program: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x80000c, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="b19bb3a3b3758a76d18d41c8a29fd5be259cea3fee8413d07f010545de60951925b4be1fcad9de530612d629c75fd82c4caf456f323b8061a6c78ec612da642c88aa75115f19f43bf20af1b0a0d3b5ef197c99dc61cbd6c6acd37cada6"], 0x1, 0x70a, &(0x7f0000001340)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r2, 0xf7000, 0x0, 0x3) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r3) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) [ 76.226627][ T4671] Bluetooth: hci0: command tx timeout [ 76.318748][ T5322] loop0: detected capacity change from 0 to 1024 [ 76.346507][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.348810][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.366750][ T5322] [ 76.367935][ T5322] ============================================ [ 76.370627][ T5322] WARNING: possible recursive locking detected [ 76.373121][ T5322] syzkaller #0 Not tainted [ 76.375062][ T5322] -------------------------------------------- [ 76.377654][ T5322] syz.0.0/5322 is trying to acquire lock: [ 76.380098][ T5322] ffff888012379548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x15d0 [ 76.384795][ T5322] [ 76.384795][ T5322] but task is already holding lock: [ 76.388008][ T5322] ffff8880123787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1ba0 [ 76.392295][ T5322] [ 76.392295][ T5322] other info that might help us debug this: [ 76.395464][ T5322] Possible unsafe locking scenario: [ 76.395464][ T5322] [ 76.398546][ T5322] CPU0 [ 76.399976][ T5322] ---- [ 76.401688][ T5322] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.404040][ T5322] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.406446][ T5322] [ 76.406446][ T5322] *** DEADLOCK *** [ 76.406446][ T5322] [ 76.409896][ T5322] May be due to missing lock nesting notation [ 76.409896][ T5322] [ 76.413342][ T5322] 5 locks held by syz.0.0/5322: [ 76.415483][ T5322] #0: ffff8880362280e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 76.419501][ T5322] #1: ffff888012374998 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_fill_super+0x1278/0x1b50 [ 76.423581][ T5322] #2: ffff8880404740b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x290 [ 76.427425][ T5322] #3: ffff8880123787c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1ba0 [ 76.432143][ T5322] #4: ffff8880123748f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa7/0xc40 [ 76.436606][ T5322] [ 76.436606][ T5322] stack backtrace: [ 76.439226][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.439242][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.439249][ T5322] Call Trace: [ 76.439257][ T5322] [ 76.439262][ T5322] dump_stack_lvl+0x189/0x250 [ 76.439284][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.439298][ T5322] ? __pfx__printk+0x10/0x10 [ 76.439310][ T5322] ? print_lock_name+0xde/0x100 [ 76.439321][ T5322] print_deadlock_bug+0x28b/0x2a0 [ 76.439335][ T5322] validate_chain+0x1a3f/0x2140 [ 76.439350][ T5322] ? lock_release+0x4b/0x3e0 [ 76.439361][ T5322] ? look_up_lock_class+0x74/0x170 [ 76.439438][ T5322] ? register_lock_class+0x51/0x320 [ 76.439449][ T5322] __lock_acquire+0xab9/0xd20 [ 76.439463][ T5322] ? hfsplus_get_block+0x398/0x15d0 [ 76.439477][ T5322] lock_acquire+0x120/0x360 [ 76.439489][ T5322] ? hfsplus_get_block+0x398/0x15d0 [ 76.439503][ T5322] ? stack_trace_save+0x9c/0xe0 [ 76.439519][ T5322] ? __pfx_hlock_conflict+0x10/0x10 [ 76.439533][ T5322] __mutex_lock+0x187/0x1350 [ 76.439548][ T5322] ? hfsplus_get_block+0x398/0x15d0 [ 76.439561][ T5322] ? lockdep_unlock+0x89/0x120 [ 76.439576][ T5322] ? validate_chain+0x897/0x2140 [ 76.439587][ T5322] ? hfsplus_get_block+0x398/0x15d0 [ 76.439603][ T5322] ? __pfx___mutex_lock+0x10/0x10 [ 76.439620][ T5322] hfsplus_get_block+0x398/0x15d0 [ 76.439636][ T5322] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.439649][ T5322] ? do_raw_spin_unlock+0x4d/0x240 [ 76.439665][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 76.439679][ T5322] block_read_full_folio+0x29f/0x830 [ 76.439694][ T5322] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.439707][ T5322] filemap_read_folio+0x117/0x380 [ 76.439725][ T5322] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 76.439744][ T5322] ? __pfx_filemap_read_folio+0x10/0x10 [ 76.439761][ T5322] ? filemap_add_folio+0x35f/0x540 [ 76.439777][ T5322] do_read_cache_folio+0x350/0x590 [ 76.439804][ T5322] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 76.439817][ T5322] read_cache_page+0x5d/0x170 [ 76.439866][ T5322] hfsplus_block_allocate+0xf3/0xc40 [ 76.439884][ T5322] hfsplus_file_extend+0xa9a/0x1ba0 [ 76.439902][ T5322] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 76.439920][ T5322] ? hfsplus_find_init+0x168/0x290 [ 76.439933][ T5322] ? __pfx___mutex_lock+0x10/0x10 [ 76.439951][ T5322] hfsplus_bmap_reserve+0x122/0x500 [ 76.439972][ T5322] hfsplus_create_cat+0x18e/0x1120 [ 76.439990][ T5322] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 76.440007][ T5322] ? do_raw_spin_unlock+0x4d/0x240 [ 76.440036][ T5322] ? do_raw_spin_unlock+0x4d/0x240 [ 76.440052][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 76.440064][ T5322] ? hfsplus_new_inode+0x643/0x820 [ 76.440078][ T5322] hfsplus_fill_super+0x12f5/0x1b50 [ 76.440090][ T5322] ? __lock_acquire+0xab9/0xd20 [ 76.440104][ T5322] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.440116][ T5322] ? string+0x279/0x2b0 [ 76.440139][ T5322] ? snprintf+0xda/0x120 [ 76.440152][ T5322] ? sb_set_blocksize+0x104/0x180 [ 76.440167][ T5322] ? setup_bdev_super+0x4c1/0x5b0 [ 76.440183][ T5322] get_tree_bdev_flags+0x40e/0x4d0 [ 76.440198][ T5322] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 76.440210][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.440227][ T5322] vfs_get_tree+0x92/0x2b0 [ 76.440242][ T5322] do_new_mount+0x302/0xa10 [ 76.440258][ T5322] ? apparmor_capable+0x137/0x1b0 [ 76.440277][ T5322] ? __pfx_do_new_mount+0x10/0x10 [ 76.440292][ T5322] ? ns_capable+0x8a/0xf0 [ 76.440305][ T5322] ? kmem_cache_free+0x19b/0x690 [ 76.440323][ T5322] __se_sys_mount+0x313/0x410 [ 76.440340][ T5322] ? __pfx___se_sys_mount+0x10/0x10 [ 76.440357][ T5322] ? do_syscall_64+0xbe/0xfa0 [ 76.440371][ T5322] ? __x64_sys_mount+0x20/0xc0 [ 76.440387][ T5322] do_syscall_64+0xfa/0xfa0 [ 76.440402][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.440415][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.440427][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 76.440440][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.440452][ T5322] RIP: 0033:0x7fb851d90e6a [ 76.440464][ T5322] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.440475][ T5322] RSP: 002b:00007fb852bfde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.440488][ T5322] RAX: ffffffffffffffda RBX: 00007fb852bfdef0 RCX: 00007fb851d90e6a [ 76.440497][ T5322] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007fb852bfdeb0 [ 76.440505][ T5322] RBP: 0000200000000000 R08: 00007fb852bfdef0 R09: 000000000080000c [ 76.440513][ T5322] R10: 000000000080000c R11: 0000000000000246 R12: 00002000000001c0 [ 76.440521][ T5322] R13: 00007fb852bfdeb0 R14: 000000000000070a R15: 0000200000000300 [ 76.440533][ T5322] [ 76.708163][ T5322] loop0: detected capacity change from 0 to 16 [ 76.717416][ T5322] erofs (device loop0): mounted with root inode @ nid 36. [ 76.726179][ T5322] erofs (device loop0): inline data across blocks @ nid 36