[ 45.939633][ T3920] dhcpcd-run-hook (3920) used greatest stack depth: 19472 bytes left no interfaces have a carrier [ 48.210322][ T3917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.223301][ T3917] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. executing program syzkaller login: [ 73.687102][ T4248] loop0: detected capacity change from 0 to 2048 [ 73.698452][ T4248] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 73.714287][ T4248] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 73.727128][ T4248] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 73.740952][ T4248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.759099][ T27] audit: type=1800 audit(1742547306.408:2): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor330" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 73.992844][ T4250] [ 73.995395][ T4250] ============================================ [ 74.002310][ T4250] WARNING: possible recursive locking detected [ 74.009179][ T4250] 6.1.131-syzkaller #0 Not tainted [ 74.014662][ T4250] -------------------------------------------- [ 74.020842][ T4250] syz-executor330/4250 is trying to acquire lock: [ 74.027535][ T4250] ffff88814d197d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_free_blocks+0x9ad/0x21e0 [ 74.038159][ T4250] [ 74.038159][ T4250] but task is already holding lock: [ 74.046108][ T4250] ffff88814d197d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_new_block+0xf84/0x2130 [ 74.057204][ T4250] [ 74.057204][ T4250] other info that might help us debug this: [ 74.066073][ T4250] Possible unsafe locking scenario: [ 74.066073][ T4250] [ 74.073819][ T4250] CPU0 [ 74.077614][ T4250] ---- [ 74.082584][ T4250] lock(&sbi->s_alloc_mutex); [ 74.088685][ T4250] lock(&sbi->s_alloc_mutex); [ 74.093647][ T4250] [ 74.093647][ T4250] *** DEADLOCK *** [ 74.093647][ T4250] [ 74.102709][ T4250] May be due to missing lock nesting notation [ 74.102709][ T4250] [ 74.112083][ T4250] 4 locks held by syz-executor330/4250: [ 74.118049][ T4250] #0: ffff88802bd98460 (sb_writers#10){.+.+}-{0:0}, at: do_sendfile+0x5f4/0xff0 [ 74.127718][ T4250] #1: ffff888070f28910 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: udf_file_write_iter+0x75/0x670 [ 74.139080][ T4250] #2: ffff888070f28738 (&ei->i_data_sem#2){++++}-{3:3}, at: udf_get_block+0x153/0x5370 [ 74.149958][ T4250] #3: ffff88814d197d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_new_block+0xf84/0x2130 [ 74.160181][ T4250] [ 74.160181][ T4250] stack backtrace: [ 74.166359][ T4250] CPU: 0 PID: 4250 Comm: syz-executor330 Not tainted 6.1.131-syzkaller #0 [ 74.174889][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.185402][ T4250] Call Trace: [ 74.188910][ T4250] [ 74.192151][ T4250] dump_stack_lvl+0x1e3/0x2cb [ 74.196975][ T4250] ? nf_tcp_handle_invalid+0x647/0x647 [ 74.202587][ T4250] ? panic+0x764/0x764 [ 74.207054][ T4250] validate_chain+0x4711/0x5950 [ 74.212197][ T4250] ? mark_lock+0x9a/0x340 [ 74.216669][ T4250] ? reacquire_held_locks+0x660/0x660 [ 74.222222][ T4250] ? reacquire_held_locks+0x660/0x660 [ 74.228004][ T4250] ? mark_lock+0x9a/0x340 [ 74.232390][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.238531][ T4250] ? print_irqtrace_events+0x210/0x210 [ 74.244140][ T4250] ? mark_lock+0x9a/0x340 [ 74.248697][ T4250] __lock_acquire+0x125b/0x1f80 [ 74.253722][ T4250] lock_acquire+0x1f8/0x5a0 [ 74.258566][ T4250] ? udf_free_blocks+0x9ad/0x21e0 [ 74.263902][ T4250] ? read_lock_is_recursive+0x10/0x10 [ 74.269575][ T4250] ? __might_sleep+0xb0/0xb0 [ 74.274194][ T4250] ? folio_mark_accessed+0x366/0x1c90 [ 74.279686][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.286677][ T4250] ? folio_activate_fn+0x2910/0x2910 [ 74.292757][ T4250] __mutex_lock+0x132/0xd80 [ 74.298136][ T4250] ? udf_free_blocks+0x9ad/0x21e0 [ 74.304006][ T4250] ? udf_free_blocks+0x9ad/0x21e0 [ 74.310187][ T4250] ? mutex_lock_nested+0x10/0x10 [ 74.315637][ T4250] ? mark_lock+0x9a/0x340 [ 74.320595][ T4250] ? folio_mark_accessed+0x366/0x1c90 [ 74.326209][ T4250] udf_free_blocks+0x9ad/0x21e0 [ 74.331536][ T4250] ? __getblk_gfp+0x50/0xa20 [ 74.337290][ T4250] ? orangefs_cancel_op_in_progress+0x4a0/0x4a0 [ 74.346757][ T4250] ? udf_next_aext+0x42f/0x540 [ 74.352040][ T4250] ? udf_add_aext+0x370/0x370 [ 74.357420][ T4250] ? udf_write_aext+0x515/0x7a0 [ 74.363832][ T4250] udf_delete_aext+0x68a/0xda0 [ 74.369799][ T4250] ? udf_next_aext+0x540/0x540 [ 74.375994][ T4250] ? udf_next_aext+0x42f/0x540 [ 74.381501][ T4250] ? udf_add_aext+0x370/0x370 [ 74.387113][ T4250] ? __might_sleep+0xb0/0xb0 [ 74.392060][ T4250] udf_new_block+0x184d/0x2130 [ 74.397143][ T4250] ? udf_prealloc_blocks+0x1310/0x1310 [ 74.403985][ T4250] ? udf_next_aext+0x42f/0x540 [ 74.409316][ T4250] ? udf_get_block+0x42b/0x5370 [ 74.415162][ T4250] ? udf_add_aext+0x370/0x370 [ 74.420584][ T4250] ? do_raw_spin_unlock+0x137/0x8a0 [ 74.426341][ T4250] ? udf_get_block+0x73f/0x5370 [ 74.431691][ T4250] udf_get_block+0x1a67/0x5370 [ 74.436685][ T4250] ? udf_bread+0x520/0x520 [ 74.441495][ T4250] ? filemap_get_folios+0x1bc/0x970 [ 74.448387][ T4250] ? filemap_get_folios+0x736/0x970 [ 74.454278][ T4250] ? filemap_get_folios+0x1bc/0x970 [ 74.460180][ T4250] ? find_lock_entries+0xda0/0xda0 [ 74.466605][ T4250] ? clean_bdev_aliases+0x7f1/0x910 [ 74.472652][ T4250] ? attach_page_private+0x300/0x300 [ 74.479015][ T4250] ? create_page_buffers+0x24e/0x4b0 [ 74.484963][ T4250] __block_write_begin_int+0x544/0x1a30 [ 74.491059][ T4250] ? udf_bread+0x520/0x520 [ 74.495957][ T4250] ? page_zero_new_buffers+0x650/0x650 [ 74.503032][ T4250] ? udf_bread+0x520/0x520 [ 74.508639][ T4250] block_write_begin+0x98/0x1f0 [ 74.515271][ T4250] ? udf_write_begin+0x16/0x60 [ 74.521049][ T4250] udf_write_begin+0x2d/0x60 [ 74.526547][ T4250] generic_perform_write+0x2fc/0x5e0 [ 74.532175][ T4250] ? generic_file_direct_write+0x460/0x460 [ 74.538704][ T4250] ? __file_remove_privs+0x640/0x640 [ 74.545140][ T4250] ? up_write+0x19d/0x580 [ 74.550301][ T4250] ? do_sendfile+0x619/0xff0 [ 74.555187][ T4250] ? __se_sys_sendfile64+0x178/0x1e0 [ 74.561769][ T4250] __generic_file_write_iter+0x176/0x400 [ 74.569831][ T4250] udf_file_write_iter+0x291/0x670 [ 74.575608][ T4250] do_iter_write+0x6e6/0xc40 [ 74.581368][ T4250] ? vfs_iter_write+0xa0/0xa0 [ 74.587969][ T4250] ? vfs_iter_write+0x69/0xa0 [ 74.593324][ T4250] iter_file_splice_write+0x830/0xfc0 [ 74.599279][ T4250] ? splice_from_pipe+0x240/0x240 [ 74.605940][ T4250] ? splice_shrink_spd+0xb0/0xb0 [ 74.612383][ T4250] ? common_file_perm+0x17d/0x1d0 [ 74.617865][ T4250] ? splice_from_pipe+0x240/0x240 [ 74.623958][ T4250] direct_splice_actor+0xe3/0x1c0 [ 74.629530][ T4250] splice_direct_to_actor+0x4c7/0xc30 [ 74.635224][ T4250] ? direct_file_splice_eof+0xa0/0xa0 [ 74.642804][ T4250] ? pipe_to_sendpage+0x350/0x350 [ 74.648458][ T4250] ? fsnotify_perm+0x64/0x590 [ 74.654825][ T4250] ? security_file_permission+0x75/0xa0 [ 74.662245][ T4250] do_splice_direct+0x2a5/0x3e0 [ 74.667893][ T4250] ? splice_direct_to_actor+0xc30/0xc30 [ 74.675868][ T4250] ? rcu_read_lock_any_held+0xb3/0x160 [ 74.682586][ T4250] ? do_splice_direct+0x3e0/0x3e0 [ 74.688614][ T4250] do_sendfile+0x619/0xff0 [ 74.693385][ T4250] ? rcu_is_watching+0x11/0xb0 [ 74.700184][ T4250] ? do_pwritev+0x360/0x360 [ 74.706202][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.713289][ T4250] __se_sys_sendfile64+0x178/0x1e0 [ 74.719775][ T4250] ? __x64_sys_sendfile64+0xa0/0xa0 [ 74.726199][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 74.733004][ T4250] ? lockdep_hardirqs_on+0x94/0x130 [ 74.739889][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 74.746259][ T4250] do_syscall_64+0x3b/0xb0 [ 74.751894][ T4250] ? clear_bhb_loop+0x45/0xa0 [ 74.756930][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.763955][ T4250] RIP: 0033:0x7f76ab2c5fe9 [ 74.769442][ T4250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 74.793975][ T4250] RSP: 002b:00007f76ab261218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 74.803836][ T4250] RAX: ffffffffffffffda RBX: 00007f76ab34e6d8 RCX: 00007f76ab2c5fe9 [ 74.814018][ T4250] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 74.824147][ T4250] RBP: 00007f76ab34e6d0 R08: 0000000000000000 R09: 0000000000000000 [ 74.833388][ T4250] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f76ab31ad88 [ 74.843055][ T4250] R13: 000000000000006e R14: 0031656c69662f2e R15: 0000200000000040 [ 74.854843][ T4250]