program: syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500200000040cb066829400001020301090224000101022005030000fe010301030009210700010122f8090905810340000180b5"], 0x0) truncate(&(0x7f00000013c0)='./file1\x00', 0x0) creat(&(0x7f0000000380)='./bus\x00', 0xb) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='rootfs\x00', 0x8000, &(0x7f0000000200)='bcachefs\x00') r3 = open$dir(&(0x7f0000000240)='./bus\x00', 0x868201, 0x20) unlinkat(r3, &(0x7f0000000280)='./file1\x00', 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./bus\x00', 0x18, &(0x7f0000000040)=ANY=[], 0xff, 0x5a91, &(0x7f0000006b40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) truncate(&(0x7f0000000400)='./bus\x00', 0x5) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f00000002c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40242, 0x40) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r4, 0x10, 0x3ffd, 0x8000) [ 74.891195][ T5315] Bluetooth: hci0: command tx timeout [ 74.988269][ T5336] loop0: detected capacity change from 0 to 2048 [ 75.008338][ T5336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 75.050952][ T5336] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 75.072975][ T5336] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 75.080437][ T5336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.103322][ T25] audit: type=1800 audit(1753708245.674:2): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 75.471901][ T793] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.195630][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.199053][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.468607][ T5336] [ 76.469836][ T5336] ============================================ [ 76.472762][ T5336] WARNING: possible recursive locking detected [ 76.475376][ T5336] 6.16.0-syzkaller #0 Not tainted [ 76.477623][ T5336] -------------------------------------------- [ 76.480324][ T5336] syz.0.0/5336 is trying to acquire lock: [ 76.482778][ T5336] ffff888040763128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9e2/0x17f0 [ 76.487793][ T5336] [ 76.487793][ T5336] but task is already holding lock: [ 76.491405][ T5336] ffff888040763128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x8d0/0x10b0 [ 76.495325][ T5336] [ 76.495325][ T5336] other info that might help us debug this: [ 76.498713][ T5336] Possible unsafe locking scenario: [ 76.498713][ T5336] [ 76.502029][ T5336] CPU0 [ 76.503428][ T5336] ---- [ 76.504878][ T5336] lock(&sbi->s_alloc_mutex); [ 76.506946][ T5336] lock(&sbi->s_alloc_mutex); [ 76.509128][ T5336] [ 76.509128][ T5336] *** DEADLOCK *** [ 76.509128][ T5336] [ 76.512814][ T5336] May be due to missing lock nesting notation [ 76.512814][ T5336] [ 76.516511][ T5336] 4 locks held by syz.0.0/5336: [ 76.518685][ T5336] #0: ffff8880338cc428 (sb_writers#12){.+.+}-{0:0}, at: vfs_writev+0x288/0x960 [ 76.522504][ T5336] #1: ffff8880443b4f60 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: udf_file_write_iter+0x6e/0x6c0 [ 76.527101][ T5336] #2: ffff8880443b4d90 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x291/0x42a0 [ 76.531571][ T5336] #3: ffff888040763128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_prealloc_blocks+0x8d0/0x10b0 [ 76.535920][ T5336] [ 76.535920][ T5336] stack backtrace: [ 76.538393][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 76.538411][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.538419][ T5336] Call Trace: [ 76.538427][ T5336] [ 76.538433][ T5336] dump_stack_lvl+0x189/0x250 [ 76.538452][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.538464][ T5336] ? __pfx__printk+0x10/0x10 [ 76.538481][ T5336] ? print_lock_name+0xde/0x100 [ 76.538494][ T5336] print_deadlock_bug+0x28b/0x2a0 [ 76.538508][ T5336] validate_chain+0x1a3f/0x2140 [ 76.538527][ T5336] __lock_acquire+0xab9/0xd20 [ 76.538540][ T5336] ? udf_free_blocks+0x9e2/0x17f0 [ 76.538551][ T5336] lock_acquire+0x120/0x360 [ 76.538563][ T5336] ? udf_free_blocks+0x9e2/0x17f0 [ 76.538574][ T5336] ? sched_clock_cpu+0x74/0x430 [ 76.538584][ T5336] ? psi_task_switch+0x39a/0x6d0 [ 76.538597][ T5336] __mutex_lock+0x182/0xe80 [ 76.538653][ T5336] ? udf_free_blocks+0x9e2/0x17f0 [ 76.538666][ T5336] ? __pfx_folio_mark_accessed+0x10/0x10 [ 76.538684][ T5336] ? udf_free_blocks+0x9e2/0x17f0 [ 76.538696][ T5336] ? __pfx___mutex_lock+0x10/0x10 [ 76.538709][ T5336] ? __pfx___might_resched+0x10/0x10 [ 76.538722][ T5336] udf_free_blocks+0x9e2/0x17f0 [ 76.538734][ T5336] ? bdev_getblk+0x7b/0x690 [ 76.538750][ T5336] ? udf_get_fileshortad+0x6e/0x1b0 [ 76.538764][ T5336] ? __pfx_udf_free_blocks+0x10/0x10 [ 76.538781][ T5336] udf_delete_aext+0x4df/0xbc0 [ 76.538798][ T5336] ? udf_get_fileshortad+0xcb/0x1b0 [ 76.538811][ T5336] ? __pfx_udf_delete_aext+0x10/0x10 [ 76.538829][ T5336] udf_prealloc_blocks+0xb7e/0x10b0 [ 76.538842][ T5336] ? udf_get_filelongad+0x6e/0x1b0 [ 76.538853][ T5336] ? udf_current_aext+0x660/0xad0 [ 76.538869][ T5336] ? __pfx_udf_prealloc_blocks+0x10/0x10 [ 76.538885][ T5336] udf_map_block+0x1ddd/0x42a0 [ 76.538905][ T5336] ? __pfx_udf_map_block+0x10/0x10 [ 76.538931][ T5336] ? do_raw_spin_unlock+0x4d/0x240 [ 76.538948][ T5336] __udf_get_block+0x52/0x250 [ 76.538961][ T5336] __block_write_begin_int+0x6b5/0x1900 [ 76.538977][ T5336] ? folio_add_lru+0x1b2/0x3d0 [ 76.538991][ T5336] ? __pfx_udf_get_block+0x10/0x10 [ 76.539004][ T5336] ? __pfx___block_write_begin_int+0x10/0x10 [ 76.539018][ T5336] ? __pfx_udf_get_block+0x10/0x10 [ 76.539031][ T5336] block_write_begin+0x8a/0x120 [ 76.539045][ T5336] ? udf_write_begin+0x7d/0x260 [ 76.539057][ T5336] udf_write_begin+0x100/0x260 [ 76.539071][ T5336] generic_perform_write+0x2c7/0x910 [ 76.539081][ T5336] ? __pfx_generic_perform_write+0x10/0x10 [ 76.539087][ T5336] ? file_update_time+0x2da/0x490 [ 76.539094][ T5336] ? __generic_file_write_iter+0xf9/0x230 [ 76.539099][ T5336] ? udf_file_write_iter+0x1a3/0x6c0 [ 76.539107][ T5336] udf_file_write_iter+0x2d5/0x6c0 [ 76.539115][ T5336] do_iter_readv_writev+0x56b/0x7f0 [ 76.539124][ T5336] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 76.539131][ T5336] ? rcu_read_lock_any_held+0xb3/0x120 [ 76.539142][ T5336] vfs_writev+0x31a/0x960 [ 76.539151][ T5336] ? __lock_acquire+0xab9/0xd20 [ 76.539158][ T5336] ? __pfx_vfs_writev+0x10/0x10 [ 76.539170][ T5336] ? __fget_files+0x2a/0x420 [ 76.539181][ T5336] ? __fget_files+0x3a0/0x420 [ 76.539203][ T5336] ? __fget_files+0x2a/0x420 [ 76.539226][ T5336] __se_sys_pwritev2+0x179/0x290 [ 76.539257][ T5336] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 76.539277][ T5336] ? rcu_is_watching+0x15/0xb0 [ 76.539286][ T5336] ? do_syscall_64+0xbe/0x3b0 [ 76.539302][ T5336] ? __x64_sys_pwritev2+0x20/0xc0 [ 76.539312][ T5336] do_syscall_64+0xfa/0x3b0 [ 76.539319][ T5336] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.539328][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.539335][ T5336] ? clear_bhb_loop+0x60/0xb0 [ 76.539343][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.539350][ T5336] RIP: 0033:0x7efc0538e9a9 [ 76.539358][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.539364][ T5336] RSP: 002b:00007efc017f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 76.539372][ T5336] RAX: ffffffffffffffda RBX: 00007efc055b5fa0 RCX: 00007efc0538e9a9 [ 76.539377][ T5336] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000b [ 76.539381][ T5336] RBP: 00007efc05410d69 R08: 0000000000000000 R09: 0000000000000000 [ 76.539386][ T5336] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 76.539390][ T5336] R13: 0000000000000000 R14: 00007efc055b5fa0 R15: 00007ffeff6fd718 [ 76.539397][ T5336] [ 76.902104][ T5315] Bluetooth: hci0: command tx timeout [ 78.982089][ T5315] Bluetooth: hci0: command tx timeout [ 80.662505][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.667142][ T793] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 80.671290][ T793] usb 5-1: chopping to 0 config(s) [ 80.674303][ T793] usb 5-1: can't read configurations, error -32 [ 80.801908][ T793] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.931894][ T793] usb 5-1: device descriptor read/64, error -32 [ 81.042219][ T793] usb usb5-port1: attempt power cycle [ 81.062165][ T5315] Bluetooth: hci0: command tx timeout [ 81.382087][ T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.402365][ T793] usb 5-1: device descriptor read/8, error -32 [ 81.641846][ T793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.662492][ T793] usb 5-1: device descriptor read/8, error -32 [ 81.772157][ T793] usb usb5-port1: unable to enumerate USB device