program: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24}}, @TCA_RATE={0x6}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x0, 0x4, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x1, 0x2, 0x4}}) open(&(0x7f00000005c0)='./bus\x00', 0x80002, 0x8) (async) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x80002, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x1, @ANYBLOB="8f0600"/20, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x1, @ANYBLOB="8f0600"/20, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001380)={'wg2\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r13}, @IFLA_HSR_SLAVE1={0x8, 0x1, r15}]}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000013c0)={'batadv0\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r18}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'ip6gretap0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002200)={&(0x7f00000014c0)={0xd2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x9, 0x5, 0x22d668d7}, {0x7, 0x1, 0x4, 0x8}, {0xc7e8, 0xc3, 0x2}, {0xf, 0x0, 0x77, 0x3}, {0xff52, 0x0, 0xd5}, {0x6, 0x0, 0x5, 0x40}, {0xfffb, 0x4, 0xa, 0x800}, {0x5, 0xa, 0x4, 0x1}, {0x8, 0x3, 0x5, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xa4e0, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x6, 0x800}, {0x3, 0x0, 0xff, 0x6}, {0x200, 0x6, 0x7, 0xfffffffe}, {0x6, 0x4, 0x9, 0x5}, {0xe2a, 0x0, 0x8, 0x7}, {0xb, 0x6, 0x2, 0x7f}]}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc72}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1a7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0xd2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002200)={&(0x7f00000014c0)={0xd2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x9, 0x5, 0x22d668d7}, {0x7, 0x1, 0x4, 0x8}, {0xc7e8, 0xc3, 0x2}, {0xf, 0x0, 0x77, 0x3}, {0xff52, 0x0, 0xd5}, {0x6, 0x0, 0x5, 0x40}, {0xfffb, 0x4, 0xa, 0x800}, {0x5, 0xa, 0x4, 0x1}, {0x8, 0x3, 0x5, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xa4e0, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x6, 0x800}, {0x3, 0x0, 0xff, 0x6}, {0x200, 0x6, 0x7, 0xfffffffe}, {0x6, 0x4, 0x9, 0x5}, {0xe2a, 0x0, 0x8, 0x7}, {0xb, 0x6, 0x2, 0x7f}]}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc72}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1a7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0xd2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000000)=ANY=[], 0xfd, 0x651, &(0x7f0000000400)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '@:\'\x00'}) [ 75.157477][ T4702] Bluetooth: hci0: command tx timeout [ 75.190082][ T5353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.215142][ T5353] netem: change failed [ 75.233722][ T5353] batadv0: entered promiscuous mode [ 75.237885][ T5353] batadv_slave_0: entered promiscuous mode [ 75.240695][ T5353] batadv_slave_0: left promiscuous mode [ 75.244109][ T5353] batadv0: left promiscuous mode [ 75.291988][ T5354] loop0: detected capacity change from 0 to 1024 [ 75.330479][ T5353] [ 75.331595][ T5353] ============================================ [ 75.334292][ T5353] WARNING: possible recursive locking detected [ 75.337003][ T5353] 6.17.0-rc1-syzkaller #0 Not tainted [ 75.339383][ T5353] -------------------------------------------- [ 75.341951][ T5353] syz.0.0/5353 is trying to acquire lock: [ 75.344417][ T5353] ffff888052dc8108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 75.349169][ T5353] [ 75.349169][ T5353] but task is already holding lock: [ 75.352388][ T5353] ffff888052dc8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 75.356962][ T5353] [ 75.356962][ T5353] other info that might help us debug this: [ 75.360291][ T5353] Possible unsafe locking scenario: [ 75.360291][ T5353] [ 75.363622][ T5353] CPU0 [ 75.364991][ T5353] ---- [ 75.366390][ T5353] lock(&HFSPLUS_I(inode)->extents_lock); [ 75.368741][ T5353] lock(&HFSPLUS_I(inode)->extents_lock); [ 75.371300][ T5353] [ 75.371300][ T5353] *** DEADLOCK *** [ 75.371300][ T5353] [ 75.374979][ T5353] May be due to missing lock nesting notation [ 75.374979][ T5353] [ 75.379296][ T5353] 6 locks held by syz.0.0/5353: [ 75.381565][ T5353] #0: ffff88801197a428 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 75.385494][ T5353] #1: ffff888052dca4b8 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: vfs_removexattr+0x6c/0x1b0 [ 75.389658][ T5353] #2: ffff8880003aa0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 75.393778][ T5353] #3: ffff8880003a80b0 (&tree->tree_lock/2){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 75.398478][ T5353] #4: ffff888052dc8e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 75.403652][ T5353] #5: ffff8880003ae0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 75.408090][ T5353] [ 75.408090][ T5353] stack backtrace: [ 75.410972][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 75.410990][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.410996][ T5353] Call Trace: [ 75.411004][ T5353] [ 75.411011][ T5353] dump_stack_lvl+0x189/0x250 [ 75.411030][ T5353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.411042][ T5353] ? __pfx__printk+0x10/0x10 [ 75.411057][ T5353] ? lockdep_unlock+0x89/0x120 [ 75.411073][ T5353] ? print_lock_name+0xde/0x100 [ 75.411086][ T5353] print_deadlock_bug+0x28b/0x2a0 [ 75.411097][ T5353] validate_chain+0x1a3f/0x2140 [ 75.411108][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.411119][ T5353] ? __switch_to+0xdae/0x1670 [ 75.411135][ T5353] ? look_up_lock_class+0x74/0x170 [ 75.411205][ T5353] ? register_lock_class+0x51/0x320 [ 75.411221][ T5353] __lock_acquire+0xab9/0xd20 [ 75.411236][ T5353] ? hfsplus_file_extend+0x1fc/0x1990 [ 75.411248][ T5353] lock_acquire+0x120/0x360 [ 75.411262][ T5353] ? hfsplus_file_extend+0x1fc/0x1990 [ 75.411276][ T5353] __mutex_lock+0x187/0x1360 [ 75.411290][ T5353] ? hfsplus_file_extend+0x1fc/0x1990 [ 75.411301][ T5353] ? check_path+0x21/0x40 [ 75.411312][ T5353] ? hfsplus_file_extend+0x1fc/0x1990 [ 75.411323][ T5353] ? __pfx___mutex_lock+0x10/0x10 [ 75.411336][ T5353] ? __pfx___schedule+0x10/0x10 [ 75.411349][ T5353] ? irqentry_exit+0x74/0x90 [ 75.411361][ T5353] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.411373][ T5353] hfsplus_file_extend+0x1fc/0x1990 [ 75.411383][ T5353] ? preempt_schedule+0xae/0xc0 [ 75.411395][ T5353] ? preempt_schedule_common+0x83/0xd0 [ 75.411408][ T5353] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 75.411417][ T5353] ? __pfx___mutex_trylock_common+0x10/0x10 [ 75.411438][ T5353] ? preempt_schedule_thunk+0x16/0x30 [ 75.411449][ T5353] ? __mutex_lock+0x349/0x1360 [ 75.411462][ T5353] ? hfsplus_brec_find+0x191/0x500 [ 75.411478][ T5353] hfsplus_bmap_reserve+0x122/0x500 [ 75.411493][ T5353] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 75.411505][ T5353] __hfsplus_ext_cache_extent+0x89/0xe30 [ 75.411516][ T5353] hfsplus_file_extend+0x444/0x1990 [ 75.411529][ T5353] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 75.411542][ T5353] ? __pfx___mutex_lock+0x10/0x10 [ 75.411557][ T5353] hfsplus_bmap_reserve+0x122/0x500 [ 75.411572][ T5353] hfsplus_delete_attr+0x13e/0x2d0 [ 75.411589][ T5353] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 75.411604][ T5353] ? hfsplus_find_init+0x8c/0x1d0 [ 75.411619][ T5353] ? hfsplus_find_init+0x15a/0x1d0 [ 75.411633][ T5353] __hfsplus_setxattr+0x768/0x1fe0 [ 75.411648][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.411659][ T5353] ? lock_release+0x4b/0x3e0 [ 75.411673][ T5353] ? lock_release+0x4b/0x3e0 [ 75.411687][ T5353] ? is_bpf_text_address+0x292/0x2b0 [ 75.411703][ T5353] ? is_bpf_text_address+0x26/0x2b0 [ 75.411718][ T5353] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 75.411733][ T5353] ? arch_stack_walk+0xfc/0x150 [ 75.411758][ T5353] ? posix_xattr_acl+0x93/0xc0 [ 75.411770][ T5353] ? evm_protect_xattr+0x4d4/0xa90 [ 75.411781][ T5353] ? hfsplus_osx_setxattr+0xc2/0x110 [ 75.411790][ T5353] ? __pfx_hfsplus_osx_setxattr+0x10/0x10 [ 75.411800][ T5353] __vfs_removexattr+0x431/0x470 [ 75.411817][ T5353] __vfs_removexattr_locked+0x1ed/0x230 [ 75.411832][ T5353] vfs_removexattr+0x80/0x1b0 [ 75.411846][ T5353] path_removexattrat+0x35d/0x690 [ 75.411857][ T5353] ? __pfx_path_removexattrat+0x10/0x10 [ 75.411875][ T5353] ? rcu_is_watching+0x15/0xb0 [ 75.411887][ T5353] __x64_sys_removexattr+0x62/0x70 [ 75.411903][ T5353] do_syscall_64+0xfa/0x3b0 [ 75.411914][ T5353] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.411926][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.411936][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 75.411948][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.411958][ T5353] RIP: 0033:0x7fb60298ebe9 [ 75.411970][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.411979][ T5353] RSP: 002b:00007fb603722038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 75.411993][ T5353] RAX: ffffffffffffffda RBX: 00007fb602bb5fa0 RCX: 00007fb60298ebe9 [ 75.412000][ T5353] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 75.412008][ T5353] RBP: 00007fb602a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.412015][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.412021][ T5353] R13: 00007fb602bb6038 R14: 00007fb602bb5fa0 R15: 00007ffe288f01c8 [ 75.412032][ T5353] [ 76.368771][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.371767][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.167259][ T4702] Bluetooth: hci0: command tx timeout [ 79.247483][ T4702] Bluetooth: hci0: command tx timeout [ 81.327225][ T4702] Bluetooth: hci0: command tx timeout