program: syz_open_procfs$pagemap(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x107382, 0x1d0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) ftruncate(r2, 0x2107ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040"], 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) write$UHID_INPUT(r4, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) [ 68.999457][ T4668] Bluetooth: hci0: command tx timeout [ 69.073788][ T5321] loop0: detected capacity change from 0 to 2048 [ 69.092904][ T5321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 69.110550][ T5321] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 69.129355][ T5321] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 69.136796][ T5321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.159481][ T25] audit: type=1800 audit(1763166598.677:2): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 69.227602][ T5322] GUP no longer grows the stack in syz.0.0 (5322): 200000004000-20000000a000 (200000002000) [ 69.240705][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.240724][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.240733][ T5322] Call Trace: [ 69.240737][ T5322] [ 69.240742][ T5322] dump_stack_lvl+0x189/0x250 [ 69.240860][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.240877][ T5322] ? __pfx__printk+0x10/0x10 [ 69.240887][ T5322] ? find_vma+0xe7/0x160 [ 69.240907][ T5322] __get_user_pages+0x2470/0x2a00 [ 69.240940][ T5322] get_user_pages_remote+0x2f1/0xac0 [ 69.240954][ T5322] ? __pfx_mtree_load+0x10/0x10 [ 69.241000][ T5322] ? __pfx_get_user_pages_remote+0x10/0x10 [ 69.241014][ T5322] ? __access_remote_vm+0x367/0x7d0 [ 69.241030][ T5322] __access_remote_vm+0x211/0x7d0 [ 69.241049][ T5322] ? __pfx___access_remote_vm+0x10/0x10 [ 69.241063][ T5322] ? alloc_pages_noprof+0xbe/0x190 [ 69.241087][ T5322] proc_pid_cmdline_read+0x430/0x810 [ 69.241131][ T5322] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 69.241145][ T5322] ? rw_verify_area+0x2a6/0x4d0 [ 69.241161][ T5322] vfs_readv+0x5aa/0x850 [ 69.241176][ T5322] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 69.241187][ T5322] ? __pfx_vfs_readv+0x10/0x10 [ 69.241217][ T5322] ? __fget_files+0x2a/0x420 [ 69.241237][ T5322] ? __fget_files+0x3a0/0x420 [ 69.241254][ T5322] ? __fget_files+0x2a/0x420 [ 69.241274][ T5322] __x64_sys_preadv+0x197/0x2a0 [ 69.241288][ T5322] ? __pfx___x64_sys_preadv+0x10/0x10 [ 69.241305][ T5322] ? do_syscall_64+0xbe/0xfa0 [ 69.241323][ T5322] do_syscall_64+0xfa/0xfa0 [ 69.241337][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.241351][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.241363][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 69.241376][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.241386][ T5322] RIP: 0033:0x7f9b7438f6c9 [ 69.241397][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.241408][ T5322] RSP: 002b:00007f9b751a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 69.241422][ T5322] RAX: ffffffffffffffda RBX: 00007f9b745e6090 RCX: 00007f9b7438f6c9 [ 69.241430][ T5322] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 69.241438][ T5322] RBP: 00007f9b74411f91 R08: 00000000fffffff9 R09: 0000000000000000 [ 69.241444][ T5322] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 69.241451][ T5322] R13: 00007f9b745e6128 R14: 00007f9b745e6090 R15: 00007ffc5ed26e18 [ 69.241469][ T5322] [ 69.620437][ T5307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.808232][ T5321] [ 69.809401][ T5321] ============================================ [ 69.812134][ T5321] WARNING: possible recursive locking detected [ 69.814843][ T5321] syzkaller #0 Not tainted [ 69.816763][ T5321] -------------------------------------------- [ 69.819391][ T5321] syz.0.0/5321 is trying to acquire lock: [ 69.821868][ T5321] ffff88803f13a128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9e2/0x17f0 [ 69.826067][ T5321] [ 69.826067][ T5321] but task is already holding lock: [ 69.829306][ T5321] ffff88803f13a128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 69.833463][ T5321] [ 69.833463][ T5321] other info that might help us debug this: [ 69.836946][ T5321] Possible unsafe locking scenario: [ 69.836946][ T5321] [ 69.840279][ T5321] CPU0 [ 69.841694][ T5321] ---- [ 69.843129][ T5321] lock(&sbi->s_alloc_mutex); [ 69.845261][ T5321] lock(&sbi->s_alloc_mutex); [ 69.847416][ T5321] [ 69.847416][ T5321] *** DEADLOCK *** [ 69.847416][ T5321] [ 69.850959][ T5321] May be due to missing lock nesting notation [ 69.850959][ T5321] [ 69.854569][ T5321] 5 locks held by syz.0.0/5321: [ 69.856712][ T5321] #0: ffff888011efb9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 69.860752][ T5321] #1: ffff8880116a2420 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 69.864709][ T5321] #2: ffff888042f91590 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: udf_file_write_iter+0x6e/0x6c0 [ 69.869478][ T5321] #3: ffff888042f913c0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x283/0x45f0 [ 69.873728][ T5321] #4: ffff88803f13a128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 69.878032][ T5321] [ 69.878032][ T5321] stack backtrace: [ 69.880648][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.880667][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.880675][ T5321] Call Trace: [ 69.880682][ T5321] [ 69.880690][ T5321] dump_stack_lvl+0x189/0x250 [ 69.880711][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.880727][ T5321] ? __pfx__printk+0x10/0x10 [ 69.880739][ T5321] ? print_lock_name+0xde/0x100 [ 69.880751][ T5321] print_deadlock_bug+0x28b/0x2a0 [ 69.880767][ T5321] validate_chain+0x1a3f/0x2140 [ 69.880790][ T5321] ? __pfx___schedule+0x10/0x10 [ 69.880810][ T5321] __lock_acquire+0xab9/0xd20 [ 69.880824][ T5321] ? udf_free_blocks+0x9e2/0x17f0 [ 69.880842][ T5321] lock_acquire+0x120/0x360 [ 69.880852][ T5321] ? udf_free_blocks+0x9e2/0x17f0 [ 69.880871][ T5321] __mutex_lock+0x187/0x1350 [ 69.880888][ T5321] ? udf_free_blocks+0x9e2/0x17f0 [ 69.880903][ T5321] ? folio_mark_accessed+0x42c/0x8b0 [ 69.880922][ T5321] ? __pfx_folio_mark_accessed+0x10/0x10 [ 69.880940][ T5321] ? udf_free_blocks+0x9e2/0x17f0 [ 69.880956][ T5321] ? __pfx___mutex_lock+0x10/0x10 [ 69.880975][ T5321] ? __pfx___might_resched+0x10/0x10 [ 69.880988][ T5321] ? fs_reclaim_acquire+0x7d/0x100 [ 69.881005][ T5321] udf_free_blocks+0x9e2/0x17f0 [ 69.881024][ T5321] ? udf_get_fileshortad+0x6e/0x1b0 [ 69.881039][ T5321] ? udf_current_aext+0x698/0xb00 [ 69.881051][ T5321] ? __pfx_udf_free_blocks+0x10/0x10 [ 69.881072][ T5321] udf_delete_aext+0x4df/0xbc0 [ 69.881087][ T5321] ? __pfx_udf_delete_aext+0x10/0x10 [ 69.881102][ T5321] udf_new_block+0x1404/0x1ba0 [ 69.881119][ T5321] ? rcu_is_watching+0x15/0xb0 [ 69.881133][ T5321] ? udf_write_aext+0x4ff/0x7b0 [ 69.881145][ T5321] ? udf_do_extend_file+0xe3b/0x1180 [ 69.881158][ T5321] ? __pfx_udf_new_block+0x10/0x10 [ 69.881180][ T5321] udf_map_block+0x13a8/0x45f0 [ 69.881198][ T5321] ? __pfx_udf_map_block+0x10/0x10 [ 69.881208][ T5321] ? validate_chain+0x897/0x2140 [ 69.881232][ T5321] ? do_raw_spin_unlock+0x4d/0x240 [ 69.881249][ T5321] __udf_get_block+0x52/0x250 [ 69.881262][ T5321] __block_write_begin_int+0x6b5/0x1900 [ 69.881275][ T5321] ? __pfx_workingset_update_node+0x10/0x10 [ 69.881289][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 69.881300][ T5321] ? __pfx___block_write_begin_int+0x10/0x10 [ 69.881314][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 69.881324][ T5321] block_write_begin+0x8a/0x120 [ 69.881336][ T5321] ? udf_write_begin+0x92/0x270 [ 69.881346][ T5321] udf_write_begin+0x115/0x270 [ 69.881357][ T5321] generic_perform_write+0x2c5/0x900 [ 69.881371][ T5321] ? __pfx_generic_perform_write+0x10/0x10 [ 69.881382][ T5321] ? file_update_time+0x416/0x490 [ 69.881395][ T5321] ? __generic_file_write_iter+0xf9/0x230 [ 69.881406][ T5321] ? udf_file_write_iter+0x1a3/0x6c0 [ 69.881423][ T5321] udf_file_write_iter+0x2d5/0x6c0 [ 69.881441][ T5321] vfs_write+0x5c9/0xb30 [ 69.881456][ T5321] ? __pfx_udf_file_write_iter+0x10/0x10 [ 69.881473][ T5321] ? __pfx_vfs_write+0x10/0x10 [ 69.881488][ T5321] ? __fget_files+0x2a/0x420 [ 69.881506][ T5321] ksys_write+0x145/0x250 [ 69.881521][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 69.881535][ T5321] ? do_syscall_64+0xbe/0xfa0 [ 69.881552][ T5321] do_syscall_64+0xfa/0xfa0 [ 69.881567][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.881579][ T5321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.881593][ T5321] ? clear_bhb_loop+0x60/0xb0 [ 69.881606][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.881618][ T5321] RIP: 0033:0x7f9b7438f6c9 [ 69.881632][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.881643][ T5321] RSP: 002b:00007f9b751c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.881657][ T5321] RAX: ffffffffffffffda RBX: 00007f9b745e5fa0 RCX: 00007f9b7438f6c9 [ 69.881666][ T5321] RDX: 0000000000001006 RSI: 00002000000003c0 RDI: 0000000000000009 [ 69.881674][ T5321] RBP: 00007f9b74411f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.881681][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.881689][ T5321] R13: 00007f9b745e6038 R14: 00007f9b745e5fa0 R15: 00007ffc5ed26e18 [ 69.881703][ T5321] [ 71.029158][ T4668] Bluetooth: hci0: command tx timeout [ 73.109717][ T4668] Bluetooth: hci0: command tx timeout [ 74.789750][ T5307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.793247][ T5307] usb 5-1: no configurations [ 74.795360][ T5307] usb 5-1: can't read configurations, error -22 [ 74.919099][ T5307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.049100][ T5307] usb 5-1: device descriptor read/64, error -32 [ 75.159303][ T5307] usb usb5-port1: attempt power cycle [ 75.189466][ T4668] Bluetooth: hci0: command tx timeout [ 75.499079][ T5307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.519391][ T5307] usb 5-1: device descriptor read/8, error -32 [ 75.759133][ T5307] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.779451][ T5307] usb 5-1: device descriptor read/8, error -32 [ 75.889273][ T5307] usb usb5-port1: unable to enumerate USB device