program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000844) write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) [ 85.245605][ T5329] loop0: detected capacity change from 0 to 1024 [ 85.346064][ T5329] [ 85.347099][ T5329] ====================================================== [ 85.349835][ T5329] WARNING: possible circular locking dependency detected [ 85.352476][ T5329] syzkaller #0 Not tainted [ 85.354408][ T5329] ------------------------------------------------------ [ 85.357498][ T5329] syz.0.0/5329 is trying to acquire lock: [ 85.359831][ T5329] ffff8880330600b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x290 [ 85.363931][ T5329] [ 85.363931][ T5329] but task is already holding lock: [ 85.367092][ T5329] ffff88805185b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x15d0 [ 85.371759][ T5329] [ 85.371759][ T5329] which lock already depends on the new lock. [ 85.371759][ T5329] [ 85.376359][ T5329] [ 85.376359][ T5329] the existing dependency chain (in reverse order) is: [ 85.380242][ T5329] [ 85.380242][ T5329] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.384135][ T5329] lock_acquire+0x120/0x360 [ 85.386407][ T5329] __mutex_lock+0x187/0x1350 [ 85.388801][ T5329] hfsplus_file_extend+0x1f8/0x1ba0 [ 85.391378][ T5329] hfsplus_bmap_reserve+0x122/0x500 [ 85.393928][ T5329] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.396647][ T5329] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.399276][ T5329] hfsplus_file_extend+0x437/0x1ba0 [ 85.401754][ T5329] hfsplus_get_block+0x40a/0x15d0 [ 85.404185][ T5329] __block_write_begin_int+0x6b5/0x1900 [ 85.406848][ T5329] cont_write_begin+0x789/0xb50 [ 85.409237][ T5329] hfsplus_write_begin+0x66/0xb0 [ 85.411714][ T5329] generic_perform_write+0x2c5/0x900 [ 85.414378][ T5329] generic_file_write_iter+0x117/0x550 [ 85.416995][ T5329] aio_write+0x535/0x7a0 [ 85.419118][ T5329] io_submit_one+0x78b/0x1310 [ 85.421615][ T5329] __se_sys_io_submit+0x185/0x2f0 [ 85.424684][ T5329] do_syscall_64+0xfa/0xfa0 [ 85.427461][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.430514][ T5329] [ 85.430514][ T5329] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.433860][ T5329] validate_chain+0xb9b/0x2140 [ 85.436233][ T5329] __lock_acquire+0xab9/0xd20 [ 85.438483][ T5329] lock_acquire+0x120/0x360 [ 85.440756][ T5329] __mutex_lock+0x187/0x1350 [ 85.442979][ T5329] hfsplus_find_init+0x168/0x290 [ 85.445320][ T5329] hfsplus_get_block+0x8dc/0x15d0 [ 85.447667][ T5329] block_read_full_folio+0x29f/0x830 [ 85.450177][ T5329] read_pages+0x35d/0x580 [ 85.452331][ T5329] page_cache_ra_unbounded+0x75e/0x9a0 [ 85.454941][ T5329] filemap_get_pages+0x468/0x1de0 [ 85.457297][ T5329] filemap_read+0x3f6/0x11a0 [ 85.459409][ T5329] __kernel_read+0x4cf/0x960 [ 85.461569][ T5329] integrity_kernel_read+0x89/0xd0 [ 85.463954][ T5329] ima_calc_file_hash+0x85e/0x16f0 [ 85.466433][ T5329] ima_collect_measurement+0x428/0x8f0 [ 85.469108][ T5329] process_measurement+0x1121/0x1a40 [ 85.471536][ T5329] ima_file_check+0xd7/0x120 [ 85.474043][ T5329] security_file_post_open+0xbb/0x290 [ 85.477299][ T5329] path_openat+0x2f26/0x3830 [ 85.479867][ T5329] do_filp_open+0x1fa/0x410 [ 85.482129][ T5329] do_sys_openat2+0x121/0x1c0 [ 85.484477][ T5329] __x64_sys_openat+0x138/0x170 [ 85.486790][ T5329] do_syscall_64+0xfa/0xfa0 [ 85.489063][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.491896][ T5329] [ 85.491896][ T5329] other info that might help us debug this: [ 85.491896][ T5329] [ 85.496226][ T5329] Possible unsafe locking scenario: [ 85.496226][ T5329] [ 85.499550][ T5329] CPU0 CPU1 [ 85.501572][ T5329] ---- ---- [ 85.503709][ T5329] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.506314][ T5329] lock(&tree->tree_lock/1); [ 85.509303][ T5329] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.512730][ T5329] lock(&tree->tree_lock/1); [ 85.514830][ T5329] [ 85.514830][ T5329] *** DEADLOCK *** [ 85.514830][ T5329] [ 85.518364][ T5329] 3 locks held by syz.0.0/5329: [ 85.520572][ T5329] #0: ffff8880433fe4a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x74b/0x1a40 [ 85.525494][ T5329] #1: ffff88805185b3d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x1df/0x9a0 [ 85.530540][ T5329] #2: ffff88805185b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x398/0x15d0 [ 85.535276][ T5329] [ 85.535276][ T5329] stack backtrace: [ 85.537751][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.537768][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.537773][ T5329] Call Trace: [ 85.537779][ T5329] [ 85.537784][ T5329] dump_stack_lvl+0x189/0x250 [ 85.537803][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.537815][ T5329] ? __pfx__printk+0x10/0x10 [ 85.537828][ T5329] ? print_lock_name+0xde/0x100 [ 85.537839][ T5329] print_circular_bug+0x2ee/0x310 [ 85.537853][ T5329] check_noncircular+0x134/0x160 [ 85.537867][ T5329] validate_chain+0xb9b/0x2140 [ 85.537878][ T5329] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 85.537890][ T5329] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.537906][ T5329] __lock_acquire+0xab9/0xd20 [ 85.537918][ T5329] ? hfsplus_find_init+0x168/0x290 [ 85.537927][ T5329] lock_acquire+0x120/0x360 [ 85.537938][ T5329] ? hfsplus_find_init+0x168/0x290 [ 85.537950][ T5329] ? ima_file_check+0xd7/0x120 [ 85.537967][ T5329] ? path_openat+0x2f26/0x3830 [ 85.537979][ T5329] ? do_sys_openat2+0x121/0x1c0 [ 85.537989][ T5329] __mutex_lock+0x187/0x1350 [ 85.538005][ T5329] ? hfsplus_find_init+0x168/0x290 [ 85.538019][ T5329] ? hfsplus_find_init+0x168/0x290 [ 85.538029][ T5329] ? __pfx___mutex_lock+0x10/0x10 [ 85.538042][ T5329] ? rcu_is_watching+0x15/0xb0 [ 85.538055][ T5329] ? trace_kmalloc+0x1f/0xd0 [ 85.538066][ T5329] ? __kmalloc_noprof+0x432/0x7f0 [ 85.538078][ T5329] ? hfsplus_find_init+0x8c/0x290 [ 85.538089][ T5329] hfsplus_find_init+0x168/0x290 [ 85.538100][ T5329] hfsplus_get_block+0x8dc/0x15d0 [ 85.538116][ T5329] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.538128][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 85.538136][ T5329] block_read_full_folio+0x29f/0x830 [ 85.538149][ T5329] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.538160][ T5329] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 85.538170][ T5329] read_pages+0x35d/0x580 [ 85.538185][ T5329] ? __pfx_read_pages+0x10/0x10 [ 85.538197][ T5329] ? filemap_add_folio+0x35f/0x540 [ 85.538210][ T5329] page_cache_ra_unbounded+0x75e/0x9a0 [ 85.538229][ T5329] filemap_get_pages+0x468/0x1de0 [ 85.538243][ T5329] ? lock_release+0x4b/0x3e0 [ 85.538257][ T5329] ? __pfx_filemap_get_pages+0x10/0x10 [ 85.538267][ T5329] ? __lock_acquire+0xab9/0xd20 [ 85.538273][ T5329] ? __pfx___might_resched+0x10/0x10 [ 85.538282][ T5329] filemap_read+0x3f6/0x11a0 [ 85.538292][ T5329] ? kernel_text_address+0xa5/0xe0 [ 85.538301][ T5329] ? __kernel_text_address+0xd/0x40 [ 85.538311][ T5329] ? __pfx_filemap_read+0x10/0x10 [ 85.538322][ T5329] ? generic_file_read_iter+0x8f/0x510 [ 85.538330][ T5329] ? __asan_memset+0x22/0x50 [ 85.538337][ T5329] ? iov_iter_kvec+0xb8/0x180 [ 85.538345][ T5329] __kernel_read+0x4cf/0x960 [ 85.538357][ T5329] ? __pfx___kernel_read+0x10/0x10 [ 85.538373][ T5329] integrity_kernel_read+0x89/0xd0 [ 85.538384][ T5329] ? __pfx_integrity_kernel_read+0x10/0x10 [ 85.538397][ T5329] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 85.538410][ T5329] ? __asan_memcpy+0x40/0x70 [ 85.538422][ T5329] ima_calc_file_hash+0x85e/0x16f0 [ 85.538440][ T5329] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 85.538454][ T5329] ? stack_depot_save_flags+0x41b/0x860 [ 85.538464][ T5329] ? kasan_save_track+0x4f/0x80 [ 85.538471][ T5329] ? kasan_save_track+0x3e/0x80 [ 85.538478][ T5329] ? make_vfsgid+0x49/0xa0 [ 85.538487][ T5329] ? generic_fillattr+0x63d/0x9a0 [ 85.538501][ T5329] ? hfsplus_getattr+0x235/0x2f0 [ 85.538521][ T5329] ima_collect_measurement+0x428/0x8f0 [ 85.538533][ T5329] ? __pfx_ima_collect_measurement+0x10/0x10 [ 85.538544][ T5329] ? kasan_quarantine_put+0xdd/0x220 [ 85.538556][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.538569][ T5329] ? hfsplus_getxattr+0x118/0x180 [ 85.538580][ T5329] ? kfree+0x19a/0x6d0 [ 85.538594][ T5329] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 85.538608][ T5329] process_measurement+0x1121/0x1a40 [ 85.538624][ T5329] ? __pfx_process_measurement+0x10/0x10 [ 85.538638][ T5329] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 85.538649][ T5329] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 85.538664][ T5329] ? __pfx_apparmor_file_open+0x10/0x10 [ 85.538675][ T5329] ? mnt_get_write_access+0x66/0x280 [ 85.538685][ T5329] ? tomoyo_file_open+0x165/0x220 [ 85.538700][ T5329] ima_file_check+0xd7/0x120 [ 85.538715][ T5329] ? __pfx_ima_file_check+0x10/0x10 [ 85.538730][ T5329] security_file_post_open+0xbb/0x290 [ 85.538741][ T5329] path_openat+0x2f26/0x3830 [ 85.538758][ T5329] ? __pfx_path_openat+0x10/0x10 [ 85.538773][ T5329] do_filp_open+0x1fa/0x410 [ 85.538784][ T5329] ? __lock_acquire+0xab9/0xd20 [ 85.538796][ T5329] ? __pfx_do_filp_open+0x10/0x10 [ 85.538811][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 85.538822][ T5329] ? alloc_fd+0x64c/0x6c0 [ 85.538836][ T5329] do_sys_openat2+0x121/0x1c0 [ 85.538847][ T5329] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.538857][ T5329] ? rcu_is_watching+0x15/0xb0 [ 85.538870][ T5329] __x64_sys_openat+0x138/0x170 [ 85.538880][ T5329] do_syscall_64+0xfa/0xfa0 [ 85.538891][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.538903][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.538912][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 85.538923][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.538933][ T5329] RIP: 0033:0x7f073bd8efc9 [ 85.538944][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.538953][ T5329] RSP: 002b:00007f073cc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.538965][ T5329] RAX: ffffffffffffffda RBX: 00007f073bfe5fa0 RCX: 00007f073bd8efc9 [ 85.538972][ T5329] RDX: 0000000000000042 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 85.538979][ T5329] RBP: 00007f073be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.538985][ T5329] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 85.538991][ T5329] R13: 00007f073bfe6038 R14: 00007f073bfe5fa0 R15: 00007ffe190b3338 [ 85.539002][ T5329] [ 85.787873][ T4672] Bluetooth: hci0: command tx timeout [ 85.805325][ T26] audit: type=1800 audit(1761343536.114:2): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0