program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x10) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2200850, &(0x7f0000000000)=ANY=[], 0x41, 0x5a57, &(0x7f0000005580)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x4002, 0x7fff) fallocate(r1, 0x0, 0x0, 0x1001f0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x70000}]) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_NEWNSID={0x1c, 0x58, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) ptrace$cont(0x21, r8, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000100)='net/ipv6_route\x00') [ 85.463304][ T5322] Bluetooth: hci0: command tx timeout [ 85.539823][ T5348] loop0: detected capacity change from 0 to 1024 [ 85.856097][ T25] audit: type=1800 audit(1752181854.302:2): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 85.873373][ T5348] [ 85.874436][ T5348] ====================================================== [ 85.877369][ T5348] WARNING: possible circular locking dependency detected [ 85.880371][ T5348] 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 Not tainted [ 85.883316][ T5348] ------------------------------------------------------ [ 85.886419][ T5348] syz.0.0/5348 is trying to acquire lock: [ 85.888910][ T5348] ffff888053464108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 85.893539][ T5348] [ 85.893539][ T5348] but task is already holding lock: [ 85.896512][ T5348] ffff88803303c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.900436][ T5348] [ 85.900436][ T5348] which lock already depends on the new lock. [ 85.900436][ T5348] [ 85.904770][ T5348] [ 85.904770][ T5348] the existing dependency chain (in reverse order) is: [ 85.908586][ T5348] [ 85.908586][ T5348] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.911988][ T5348] lock_acquire+0x120/0x360 [ 85.914149][ T5348] __mutex_lock+0x182/0xe80 [ 85.916254][ T5348] hfsplus_find_init+0x15a/0x1d0 [ 85.918549][ T5348] hfsplus_get_block+0x8dd/0x1530 [ 85.920969][ T5348] block_read_full_folio+0x29f/0x830 [ 85.923453][ T5348] read_pages+0x35d/0x580 [ 85.925782][ T5348] page_cache_ra_unbounded+0x6b0/0x7b0 [ 85.928329][ T5348] filemap_get_pages+0x43c/0x1ea0 [ 85.930634][ T5348] filemap_read+0x3f6/0x11a0 [ 85.932892][ T5348] __kernel_read+0x469/0x8c0 [ 85.935096][ T5348] integrity_kernel_read+0x89/0xd0 [ 85.937422][ T5348] ima_calc_file_hash+0x85e/0x16f0 [ 85.939951][ T5348] ima_collect_measurement+0x428/0x8d0 [ 85.942710][ T5348] process_measurement+0x1121/0x1a40 [ 85.945396][ T5348] ima_file_check+0xd7/0x120 [ 85.947533][ T5348] security_file_post_open+0xbb/0x290 [ 85.950286][ T5348] path_openat+0x2f26/0x3830 [ 85.952620][ T5348] do_filp_open+0x1fa/0x410 [ 85.954848][ T5348] do_sys_openat2+0x121/0x1c0 [ 85.957142][ T5348] __x64_sys_open+0x11e/0x150 [ 85.959460][ T5348] do_syscall_64+0xfa/0x3b0 [ 85.961623][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.964337][ T5348] [ 85.964337][ T5348] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.968174][ T5348] validate_chain+0xb9b/0x2140 [ 85.970553][ T5348] __lock_acquire+0xab9/0xd20 [ 85.972666][ T5348] lock_acquire+0x120/0x360 [ 85.974719][ T5348] __mutex_lock+0x182/0xe80 [ 85.976802][ T5348] hfsplus_file_extend+0x1fc/0x1990 [ 85.979359][ T5348] hfsplus_bmap_reserve+0x122/0x500 [ 85.981785][ T5348] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.984634][ T5348] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.988286][ T5348] hfsplus_file_extend+0x444/0x1990 [ 85.991023][ T5348] hfsplus_get_block+0x411/0x1530 [ 85.993418][ T5348] __block_write_begin_int+0x6b5/0x1900 [ 85.996062][ T5348] cont_write_begin+0x789/0xb50 [ 85.998352][ T5348] hfsplus_write_begin+0x66/0xb0 [ 86.000435][ T5348] generic_perform_write+0x2c7/0x910 [ 86.002945][ T5348] generic_file_write_iter+0x10f/0x540 [ 86.005340][ T5348] aio_write+0x532/0x7a0 [ 86.007353][ T5348] io_submit_one+0x78b/0x1310 [ 86.009572][ T5348] __se_sys_io_submit+0x185/0x2f0 [ 86.011987][ T5348] do_syscall_64+0xfa/0x3b0 [ 86.014157][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.016950][ T5348] [ 86.016950][ T5348] other info that might help us debug this: [ 86.016950][ T5348] [ 86.021289][ T5348] Possible unsafe locking scenario: [ 86.021289][ T5348] [ 86.024475][ T5348] CPU0 CPU1 [ 86.026818][ T5348] ---- ---- [ 86.029180][ T5348] lock(&tree->tree_lock/1); [ 86.031228][ T5348] lock(&HFSPLUS_I(inode)->extents_lock); [ 86.034710][ T5348] lock(&tree->tree_lock/1); [ 86.037594][ T5348] lock(&HFSPLUS_I(inode)->extents_lock); [ 86.040032][ T5348] [ 86.040032][ T5348] *** DEADLOCK *** [ 86.040032][ T5348] [ 86.043257][ T5348] 3 locks held by syz.0.0/5348: [ 86.045374][ T5348] #0: ffff888053467238 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: generic_file_write_iter+0xe3/0x540 [ 86.050057][ T5348] #1: ffff888053467048 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 86.054465][ T5348] #2: ffff88803303c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 86.058661][ T5348] [ 86.058661][ T5348] stack backtrace: [ 86.060871][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 86.060884][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.060890][ T5348] Call Trace: [ 86.060895][ T5348] [ 86.060899][ T5348] dump_stack_lvl+0x189/0x250 [ 86.060913][ T5348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.060922][ T5348] ? __pfx__printk+0x10/0x10 [ 86.060933][ T5348] ? print_lock_name+0xde/0x100 [ 86.060944][ T5348] print_circular_bug+0x2ee/0x310 [ 86.060955][ T5348] check_noncircular+0x134/0x160 [ 86.060965][ T5348] validate_chain+0xb9b/0x2140 [ 86.060975][ T5348] ? rcu_is_watching+0x15/0xb0 [ 86.060983][ T5348] ? __kasan_check_byte+0x12/0x40 [ 86.060992][ T5348] ? rcu_is_watching+0x15/0xb0 [ 86.061000][ T5348] ? look_up_lock_class+0x74/0x170 [ 86.061011][ T5348] ? register_lock_class+0x51/0x320 [ 86.061019][ T5348] __lock_acquire+0xab9/0xd20 [ 86.061026][ T5348] ? hfsplus_file_extend+0x1fc/0x1990 [ 86.061036][ T5348] lock_acquire+0x120/0x360 [ 86.061042][ T5348] ? hfsplus_file_extend+0x1fc/0x1990 [ 86.061054][ T5348] __mutex_lock+0x182/0xe80 [ 86.061060][ T5348] ? hfsplus_file_extend+0x1fc/0x1990 [ 86.061070][ T5348] ? check_path+0x21/0x40 [ 86.061077][ T5348] ? check_noncircular+0xe0/0x160 [ 86.061086][ T5348] ? hfsplus_file_extend+0x1fc/0x1990 [ 86.061096][ T5348] ? __pfx___mutex_lock+0x10/0x10 [ 86.061105][ T5348] hfsplus_file_extend+0x1fc/0x1990 [ 86.061117][ T5348] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 86.061126][ T5348] ? __mutex_trylock_common+0x153/0x260 [ 86.061135][ T5348] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.061144][ T5348] ? rcu_is_watching+0x15/0xb0 [ 86.061152][ T5348] ? trace_contention_end+0x39/0x120 [ 86.061160][ T5348] ? __mutex_lock+0x330/0xe80 [ 86.061167][ T5348] ? hfsplus_brec_find+0x191/0x500 [ 86.061175][ T5348] hfsplus_bmap_reserve+0x122/0x500 [ 86.061184][ T5348] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 86.061195][ T5348] __hfsplus_ext_cache_extent+0x89/0xe30 [ 86.061206][ T5348] hfsplus_file_extend+0x444/0x1990 [ 86.061217][ T5348] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 86.061228][ T5348] ? clean_bdev_aliases+0x5c9/0x6b0 [ 86.061272][ T5348] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 86.061291][ T5348] hfsplus_get_block+0x411/0x1530 [ 86.061312][ T5348] ? __pfx_hfsplus_get_block+0x10/0x10 [ 86.061322][ T5348] ? do_raw_spin_unlock+0x4d/0x240 [ 86.061336][ T5348] ? _raw_spin_unlock+0x28/0x50 [ 86.061346][ T5348] __block_write_begin_int+0x6b5/0x1900 [ 86.061358][ T5348] ? folio_add_lru+0x1b2/0x3d0 [ 86.061369][ T5348] ? __pfx_hfsplus_get_block+0x10/0x10 [ 86.061379][ T5348] ? __pfx___block_write_begin_int+0x10/0x10 [ 86.061392][ T5348] cont_write_begin+0x789/0xb50 [ 86.061404][ T5348] ? __pfx_cont_write_begin+0x10/0x10 [ 86.061414][ T5348] ? __pfx___might_resched+0x10/0x10 [ 86.061423][ T5348] ? folio_unlock+0x101/0x160 [ 86.061437][ T5348] hfsplus_write_begin+0x66/0xb0 [ 86.061449][ T5348] ? __pfx_hfsplus_get_block+0x10/0x10 [ 86.061468][ T5348] generic_perform_write+0x2c7/0x910 [ 86.061481][ T5348] ? __pfx_generic_perform_write+0x10/0x10 [ 86.061492][ T5348] ? file_update_time+0x2da/0x490 [ 86.061509][ T5348] ? __generic_file_write_iter+0xf9/0x230 [ 86.061519][ T5348] ? generic_file_write_iter+0xfb/0x540 [ 86.061530][ T5348] generic_file_write_iter+0x10f/0x540 [ 86.061539][ T5348] ? aa_file_perm+0x11f/0xed0 [ 86.061550][ T5348] ? __pfx_generic_file_write_iter+0x10/0x10 [ 86.061569][ T5348] ? __lock_acquire+0xab9/0xd20 [ 86.061580][ T5348] ? aio_write+0x4c4/0x7a0 [ 86.061592][ T5348] aio_write+0x532/0x7a0 [ 86.061603][ T5348] ? __pfx_aio_write+0x10/0x10 [ 86.061614][ T5348] ? __might_fault+0xb0/0x130 [ 86.061626][ T5348] io_submit_one+0x78b/0x1310 [ 86.061638][ T5348] ? __pfx_io_submit_one+0x10/0x10 [ 86.061647][ T5348] ? __might_fault+0xb0/0x130 [ 86.061658][ T5348] ? __might_fault+0xb0/0x130 [ 86.061667][ T5348] __se_sys_io_submit+0x185/0x2f0 [ 86.061676][ T5348] ? __pfx___se_sys_io_submit+0x10/0x10 [ 86.061686][ T5348] ? do_syscall_64+0xbe/0x3b0 [ 86.061694][ T5348] do_syscall_64+0xfa/0x3b0 [ 86.061700][ T5348] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.061710][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.061717][ T5348] ? clear_bhb_loop+0x60/0xb0 [ 86.061725][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.061732][ T5348] RIP: 0033:0x7f095518e929 [ 86.061740][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.061748][ T5348] RSP: 002b:00007f09560d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 86.061757][ T5348] RAX: ffffffffffffffda RBX: 00007f09553b5fa0 RCX: 00007f095518e929 [ 86.061762][ T5348] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f095608a000 [ 86.061767][ T5348] RBP: 00007f0955210b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.061771][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.061775][ T5348] R13: 0000000000000000 R14: 00007f09553b5fa0 R15: 00007ffe6db4e818 [ 86.061782][ T5348] [ 86.276731][ T25] audit: type=1800 audit(1752181854.312:3): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0