program: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c, 0x80000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) sendmsg$netlink(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004340)={0x18, 0x6a, 0x1, 0x0, 0x25dfdbfb, "", [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r2}]}, 0x18}], 0x1}, 0x20040840) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x40}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'macinuit'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x7f}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x9}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x7fffffff, [{0xd, 0x5, 0x7}, {0x0, 0x5, 0x2}, {}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x61, 0x0, 0x6e, 0x66]}}, &(0x7f0000000c40)=""/198, 0xa0, 0xc6, 0x0, 0x6}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0x4, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r4}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x7ff, 0x8}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x5, 0x0, 0x0, 0x2, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000200), 0xfea7) r13 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r13, r14, 0x0, 0xfffe82) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000480), &(0x7f00000004c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000d40)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x4, &(0x7f0000000f40)=[0x1, r7, r8, r9, r12, r13], &(0x7f0000000f80)=[{0x3, 0x4, 0x2}, {0x0, 0x1, 0x3, 0xb}, {0x0, 0x5, 0x8, 0x9}, {0x0, 0x1, 0xf, 0x7}], 0x10, 0x9}, 0x94) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r15, 0x8983, &(0x7f0000000340)={0x1, 'ip6erspan0\x00', {}, 0x3}) [ 93.085713][ T10] cfg80211: failed to load regulatory.db [ 93.159143][ T5331] loop0: detected capacity change from 0 to 1024 [ 93.224756][ T4716] udevd[4716]: worker [5305] terminated by signal 33 (Unknown signal 33) [ 93.228512][ T4716] udevd[4716]: worker [5305] failed while handling '/devices/virtual/block/loop0' [ 93.237932][ T25] audit: type=1800 audit(1761166231.948:2): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 93.248860][ T5331] [ 93.249918][ T5331] ====================================================== [ 93.253115][ T5331] WARNING: possible circular locking dependency detected [ 93.256194][ T5331] syzkaller #0 Not tainted [ 93.258191][ T5331] ------------------------------------------------------ [ 93.261279][ T5331] syz.0.0/5331 is trying to acquire lock: [ 93.263734][ T5331] ffff888051c8c0f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa7/0xc40 [ 93.268186][ T5331] [ 93.268186][ T5331] but task is already holding lock: [ 93.271441][ T5331] ffff888051c93708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1ba0 [ 93.276344][ T5331] [ 93.276344][ T5331] which lock already depends on the new lock. [ 93.276344][ T5331] [ 93.280896][ T5331] [ 93.280896][ T5331] the existing dependency chain (in reverse order) is: [ 93.284722][ T5331] [ 93.284722][ T5331] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 93.288500][ T5331] lock_acquire+0x120/0x360 [ 93.290627][ T5331] __mutex_lock+0x187/0x1350 [ 93.292891][ T5331] hfsplus_get_block+0x398/0x15d0 [ 93.295370][ T5331] block_read_full_folio+0x29f/0x830 [ 93.297908][ T5331] filemap_read_folio+0x117/0x380 [ 93.300322][ T5331] do_read_cache_folio+0x350/0x590 [ 93.302608][ T5331] read_cache_page+0x5d/0x170 [ 93.304855][ T5331] hfsplus_block_allocate+0xf3/0xc40 [ 93.307594][ T5331] hfsplus_file_extend+0xa9a/0x1ba0 [ 93.310057][ T5331] hfsplus_get_block+0x40a/0x15d0 [ 93.312477][ T5331] __block_write_begin_int+0x6b5/0x1900 [ 93.315102][ T5331] cont_write_begin+0x789/0xb50 [ 93.317426][ T5331] hfsplus_write_begin+0x66/0xb0 [ 93.319720][ T5331] generic_perform_write+0x2c5/0x900 [ 93.322214][ T5331] generic_file_write_iter+0x117/0x550 [ 93.324731][ T5331] vfs_write+0x5c9/0xb30 [ 93.326841][ T5331] ksys_write+0x145/0x250 [ 93.328973][ T5331] do_syscall_64+0xfa/0xfa0 [ 93.331262][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.333961][ T5331] [ 93.333961][ T5331] -> #0 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 93.337500][ T5331] validate_chain+0xb9b/0x2140 [ 93.339901][ T5331] __lock_acquire+0xab9/0xd20 [ 93.342142][ T5331] lock_acquire+0x120/0x360 [ 93.344446][ T5331] __mutex_lock+0x187/0x1350 [ 93.346816][ T5331] hfsplus_block_allocate+0xa7/0xc40 [ 93.349371][ T5331] hfsplus_file_extend+0xa9a/0x1ba0 [ 93.351798][ T5331] hfsplus_get_block+0x40a/0x15d0 [ 93.354233][ T5331] __blockdev_direct_IO+0x16ff/0x3490 [ 93.356824][ T5331] hfsplus_direct_IO+0x119/0x220 [ 93.359281][ T5331] generic_file_direct_write+0x1db/0x3e0 [ 93.361860][ T5331] __generic_file_write_iter+0x11d/0x230 [ 93.364998][ T5331] generic_file_write_iter+0x117/0x550 [ 93.368031][ T5331] iter_file_splice_write+0x975/0x10e0 [ 93.370702][ T5331] direct_splice_actor+0x101/0x160 [ 93.373180][ T5331] splice_direct_to_actor+0x5a8/0xcc0 [ 93.375596][ T5331] do_splice_direct+0x181/0x270 [ 93.377796][ T5331] do_sendfile+0x4da/0x7e0 [ 93.379990][ T5331] __se_sys_sendfile64+0x13e/0x190 [ 93.382318][ T5331] do_syscall_64+0xfa/0xfa0 [ 93.384535][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.387393][ T5331] [ 93.387393][ T5331] other info that might help us debug this: [ 93.387393][ T5331] [ 93.391794][ T5331] Possible unsafe locking scenario: [ 93.391794][ T5331] [ 93.395037][ T5331] CPU0 CPU1 [ 93.397448][ T5331] ---- ---- [ 93.399725][ T5331] lock(&HFSPLUS_I(inode)->extents_lock); [ 93.402437][ T5331] lock(&sbi->alloc_mutex); [ 93.405877][ T5331] lock(&HFSPLUS_I(inode)->extents_lock); [ 93.409879][ T5331] lock(&sbi->alloc_mutex); [ 93.412146][ T5331] [ 93.412146][ T5331] *** DEADLOCK *** [ 93.412146][ T5331] [ 93.415672][ T5331] 3 locks held by syz.0.0/5331: [ 93.417875][ T5331] #0: ffff88801e7a8420 (sb_writers#12){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 93.422113][ T5331] #1: ffff888051c938f8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 [ 93.426978][ T5331] #2: ffff888051c93708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1ba0 [ 93.431823][ T5331] [ 93.431823][ T5331] stack backtrace: [ 93.434306][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.434321][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.434328][ T5331] Call Trace: [ 93.434336][ T5331] [ 93.434342][ T5331] dump_stack_lvl+0x189/0x250 [ 93.434360][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.434370][ T5331] ? __pfx__printk+0x10/0x10 [ 93.434378][ T5331] ? print_lock_name+0xde/0x100 [ 93.434385][ T5331] print_circular_bug+0x2ee/0x310 [ 93.434395][ T5331] check_noncircular+0x134/0x160 [ 93.434404][ T5331] validate_chain+0xb9b/0x2140 [ 93.434413][ T5331] ? lockdep_unlock+0x89/0x120 [ 93.434423][ T5331] ? validate_chain+0x897/0x2140 [ 93.434432][ T5331] __lock_acquire+0xab9/0xd20 [ 93.434439][ T5331] ? hfsplus_block_allocate+0xa7/0xc40 [ 93.434446][ T5331] lock_acquire+0x120/0x360 [ 93.434452][ T5331] ? hfsplus_block_allocate+0xa7/0xc40 [ 93.434460][ T5331] __mutex_lock+0x187/0x1350 [ 93.434495][ T5331] ? hfsplus_block_allocate+0xa7/0xc40 [ 93.434509][ T5331] ? rcu_is_watching+0x15/0xb0 [ 93.434522][ T5331] ? trace_contention_end+0x39/0x120 [ 93.434535][ T5331] ? hfsplus_block_allocate+0xa7/0xc40 [ 93.434545][ T5331] ? __mutex_lock+0x335/0x1350 [ 93.434556][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 93.434567][ T5331] ? do_raw_spin_lock+0x121/0x290 [ 93.434582][ T5331] ? hfsplus_file_extend+0x1f8/0x1ba0 [ 93.434595][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 93.434607][ T5331] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 93.434617][ T5331] hfsplus_block_allocate+0xa7/0xc40 [ 93.434627][ T5331] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 93.434641][ T5331] hfsplus_file_extend+0xa9a/0x1ba0 [ 93.434653][ T5331] ? stack_depot_save_flags+0x41b/0x860 [ 93.434670][ T5331] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 93.434682][ T5331] ? generic_file_direct_write+0x1db/0x3e0 [ 93.434690][ T5331] ? __generic_file_write_iter+0x11d/0x230 [ 93.434695][ T5331] ? generic_file_write_iter+0x117/0x550 [ 93.434700][ T5331] ? iter_file_splice_write+0x975/0x10e0 [ 93.434709][ T5331] ? direct_splice_actor+0x101/0x160 [ 93.434716][ T5331] ? splice_direct_to_actor+0x5a8/0xcc0 [ 93.434724][ T5331] ? do_splice_direct+0x181/0x270 [ 93.434731][ T5331] ? do_sendfile+0x4da/0x7e0 [ 93.434743][ T5331] ? __se_sys_sendfile64+0x13e/0x190 [ 93.434755][ T5331] ? do_syscall_64+0xfa/0xfa0 [ 93.434768][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.434781][ T5331] hfsplus_get_block+0x40a/0x15d0 [ 93.434797][ T5331] ? __pfx_hfsplus_get_block+0x10/0x10 [ 93.434809][ T5331] ? submit_page_section+0x5f9/0xa40 [ 93.434826][ T5331] ? __pfx_hfsplus_get_block+0x10/0x10 [ 93.434838][ T5331] __blockdev_direct_IO+0x16ff/0x3490 [ 93.434851][ T5331] ? unwind_get_return_address+0x4d/0x90 [ 93.434873][ T5331] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 93.434888][ T5331] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 93.434899][ T5331] ? check_noncircular+0xe0/0x160 [ 93.434911][ T5331] ? __pfx_hfsplus_get_block+0x10/0x10 [ 93.434926][ T5331] ? filemap_write_and_wait_range+0x18a/0x320 [ 93.434942][ T5331] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 93.434965][ T5331] hfsplus_direct_IO+0x119/0x220 [ 93.434977][ T5331] generic_file_direct_write+0x1db/0x3e0 [ 93.434987][ T5331] ? file_update_time+0x416/0x490 [ 93.434998][ T5331] __generic_file_write_iter+0x11d/0x230 [ 93.435007][ T5331] ? generic_file_write_iter+0x103/0x550 [ 93.435017][ T5331] generic_file_write_iter+0x117/0x550 [ 93.435027][ T5331] ? __pfx_generic_file_write_iter+0x10/0x10 [ 93.435043][ T5331] ? splice_from_pipe_next+0x61d/0x670 [ 93.435058][ T5331] ? __asan_memset+0x22/0x50 [ 93.435069][ T5331] iter_file_splice_write+0x975/0x10e0 [ 93.435089][ T5331] ? __pfx_iter_file_splice_write+0x10/0x10 [ 93.435111][ T5331] ? rcu_read_lock_any_held+0xb3/0x120 [ 93.435129][ T5331] ? __pfx_iter_file_splice_write+0x10/0x10 [ 93.435144][ T5331] direct_splice_actor+0x101/0x160 [ 93.435159][ T5331] splice_direct_to_actor+0x5a8/0xcc0 [ 93.435177][ T5331] ? __pfx_direct_splice_actor+0x10/0x10 [ 93.435190][ T5331] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 93.435205][ T5331] do_splice_direct+0x181/0x270 [ 93.435219][ T5331] ? __pfx_do_splice_direct+0x10/0x10 [ 93.435232][ T5331] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 93.435247][ T5331] ? rw_verify_area+0x255/0x4d0 [ 93.435259][ T5331] do_sendfile+0x4da/0x7e0 [ 93.435276][ T5331] ? __pfx_do_sendfile+0x10/0x10 [ 93.435290][ T5331] ? __rseq_handle_notify_resume+0x384/0x1220 [ 93.435306][ T5331] ? __se_sys_futex+0x36f/0x400 [ 93.435320][ T5331] __se_sys_sendfile64+0x13e/0x190 [ 93.435334][ T5331] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 93.435349][ T5331] ? do_syscall_64+0xbe/0xfa0 [ 93.435362][ T5331] do_syscall_64+0xfa/0xfa0 [ 93.435373][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.435385][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.435395][ T5331] ? clear_bhb_loop+0x60/0xb0 [ 93.435403][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.435410][ T5331] RIP: 0033:0x7f905478efc9 [ 93.435419][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.435426][ T5331] RSP: 002b:00007f9055572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 93.435437][ T5331] RAX: ffffffffffffffda RBX: 00007f90549e5fa0 RCX: 00007f905478efc9 [ 93.435444][ T5331] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 93.435449][ T5331] RBP: 00007f9054811f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.435454][ T5331] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 93.435460][ T5331] R13: 00007f90549e6038 R14: 00007f90549e5fa0 R15: 00007ffd76becb78 [ 93.435472][ T5331] [ 93.683789][ T4666] Bluetooth: hci0: command tx timeout