program: add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f00000015c0)="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", 0x186, 0xfffffffffffffffd) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000001780)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) syz_open_dev$usbfs(&(0x7f00000017c0), 0x10000001d, 0x8041) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000001840), 0x1, 0x20000) syz_open_dev$dri(&(0x7f0000001880), 0xd21, 0x40802) openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/power/disk', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001940)='cgroup.freeze\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001980), 0x100, 0x0) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64=r0], 0x7) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f0000000000)="88c1162dc4bf04eb7f7f5ccd2db74c1e9869380d9bcd1cb54ad011f42c6d6e970fc2d47287cdc80ee4f0395507a2fd073bb54673b33c9555d29152b2422b096c043c5acd86e6b95262720bbc0f28a53106bac779a66e186d7855ef5044e5e41fcbc98da3cbd9c5a09d97585f4462478e6602b164a8d7193e00ae82a0456ad07e292ca96db23b5c13abf17c223f6947797e8a2235ab668c11dbddc1a6f6") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0}, 0x50) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000840)={0x18}, 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000008c0)=ANY=[], 0x32600) [ 103.222989][ T5308] Bluetooth: hci0: command tx timeout [ 103.617010][ T5301] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.767889][ T5301] usb 5-1: Using ep0 maxpacket: 32 [ 103.769415][ T5301] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 103.770284][ T5301] usb 5-1: config 0 has no interfaces? [ 103.772567][ T5301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.772580][ T5301] usb 5-1: Product: syz [ 103.772587][ T5301] usb 5-1: Manufacturer: syz [ 103.772595][ T5301] usb 5-1: SerialNumber: syz [ 103.819422][ T5301] usb 5-1: config 0 descriptor?? [ 104.128682][ T5308] Bluetooth: hci0: status 0x0c [ 104.128806][ T5353] Bluetooth: hci0: Opcode 0x0c03 failed: -16 [ 104.140346][ T5353] loop0: detected capacity change from 0 to 64 [ 105.359200][ T5353] [ 105.360257][ T5353] ============================================ [ 105.362568][ T5353] WARNING: possible recursive locking detected [ 105.365166][ T5353] syzkaller #0 Not tainted [ 105.367003][ T5353] -------------------------------------------- [ 105.369379][ T5353] syz.0.0/5353 is trying to acquire lock: [ 105.371593][ T5353] ffff8880439aa0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 105.375651][ T5353] [ 105.375651][ T5353] but task is already holding lock: [ 105.378589][ T5353] ffff8880439aa0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 105.382188][ T5353] [ 105.382188][ T5353] other info that might help us debug this: [ 105.385222][ T5353] Possible unsafe locking scenario: [ 105.385222][ T5353] [ 105.388084][ T5353] CPU0 [ 105.389510][ T5353] ---- [ 105.390904][ T5353] lock(&tree->tree_lock/1); [ 105.392909][ T5353] lock(&tree->tree_lock/1); [ 105.394877][ T5353] [ 105.394877][ T5353] *** DEADLOCK *** [ 105.394877][ T5353] [ 105.398156][ T5353] May be due to missing lock nesting notation [ 105.398156][ T5353] [ 105.401477][ T5353] locks held by syz.0.0/5353: 6, last CPU#0: [ 105.403821][ T5353] #0: ffff8880401230f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 105.407484][ T5353] #1: ffff888035a7c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 105.411076][ T5353] #2: ffff88805328f040 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0x82/0x330 [ 105.416645][ T5353] #3: ffff88805328eea0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 105.420738][ T5353] #4: ffff8880439aa0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 105.424194][ T5353] #5: ffff8880532900a0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf9/0x1680 [ 105.428191][ T5353] [ 105.428191][ T5353] stack backtrace: [ 105.430486][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 105.433881][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.437643][ T5353] Call Trace: [ 105.439042][ T5353] [ 105.440280][ T5353] dump_stack_lvl+0xe8/0x150 [ 105.442093][ T5353] print_deadlock_bug+0x27a/0x290 [ 105.444049][ T5353] __lock_acquire+0x25db/0x2de0 [ 105.446000][ T5353] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.448499][ T5353] ? stack_depot_save_flags+0x404/0x7f0 [ 105.450870][ T5353] ? kasan_save_track+0x4f/0x80 [ 105.452763][ T5353] ? kasan_save_track+0x3e/0x80 [ 105.454590][ T5353] ? __kasan_kmalloc+0x93/0xb0 [ 105.456531][ T5353] ? __kmalloc_noprof+0x366/0x710 [ 105.458722][ T5353] ? hfs_find_init+0x9d/0x300 [ 105.460760][ T5353] ? hfs_extend_file+0x367/0x1680 [ 105.462847][ T5353] ? hfs_bmap_reserve+0x108/0x430 [ 105.464977][ T5353] ? __hfs_ext_write_extent+0x200/0x620 [ 105.467041][ T5353] lock_acquire+0x115/0x350 [ 105.468771][ T5353] ? hfs_find_init+0x18d/0x300 [ 105.470348][ T5353] __mutex_lock+0x197/0x15a0 [ 105.471911][ T5353] ? hfs_find_init+0x18d/0x300 [ 105.473754][ T5353] ? hfs_find_init+0x18d/0x300 [ 105.475577][ T5353] ? __pfx___mutex_lock+0x10/0x10 [ 105.477697][ T5353] ? rcu_is_watching+0x16/0xb0 [ 105.479759][ T5353] ? trace_kmalloc+0x2a/0xf0 [ 105.481719][ T5353] ? __kmalloc_noprof+0x387/0x710 [ 105.483902][ T5353] ? __kmalloc_noprof+0x1a6/0x710 [ 105.486007][ T5353] ? hfs_find_init+0x9d/0x300 [ 105.487997][ T5353] hfs_find_init+0x18d/0x300 [ 105.489761][ T5353] hfs_extend_file+0x367/0x1680 [ 105.491807][ T5353] ? __asan_memcpy+0x40/0x70 [ 105.493752][ T5353] ? __pfx_hfs_extend_file+0x10/0x10 [ 105.495920][ T5353] ? __hfs_brec_find+0x335/0x510 [ 105.498030][ T5353] ? do_raw_spin_unlock+0x4d/0x200 [ 105.500122][ T5353] ? hfs_brec_find+0x3cc/0x510 [ 105.501961][ T5353] hfs_bmap_reserve+0x108/0x430 [ 105.503895][ T5353] __hfs_ext_write_extent+0x200/0x620 [ 105.505964][ T5353] ? __kmalloc_noprof+0x1a6/0x710 [ 105.507981][ T5353] ? hfs_find_init+0x9d/0x300 [ 105.509815][ T5353] __hfs_ext_cache_extent+0x6e/0x9b0 [ 105.511950][ T5353] ? hfs_find_init+0x18d/0x300 [ 105.513791][ T5353] hfs_extend_file+0x3ad/0x1680 [ 105.515709][ T5353] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 105.518046][ T5353] ? __pfx_hfs_extend_file+0x10/0x10 [ 105.520232][ T5353] ? clean_bdev_aliases+0x61a/0x740 [ 105.522293][ T5353] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 105.524412][ T5353] hfs_get_block+0x401/0xbf0 [ 105.526135][ T5353] ? __pfx_hfs_get_block+0x10/0x10 [ 105.528084][ T5353] ? do_raw_spin_unlock+0x4d/0x200 [ 105.530134][ T5353] ? _raw_spin_unlock+0x28/0x50 [ 105.532055][ T5353] ? create_empty_buffers+0x41e/0x4d0 [ 105.534237][ T5353] __block_write_begin_int+0x6c1/0x1930 [ 105.536517][ T5353] ? __pfx_hfs_get_block+0x10/0x10 [ 105.538586][ T5353] ? __pfx___block_write_begin_int+0x10/0x10 [ 105.540905][ T5353] cont_write_begin+0x71b/0xac0 [ 105.543181][ T5353] ? __pfx_cont_write_begin+0x10/0x10 [ 105.545467][ T5353] ? rcu_is_watching+0x16/0xb0 [ 105.547521][ T5353] hfs_write_begin+0x123/0x1c0 [ 105.549553][ T5353] ? __pfx_hfs_get_block+0x10/0x10 [ 105.551689][ T5353] generic_perform_write+0x2d5/0x8e0 [ 105.553933][ T5353] ? __pfx_generic_perform_write+0x10/0x10 [ 105.556423][ T5353] ? file_update_time_flags+0x1e0/0x440 [ 105.558799][ T5353] ? __generic_file_write_iter+0xf9/0x230 [ 105.561209][ T5353] ? generic_file_write_iter+0x9a/0x330 [ 105.563612][ T5353] generic_file_write_iter+0xae/0x330 [ 105.565882][ T5353] vfs_write+0x612/0xba0 [ 105.567608][ T5353] ? __pfx_vfs_write+0x10/0x10 [ 105.569443][ T5353] ? __fget_files+0x3a2/0x420 [ 105.571455][ T5353] ? __fget_files+0x2a/0x420 [ 105.573351][ T5353] ? fdget+0x1ac/0x250 [ 105.574733][ T5353] ksys_write+0x150/0x270 [ 105.576462][ T5353] ? __pfx_ksys_write+0x10/0x10 [ 105.578525][ T5353] do_syscall_64+0x166/0x520 [ 105.580523][ T5353] ? trace_irq_disable+0x3b/0x140 [ 105.582639][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.585232][ T5353] ? clear_bhb_loop+0x70/0xc0 [ 105.587284][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.589790][ T5353] RIP: 0033:0x7f9c7a99f559 [ 105.591742][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.599623][ T5353] RSP: 002b:00007f9c7b82dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.602776][ T5353] RAX: ffffffffffffffda RBX: 00007f9c7ac25fa0 RCX: 00007f9c7a99f559 [ 105.605596][ T5353] RDX: 00000000fffffdef RSI: 0000200000000840 RDI: 0000000000000011 [ 105.608200][ T5353] RBP: 00007f9c7aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.611279][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.614604][ T5353] R13: 00007f9c7ac26038 R14: 00007f9c7ac25fa0 R15: 00007ffc51806038 [ 105.617839][ T5353] [ 109.217391][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217391][ T37] loop0: rw=9437185, sector=161, nr_sectors = 1 limit=64 [ 109.217533][ T37] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 109.217566][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217566][ T37] loop0: rw=9437185, sector=162, nr_sectors = 1 limit=64 [ 109.217578][ T37] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 109.217589][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217589][ T37] loop0: rw=9437185, sector=163, nr_sectors = 1 limit=64 [ 109.217600][ T37] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 109.217608][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217608][ T37] loop0: rw=9437185, sector=167, nr_sectors = 1 limit=64 [ 109.217620][ T37] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 109.217627][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217627][ T37] loop0: rw=9437185, sector=169, nr_sectors = 1 limit=64 [ 109.217638][ T37] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 109.217647][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217647][ T37] loop0: rw=9437185, sector=171, nr_sectors = 1 limit=64 [ 109.217657][ T37] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 109.217665][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217665][ T37] loop0: rw=9437185, sector=172, nr_sectors = 1 limit=64 [ 109.217676][ T37] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 109.217683][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.217683][ T37] loop0: rw=9437185, sector=173, nr_sectors = 1 limit=64 [ 109.217694][ T37] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 109.218134][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.218134][ T37] loop0: rw=9437185, sector=174, nr_sectors = 1 limit=64 [ 109.218148][ T37] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 109.218158][ T37] kworker/u4:2: attempt to access beyond end of device [ 109.218158][ T37] loop0: rw=9437185, sector=175, nr_sectors = 1 limit=64 [ 109.218169][ T37] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 109.987072][ T5301] rxe_eth0 speed is unknown, defaulting to 1000