Extracting prog: 2m34.575344097s Minimizing prog: 54m46.578230168s Simplifying prog options: 0s Extracting C: 24.773344485s Simplifying C: 4m59.074223319s 1 programs, 3 VMs, timeouts [15s 6m0s] extracting reproducer from 1 programs single: executing 1 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) write(r0, &(0x7f0000004200)="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", 0xffe00) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) write(r0, &(0x7f0000004200)="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", 0xffe00) program crashed: possible deadlock in hfs_find_init single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$eJzs3c9OE1EUx/HfHQaYCsERMCbGhUFJjAsjuDFuNIaHcGVUWhPiBBPAKGxE18YHcO8r+BCujC/gSlc+QFeOuXdu6ZR2ZvjTMoLfT0I7nd4zPbfz597ThIwA/Lcervz4fOeX/TPSmMYk3ZMCpYqkUNJFXYperW+tbSWtZtmGxmQj7J9RFmn62hi1BoXaOBfhxfZVqOloCP1DuSidbPjFicPGppm3w88KJ82d/Wr0rQ+kSX922muDzso5uVt3AjUzbbX1RjN15wEAqFc2/tvh3j1P+/l7EEiLftg/U+N/u+4ERqJ//lYkN/67yis1dv+ed2916z1Xwtn3g06VeJSsXGER+ANoL4GqqtLlEjSeryWtW6svk2ag97rv5ZrNu8dmduh2+Gzdwfquf9MLA2rTEkfv+5Trw7jtw3JB/nPD/cRq5qv5Zh6bWJ/U3Jv/hamxu8ntqXjfnsryv128RdfLOGtV0MsL7kMu9xaZFb2MsjT++DIz/9aE32aYTzWuytNFzfb81NDp3VJF1NzAqOWKqPn9UXtH80/7MikOHyHz0TwyC/qtL1rJzf8D+00u6iBnpm3jWgbjDfuN27OzsGXoWsb5VbtXBrYMDrAGx+YvfR/0THc1s7m9M/E0SVobm9s7L1goX/BXonTknxWOuDudY+Gf+FaPu6C4tdFO07TufB5c1XA3aMeQ+rpT4yUKJ6a70+vOBDWxsyyT1X9TUXe+7+YJ9iEumaenvS/7y6pcBbTUrQ2Urw1m3eO57nTv5uvsuaQ2mCqu4A5ac127IV3PrayoRmKf5xlhVvRdT/j9HwAAAAAAAAAAAAAAAAAA4LQ5iX8nqLuPAAAAAAAAAAAAAAAAAAAAAACcdkX3/9Uo7v+7un6o+//23jwHwLD9DQAA//9SVYus") write(0xffffffffffffffff, &(0x7f0000004200)="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", 0xffe00) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-write detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) write(r0, &(0x7f0000004200)="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", 0xffe00) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143842, 0x0) write(r0, &(0x7f0000004200)="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", 0xffe00) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$eJzs3c9OE1EUx/HfHQaYCsERMCbGhUFJjAsjuDFuNIaHcGVUWhPiBBPAKGxE18YHcO8r+BCujC/gSlc+QFeOuXdu6ZR2ZvjTMoLfT0I7nd4zPbfz597ThIwA/Lcervz4fOeX/TPSmMYk3ZMCpYqkUNJFXYperW+tbSWtZtmGxmQj7J9RFmn62hi1BoXaOBfhxfZVqOloCP1DuSidbPjFicPGppm3w88KJ82d/Wr0rQ+kSX922muDzso5uVt3AjUzbbX1RjN15wEAqFc2/tvh3j1P+/l7EEiLftg/U+N/u+4ERqJ//lYkN/67yis1dv+ed2916z1Xwtn3g06VeJSsXGER+ANoL4GqqtLlEjSeryWtW6svk2ag97rv5ZrNu8dmduh2+Gzdwfquf9MLA2rTEkfv+5Trw7jtw3JB/nPD/cRq5qv5Zh6bWJ/U3Jv/hamxu8ntqXjfnsryv128RdfLOGtV0MsL7kMu9xaZFb2MsjT++DIz/9aE32aYTzWuytNFzfb81NDp3VJF1NzAqOWKqPn9UXtH80/7MikOHyHz0TwyC/qtL1rJzf8D+00u6iBnpm3jWgbjDfuN27OzsGXoWsb5VbtXBrYMDrAGx+YvfR/0THc1s7m9M/E0SVobm9s7L1goX/BXonTknxWOuDudY+Gf+FaPu6C4tdFO07TufB5c1XA3aMeQ+rpT4yUKJ6a70+vOBDWxsyyT1X9TUXe+7+YJ9iEumaenvS/7y6pcBbTUrQ2Urw1m3eO57nTv5uvsuaQ2mCqu4A5ac127IV3PrayoRmKf5xlhVvRdT/j9HwAAAAAAAAAAAAAAAAAA4LQ5iX8nqLuPAAAAAAAAAAAAAAAAAAAAAACcdkX3/9Uo7v+7un6o+//23jwHwLD9DQAA//9SVYus") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) write(r0, 0x0, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write detailed listing: executing program 0: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x2a6, &(0x7f0000000c00)="$eJzs3c9OE1EUx/HfHQaYCsERMCbGhUFJjAsjuDFuNIaHcGVUWhPiBBPAKGxE18YHcO8r+BCujC/gSlc+QFeOuXdu6ZR2ZvjTMoLfT0I7nd4zPbfz597ThIwA/Lcervz4fOeX/TPSmMYk3ZMCpYqkUNJFXYperW+tbSWtZtmGxmQj7J9RFmn62hi1BoXaOBfhxfZVqOloCP1DuSidbPjFicPGppm3w88KJ82d/Wr0rQ+kSX922muDzso5uVt3AjUzbbX1RjN15wEAqFc2/tvh3j1P+/l7EEiLftg/U+N/u+4ERqJ//lYkN/67yis1dv+ed2916z1Xwtn3g06VeJSsXGER+ANoL4GqqtLlEjSeryWtW6svk2ag97rv5ZrNu8dmduh2+Gzdwfquf9MLA2rTEkfv+5Trw7jtw3JB/nPD/cRq5qv5Zh6bWJ/U3Jv/hamxu8ntqXjfnsryv128RdfLOGtV0MsL7kMu9xaZFb2MsjT++DIz/9aE32aYTzWuytNFzfb81NDp3VJF1NzAqOWKqPn9UXtH80/7MikOHyHz0TwyC/qtL1rJzf8D+00u6iBnpm3jWgbjDfuN27OzsGXoWsb5VbtXBrYMDrAGx+YvfR/0THc1s7m9M/E0SVobm9s7L1goX/BXonTknxWOuDudY+Gf+FaPu6C4tdFO07TufB5c1XA3aMeQ+rpT4yUKJ6a70+vOBDWxsyyT1X9TUXe+7+YJ9iEumaenvS/7y6pcBbTUrQ2Urw1m3eO57nTv5uvsuaQ2mCqu4A5ac127IV3PrayoRmKf5xlhVvRdT/j9HwAAAAAAAAAAAAAAAAAA4LQ5iX8nqLuPAAAAAAAAAAAAAAAAAAAAAACcdkX3/9Uo7v+7un6o+//23jwHwLD9DQAA//9SVYus") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143842, 0x0) write(r0, &(0x7f0000004200), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat-write program crashed: possible deadlock in hfs_find_init reproducing took 1h2m45.001161499s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 64 ============================================ WARNING: possible recursive locking detected 5.15.160-syzkaller #0 Not tainted -------------------------------------------- syz-executor674/3966 is trying to acquire lock: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 but task is already holding lock: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&tree->tree_lock/1); lock(&tree->tree_lock/1); *** DEADLOCK *** May be due to missing lock nesting notation 5 locks held by syz-executor674/3966: #0: ffff0000c9ca0460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x228/0xb3c fs/read_write.c:590 #1: ffff0000d86c1628 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:789 [inline] #1: ffff0000d86c1628 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: generic_file_write_iter+0x84/0x1b8 mm/filemap.c:3941 #2: ffff0000d86c1478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x10e4 fs/hfs/extent.c:397 #3: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 #4: ffff0000d86c00f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x10e4 fs/hfs/extent.c:397 stack backtrace: CPU: 0 PID: 3966 Comm: syz-executor674 Not tainted 5.15.160-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call trace: dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 __lock_acquire+0x62bc/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 hfs_find_init+0x148/0x1c8 hfs_ext_read_extent fs/hfs/extent.c:200 [inline] hfs_extend_file+0x24c/0x10e4 fs/hfs/extent.c:401 hfs_bmap_reserve+0xd0/0x3b4 fs/hfs/btree.c:231 __hfs_ext_write_extent+0x1a0/0x468 fs/hfs/extent.c:121 __hfs_ext_cache_extent+0x84/0x754 fs/hfs/extent.c:174 hfs_ext_read_extent fs/hfs/extent.c:202 [inline] hfs_extend_file+0x278/0x10e4 fs/hfs/extent.c:401 hfs_get_block+0x3ac/0x9fc fs/hfs/extent.c:353 __block_write_begin_int+0x3ec/0x1608 fs/buffer.c:2012 __block_write_begin fs/buffer.c:2062 [inline] block_write_begin fs/buffer.c:2122 [inline] cont_write_begin+0x538/0x710 fs/buffer.c:2471 hfs_write_begin+0xa8/0xf8 fs/hfs/inode.c:59 generic_perform_write+0x24c/0x520 mm/filemap.c:3785 __generic_file_write_iter+0x230/0x454 mm/filemap.c:3912 generic_file_write_iter+0xb4/0x1b8 mm/filemap.c:3944 call_write_iter include/linux/fs.h:2172 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x87c/0xb3c fs/read_write.c:594 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 64 ============================================ WARNING: possible recursive locking detected 5.15.160-syzkaller #0 Not tainted -------------------------------------------- syz-executor674/3966 is trying to acquire lock: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 but task is already holding lock: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&tree->tree_lock/1); lock(&tree->tree_lock/1); *** DEADLOCK *** May be due to missing lock nesting notation 5 locks held by syz-executor674/3966: #0: ffff0000c9ca0460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x228/0xb3c fs/read_write.c:590 #1: ffff0000d86c1628 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:789 [inline] #1: ffff0000d86c1628 (&sb->s_type->i_mutex_key#17){+.+.}-{3:3}, at: generic_file_write_iter+0x84/0x1b8 mm/filemap.c:3941 #2: ffff0000d86c1478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x10e4 fs/hfs/extent.c:397 #3: ffff0000c9ad60b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x148/0x1c8 #4: ffff0000d86c00f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe4/0x10e4 fs/hfs/extent.c:397 stack backtrace: CPU: 0 PID: 3966 Comm: syz-executor674 Not tainted 5.15.160-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call trace: dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 __lock_acquire+0x62bc/0x7638 kernel/locking/lockdep.c:5012 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5623 __mutex_lock_common+0x194/0x2154 kernel/locking/mutex.c:596 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0xa4/0xf8 kernel/locking/mutex.c:743 hfs_find_init+0x148/0x1c8 hfs_ext_read_extent fs/hfs/extent.c:200 [inline] hfs_extend_file+0x24c/0x10e4 fs/hfs/extent.c:401 hfs_bmap_reserve+0xd0/0x3b4 fs/hfs/btree.c:231 __hfs_ext_write_extent+0x1a0/0x468 fs/hfs/extent.c:121 __hfs_ext_cache_extent+0x84/0x754 fs/hfs/extent.c:174 hfs_ext_read_extent fs/hfs/extent.c:202 [inline] hfs_extend_file+0x278/0x10e4 fs/hfs/extent.c:401 hfs_get_block+0x3ac/0x9fc fs/hfs/extent.c:353 __block_write_begin_int+0x3ec/0x1608 fs/buffer.c:2012 __block_write_begin fs/buffer.c:2062 [inline] block_write_begin fs/buffer.c:2122 [inline] cont_write_begin+0x538/0x710 fs/buffer.c:2471 hfs_write_begin+0xa8/0xf8 fs/hfs/inode.c:59 generic_perform_write+0x24c/0x520 mm/filemap.c:3785 __generic_file_write_iter+0x230/0x454 mm/filemap.c:3912 generic_file_write_iter+0xb4/0x1b8 mm/filemap.c:3944 call_write_iter include/linux/fs.h:2172 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x87c/0xb3c fs/read_write.c:594 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584