program: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000040)={0x6}) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x30000c8, &(0x7f0000000100)=ANY=[], 0x11, 0x2d1, &(0x7f0000000280)="$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") bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x9, &(0x7f0000000680)={0xe, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000580)='./file2\x00', 0x375042, 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x44}}, 0x0) [ 86.655526][ T9] cfg80211: failed to load regulatory.db [ 86.681102][ T4649] Bluetooth: hci0: command tx timeout [ 86.758165][ T5332] loop0: detected capacity change from 0 to 64 [ 86.831702][ T5332] ======================================================= [ 86.831702][ T5332] WARNING: The mand mount option has been deprecated and [ 86.831702][ T5332] and is ignored by this kernel. Remove the mand [ 86.831702][ T5332] option from the mount to silence this warning. [ 86.831702][ T5332] ======================================================= [ 86.902589][ T5332] [ 86.903731][ T5332] ============================================ [ 86.906269][ T5332] WARNING: possible recursive locking detected [ 86.909025][ T5332] syzkaller #0 Not tainted [ 86.911517][ T5332] -------------------------------------------- [ 86.914944][ T5332] syz.0.0/5332 is trying to acquire lock: [ 86.917538][ T5332] ffff888051f900a0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 86.922158][ T5332] [ 86.922158][ T5332] but task is already holding lock: [ 86.925562][ T5332] ffff8880503b7a20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 86.931072][ T5332] [ 86.931072][ T5332] other info that might help us debug this: [ 86.934639][ T5332] Possible unsafe locking scenario: [ 86.934639][ T5332] [ 86.937962][ T5332] CPU0 [ 86.939736][ T5332] ---- [ 86.941455][ T5332] lock(&HFS_I(tree->inode)->extents_lock); [ 86.944273][ T5332] lock(&HFS_I(tree->inode)->extents_lock); [ 86.946964][ T5332] [ 86.946964][ T5332] *** DEADLOCK *** [ 86.946964][ T5332] [ 86.950721][ T5332] May be due to missing lock nesting notation [ 86.950721][ T5332] [ 86.954817][ T5332] 5 locks held by syz.0.0/5332: [ 86.957050][ T5332] #0: ffff888042430450 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 86.960969][ T5332] #1: ffff8880503b7600 (&type->i_mutex_dir_key#8){+.+.}-{4:4}, at: path_openat+0xae3/0x3830 [ 86.965951][ T5332] #2: ffff888036cfc0a8 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 86.970447][ T5332] #3: ffff8880503b7a20 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 86.975341][ T5332] #4: ffff888036cfe0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 86.980019][ T5332] [ 86.980019][ T5332] stack backtrace: [ 86.982328][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.982347][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.982356][ T5332] Call Trace: [ 86.982363][ T5332] [ 86.982370][ T5332] dump_stack_lvl+0xe8/0x150 [ 86.982391][ T5332] print_deadlock_bug+0x279/0x290 [ 86.982405][ T5332] __lock_acquire+0x24df/0x2cf0 [ 86.982415][ T5332] ? is_bpf_text_address+0x26/0x2b0 [ 86.982425][ T5332] ? __kasan_check_byte+0x12/0x40 [ 86.982436][ T5332] ? rcu_is_watching+0x15/0xb0 [ 86.982452][ T5332] ? lock_release+0x4b/0x3c0 [ 86.982465][ T5332] ? lock_release+0x4b/0x3c0 [ 86.982480][ T5332] ? hfs_extend_file+0xf9/0x1680 [ 86.982492][ T5332] lock_acquire+0x106/0x350 [ 86.982506][ T5332] ? hfs_extend_file+0xf9/0x1680 [ 86.982521][ T5332] __mutex_lock+0x19d/0x1550 [ 86.982583][ T5332] ? hfs_extend_file+0xf9/0x1680 [ 86.982592][ T5332] ? stack_trace_save+0xa9/0x100 [ 86.982602][ T5332] ? __pfx_stack_trace_save+0x10/0x10 [ 86.982615][ T5332] ? hfs_extend_file+0xf9/0x1680 [ 86.982627][ T5332] ? __pfx___mutex_lock+0x10/0x10 [ 86.982641][ T5332] ? add_lock_to_list+0xc7/0x100 [ 86.982651][ T5332] ? lockdep_unlock+0x5d/0xd0 [ 86.982664][ T5332] ? __lock_acquire+0x13e8/0x2cf0 [ 86.982679][ T5332] ? stack_depot_save_flags+0x3ec/0x800 [ 86.983555][ T5332] hfs_extend_file+0xf9/0x1680 [ 86.983570][ T5332] ? __pfx_hfs_extend_file+0x10/0x10 [ 86.983578][ T5332] ? __mutex_trylock_common+0x15f/0x270 [ 86.983586][ T5332] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.983593][ T5332] ? rcu_is_watching+0x15/0xb0 [ 86.983605][ T5332] ? trace_contention_end+0x3d/0x140 [ 86.983613][ T5332] ? __asan_memset+0x22/0x50 [ 86.983621][ T5332] ? hfs_brec_find+0x19a/0x510 [ 86.983634][ T5332] hfs_bmap_reserve+0x108/0x430 [ 86.983646][ T5332] __hfs_ext_write_extent+0x1fc/0x470 [ 86.983656][ T5332] __hfs_ext_cache_extent+0x6e/0x9b0 [ 86.983664][ T5332] ? hfs_find_init+0x18d/0x300 [ 86.983674][ T5332] hfs_extend_file+0x3a0/0x1680 [ 86.983682][ T5332] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.983689][ T5332] ? __pfx_hfs_extend_file+0x10/0x10 [ 86.983696][ T5332] ? __mutex_lock+0x30d/0x1550 [ 86.983707][ T5332] ? hfs_find_init+0x18d/0x300 [ 86.983717][ T5332] ? __pfx___mutex_lock+0x10/0x10 [ 86.983725][ T5332] ? trace_kmalloc+0x2a/0xf0 [ 86.983734][ T5332] hfs_bmap_reserve+0x108/0x430 [ 86.983747][ T5332] hfs_cat_create+0x221/0x810 [ 86.983758][ T5332] ? __pfx_hfs_cat_create+0x10/0x10 [ 86.983768][ T5332] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.983783][ T5332] ? _raw_spin_unlock+0x28/0x50 [ 86.983795][ T5332] ? hfs_new_inode+0x8b8/0xc10 [ 86.983810][ T5332] hfs_create+0x78/0xe0 [ 86.983822][ T5332] ? __pfx_hfs_create+0x10/0x10 [ 86.983833][ T5332] path_openat+0x133a/0x3830 [ 86.983849][ T5332] do_file_open+0x23e/0x4a0 [ 86.983858][ T5332] ? __pfx_do_file_open+0x10/0x10 [ 86.983870][ T5332] ? _raw_spin_unlock+0x28/0x50 [ 86.983877][ T5332] ? alloc_fd+0x651/0x6c0 [ 86.983886][ T5332] do_sys_openat2+0x115/0x200 [ 86.983893][ T5332] ? __se_sys_futex+0x3a8/0x450 [ 86.983904][ T5332] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.983912][ T5332] ? rcu_is_watching+0x15/0xb0 [ 86.983922][ T5332] __x64_sys_openat+0x138/0x170 [ 86.983930][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.983937][ T5332] do_syscall_64+0x174/0x580 [ 86.983954][ T5332] ? trace_irq_disable+0x3b/0x140 [ 86.983963][ T5332] ? clear_bhb_loop+0x40/0x90 [ 86.983972][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.983979][ T5332] RIP: 0033:0x7f6c6119de59 [ 86.983991][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.983998][ T5332] RSP: 002b:00007f6c620d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.984009][ T5332] RAX: ffffffffffffffda RBX: 00007f6c61425fa0 RCX: 00007f6c6119de59 [ 86.984018][ T5332] RDX: 0000000000000040 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 86.984026][ T5332] RBP: 00007f6c61233e6f R08: 0000000000000000 R09: 0000000000000000 [ 86.984034][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.984042][ T5332] R13: 00007f6c61426038 R14: 00007f6c61425fa0 R15: 00007ffddec71ff8 [ 86.984054][ T5332]