program: syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x3004048, &(0x7f0000000100)=ANY=[], 0x11, 0x2c6, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000040)='./bus\x00', 0xe4843, 0xc4) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x100, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) syz_usbip_server_init(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) [ 85.918566][ T5301] Bluetooth: hci0: command tx timeout [ 85.991129][ T5325] loop0: detected capacity change from 0 to 64 [ 86.003456][ T5325] ======================================================= [ 86.003456][ T5325] WARNING: The mand mount option has been deprecated and [ 86.003456][ T5325] and is ignored by this kernel. Remove the mand [ 86.003456][ T5325] option from the mount to silence this warning. [ 86.003456][ T5325] ======================================================= [ 86.044865][ T5325] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 86.047592][ T5325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.054596][ T5325] vhci_hcd vhci_hcd.0: Device attached [ 86.057635][ T5326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.065025][ T5325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.069498][ T5326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.073580][ T5325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.080882][ T5326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.085801][ T5329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.091104][ T5326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.096799][ T5325] vhci_hcd vhci_hcd.0: port 0 already used [ 86.103211][ T5325] [ 86.104257][ T5325] ============================================ [ 86.106999][ T5325] WARNING: possible recursive locking detected [ 86.109499][ T5325] syzkaller #0 Not tainted [ 86.111324][ T5325] -------------------------------------------- [ 86.113657][ T5325] syz.0.0/5325 is trying to acquire lock: [ 86.115950][ T5325] ffff8880353280f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x14c0 [ 86.120427][ T5325] [ 86.120427][ T5325] but task is already holding lock: [ 86.123450][ T5325] ffff888035328778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x14c0 [ 86.127779][ T5325] [ 86.127779][ T5325] other info that might help us debug this: [ 86.130672][ T5325] Possible unsafe locking scenario: [ 86.130672][ T5325] [ 86.133413][ T5325] CPU0 [ 86.134687][ T5325] ---- [ 86.135877][ T5325] lock(&HFS_I(tree->inode)->extents_lock); [ 86.138103][ T5325] lock(&HFS_I(tree->inode)->extents_lock); [ 86.140855][ T5325] [ 86.140855][ T5325] *** DEADLOCK *** [ 86.140855][ T5325] [ 86.144309][ T5325] May be due to missing lock nesting notation [ 86.144309][ T5325] [ 86.147885][ T5325] 5 locks held by syz.0.0/5325: [ 86.150003][ T5325] #0: ffff888030a9c420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 86.153825][ T5325] #1: ffff888035328fa0 (&type->i_mutex_dir_key#8){+.+.}-{4:4}, at: path_openat+0x8da/0x3830 [ 86.158033][ T5325] #2: ffff8880429aa0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x2c0 [ 86.162302][ T5325] #3: ffff888035328778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x14c0 [ 86.166741][ T5325] #4: ffff8880429ac0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x2c0 [ 86.170657][ T5325] [ 86.170657][ T5325] stack backtrace: [ 86.172955][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.172965][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.172970][ T5325] Call Trace: [ 86.172975][ T5325] [ 86.172979][ T5325] dump_stack_lvl+0x189/0x250 [ 86.172993][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.173001][ T5325] ? __pfx__printk+0x10/0x10 [ 86.173009][ T5325] ? print_lock_name+0xde/0x100 [ 86.173015][ T5325] print_deadlock_bug+0x28b/0x2a0 [ 86.173024][ T5325] validate_chain+0x1a3f/0x2140 [ 86.173035][ T5325] ? rcu_is_watching+0x15/0xb0 [ 86.173047][ T5325] ? rcu_is_watching+0x15/0xb0 [ 86.173059][ T5325] ? lock_release+0x4b/0x3e0 [ 86.173068][ T5325] ? lock_release+0x4b/0x3e0 [ 86.173077][ T5325] ? look_up_lock_class+0x74/0x170 [ 86.173131][ T5325] ? register_lock_class+0x51/0x320 [ 86.173138][ T5325] __lock_acquire+0xab9/0xd20 [ 86.173146][ T5325] ? hfs_extend_file+0xda/0x14c0 [ 86.173161][ T5325] lock_acquire+0x120/0x360 [ 86.173170][ T5325] ? hfs_extend_file+0xda/0x14c0 [ 86.173188][ T5325] __mutex_lock+0x187/0x1350 [ 86.173203][ T5325] ? hfs_extend_file+0xda/0x14c0 [ 86.173218][ T5325] ? lockdep_unlock+0x89/0x120 [ 86.173232][ T5325] ? hfs_extend_file+0xda/0x14c0 [ 86.173247][ T5325] ? __pfx___mutex_lock+0x10/0x10 [ 86.173266][ T5325] hfs_extend_file+0xda/0x14c0 [ 86.173283][ T5325] ? __pfx_hfs_extend_file+0x10/0x10 [ 86.173297][ T5325] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.173306][ T5325] ? rcu_is_watching+0x15/0xb0 [ 86.173313][ T5325] ? trace_contention_end+0x39/0x120 [ 86.173321][ T5325] ? __asan_memset+0x22/0x50 [ 86.173329][ T5325] ? hfs_brec_find+0x1a7/0x510 [ 86.173337][ T5325] hfs_bmap_reserve+0x107/0x430 [ 86.173349][ T5325] __hfs_ext_write_extent+0x1fa/0x470 [ 86.173360][ T5325] __hfs_ext_cache_extent+0x6b/0x9b0 [ 86.173373][ T5325] ? hfs_find_init+0x18e/0x2c0 [ 86.173384][ T5325] hfs_extend_file+0x31e/0x14c0 [ 86.173400][ T5325] ? __pfx_hfs_extend_file+0x10/0x10 [ 86.173414][ T5325] ? __mutex_lock+0x335/0x1350 [ 86.173432][ T5325] ? __pfx___mutex_lock+0x10/0x10 [ 86.173447][ T5325] hfs_bmap_reserve+0x107/0x430 [ 86.173462][ T5325] hfs_cat_create+0x1c5/0x730 [ 86.173476][ T5325] ? do_raw_spin_lock+0x121/0x290 [ 86.173489][ T5325] ? __pfx_hfs_cat_create+0x10/0x10 [ 86.173507][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 86.173519][ T5325] ? hfs_new_inode+0x837/0xbd0 [ 86.173529][ T5325] hfs_create+0x66/0xe0 [ 86.173543][ T5325] ? __pfx_hfs_create+0x10/0x10 [ 86.173556][ T5325] path_openat+0x14f4/0x3830 [ 86.173576][ T5325] ? __pfx_path_openat+0x10/0x10 [ 86.173590][ T5325] do_filp_open+0x1fa/0x410 [ 86.173600][ T5325] ? __lock_acquire+0xab9/0xd20 [ 86.173609][ T5325] ? __pfx_do_filp_open+0x10/0x10 [ 86.173624][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 86.173636][ T5325] ? alloc_fd+0x64c/0x6c0 [ 86.173652][ T5325] do_sys_openat2+0x121/0x1c0 [ 86.173663][ T5325] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.173673][ T5325] ? rcu_is_watching+0x15/0xb0 [ 86.173680][ T5325] __x64_sys_openat+0x138/0x170 [ 86.173688][ T5325] do_syscall_64+0xfa/0xfa0 [ 86.173697][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.173706][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.173712][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 86.173719][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.173726][ T5325] RIP: 0033:0x7f8d0f58f6c9 [ 86.173735][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.173741][ T5325] RSP: 002b:00007f8d1043c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.173749][ T5325] RAX: ffffffffffffffda RBX: 00007f8d0f7e5fa0 RCX: 00007f8d0f58f6c9 [ 86.173754][ T5325] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 86.173759][ T5325] RBP: 00007f8d0f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.173765][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.173771][ T5325] R13: 00007f8d0f7e6038 R14: 00007f8d0f7e5fa0 R15: 00007ffd984bd6d8 [ 86.173781][ T5325] [ 86.349360][ T5330] vhci_hcd: connection closed [ 86.349596][ T68] vhci_hcd: stop threads [ 86.353500][ T68] vhci_hcd: release socket [ 86.355520][ T68] vhci_hcd: disconnect device [ 86.398323][ T5323] vhci_hcd: vhci_device speed not set [ 86.781427][ T55] cfg80211: failed to load regulatory.db