program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "360eaaa013e289330440094ed7f4730b7a66023fde5aa8c8c0b1b5bc46e0e5dd04f8c56e28e05b11cad3bcb8ad73ce37922c741ed5d5a24e237c6874aaaa0039", 0x26}, 0x48, 0xfffffffffffffffe) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "360eaaa013e289330440094ed7f4730b7a66023fde5aa8c8c0b1b5bc46e0e5dd04f8c56e28e05b11cad3bcb8ad73ce37922c741ed5d5a24e237c6874aaaa0039", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x2108) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "98bcb94a4fdb3c8d33f986d2b6572f61fda1b1a60174e5015d5352217a275cd410ea0c76b32ac45e65b92df28b6f297396c8569e175ad27f118f7a96f5f9264a", 0x2c}, 0x48, 0xfffffffffffffffe) (async) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "98bcb94a4fdb3c8d33f986d2b6572f61fda1b1a60174e5015d5352217a275cd410ea0c76b32ac45e65b92df28b6f297396c8569e175ad27f118f7a96f5f9264a", 0x2c}, 0x48, 0xfffffffffffffffe) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x100001, 0x3, 0x0, 0x6, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffaffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x100001, 0x3, 0x0, 0x6, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffaffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) [ 86.672372][ T5319] Bluetooth: hci0: command tx timeout [ 86.766368][ T5345] loop0: detected capacity change from 0 to 1024 [ 86.880408][ T5346] loop0: detected capacity change from 1024 to 64 [ 86.893486][ T5345] syz.0.0: attempt to access beyond end of device [ 86.893486][ T5345] loop0: rw=8388608, sector=86, nr_sectors = 2 limit=64 [ 86.910585][ T5345] Buffer I/O error on dev loop0, logical block 43, async page read [ 86.914021][ T5345] syz.0.0: attempt to access beyond end of device [ 86.914021][ T5345] loop0: rw=8388608, sector=88, nr_sectors = 2 limit=64 [ 86.920618][ T5345] Buffer I/O error on dev loop0, logical block 44, async page read [ 86.924400][ T5345] syz.0.0: attempt to access beyond end of device [ 86.924400][ T5345] loop0: rw=8388608, sector=90, nr_sectors = 2 limit=64 [ 86.932008][ T5345] Buffer I/O error on dev loop0, logical block 45, async page read [ 86.935498][ T5345] syz.0.0: attempt to access beyond end of device [ 86.935498][ T5345] loop0: rw=8388608, sector=92, nr_sectors = 2 limit=64 [ 86.942782][ T5345] Buffer I/O error on dev loop0, logical block 46, async page read [ 86.946220][ T5345] hfsplus: xattr searching failed [ 86.953387][ T5345] syz.0.0: attempt to access beyond end of device [ 86.953387][ T5345] loop0: rw=8390665, sector=350, nr_sectors = 64 limit=64 [ 86.960306][ T5345] syz.0.0: attempt to access beyond end of device [ 86.960306][ T5345] loop0: rw=8390665, sector=414, nr_sectors = 12 limit=64 [ 86.971493][ T4111] kworker/u4:20: attempt to access beyond end of device [ 86.971493][ T4111] loop0: rw=1, sector=206, nr_sectors = 8 limit=64 [ 86.993395][ T4111] kworker/u4:20: attempt to access beyond end of device [ 86.993395][ T4111] loop0: rw=8388609, sector=288, nr_sectors = 2 limit=64 [ 86.999047][ T4111] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 87.020175][ T4111] kworker/u4:20: attempt to access beyond end of device [ 87.020175][ T4111] loop0: rw=8388609, sector=292, nr_sectors = 2 limit=64 [ 87.027699][ T5345] syz.0.0: attempt to access beyond end of device [ 87.027699][ T5345] loop0: rw=8388608, sector=86, nr_sectors = 2 limit=64 [ 87.039234][ T4111] Buffer I/O error on dev loop0, logical block 146, lost async page write [ 87.043944][ T5345] Buffer I/O error on dev loop0, logical block 43, async page read [ 87.047411][ T5345] Buffer I/O error on dev loop0, logical block 44, async page read [ 87.051653][ T4111] Buffer I/O error on dev loop0, logical block 149, lost async page write [ 87.055352][ T4111] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 87.060258][ T5345] hfsplus: xattr searching failed [ 87.063503][ T5345] [ 87.064555][ T5345] ====================================================== [ 87.067366][ T5345] WARNING: possible circular locking dependency detected [ 87.070921][ T5345] syzkaller #0 Not tainted [ 87.073266][ T5345] ------------------------------------------------------ [ 87.076315][ T5345] syz.0.0/5345 is trying to acquire lock: [ 87.078942][ T5345] ffff8880330020b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 87.083223][ T5345] [ 87.083223][ T5345] but task is already holding lock: [ 87.086493][ T5345] ffff8880422f3048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x1600 [ 87.091196][ T5345] [ 87.091196][ T5345] which lock already depends on the new lock. [ 87.091196][ T5345] [ 87.095412][ T5345] [ 87.095412][ T5345] the existing dependency chain (in reverse order) is: [ 87.099127][ T5345] [ 87.099127][ T5345] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 87.102949][ T5345] __mutex_lock+0x187/0x1350 [ 87.105697][ T5345] hfsplus_file_extend+0x1f8/0x1c30 [ 87.108083][ T5345] hfsplus_bmap_reserve+0x125/0x510 [ 87.110414][ T5345] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 87.113071][ T5345] __hfsplus_ext_cache_extent+0x89/0xe30 [ 87.115737][ T5345] hfsplus_file_extend+0x437/0x1c30 [ 87.118152][ T5345] hfsplus_get_block+0x40a/0x1600 [ 87.120537][ T5345] __block_write_begin_int+0x6b5/0x1900 [ 87.123253][ T5345] cont_write_begin+0x78c/0xb50 [ 87.125688][ T5345] hfsplus_write_begin+0x66/0xb0 [ 87.128201][ T5345] generic_perform_write+0x2c5/0x900 [ 87.130855][ T5345] generic_file_write_iter+0x117/0x550 [ 87.133603][ T5345] aio_write+0x535/0x7a0 [ 87.135713][ T5345] io_submit_one+0x775/0x1430 [ 87.138050][ T5345] __se_sys_io_submit+0x185/0x320 [ 87.140547][ T5345] do_syscall_64+0xec/0xf80 [ 87.142887][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.145659][ T5345] [ 87.145659][ T5345] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 87.149086][ T5345] __lock_acquire+0x15a6/0x2cf0 [ 87.151374][ T5345] lock_acquire+0x107/0x340 [ 87.153557][ T5345] __mutex_lock+0x187/0x1350 [ 87.155733][ T5345] hfsplus_find_init+0x168/0x2d0 [ 87.158192][ T5345] hfsplus_get_block+0x8dc/0x1600 [ 87.160617][ T5345] block_read_full_folio+0x29f/0x830 [ 87.163132][ T5345] read_pages+0x35d/0x580 [ 87.165276][ T5345] page_cache_ra_unbounded+0x750/0x990 [ 87.167786][ T5345] filemap_get_pages+0x468/0x1dc0 [ 87.170282][ T5345] filemap_read+0x3f6/0x11a0 [ 87.172445][ T5345] __kernel_read+0x4cf/0x960 [ 87.174808][ T5345] integrity_kernel_read+0x89/0xd0 [ 87.177303][ T5345] ima_calc_file_hash+0x85e/0x16f0 [ 87.179740][ T5345] ima_collect_measurement+0x428/0x8f0 [ 87.182291][ T5345] process_measurement+0x111e/0x1a70 [ 87.184754][ T5345] ima_file_check+0xd9/0x130 [ 87.186865][ T5345] security_file_post_open+0xbb/0x290 [ 87.189635][ T5345] path_openat+0x3456/0x3dd0 [ 87.191838][ T5345] do_filp_open+0x1fa/0x410 [ 87.194091][ T5345] do_sys_openat2+0x121/0x200 [ 87.196334][ T5345] __x64_sys_open+0x11e/0x150 [ 87.198622][ T5345] do_syscall_64+0xec/0xf80 [ 87.200888][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.203614][ T5345] [ 87.203614][ T5345] other info that might help us debug this: [ 87.203614][ T5345] [ 87.207840][ T5345] Possible unsafe locking scenario: [ 87.207840][ T5345] [ 87.211328][ T5345] CPU0 CPU1 [ 87.214150][ T5345] ---- ---- [ 87.216553][ T5345] lock(&HFSPLUS_I(inode)->extents_lock); [ 87.219126][ T5345] lock(&tree->tree_lock/1); [ 87.222284][ T5345] lock(&HFSPLUS_I(inode)->extents_lock); [ 87.225958][ T5345] lock(&tree->tree_lock/1); [ 87.228163][ T5345] [ 87.228163][ T5345] *** DEADLOCK *** [ 87.228163][ T5345] [ 87.231725][ T5345] 4 locks held by syz.0.0/5345: [ 87.233873][ T5345] #0: ffff888042024420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 87.237852][ T5345] #1: ffff888040e0e5b8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x74e/0x1a70 [ 87.242490][ T5345] #2: ffff8880422f33d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x1cf/0x990 [ 87.247305][ T5345] #3: ffff8880422f3048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x1600 [ 87.252378][ T5345] [ 87.252378][ T5345] stack backtrace: [ 87.255165][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.255183][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.255190][ T5345] Call Trace: [ 87.255198][ T5345] [ 87.255204][ T5345] dump_stack_lvl+0xe8/0x150 [ 87.255221][ T5345] print_circular_bug+0x2e2/0x300 [ 87.255235][ T5345] check_noncircular+0x12e/0x150 [ 87.255248][ T5345] __lock_acquire+0x15a6/0x2cf0 [ 87.255261][ T5345] ? stack_depot_save_flags+0x40e/0x810 [ 87.255279][ T5345] ? hfsplus_find_init+0x168/0x2d0 [ 87.255293][ T5345] lock_acquire+0x107/0x340 [ 87.255302][ T5345] ? hfsplus_find_init+0x168/0x2d0 [ 87.255318][ T5345] __mutex_lock+0x187/0x1350 [ 87.255329][ T5345] ? hfsplus_find_init+0x168/0x2d0 [ 87.255345][ T5345] ? hfsplus_find_init+0x168/0x2d0 [ 87.255359][ T5345] ? __pfx___mutex_lock+0x10/0x10 [ 87.255370][ T5345] ? rcu_is_watching+0x15/0xb0 [ 87.255382][ T5345] ? trace_kmalloc+0x1f/0xb0 [ 87.255395][ T5345] ? __kmalloc_noprof+0x43e/0x800 [ 87.255408][ T5345] ? hfsplus_find_init+0x8c/0x2d0 [ 87.255422][ T5345] hfsplus_find_init+0x168/0x2d0 [ 87.255461][ T5345] hfsplus_get_block+0x8dc/0x1600 [ 87.255475][ T5345] ? __pfx_hfsplus_get_block+0x10/0x10 [ 87.255487][ T5345] ? block_read_full_folio+0x672/0x830 [ 87.255502][ T5345] block_read_full_folio+0x29f/0x830 [ 87.255517][ T5345] ? __pfx_hfsplus_get_block+0x10/0x10 [ 87.255528][ T5345] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 87.255537][ T5345] read_pages+0x35d/0x580 [ 87.255553][ T5345] ? __pfx_read_pages+0x10/0x10 [ 87.255567][ T5345] ? filemap_add_folio+0x35f/0x540 [ 87.255581][ T5345] page_cache_ra_unbounded+0x750/0x990 [ 87.255597][ T5345] filemap_get_pages+0x468/0x1dc0 [ 87.255610][ T5345] ? __lock_acquire+0x6b6/0x2cf0 [ 87.255625][ T5345] ? __pfx_filemap_get_pages+0x10/0x10 [ 87.255639][ T5345] ? unwind_next_frame+0xa5/0x23d0 [ 87.255656][ T5345] filemap_read+0x3f6/0x11a0 [ 87.255671][ T5345] ? kernel_text_address+0xa5/0xe0 [ 87.255685][ T5345] ? __kernel_text_address+0xd/0x40 [ 87.255699][ T5345] ? __pfx_filemap_read+0x10/0x10 [ 87.255717][ T5345] ? generic_file_read_iter+0x8f/0x510 [ 87.255730][ T5345] ? __asan_memset+0x22/0x50 [ 87.255743][ T5345] ? iov_iter_kvec+0xb8/0x180 [ 87.255753][ T5345] __kernel_read+0x4cf/0x960 [ 87.255769][ T5345] ? __pfx___kernel_read+0x10/0x10 [ 87.255798][ T5345] integrity_kernel_read+0x89/0xd0 [ 87.255811][ T5345] ? __pfx_integrity_kernel_read+0x10/0x10 [ 87.255821][ T5345] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 87.255835][ T5345] ? ima_calc_file_hash+0x820/0x16f0 [ 87.255847][ T5345] ? __asan_memcpy+0x40/0x70 [ 87.255867][ T5345] ima_calc_file_hash+0x85e/0x16f0 [ 87.255880][ T5345] ? unwind_next_frame+0xa5/0x23d0 [ 87.255894][ T5345] ? __lock_acquire+0x6b6/0x2cf0 [ 87.255904][ T5345] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 87.255923][ T5345] ? lockdep_hardirqs_on+0x7b/0x110 [ 87.255932][ T5345] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.255946][ T5345] ? stack_depot_save_flags+0x3f3/0x810 [ 87.255960][ T5345] ? kasan_save_track+0x4f/0x80 [ 87.255974][ T5345] ? kasan_save_track+0x3e/0x80 [ 87.255986][ T5345] ? make_vfsgid+0x49/0xa0 [ 87.256001][ T5345] ? generic_fillattr+0x63d/0x9a0 [ 87.256013][ T5345] ? hfsplus_getattr+0x235/0x2f0 [ 87.256025][ T5345] ima_collect_measurement+0x428/0x8f0 [ 87.256041][ T5345] ? __pfx_ima_collect_measurement+0x10/0x10 [ 87.256057][ T5345] ? kasan_quarantine_put+0xbb/0x1f0 [ 87.256071][ T5345] ? hfsplus_getxattr+0x118/0x180 [ 87.256080][ T5345] ? kfree+0x1c0/0x660 [ 87.256095][ T5345] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 87.256107][ T5345] process_measurement+0x111e/0x1a70 [ 87.256121][ T5345] ? __pfx_process_measurement+0x10/0x10 [ 87.256134][ T5345] ? tomoyo_check_open_permission+0x325/0x3b0 [ 87.256149][ T5345] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 87.256169][ T5345] ? mnt_get_write_access+0x66/0x280 [ 87.256183][ T5345] ima_file_check+0xd9/0x130 [ 87.256195][ T5345] ? __pfx_ima_file_check+0x10/0x10 [ 87.256208][ T5345] security_file_post_open+0xbb/0x290 [ 87.256223][ T5345] path_openat+0x3456/0x3dd0 [ 87.256245][ T5345] ? __pfx_path_openat+0x10/0x10 [ 87.256261][ T5345] do_filp_open+0x1fa/0x410 [ 87.256280][ T5345] ? __pfx_do_filp_open+0x10/0x10 [ 87.256297][ T5345] ? _raw_spin_unlock+0x28/0x50 [ 87.256308][ T5345] ? alloc_fd+0x64c/0x6c0 [ 87.256320][ T5345] do_sys_openat2+0x121/0x200 [ 87.256335][ T5345] ? __se_sys_futex+0x36f/0x400 [ 87.256346][ T5345] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.256358][ T5345] ? rcu_is_watching+0x15/0xb0 [ 87.256370][ T5345] __x64_sys_open+0x11e/0x150 [ 87.256386][ T5345] do_syscall_64+0xec/0xf80 [ 87.256396][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.256406][ T5345] ? trace_irq_disable+0x37/0x100 [ 87.256419][ T5345] ? clear_bhb_loop+0x60/0xb0 [ 87.256430][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.256439][ T5345] RIP: 0033:0x7f122bd8f7c9 [ 87.256451][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.256459][ T5345] RSP: 002b:00007f122cb84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.256471][ T5345] RAX: ffffffffffffffda RBX: 00007f122bfe5fa0 RCX: 00007f122bd8f7c9 [ 87.256478][ T5345] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140 [ 87.256484][ T5345] RBP: 00007f122be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.256491][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.256496][ T5345] R13: 00007f122bfe6038 R14: 00007f122bfe5fa0 R15: 00007fff55036968 [ 87.256507][ T5345] [ 87.511882][ T26] audit: type=1800 audit(1766878251.848:2): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 87.520816][ T5345] hfsplus: xattr searching failed