program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXr9l1Yq8tPp9odp5nnpd5nt/M7OzOKnKA/1nXzqXxOLVcO/fmcpFfeTTTWXk0c6efTjKRpJ40eqvU7ia1j5Kr6S35TLGx6q623X4+WJh9++NPVz7p5RrVUtav79Rukyv1LTY+rJacSXKkWj+Ddf1d39Bfa+TuaqszLAJ2th84GLdmku463z21VvJUw1+3wIFVK++bm6/5qeRoksnqc0Dvrti7Zx9qD8c9AAAAANgHL/yy/Ap/bNzjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMOk9/f/i1W51PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3jO0dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5TK6ntEInk83/83Xdude7enrh579zBmdIIJgaeoG2MxMxAJF7e+ZxIM1Ukbh3WSAyaLiNxcjV/Ld/It3MuZ/JWFrOQ72UuS5nPmXw9czmSuep8Ll6ndo7U1XW5t542klZ5XJrVu+jwY1rKXF4t2x7LQr6Vd3Mj87lS/ruUi3m96jGrR/jkEFd9fbR32rNfGHiY/Isk7eHa7YNiYMdX706DZ/10eR0cX7dl7Tp48fnfjxqfrRLFPn4ycETGb2MkLg5E4qWdI/Gb8m3lXufu7cVbc+8Nub/XqnVxHf3sQN0livPlxeJglbn1Z0dR9tLGsslevFrVLy69svV33KLs5GrZ9lfq5VzObFn71JY9XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94TZFe5hoJ+lvSZ7Wqpmn19mbRCtJmWj0E6P1MzFU5dba0Xnj988y5uaorZLnEqhGdZLdf3D7n91ud98P0xaJ5g7n/FqiW9lU1B2q+dgS/+o+vw7H/MYE7LkLS3feu3Dv/oMvLdyZe2f+nfm7s5cvz07PXr7ytws3Fzrz073XcY8S2AtrN/1xjwQAAAAAAAAAAAAY1n78t4Rtdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9p2+/lgYfbtjz9d+aSXa1RLWb++rl1zN7N4WC05k+RItR40+Qz9Xa/WuxpZqbY6wyJgZ/uBg3H7bwAAAP//2wMQAg==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0xfffffffc, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x20}, {0x4}}]}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(r10, 0xc658, 0x4) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000940)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00", @ANYBLOB="e0e41daf6d671710fd0891b4039bb28069f3f208bb54badc87b7cffb3da275a6d077279bf0ed4d2bb13802d08f50d60c77df276e5c51f9906e010a36626581e1fe12a91b791e2c02ea97afcbc7893bf4b4ac0dcb35bad8d634d637fe09c04666d2bc27e83b48034c2cc2fcd102ef74f5e574f77fa9c4bc773fd57a693f10452a4c16e18c0ef6f9401b25fd7fee4653577d7db8c753bbb7f432bd"], 0x1, 0x5934, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) [ 85.347415][ T5342] Bluetooth: hci0: command tx timeout [ 85.455725][ T5367] loop0: detected capacity change from 0 to 1024 [ 85.552428][ T25] audit: type=1800 audit(1757149100.996:2): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 85.573459][ T5367] [ 85.574570][ T5367] ====================================================== [ 85.578237][ T5367] WARNING: possible circular locking dependency detected [ 85.581592][ T5367] syzkaller #0 Not tainted [ 85.584174][ T5367] ------------------------------------------------------ [ 85.587506][ T5367] syz.0.0/5367 is trying to acquire lock: [ 85.590447][ T5367] ffff888053368108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 85.596032][ T5367] [ 85.596032][ T5367] but task is already holding lock: [ 85.599796][ T5367] ffff888041caa0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.604748][ T5367] [ 85.604748][ T5367] which lock already depends on the new lock. [ 85.604748][ T5367] [ 85.609106][ T5367] [ 85.609106][ T5367] the existing dependency chain (in reverse order) is: [ 85.613126][ T5367] [ 85.613126][ T5367] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.616608][ T5367] lock_acquire+0x120/0x360 [ 85.618788][ T5367] __mutex_lock+0x187/0x1350 [ 85.621248][ T5367] hfsplus_find_init+0x15a/0x1d0 [ 85.623916][ T5367] hfsplus_get_block+0x8dd/0x1530 [ 85.626356][ T5367] block_read_full_folio+0x29f/0x830 [ 85.628907][ T5367] read_pages+0x35d/0x580 [ 85.631107][ T5367] page_cache_ra_unbounded+0x6b0/0x7b0 [ 85.633734][ T5367] filemap_get_pages+0x43c/0x1ea0 [ 85.636090][ T5367] filemap_read+0x3f6/0x11a0 [ 85.638354][ T5367] __kernel_read+0x4cc/0x960 [ 85.640713][ T5367] integrity_kernel_read+0x89/0xd0 [ 85.643117][ T5367] ima_calc_file_hash+0x85e/0x16f0 [ 85.645501][ T5367] ima_collect_measurement+0x428/0x8e0 [ 85.648205][ T5367] process_measurement+0x1121/0x1a40 [ 85.650770][ T5367] ima_file_check+0xd7/0x120 [ 85.653003][ T5367] security_file_post_open+0xbb/0x290 [ 85.655397][ T5367] path_openat+0x2f26/0x3830 [ 85.657643][ T5367] do_filp_open+0x1fa/0x410 [ 85.659941][ T5367] do_sys_openat2+0x121/0x1c0 [ 85.662338][ T5367] __x64_sys_openat+0x138/0x170 [ 85.664756][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.667122][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.669846][ T5367] [ 85.669846][ T5367] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.673797][ T5367] validate_chain+0xb9b/0x2140 [ 85.676287][ T5367] __lock_acquire+0xab9/0xd20 [ 85.678542][ T5367] lock_acquire+0x120/0x360 [ 85.680816][ T5367] __mutex_lock+0x187/0x1350 [ 85.683090][ T5367] hfsplus_file_extend+0x1fc/0x1990 [ 85.685594][ T5367] hfsplus_bmap_reserve+0x122/0x500 [ 85.688015][ T5367] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.690804][ T5367] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.693497][ T5367] hfsplus_file_extend+0x444/0x1990 [ 85.695945][ T5367] hfsplus_get_block+0x411/0x1530 [ 85.698355][ T5367] __block_write_begin_int+0x6b2/0x1900 [ 85.701045][ T5367] cont_write_begin+0x789/0xb50 [ 85.703340][ T5367] hfsplus_write_begin+0x66/0xb0 [ 85.705655][ T5367] generic_perform_write+0x2c2/0x900 [ 85.708313][ T5367] generic_file_write_iter+0x117/0x550 [ 85.710972][ T5367] aio_write+0x535/0x7a0 [ 85.713134][ T5367] io_submit_one+0x78b/0x1310 [ 85.715395][ T5367] __se_sys_io_submit+0x185/0x2f0 [ 85.717839][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.719996][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.722628][ T5367] [ 85.722628][ T5367] other info that might help us debug this: [ 85.722628][ T5367] [ 85.727000][ T5367] Possible unsafe locking scenario: [ 85.727000][ T5367] [ 85.730278][ T5367] CPU0 CPU1 [ 85.732637][ T5367] ---- ---- [ 85.734976][ T5367] lock(&tree->tree_lock/1); [ 85.737045][ T5367] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.740515][ T5367] lock(&tree->tree_lock/1); [ 85.743623][ T5367] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.746411][ T5367] [ 85.746411][ T5367] *** DEADLOCK *** [ 85.746411][ T5367] [ 85.749959][ T5367] 3 locks held by syz.0.0/5367: [ 85.752161][ T5367] #0: ffff88805336ab78 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 [ 85.756877][ T5367] #1: ffff88805336a988 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 85.761383][ T5367] #2: ffff888041caa0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.766176][ T5367] [ 85.766176][ T5367] stack backtrace: [ 85.768850][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.768868][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.768875][ T5367] Call Trace: [ 85.768884][ T5367] [ 85.768891][ T5367] dump_stack_lvl+0x189/0x250 [ 85.768912][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.768925][ T5367] ? __pfx__printk+0x10/0x10 [ 85.768940][ T5367] ? print_lock_name+0xde/0x100 [ 85.768956][ T5367] print_circular_bug+0x2ee/0x310 [ 85.768969][ T5367] check_noncircular+0x134/0x160 [ 85.768983][ T5367] validate_chain+0xb9b/0x2140 [ 85.768994][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.769005][ T5367] ? __kasan_check_byte+0x12/0x40 [ 85.769018][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.769029][ T5367] ? look_up_lock_class+0x74/0x170 [ 85.769045][ T5367] ? register_lock_class+0x51/0x320 [ 85.769060][ T5367] __lock_acquire+0xab9/0xd20 [ 85.769075][ T5367] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.769085][ T5367] lock_acquire+0x120/0x360 [ 85.769100][ T5367] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.769114][ T5367] __mutex_lock+0x187/0x1350 [ 85.769125][ T5367] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.769136][ T5367] ? check_path+0x21/0x40 [ 85.769148][ T5367] ? check_noncircular+0xe0/0x160 [ 85.769161][ T5367] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.769172][ T5367] ? lockdep_unlock+0x89/0x120 [ 85.769186][ T5367] ? __pfx___mutex_lock+0x10/0x10 [ 85.769200][ T5367] hfsplus_file_extend+0x1fc/0x1990 [ 85.769210][ T5367] ? __lock_acquire+0xab9/0xd20 [ 85.769226][ T5367] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.769237][ T5367] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.769247][ T5367] ? __se_sys_io_submit+0x185/0x2f0 [ 85.769260][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.769272][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.769282][ T5367] ? trace_contention_end+0x39/0x120 [ 85.769295][ T5367] ? __mutex_lock+0x335/0x1350 [ 85.769304][ T5367] ? hfsplus_brec_find+0x191/0x500 [ 85.769320][ T5367] hfsplus_bmap_reserve+0x122/0x500 [ 85.769335][ T5367] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.769347][ T5367] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.769361][ T5367] hfsplus_file_extend+0x444/0x1990 [ 85.769374][ T5367] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.769385][ T5367] ? clean_bdev_aliases+0x5c9/0x6b0 [ 85.769402][ T5367] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 85.769419][ T5367] hfsplus_get_block+0x411/0x1530 [ 85.769433][ T5367] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.769444][ T5367] ? do_raw_spin_unlock+0x4d/0x240 [ 85.769467][ T5367] ? _raw_spin_unlock+0x28/0x50 [ 85.769485][ T5367] __block_write_begin_int+0x6b2/0x1900 [ 85.769498][ T5367] ? folio_add_lru+0x1b2/0x3d0 [ 85.769514][ T5367] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.769526][ T5367] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.769540][ T5367] cont_write_begin+0x789/0xb50 [ 85.769554][ T5367] ? __pfx_cont_write_begin+0x10/0x10 [ 85.769568][ T5367] ? __pfx___might_resched+0x10/0x10 [ 85.769578][ T5367] ? __mark_inode_dirty+0x3d2/0xe10 [ 85.769597][ T5367] ? folio_unlock+0x101/0x160 [ 85.769612][ T5367] hfsplus_write_begin+0x66/0xb0 [ 85.769621][ T5367] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.769632][ T5367] generic_perform_write+0x2c2/0x900 [ 85.769646][ T5367] ? __pfx_generic_perform_write+0x10/0x10 [ 85.769656][ T5367] ? file_update_time+0x416/0x490 [ 85.769668][ T5367] ? __generic_file_write_iter+0xf9/0x230 [ 85.769677][ T5367] ? generic_file_write_iter+0x103/0x550 [ 85.769689][ T5367] generic_file_write_iter+0x117/0x550 [ 85.769701][ T5367] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.769710][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.769726][ T5367] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 85.769741][ T5367] ? __pfx_aa_file_perm+0x10/0x10 [ 85.769761][ T5367] ? __lock_acquire+0xab9/0xd20 [ 85.769782][ T5367] ? aio_write+0x4c4/0x7a0 [ 85.769798][ T5367] aio_write+0x535/0x7a0 [ 85.769814][ T5367] ? __pfx_aio_write+0x10/0x10 [ 85.769832][ T5367] ? __might_fault+0xb0/0x130 [ 85.769848][ T5367] io_submit_one+0x78b/0x1310 [ 85.769868][ T5367] ? __pfx_io_submit_one+0x10/0x10 [ 85.769883][ T5367] ? __might_fault+0xb0/0x130 [ 85.769898][ T5367] ? __might_fault+0xb0/0x130 [ 85.769910][ T5367] __se_sys_io_submit+0x185/0x2f0 [ 85.769923][ T5367] ? __pfx___se_sys_io_submit+0x10/0x10 [ 85.769939][ T5367] ? do_syscall_64+0xbe/0x3b0 [ 85.769950][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.769960][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.769976][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.769986][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 85.769998][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.770009][ T5367] RIP: 0033:0x7f7aefd8ebe9 [ 85.770023][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.770032][ T5367] RSP: 002b:00007f7af0b5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 85.770048][ T5367] RAX: ffffffffffffffda RBX: 00007f7aeffc5fa0 RCX: 00007f7aefd8ebe9 [ 85.770056][ T5367] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f7af0b15000 [ 85.770064][ T5367] RBP: 00007f7aefe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.770071][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.770078][ T5367] R13: 00007f7aeffc6038 R14: 00007f7aeffc5fa0 R15: 00007ffc7a17a558 [ 85.770088][ T5367] [ 86.021470][ T25] audit: type=1804 audit(1757149101.006:3): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.0" name="/newroot/0/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 86.031390][ T25] audit: type=1800 audit(1757149101.006:4): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 86.366386][ T25] audit: type=1804 audit(1757149101.806:5): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.0" name="/newroot/0/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 86.375198][ T25] audit: type=1800 audit(1757149101.816:6): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0