program: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000c10, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x70000}]) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0008b0cf8098a954f0c13d46c5f2da99dd78517bdc8c78047b090ec8e43f7def3d6e7ff57769de041cb1ee36eb9ef08355f53fb91f02fc63278f3613aa6fba7e9b000800008a4f6d9dbe20a5c5b893c3751e0d41a772d4e6963860d07e3f3f06b10f3eeb3aa2324f6e3d348cf3fa4536d200214110447005e899317ac49bdb087c7ee9c6a7f01bf8f94692bfa45daf2423901aa20a1e0b8736e57abc12ff197cc72bc4b25cfc4ae212b63861ba8545d2"], 0x1, 0x14d1, &(0x7f00000015c0)="$eJzs3AlwlcW2KOBe3f1DiBG3EZl79fphiwGaiIjIICIyiIiICIjMIiBiRERERISATCICIgIyRkSGEAGRIUDEMM/zPBg5iIiIyCSTQL/C47ncczy3uO+8cy+vKuur6kqv/Hut3Z1VyT9UZf/UdViNxjWrNiAi8a9Qf5vAX78kCyFihBADhRC3CSECIUTZ+LLx147nUpD8L70J+x/SMPVmr4DdTNz/7I37n71x/7M37n/2xv3P3rj/2Rv3P3vj/jOWraUVuJ1H9h38/D874/N/9sb9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2dr/B8+gedzEwRhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM/S+44K/TQoi/zW/2uhhjjDHGGGOMMfbv43Pe7BUwxhhjjDHGGGPsfx4IKZTQIhA5RE4RI3KJWHGLiBO3itziNhERt4t4cYfII+4UeUU+kV8UEAVFIVFYGIHCChKhKCKKiqi4SxQTd4sEUVyUECWFE6VEorhHlBb3ijLiPlFW3C/KiQdEeVFBVBSVxIOisnhIVBEPi6riEVFNVBc1RE3xqKglHhO1xeOijnhC1BVPinriKVFfPC0aiIaikXhGNBbPiiaiqWgmmosWoqVo9S/lvyV6iLdFT9FLJIveoo94R/QV/UR/MUAMFO+KQeI9MVi8L4aIoWKY+EAMFx+KEeIjMVKMEqPFx2KMGCvGifFigpgoUsQnYpL4VEwWn4kpYqqYJqaLVDFDpInPxUwxS8wWX4g54ksxV8wT88UCkS4WikViscgQX4kl4muRKZaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrfYI/aKfWK/OCC+EVni2//L/PP/kN8NBAiQIEGDhhyQA2IgBmIhFuIgDnJDbohABOIhHvJAHsgLeSE/5IeCUBAKQ2FAQCAgKAJFIApRKAbFIAESoASUAAcOEiERSsO9UAbKQFkoC+WgHJSHClABKkElqAyVoQpUgapQFapBNagBNeBReBQeg9pQG+pAHagLdaEe1IP6UB8aQANoBI2gMTSGJtAEmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIAk6QkfoBJ2gM3SGLtAFukJX6AZvwpvwFrwFb8Pb0Auqyd7QB/pAX+gL/WEADIB3YRC8B+/B+zAEhsIw+AA+gA9hBJyDkTAKRsNoqCzHwjgYDyQnQgqkwCSYBJNhMkyBqTAVpkMqzIA0SIOZMAtmwRcwB76EL2EezIMFkA7psAgWQwZkwBI4D5mwFJbBclgBK2EFrIY1sBrWwXpYBxthI2yGzbAVtsJ22A47YSfsht2wF/bCftgPQyALsuAgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4CScgtNwCs7CWTgH5+ECXIBLcAkuw2W4Clev/fLLa7TUMofMIWNkjIyVsTJOxsncMreMyIiMl/Eyj8wj88q8Mr/MLwvKgrKwLCxRoiQZyiKyiIzKqCwmi8kEmSBLyBLSSScTZaIsLUvLMrKMLCvvl+XkA7K8rCDbukqykqws27kq8mFZVVaV1WR1WUPWlDVlLVlL1pa1ZR1ZR9aVdWU9+ZSsL3tDf2gor3WmsRwKTeQwaCabyxaypfwQnpOt5QhoI9vKdvIFOQpGQgfZ2iXJl2VHOQ46yVfleHhNdpEToat8Q3aTb8ru8i3ZQ7ZxPWUvOQV6yz5yOvSV/WR/OUDOhOryWsdqyPflEDlUDpMfyAXwoRwhP5Ij5Sg5Wn4sx8ixcpwcLyfIiTJFfiInyU/lZPmZnCKnymlyukyVM2Sa/FzOlLPkbPmFnCO/lHPlPDlfLpDpcqFcJBfLDPmVXCK/lplyqVwml8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJrfLHXKn3CV3yz1yr9wn98sD8huZJb+VB+Vf5CH5nTwsv5dH5A/yqPxRHpM/yePyZ3lC/iJPylPytDwjz8pf5Tl5Xl6QF+Ul+Zu8LK/Iq9JLoUBJpZRWgcqhcqoYlUvFqltUnLpV5Va3qYi6XcWrO1QedafKq/Kp/KqAKqgKqcLKKFRWkQpVEVVURdVdqpi6WyWo4qqEKqmcKqUS1T2qtLpXlVH3qbLqflVOPaDKqwqqoqqkHlSV1UOqinpYVVWPqGqquqqhaqpHVS31mKqtHld11BOqrnpS1VNPqfrqadVANVSN1DOqsXpWNVFNVTPVXLVQLVUr9ZxqrZ5XbVRb1U69oNqrF1UH9ZJKUi+rjuoV1Um9qjqr11QX9brqqt5Q3dSbqru6oq4qr3qqXipZ9VZ91Duqr+qn+qsBaqB6Vw1S76nB6n01RA1Vw9QHarj6UI1QH6mRapQarT5WY9RYNU6NVxPURJWiPlGT1KdqsvpMTVFT1TQ1XaWqGar/H5Vm/zfyP/0n+YN/f/fNaovaqrap7WqH2ql2qd1qj9qj9ql96oA6oLJUljqoDqpD6pA6rA6rI+qIOqqOqmPqmDqujqsT6oQ6qU6pi+qMOqt+VefUeXVeXVSX1CV1+Y+fgdCgpVZa60Dn0Dl1jM6lY/UtOk7fqnPr23RE367j9R06j75T59X5dH5dQBfUhXRhbTRqq0mHuoguqqP6Ll1M360TdHFdQpfUTpfSifqe/+f8G62vlW6lW+vWuo1uo9vpdrq9bq876A46SSfpjrqj7qQ76c66s+6iu+iuuqvuprvp7rq77qF76J66p07WybqPfkf31f10fz1AD9Tv6kF6kB6sB+sheogepofp4Xq4HqFH6JF6pB6tR+sxeowep8fpCXqCTtEpepKepCfryXqKnqKn6Wk6VafqNJ2mZ+qZeraerefoOXqunqvn6/k6XafrRXqRztAZeoleojP1Ur1UL9fL9Uq9Uq/Wq/VavVav1+v1Rr1RZ+oteoveprfpHXqH3qV36T16j96n9+kD+oDO0ln6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+gT+qQ+qU/r0/qsPqvP6XP6gr6gL+lL+rK+rK/qq9cu+wIZyEAHOsgR5AhigpggNogN4oK4IHeQO4gEkSA+iA/yBHcGeYN8Qf6gQFAwKBQUDkyAgQ0oCIMiQdEgGtwVFAvuDhKC4kGJoGTgglJBYnBPUDq4NygT3BeUDe4PygUPBOWDCkHFoFLwYFA5eCioEjwcVA0eCaoF1YMaQc3g0aBW8FhQO3g8qBM8EdQNngzqBU8F9YOngwZBw6BR8EzQOHg2aBI0DZoFzYMWQcug1b+1vvfn8j3veppeJtn0Nn3MO6av6Wf6mwFmoHnXDDLvmcHmfTPEDDXDzAdmuPnQjDAfmZFmlBltPjZjzFgzzow3E8xEk2I+MZPMp2ay+cxMMVPNNDPdpJoZJs18bmaaWWa2+cLMMV+auWaemW8WmHSz0Cwyi02G+cosMV+bTLPULDPLzQqz0qwyq80as9asM+vNBrPRbDKbzRaz1Wwz280Os9PsMrvNHrPX7DP7zQHzjcky35qD5i/mkPnOHDbfmyPmB3PU/GiOmZ/McfOzOWF+MSfNKXPanDFnza/mnDlvLpiL5pL5zVw2V8xV469d3F87vaNGjTkwB8ZgDMZiLMZhHObG3BjBCMZjPObBPJgX82J+zI8FsSAWxsJ4DSFhESyCUYxiMSyGCZiAJbAEOnSYiIlYGktjGSyDZbEslsNyWB7LY0WsiA/ig/gQPoQP48P4CD6C1bE61sSaWAtrYW2sjXWwDtbFulgP62F9rI8NsAE2wkbYGBtjE2yCzbAZtsAW2ApbYWtsjW2wDbbDdtge22MH7IBJmIQdsSN2wk7YGTtjF+yCXbErdsNu2B27Yw/sgT2xJyZjMvbBPtgX+2J/7I8DcSAOwkE4GAfjEByCw3AYDsfhOAJH4EgchaPxYxyDY3EcjscJOBFTMAUn4SScjJNxCk7BaTgNUzEV0zANZ+JMnI2zcQ7Owbk4F+fjfEzHdFyEizADM3AJLsFMzMRluAxX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DXfgDtyFu3AP7sF9uA8P4AHMwiw8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJJ/E0nsazeBbP4Tm8gBfwEv6Gl/EKXkWPMTaXjbW32Dh7q81tb7P/GOe3BWxBW8gWtsbmtfn+LkZrbYItbkvYktbZUjbR3vOnuLytYCvaSvZBW9k+ZKv8Ka5lH7O17eO2jn3C1rSP/l1c1z5p69lnbX3b1DawzW0j29I2ts/aJrapbWab2xa2pW1vX7Qd7Es2yb5sO9pX/hQvsovtGrvWrrPr7T67316wF+0x+5O9ZH+zPW0vO9C+awfZ9+xg+74dYof+KR5tP7Zj7Fg7zo63E+zEP8XT7HSbamfYNPu5nWln/SlOtwvtHJth59p5dr5d8Ht8bU0Z9iu7xH5tM+1Su8wutyvsSrvKrv6PtS63G+0mu9nusXvtNrvd7rA77S67+/f42j4O2G9slv3WHrU/2kP2O3vYHrdH7A+/x9f2d9z+bE/YX+xJe8qetmfsWfurPWfP/77/a3s/Y6/Yq9ZbQUCSFGkKKAflpBjKRbF0C8XRrZSbbqMI3U7xdAfloTspL+Wj/FSAClIhKkyGkCwRhVSEilKU7qJidDclUHEqQSXJUSlKpHuoNN1LZeg+Kkv3Uzl6gMpTBapIlehBqkwPURV6mKrSI1SNqlMNqkmPUi16jGrT41SHnqC69CTVo6eoPj1NDaghNaJnqDE9S02oKTWj5tSCWlIreo5a0/PUhtpSO3qB2tOL1IFeoiR6mTrSK9SJXqXO9Bp1odepK71B3ehN6k5vUQ96m3pSL0qm3tSH3qG+1I/60wAaSO/SIHqPBtP7NISG0jD6gIbThzSCPqKRNIpG08c0hsbSOBpPE2gipdAnNIk+pcn0GU2hqTSNplMqzaA0+pxm0iyaTV/QHPqS5tI8mk8LKJ0W0iJaTBn0FS2hrymTltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjtoJ+2i3bSH9tI+2k8H6BvKom/pIP2FDtF3dJi+pyP0Ax2lH+kY/UTH6Wc6Qb/QSTpFp+kMnaVf6Rydpwt0kS7Rb3SZrtBV8iRCCGWoQh0GYY4wZxgT5gpjw1vCuPDWMHd4WxgJbw/jwzvCPOGdYd4wX5g/LBAWDAuFhUMTYmhDCsOwSFg0jIZ3hcXCu8OEsHhYIiwZurBUmBjeE5YO7w3LhPeFZcP7w3LhA2H5sEJYMawUPhhWDh8Kq4QPh1XDR8JqYfWwRlgzfDSsFT4W1g4fD+uET4RlwifDeuFTYf3w6bBB2DBsFD4TNg6fDZuETcNmYfOwRdgybBU+F7YOnw/bhG3DduELYfvwxbBD+FKYFL4cdgxfueHx5LB32Cd8J3wn9P5xNT+6IJoeXRhdFF0czYh+FV0S/TqaGV0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHPW+Zk7hwEmnnHaBy+FyuhiXy8W6W1ycu9Xldre5iLvdxbs7XB53p8vr8rn8roAr6Aq5ws44dNaRC10RV9RF3V2umLvbJbjiroQr6Zwr5RJdS9fKtXKt3fOujWvr2rkX3AvuRfeie8m95F52Hd0rrpN71XV2r7ku7nX3unvDdXNvuu7uLdfDve16ul4u2SW7Pq6P6+v6uv6uvxvoBrpBbpAb7Aa7IW6IG+aGueFuuBvhRriRbqQb7Ua7MW6MG+fGuQlugktxKW6Sm+Qmu8luipviprlpLtWlujSX5ma6mW62m+3muDlurpvr5rv5Lt2lu0VukctwGW6JW+IyXaZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vldrk9bo/b5/a5A+6Ay3JZ7qA76A65Q+6w+94dcT+4o+5Hd8z95I67n90J94s76U650+6MO+t+defceXfBXXSX3G/usrvirjrvUiKfRCZFPo1MjnwWmRKZGpkWmR5JjcyIpEU+j8yMzIrMjnwRmRP5MjI3Mi8yP7Igkh5ZGFkUWRzJiHwVWRL5OpIZWRpZFlkeWRFZGfG+0LbQF/FFfdTf5Yv5u32CL+5L+JLe+VI+0d/jS/t7fRl/ny/r7/fl/AO+vK/gK/qmvplv7lv4lr6Vf8639s/7Nr6tb+df8O39i76Df8kn+Zd9R/+K7+Rf9Z39a76Lf9139W/4bv5N392/5Xv4t31P38sn+96+j3/H9/X9fH8/wA/07/pB/j0/2L/vh/ihfpj/wA/3H/oR/iM/0o/yo/3Hfowf68f58X6Cn+hT/Cd+kv/UT/af+Sl+qp/mp/tUP8On+c/9TD/Lz/Zf+Dn+Sz/Xz/Pz/QKf7hf6RX6xz/Bf+SX+a5/pl/plfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t9/j9/p9fr8/4L/xWf5bf9D/xR/y3/nD/nt/xP/gj/of/TH/kz/uf/Yn/C/+pD/lT/sz/qz/1Z/z5/0Ff9Ff8r/5y/6Kv8r/s8YYY4wx9t+ibnC89z/5nvxjXNNHCHHr9gJH/rHmhrx/nfeT+zpGhBAv9+ra8G+jYcPk5OQ/XpupRFB0nhAicj0/h7geLxXtxIsiSbQVpf/p+vrJikA3qB+9X4jY/5QTI67H1+vf+1/Ub7rwhvXnCZFQ9HpOLnE9vl6/zH9Rf3f7G9TP9V2KEG3+U06cuB5fr58onheviKS/eyVjjDHGGGOMMfZX/eSlbje6v712f15QX8/JKa7HN7o/Z4wxxhhjjDHG2M332pvdX3ouKaltZ57whCc8+Y/Jzf7LxBhjjDHGGPt3u37Rf7NXwhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZV//Gx8ndrP3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjN1s/ycAAP//fMhn/w==") syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x3, 0x609, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x1ff) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x0, 0x80}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000e47b0000000020000a3c01000012415673190b09080000000000000000020000000900020073797a3100000000080073797a3000000000080003400000000a14000000110029"], 0x64}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) [ 85.414483][ T5312] Bluetooth: hci0: command tx timeout [ 85.504640][ T5335] loop0: detected capacity change from 0 to 1024 [ 85.614907][ T25] audit: type=1800 audit(1749460251.181:2): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 85.627526][ T5335] [ 85.628823][ T5335] ====================================================== [ 85.632462][ T5335] WARNING: possible circular locking dependency detected [ 85.635619][ T5335] 6.16.0-rc1-syzkaller #0 Not tainted [ 85.638065][ T5335] ------------------------------------------------------ [ 85.641131][ T5335] syz.0.0/5335 is trying to acquire lock: [ 85.644322][ T5335] ffff8880358e80b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.649456][ T5335] [ 85.649456][ T5335] but task is already holding lock: [ 85.652494][ T5335] ffff888052dc7708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 85.657088][ T5335] [ 85.657088][ T5335] which lock already depends on the new lock. [ 85.657088][ T5335] [ 85.661780][ T5335] [ 85.661780][ T5335] the existing dependency chain (in reverse order) is: [ 85.665552][ T5335] [ 85.665552][ T5335] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.670091][ T5335] lock_acquire+0x120/0x360 [ 85.673623][ T5335] __mutex_lock+0x182/0xe80 [ 85.676508][ T5335] hfsplus_file_extend+0x1fc/0x1990 [ 85.679458][ T5335] hfsplus_bmap_reserve+0x122/0x500 [ 85.682345][ T5335] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.684954][ T5335] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.687549][ T5335] hfsplus_file_extend+0x444/0x1990 [ 85.689833][ T5335] hfsplus_get_block+0x411/0x1530 [ 85.692065][ T5335] __block_write_begin_int+0x6b2/0x1900 [ 85.694834][ T5335] cont_write_begin+0x789/0xb50 [ 85.698069][ T5335] hfsplus_write_begin+0x66/0xb0 [ 85.701004][ T5335] generic_perform_write+0x2c4/0x910 [ 85.703677][ T5335] generic_file_write_iter+0x10f/0x540 [ 85.706540][ T5335] aio_write+0x535/0x7a0 [ 85.708789][ T5335] io_submit_one+0x78b/0x1310 [ 85.711010][ T5335] __se_sys_io_submit+0x185/0x2f0 [ 85.713524][ T5335] do_syscall_64+0xfa/0x3b0 [ 85.716308][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.719754][ T5335] [ 85.719754][ T5335] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.723588][ T5335] validate_chain+0xb9b/0x2140 [ 85.725898][ T5335] __lock_acquire+0xab9/0xd20 [ 85.728445][ T5335] lock_acquire+0x120/0x360 [ 85.731254][ T5335] __mutex_lock+0x182/0xe80 [ 85.733894][ T5335] hfsplus_find_init+0x15a/0x1d0 [ 85.736329][ T5335] hfsplus_get_block+0x8dd/0x1530 [ 85.738556][ T5335] block_read_full_folio+0x29c/0x830 [ 85.740811][ T5335] read_pages+0x35a/0x580 [ 85.743141][ T5335] page_cache_ra_unbounded+0x6b0/0x7b0 [ 85.746277][ T5335] filemap_get_pages+0x43c/0x1ea0 [ 85.748974][ T5335] filemap_read+0x3f6/0x11a0 [ 85.751387][ T5335] __kernel_read+0x469/0x8c0 [ 85.753695][ T5335] integrity_kernel_read+0x89/0xd0 [ 85.755910][ T5335] ima_calc_file_hash+0x85e/0x16f0 [ 85.758545][ T5335] ima_collect_measurement+0x428/0x8d0 [ 85.761739][ T5335] process_measurement+0x1121/0x1a40 [ 85.764579][ T5335] ima_file_check+0xd7/0x120 [ 85.766774][ T5335] security_file_post_open+0xbb/0x290 [ 85.769055][ T5335] path_openat+0x2f26/0x3830 [ 85.771178][ T5335] do_filp_open+0x1fa/0x410 [ 85.773277][ T5335] do_sys_openat2+0x121/0x1c0 [ 85.775597][ T5335] __x64_sys_open+0x11e/0x150 [ 85.777962][ T5335] do_syscall_64+0xfa/0x3b0 [ 85.780336][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.783168][ T5335] [ 85.783168][ T5335] other info that might help us debug this: [ 85.783168][ T5335] [ 85.787110][ T5335] Possible unsafe locking scenario: [ 85.787110][ T5335] [ 85.790324][ T5335] CPU0 CPU1 [ 85.792834][ T5335] ---- ---- [ 85.795447][ T5335] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.797995][ T5335] lock(&tree->tree_lock/1); [ 85.800594][ T5335] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.804502][ T5335] lock(&tree->tree_lock/1); [ 85.806629][ T5335] [ 85.806629][ T5335] *** DEADLOCK *** [ 85.806629][ T5335] [ 85.810218][ T5335] 3 locks held by syz.0.0/5335: [ 85.812542][ T5335] #0: ffff8880432986c8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x74b/0x1a40 [ 85.817617][ T5335] #1: ffff888052dc7a98 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x129/0x7b0 [ 85.822844][ T5335] #2: ffff888052dc7708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 85.828066][ T5335] [ 85.828066][ T5335] stack backtrace: [ 85.830801][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 85.830813][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.830841][ T5335] Call Trace: [ 85.830850][ T5335] [ 85.830857][ T5335] dump_stack_lvl+0x189/0x250 [ 85.831005][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.831078][ T5335] ? __pfx__printk+0x10/0x10 [ 85.831094][ T5335] ? print_lock_name+0xde/0x100 [ 85.831106][ T5335] print_circular_bug+0x2ee/0x310 [ 85.831119][ T5335] check_noncircular+0x134/0x160 [ 85.831136][ T5335] validate_chain+0xb9b/0x2140 [ 85.831164][ T5335] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 85.831182][ T5335] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.831203][ T5335] __lock_acquire+0xab9/0xd20 [ 85.831220][ T5335] ? hfsplus_find_init+0x15a/0x1d0 [ 85.831230][ T5335] lock_acquire+0x120/0x360 [ 85.831245][ T5335] ? hfsplus_find_init+0x15a/0x1d0 [ 85.831257][ T5335] ? path_openat+0x2f26/0x3830 [ 85.831275][ T5335] ? do_sys_openat2+0x121/0x1c0 [ 85.831291][ T5335] ? do_syscall_64+0xfa/0x3b0 [ 85.831303][ T5335] __mutex_lock+0x182/0xe80 [ 85.831313][ T5335] ? hfsplus_find_init+0x15a/0x1d0 [ 85.831326][ T5335] ? hfsplus_find_init+0x15a/0x1d0 [ 85.831337][ T5335] ? __pfx___mutex_lock+0x10/0x10 [ 85.831349][ T5335] ? rcu_is_watching+0x15/0xb0 [ 85.831384][ T5335] ? __kmalloc_noprof+0x29b/0x4f0 [ 85.831415][ T5335] ? hfsplus_find_init+0x8c/0x1d0 [ 85.831426][ T5335] hfsplus_find_init+0x15a/0x1d0 [ 85.831439][ T5335] hfsplus_get_block+0x8dd/0x1530 [ 85.831456][ T5335] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.831477][ T5335] ? _raw_spin_unlock+0x28/0x50 [ 85.831492][ T5335] block_read_full_folio+0x29c/0x830 [ 85.831512][ T5335] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.831526][ T5335] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 85.831537][ T5335] read_pages+0x35a/0x580 [ 85.831551][ T5335] ? __pfx_read_pages+0x10/0x10 [ 85.831561][ T5335] ? filemap_add_folio+0x1af/0x270 [ 85.831573][ T5335] page_cache_ra_unbounded+0x6b0/0x7b0 [ 85.831589][ T5335] filemap_get_pages+0x43c/0x1ea0 [ 85.831608][ T5335] ? __pfx_filemap_get_pages+0x10/0x10 [ 85.831621][ T5335] ? __lock_acquire+0xab9/0xd20 [ 85.831633][ T5335] ? __pfx___might_resched+0x10/0x10 [ 85.831664][ T5335] filemap_read+0x3f6/0x11a0 [ 85.831678][ T5335] ? do_raw_spin_lock+0x121/0x290 [ 85.831694][ T5335] ? __pfx_filemap_read+0x10/0x10 [ 85.831711][ T5335] ? kasan_save_track+0x3e/0x80 [ 85.831745][ T5335] ? generic_file_read_iter+0x8f/0x510 [ 85.831760][ T5335] ? __asan_memset+0x22/0x50 [ 85.831777][ T5335] ? iov_iter_kvec+0xb8/0x180 [ 85.831807][ T5335] __kernel_read+0x469/0x8c0 [ 85.831825][ T5335] ? __pfx___kernel_read+0x10/0x10 [ 85.831849][ T5335] integrity_kernel_read+0x89/0xd0 [ 85.831865][ T5335] ? __pfx_integrity_kernel_read+0x10/0x10 [ 85.831876][ T5335] ? __kasan_kmalloc+0x93/0xb0 [ 85.831902][ T5335] ? ima_calc_file_hash+0x820/0x16f0 [ 85.831921][ T5335] ima_calc_file_hash+0x85e/0x16f0 [ 85.831942][ T5335] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 85.831967][ T5335] ? stack_depot_save_flags+0x429/0x900 [ 85.831998][ T5335] ? make_vfsgid+0x49/0xa0 [ 85.832015][ T5335] ? generic_fillattr+0x63d/0x9a0 [ 85.832031][ T5335] ? hfsplus_getattr+0x235/0x2f0 [ 85.832045][ T5335] ima_collect_measurement+0x428/0x8d0 [ 85.832063][ T5335] ? __pfx_ima_collect_measurement+0x10/0x10 [ 85.832082][ T5335] ? kasan_quarantine_put+0xdd/0x220 [ 85.832099][ T5335] ? hfsplus_getxattr+0x118/0x180 [ 85.832114][ T5335] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 85.832130][ T5335] process_measurement+0x1121/0x1a40 [ 85.832149][ T5335] ? __pfx_process_measurement+0x10/0x10 [ 85.832164][ T5335] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 85.832178][ T5335] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 85.832197][ T5335] ? __pfx_apparmor_file_open+0x10/0x10 [ 85.832210][ T5335] ? tomoyo_file_open+0x165/0x220 [ 85.832227][ T5335] ? end_current_label_crit_section+0x152/0x180 [ 85.832242][ T5335] ima_file_check+0xd7/0x120 [ 85.832258][ T5335] ? __pfx_ima_file_check+0x10/0x10 [ 85.832274][ T5335] security_file_post_open+0xbb/0x290 [ 85.832288][ T5335] path_openat+0x2f26/0x3830 [ 85.832310][ T5335] ? __pfx_path_openat+0x10/0x10 [ 85.832325][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.832341][ T5335] do_filp_open+0x1fa/0x410 [ 85.832357][ T5335] ? __lock_acquire+0xab9/0xd20 [ 85.832373][ T5335] ? __pfx_do_filp_open+0x10/0x10 [ 85.832394][ T5335] ? _raw_spin_unlock+0x28/0x50 [ 85.832410][ T5335] ? alloc_fd+0x64c/0x6c0 [ 85.832424][ T5335] do_sys_openat2+0x121/0x1c0 [ 85.832439][ T5335] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.832455][ T5335] ? rcu_is_watching+0x15/0xb0 [ 85.832478][ T5335] __x64_sys_open+0x11e/0x150 [ 85.832493][ T5335] do_syscall_64+0xfa/0x3b0 [ 85.832505][ T5335] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.832522][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.832533][ T5335] ? clear_bhb_loop+0x60/0xb0 [ 85.832547][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.832561][ T5335] RIP: 0033:0x7f4bd4f8e929 [ 85.832597][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.832608][ T5335] RSP: 002b:00007f4bd5d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 85.832624][ T5335] RAX: ffffffffffffffda RBX: 00007f4bd51b5fa0 RCX: 00007f4bd4f8e929 [ 85.832635][ T5335] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00002000000000c0 [ 85.832644][ T5335] RBP: 00007f4bd5010b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.832651][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.832658][ T5335] R13: 0000000000000000 R14: 00007f4bd51b5fa0 R15: 00007ffe2e462a78 [ 85.832670][ T5335] [ 86.102167][ T25] audit: type=1800 audit(1749460251.671:3): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 86.116884][ T5335] syz.0.0 (5335) used greatest stack depth: 19976 bytes left