program: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x35, &(0x7f0000001980)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109022300eb0000000009040000014106cf000808020100000000090502"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {0x2}, 0x7, 0x4, &(0x7f0000000000)={0x0, 0x30, 0x9d, 0x6bc}, 0x8, 0x83, 0x3, 0x0, 0x7ffd, 0x3, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x107382, 0x1d0) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0xb5}}}}}]}}]}}, 0x0) truncate(&(0x7f00000013c0)='./file1\x00', 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, r7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x1, 0x312ae3b6, {}, {0x0}, 0x5, 0x3}) setresuid(r5, r7, r8) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x42c, 0x3f4, 0x4, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0xb, [0x1, 0x7f, 0x1, 0x92cb, 0x3, 0x6, 0x2, 0x1, 0xfb98, 0x4, 0x8, 0x2, 0x6, 0x40, 0x4, 0x8, 0x5c3d, 0x59, 0x0, 0x80, 0xb, 0xba4, 0x4, 0xf, 0x80, 0x9, 0x9, 0xfffff5a8, 0x10001, 0x8, 0x4, 0x1, 0xfffffff8, 0x10000, 0xba, 0x1, 0x8, 0x1601, 0x4, 0xa, 0x5, 0xfffffffd, 0x9, 0x6, 0x80000000, 0x5, 0x10000, 0x5, 0x66f6, 0x7, 0x9, 0x2, 0x1, 0xa, 0x3d4, 0x49, 0x2, 0x7c, 0x3, 0xba, 0x4e, 0x1, 0x8, 0x8], [0x6, 0x2, 0x7fffffff, 0x111ba342, 0x8, 0x9, 0x84, 0x0, 0x2, 0x8, 0x40, 0x6, 0x5, 0x400, 0x7fff, 0xff, 0x6, 0x80, 0xe33, 0x5, 0xd, 0x4, 0x0, 0x6d9, 0x100, 0x1ff, 0x8, 0x101, 0x7, 0x5, 0x9, 0xb, 0xffffffff, 0x40, 0xcd1, 0x40, 0x2, 0xfffffff7, 0x10001, 0x6, 0x4, 0xffffff04, 0xaf8, 0x0, 0x1, 0x4, 0xff, 0x9, 0x0, 0xbb, 0xac9, 0x3, 0x6, 0x12000000, 0x56e2, 0x8, 0x2, 0x4, 0x5, 0x80, 0x8, 0x800, 0xffffff81, 0xd], [0x8, 0x88, 0x8, 0x97f, 0x0, 0x8, 0x3, 0x1, 0xfffffffb, 0x2e, 0x9c, 0x4, 0x5, 0x33, 0x2400000, 0x3, 0x10000, 0x9, 0x9, 0xba, 0x0, 0x8, 0x1b6, 0x8, 0x3, 0x6, 0x8, 0x7f, 0xa, 0x39, 0x7, 0x100, 0x3, 0x5, 0x5, 0x3, 0x1, 0x5, 0x8001, 0x7, 0x1, 0x0, 0x3, 0x8, 0x614, 0x1000, 0x9, 0x8, 0x6, 0xffff, 0x0, 0x4, 0x80000001, 0x8, 0xfffffbff, 0x87, 0x0, 0x5, 0x8, 0x1, 0x1, 0x7, 0x1, 0x5], [0xbfab, 0xffffffff, 0x200, 0xe, 0x2, 0x0, 0x80000000, 0x4, 0x3, 0x2f, 0x1, 0x0, 0xfffffffb, 0x8, 0xfffffffd, 0x9, 0x5, 0x8, 0xe40, 0x3, 0x7, 0xaddb, 0x8, 0x8, 0x1, 0x2c, 0x1, 0x4, 0x101, 0x6, 0xbbe, 0x1, 0x0, 0x4, 0x80000000, 0x2, 0x80000000, 0x7, 0xf52, 0xe4c, 0x7, 0x1f, 0x7, 0x8, 0x0, 0x9, 0xd, 0x4, 0x0, 0x1286, 0xfffffff8, 0x8, 0x32b3, 0x6f, 0x0, 0x9, 0x5, 0x4, 0x97f0000, 0x1000000, 0xfffffffb, 0xffffffff, 0x0, 0x7], 0xa, ['(\'%\']\x00', '{]!\x00']}, ["", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4048080}, 0x19) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'veth1_to_batadv\x00', &(0x7f0000000500)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) utime(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)={0x100000001, 0x3}) [ 84.919659][ T5337] Bluetooth: hci0: command tx timeout [ 85.220692][ T5352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.370578][ T5352] usb 5-1: Using ep0 maxpacket: 8 [ 85.377460][ T5352] usb 5-1: config 0 has too many interfaces: 235, using maximum allowed: 32 [ 85.381825][ T5352] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 235 [ 85.385159][ T5352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3499, setting to 64 [ 85.393513][ T5352] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 85.397250][ T5352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.401590][ T5352] usb 5-1: Product: syz [ 85.403331][ T5352] usb 5-1: Manufacturer: syz [ 85.405357][ T5352] usb 5-1: SerialNumber: syz [ 85.412076][ T5352] usb 5-1: config 0 descriptor?? [ 85.424833][ T5352] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.446748][ T5352] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 85.478091][ T5333] udevd[5333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.622249][ T5360] usb 5-1: usbfs: process 5360 (syz.0.0) did not claim interface 0 before use [ 85.639539][ T5360] loop0: detected capacity change from 0 to 2048 [ 85.650331][ T5360] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 85.665081][ T5360] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.680759][ T5360] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 85.689035][ T5360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.706487][ T25] audit: type=1800 audit(1758841799.074:2): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 85.836156][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.846989][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.977571][ T5361] [ 85.978744][ T5361] ============================================ [ 85.981474][ T5361] WARNING: possible recursive locking detected [ 85.984244][ T5361] syzkaller #0 Not tainted [ 85.986136][ T5361] -------------------------------------------- [ 85.988710][ T5361] syz.0.0/5361 is trying to acquire lock: [ 85.991268][ T5361] ffff88803e9e4528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9e2/0x17f0 [ 85.995747][ T5361] [ 85.995747][ T5361] but task is already holding lock: [ 85.999362][ T5361] ffff88803e9e4528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x8d0/0x10b0 [ 86.003508][ T5361] [ 86.003508][ T5361] other info that might help us debug this: [ 86.006995][ T5361] Possible unsafe locking scenario: [ 86.006995][ T5361] [ 86.009932][ T5361] CPU0 [ 86.011274][ T5361] ---- [ 86.012628][ T5361] lock(&sbi->s_alloc_mutex); [ 86.014550][ T5361] lock(&sbi->s_alloc_mutex); [ 86.016459][ T5361] [ 86.016459][ T5361] *** DEADLOCK *** [ 86.016459][ T5361] [ 86.019917][ T5361] May be due to missing lock nesting notation [ 86.019917][ T5361] [ 86.023340][ T5361] 4 locks held by syz.0.0/5361: [ 86.025397][ T5361] #0: ffff8880323aa428 (sb_writers#12){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 86.029601][ T5361] #1: ffff8880443455c0 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: udf_file_write_iter+0x6e/0x6c0 [ 86.034334][ T5361] #2: ffff8880443453f0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x283/0x45f0 [ 86.038676][ T5361] #3: ffff88803e9e4528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x8d0/0x10b0 [ 86.043248][ T5361] [ 86.043248][ T5361] stack backtrace: [ 86.045865][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.045880][ T5361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.045888][ T5361] Call Trace: [ 86.045895][ T5361] [ 86.045902][ T5361] dump_stack_lvl+0x189/0x250 [ 86.045921][ T5361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.045934][ T5361] ? __pfx__printk+0x10/0x10 [ 86.045952][ T5361] ? print_lock_name+0xde/0x100 [ 86.045968][ T5361] print_deadlock_bug+0x28b/0x2a0 [ 86.045983][ T5361] validate_chain+0x1a3f/0x2140 [ 86.045996][ T5361] ? __schedule+0x17ae/0x4cc0 [ 86.046064][ T5361] __lock_acquire+0xab9/0xd20 [ 86.046084][ T5361] ? udf_free_blocks+0x9e2/0x17f0 [ 86.046100][ T5361] lock_acquire+0x120/0x360 [ 86.046116][ T5361] ? udf_free_blocks+0x9e2/0x17f0 [ 86.046137][ T5361] __mutex_lock+0x187/0x1350 [ 86.046149][ T5361] ? udf_free_blocks+0x9e2/0x17f0 [ 86.046164][ T5361] ? trace_irq_disable+0x37/0x110 [ 86.046175][ T5361] ? preempt_schedule_irq+0xde/0x150 [ 86.046180][ T5361] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 86.046187][ T5361] ? irqentry_exit+0x74/0x90 [ 86.046193][ T5361] ? udf_free_blocks+0x9e2/0x17f0 [ 86.046203][ T5361] ? __pfx___mutex_lock+0x10/0x10 [ 86.046211][ T5361] ? lock_acquire+0x175/0x360 [ 86.046220][ T5361] ? __pfx___might_resched+0x10/0x10 [ 86.046228][ T5361] udf_free_blocks+0x9e2/0x17f0 [ 86.046239][ T5361] ? udf_get_fileshortad+0x6e/0x1b0 [ 86.046251][ T5361] ? __pfx_udf_free_blocks+0x10/0x10 [ 86.046271][ T5361] udf_delete_aext+0x4df/0xbc0 [ 86.046281][ T5361] ? udf_get_fileshortad+0xcb/0x1b0 [ 86.046299][ T5361] ? __pfx_udf_delete_aext+0x10/0x10 [ 86.046313][ T5361] udf_prealloc_blocks+0xb7e/0x10b0 [ 86.046330][ T5361] ? udf_get_filelongad+0x6e/0x1b0 [ 86.046344][ T5361] ? __pfx_udf_new_block+0x10/0x10 [ 86.046359][ T5361] ? udf_current_aext+0x660/0xad0 [ 86.046371][ T5361] ? __pfx_udf_prealloc_blocks+0x10/0x10 [ 86.046391][ T5361] ? udf_map_block+0x1662/0x45f0 [ 86.046402][ T5361] udf_map_block+0x1f70/0x45f0 [ 86.046413][ T5361] ? stack_depot_save_flags+0x40/0x860 [ 86.046433][ T5361] ? percpu_ref_get_many+0x19/0x140 [ 86.046449][ T5361] ? __pfx_udf_map_block+0x10/0x10 [ 86.046460][ T5361] ? percpu_ref_get_many+0x19/0x140 [ 86.046478][ T5361] ? do_raw_spin_lock+0x121/0x290 [ 86.046493][ T5361] ? do_raw_spin_unlock+0x4d/0x240 [ 86.046506][ T5361] __udf_get_block+0x52/0x250 [ 86.046516][ T5361] ? create_empty_buffers+0x465/0x530 [ 86.046535][ T5361] __block_write_begin_int+0x6b5/0x1900 [ 86.046548][ T5361] ? folio_add_lru+0x1b2/0x3d0 [ 86.046564][ T5361] ? __pfx_udf_get_block+0x10/0x10 [ 86.046575][ T5361] ? __pfx___block_write_begin_int+0x10/0x10 [ 86.046588][ T5361] ? __pfx_udf_get_block+0x10/0x10 [ 86.046597][ T5361] block_write_begin+0x8a/0x120 [ 86.046607][ T5361] ? udf_write_begin+0x92/0x270 [ 86.046617][ T5361] udf_write_begin+0x115/0x270 [ 86.046628][ T5361] generic_perform_write+0x2c2/0x900 [ 86.046641][ T5361] ? __pfx_generic_perform_write+0x10/0x10 [ 86.046652][ T5361] ? file_update_time+0x2da/0x490 [ 86.046665][ T5361] ? __generic_file_write_iter+0xf9/0x230 [ 86.046675][ T5361] ? udf_file_write_iter+0x1a3/0x6c0 [ 86.046687][ T5361] udf_file_write_iter+0x2d5/0x6c0 [ 86.046698][ T5361] iter_file_splice_write+0x975/0x10e0 [ 86.046718][ T5361] ? __pfx_iter_file_splice_write+0x10/0x10 [ 86.046742][ T5361] ? rcu_read_lock_any_held+0xb3/0x120 [ 86.046757][ T5361] ? direct_splice_actor+0x10c/0x160 [ 86.046779][ T5361] ? __pfx_iter_file_splice_write+0x10/0x10 [ 86.046793][ T5361] direct_splice_actor+0xfe/0x160 [ 86.046808][ T5361] splice_direct_to_actor+0x5a8/0xcc0 [ 86.046832][ T5361] ? __pfx_direct_splice_actor+0x10/0x10 [ 86.046847][ T5361] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 86.046864][ T5361] do_splice_direct+0x181/0x270 [ 86.046880][ T5361] ? __pfx_do_splice_direct+0x10/0x10 [ 86.046895][ T5361] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 86.046913][ T5361] ? rw_verify_area+0x255/0x4d0 [ 86.046927][ T5361] do_sendfile+0x4da/0x7e0 [ 86.046944][ T5361] ? __pfx_do_sendfile+0x10/0x10 [ 86.046959][ T5361] ? rcu_is_watching+0x15/0xb0 [ 86.046971][ T5361] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 86.046993][ T5361] __se_sys_sendfile64+0x13e/0x190 [ 86.047009][ T5361] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 86.047026][ T5361] ? rcu_is_watching+0x15/0xb0 [ 86.047038][ T5361] ? do_syscall_64+0xbe/0x3b0 [ 86.047052][ T5361] do_syscall_64+0xfa/0x3b0 [ 86.047064][ T5361] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.047075][ T5361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.047089][ T5361] ? clear_bhb_loop+0x60/0xb0 [ 86.047102][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.047115][ T5361] RIP: 0033:0x7f9e3a38eec9 [ 86.047129][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.047139][ T5361] RSP: 002b:00007f9e367d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 86.047152][ T5361] RAX: ffffffffffffffda RBX: 00007f9e3a5e6090 RCX: 00007f9e3a38eec9 [ 86.047161][ T5361] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 86.047169][ T5361] RBP: 00007f9e3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.047177][ T5361] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 86.047185][ T5361] R13: 00007f9e3a5e6128 R14: 00007f9e3a5e6090 R15: 00007ffc1b204d38 [ 86.047199][ T5361] [ 86.727514][ T54] cfg80211: failed to load regulatory.db [ 86.960871][ T5337] Bluetooth: hci0: command tx timeout [ 89.041098][ T5337] Bluetooth: hci0: command tx timeout [ 91.120678][ T5337] Bluetooth: hci0: command tx timeout