program: syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x1000000, 0x0, 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000e40)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13b, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x105, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x1000}, @mptcp=@ack={0x1e, 0x4, 0x80, 0x1}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x4000]}, @eol, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @sack_perm={0x4, 0x2}]}}, {"ec3213c8ecea80ff15da130007ce9f15c4321868aecae3dea3f7790577b101d538a3b9e2307197793179b70f204a7a74abf4f83dd33b8e50bf15b604b29a063cf848d08f5dfed1993d6aa5363f6daaff5f14d8776b2ce64ab8fe1daf0d2c67a80ca7e7256c10a56e3c5341d3f8bea1eaaaab737b298c63c07a621851ddded1bb07bec5245992b449d99ae3184df64fe5238e41b3b6182a0eed74ba760fd59ab13d2325fb9c8b60494313eb214ece0a19efca2ed9931d731f0837867513a22a50da"}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) [ 61.660666][ T5296] Bluetooth: hci0: command tx timeout [ 61.748859][ T5311] loop0: detected capacity change from 0 to 2048 [ 61.801106][ T5311] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.808862][ T5311] ======================================================= [ 61.808862][ T5311] WARNING: The mand mount option has been deprecated and [ 61.808862][ T5311] and is ignored by this kernel. Remove the mand [ 61.808862][ T5311] option from the mount to silence this warning. [ 61.808862][ T5311] ======================================================= [ 61.827123][ T24] audit: type=1800 audit(1732936691.257:2): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 62.007303][ T5311] [ 62.008342][ T5311] ============================================ [ 62.010559][ T5311] WARNING: possible recursive locking detected [ 62.012855][ T5311] 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 Not tainted [ 62.015220][ T5311] -------------------------------------------- [ 62.017456][ T5311] syz.0.0/5311 is trying to acquire lock: [ 62.019593][ T5311] ffff888043bb7928 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9ff/0x2270 [ 62.023454][ T5311] [ 62.023454][ T5311] but task is already holding lock: [ 62.026061][ T5311] ffff888043bb7928 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xf81/0x21c0 [ 62.029411][ T5311] [ 62.029411][ T5311] other info that might help us debug this: [ 62.032343][ T5311] Possible unsafe locking scenario: [ 62.032343][ T5311] [ 62.034945][ T5311] CPU0 [ 62.036156][ T5311] ---- [ 62.037315][ T5311] lock(&sbi->s_alloc_mutex); [ 62.039075][ T5311] lock(&sbi->s_alloc_mutex); [ 62.040934][ T5311] [ 62.040934][ T5311] *** DEADLOCK *** [ 62.040934][ T5311] [ 62.043970][ T5311] May be due to missing lock nesting notation [ 62.043970][ T5311] [ 62.046999][ T5311] 4 locks held by syz.0.0/5311: [ 62.048761][ T5311] #0: ffff88801d076420 (sb_writers#11){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 62.052342][ T5311] #1: ffff88804464cf60 (&sb->s_type->i_mutex_key#19){+.+.}-{4:4}, at: udf_file_write_iter+0x6f/0x660 [ 62.056130][ T5311] #2: ffff88804464cd90 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x3b7/0x5340 [ 62.059523][ T5311] #3: ffff888043bb7928 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xf81/0x21c0 [ 62.062919][ T5311] [ 62.062919][ T5311] stack backtrace: [ 62.065006][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 62.068519][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.072368][ T5311] Call Trace: [ 62.073585][ T5311] [ 62.074637][ T5311] dump_stack_lvl+0x241/0x360 [ 62.076442][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.078374][ T5311] ? __pfx__printk+0x10/0x10 [ 62.080050][ T5311] ? lockdep_unlock+0x16a/0x300 [ 62.081812][ T5311] print_deadlock_bug+0x483/0x620 [ 62.083588][ T5311] validate_chain+0x15e2/0x5920 [ 62.085294][ T5311] ? __pfx_validate_chain+0x10/0x10 [ 62.087103][ T5311] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 62.089203][ T5311] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.091473][ T5311] ? __pfx_validate_chain+0x10/0x10 [ 62.093255][ T5311] ? finish_task_switch+0x1e5/0x870 [ 62.095026][ T5311] ? finish_task_switch+0x2cf/0x870 [ 62.096873][ T5311] ? mark_lock+0x9a/0x360 [ 62.098428][ T5311] ? __lock_acquire+0x1397/0x2100 [ 62.100194][ T5311] ? validate_chain+0x11e/0x5920 [ 62.102002][ T5311] ? mark_lock+0x9a/0x360 [ 62.103521][ T5311] ? mark_lock+0x9a/0x360 [ 62.105070][ T5311] __lock_acquire+0x1397/0x2100 [ 62.106738][ T5311] lock_acquire+0x1ed/0x550 [ 62.108368][ T5311] ? udf_free_blocks+0x9ff/0x2270 [ 62.110240][ T5311] ? __pfx_lock_acquire+0x10/0x10 [ 62.112070][ T5311] ? __pfx___might_resched+0x10/0x10 [ 62.113979][ T5311] __mutex_lock+0x1ac/0xee0 [ 62.115548][ T5311] ? udf_free_blocks+0x9ff/0x2270 [ 62.117285][ T5311] ? folio_mark_accessed+0x374/0x1ca0 [ 62.119141][ T5311] ? udf_free_blocks+0x9ff/0x2270 [ 62.120990][ T5311] ? __pfx___mutex_lock+0x10/0x10 [ 62.122854][ T5311] udf_free_blocks+0x9ff/0x2270 [ 62.124605][ T5311] ? __pfx___might_resched+0x10/0x10 [ 62.126430][ T5311] ? folio_mark_accessed+0x374/0x1ca0 [ 62.128327][ T5311] ? fs_reclaim_acquire+0x93/0x130 [ 62.130122][ T5311] ? bdev_getblk+0x6e/0x550 [ 62.131842][ T5311] ? __pfx_udf_free_blocks+0x10/0x10 [ 62.133788][ T5311] ? udf_current_aext+0x658/0xad0 [ 62.135525][ T5311] ? udf_next_aext+0x3c5/0x490 [ 62.137181][ T5311] udf_delete_aext+0x70a/0xed0 [ 62.138835][ T5311] ? __pfx_udf_delete_aext+0x10/0x10 [ 62.140705][ T5311] ? udf_next_aext+0x3c5/0x490 [ 62.142578][ T5311] udf_new_block+0x18ba/0x21c0 [ 62.144266][ T5311] ? __pfx_udf_new_block+0x10/0x10 [ 62.146055][ T5311] ? udf_current_aext+0x65f/0xad0 [ 62.147816][ T5311] ? udf_next_aext+0x3c5/0x490 [ 62.149490][ T5311] udf_map_block+0x1c9a/0x5340 [ 62.151237][ T5311] ? __pfx_udf_map_block+0x10/0x10 [ 62.153068][ T5311] ? mlock_drain_local+0x79/0x490 [ 62.154834][ T5311] ? __pfx___might_resched+0x10/0x10 [ 62.156676][ T5311] ? mlock_drain_local+0x79/0x490 [ 62.158503][ T5311] ? clean_bdev_aliases+0x665/0x7e0 [ 62.160383][ T5311] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 62.162414][ T5311] __udf_get_block+0x126/0x410 [ 62.164167][ T5311] ? __pfx___udf_get_block+0x10/0x10 [ 62.166106][ T5311] ? create_empty_buffers+0x53e/0x740 [ 62.167975][ T5311] __block_write_begin_int+0x50c/0x1a70 [ 62.170025][ T5311] ? __pfx_udf_get_block+0x10/0x10 [ 62.171900][ T5311] ? __pfx___block_write_begin_int+0x10/0x10 [ 62.173992][ T5311] ? __filemap_get_folio+0x90b/0xbd0 [ 62.175834][ T5311] ? __pfx_udf_get_block+0x10/0x10 [ 62.177563][ T5311] block_write_begin+0x8f/0x120 [ 62.179275][ T5311] udf_write_begin+0x104/0x350 [ 62.181114][ T5311] generic_perform_write+0x344/0x6d0 [ 62.182996][ T5311] ? __pfx_generic_perform_write+0x10/0x10 [ 62.185005][ T5311] __generic_file_write_iter+0x1b5/0x230 [ 62.186935][ T5311] udf_file_write_iter+0x2fc/0x660 [ 62.188758][ T5311] iter_file_splice_write+0xbfa/0x1510 [ 62.190746][ T5311] ? __pfx_iter_file_splice_write+0x10/0x10 [ 62.192963][ T5311] ? rcu_read_lock_any_held+0xb7/0x160 [ 62.194948][ T5311] ? __pfx_iter_file_splice_write+0x10/0x10 [ 62.197002][ T5311] direct_splice_actor+0x11b/0x220 [ 62.198861][ T5311] splice_direct_to_actor+0x586/0xc80 [ 62.200959][ T5311] ? __pfx_direct_splice_actor+0x10/0x10 [ 62.203071][ T5311] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 62.205294][ T5311] ? __fget_files+0x2a/0x410 [ 62.207034][ T5311] ? __pfx_lock_release+0x10/0x10 [ 62.208940][ T5311] do_splice_direct+0x289/0x3e0 [ 62.210773][ T5311] ? __pfx_do_splice_direct+0x10/0x10 [ 62.212772][ T5311] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 62.214989][ T5311] ? rw_verify_area+0x1c3/0x6f0 [ 62.216819][ T5311] do_sendfile+0x564/0x8a0 [ 62.218529][ T5311] ? __pfx_do_sendfile+0x10/0x10 [ 62.220369][ T5311] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 62.222749][ T5311] __se_sys_sendfile64+0x17c/0x1e0 [ 62.224706][ T5311] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 62.226686][ T5311] ? do_syscall_64+0x100/0x230 [ 62.228421][ T5311] ? do_syscall_64+0xb6/0x230 [ 62.230083][ T5311] do_syscall_64+0xf3/0x230 [ 62.231852][ T5311] ? clear_bhb_loop+0x35/0x90 [ 62.233599][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.235797][ T5311] RIP: 0033:0x7fde2d580849 [ 62.237417][ T5311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.244477][ T5311] RSP: 002b:00007fde2e2e4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 62.247458][ T5311] RAX: ffffffffffffffda RBX: 00007fde2d745fa0 RCX: 00007fde2d580849 [ 62.250362][ T5311] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 62.253195][ T5311] RBP: 00007fde2d5f3986 R08: 0000000000000000 R09: 0000000000000000 [ 62.255966][ T5311] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 62.258701][ T5311] R13: 0000000000000000 R14: 00007fde2d745fa0 R15: 00007ffc920c9d18 [ 62.261249][ T5311] [ 63.719351][ T5296] Bluetooth: hci0: command tx timeout [ 65.799512][ T5296] Bluetooth: hci0: command tx timeout [ 67.879297][ T5296] Bluetooth: hci0: command tx timeout