 RCX: 00007ff7bab9ce59 [ 87.390068][ T5329] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 87.390074][ T5329] RBP: 00007ff7bac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 87.390081][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.390087][ T5329] R13: 00007ff7bae16038 R14: 00007ff7bae15fa0 R15: 00007ffd7c3dbfb8 [ 87.390097][ T5329] [ 87.622711][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.622711][ T42] loop0: rw=1, sector=2401, nr_sectors = 1768 limit=64 [ 87.641957][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.641957][ T42] loop0: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 87.661877][ T42] Buffer I/O error on dev loop0, logical block 4169, lost async page write [ 87.670343][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.670343][ T42] loop0: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 87.681747][ T42] Buffer I/O error on dev loop0, logical block 4170, lost async page write [ 87.690987][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.690987][ T42] loop0: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 87.697002][ T42] Buffer I/O error on dev loop0, logical block 4172, lost async page write [ 87.701601][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.701601][ T42] loop0: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 87.707148][ T42] Buffer I/O error on dev loop0, logical block 4173, lost async page write [ 87.724882][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.0'. [ 87.728959][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.728959][ T42] loop0: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 87.736962][ T42] Buffer I/O error on dev loop0, logical block 4174, lost async page write [ 87.741121][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.741121][ T42] loop0: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 87.747014][ T42] Buffer I/O error on dev loop0, logical block 4175, lost async page write [ 87.751182][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.751182][ T42] loop0: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 87.757109][ T42] Buffer I/O error on dev loop0, logical block 4176, lost async page write [ 87.761560][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.761560][ T42] loop0: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 87.767794][ T42] Buffer I/O error on dev loop0, logical block 4177, lost async page write [ 87.773951][ T42] kworker/u4:3: attempt to access beyond end of device [ 87.773951][ T42] loop0: rw=1, sector=4178, nr_sectors = 16 limit=64 [ 87.795110][ T42] Buffer I/O error on dev loop0, logical block 4356, lost async page write [ 87.801755][ T42] Buffer I/O error on dev loop0, logical block 4357, lost async page write [ 88.530022][ T4656] Bluetooth: hci0: command tx timeout [ 90.610272][ T4656] Bluetooth: hci0: command tx timeout [ 91.811870][ T1373] cfg80211: failed to load regulatory.db