program: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x70000}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x1c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x10000000}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r10, 0x80086c41, 0x0) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0x80800) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r1, r1, r2, 0xffffffffffffffff, r6, r10, r1, r2, r0, r11], 0xa) socket$unix(0x1, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x2a0030, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$nl_route(0x10, 0x3, 0x0) [ 70.225027][ T4666] Bluetooth: hci0: command tx timeout [ 70.302363][ T5321] loop0: detected capacity change from 0 to 1024 [ 70.376360][ T25] audit: type=1800 audit(1742828141.114:2): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 70.429353][ T25] audit: type=1804 audit(1742828141.164:3): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.0" name="/newroot/0/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 70.438279][ T5321] [ 70.439124][ T5321] ====================================================== [ 70.441659][ T5321] WARNING: possible circular locking dependency detected [ 70.444085][ T5321] 6.14.0-syzkaller #0 Not tainted [ 70.446358][ T5321] ------------------------------------------------------ [ 70.449719][ T5321] syz.0.0/5321 is trying to acquire lock: [ 70.452530][ T5321] ffff888043ef60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 [ 70.457346][ T5321] [ 70.457346][ T5321] but task is already holding lock: [ 70.460896][ T5321] ffff88805332b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x383/0x14f0 [ 70.466016][ T5321] [ 70.466016][ T5321] which lock already depends on the new lock. [ 70.466016][ T5321] [ 70.469951][ T5321] [ 70.469951][ T5321] the existing dependency chain (in reverse order) is: [ 70.473226][ T5321] [ 70.473226][ T5321] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 70.476677][ T5321] lock_acquire+0x1ed/0x550 [ 70.479093][ T5321] __mutex_lock+0x19c/0x1010 [ 70.480953][ T5321] hfsplus_file_extend+0x21b/0x1b70 [ 70.483070][ T5321] hfsplus_bmap_reserve+0x105/0x4e0 [ 70.485210][ T5321] __hfsplus_ext_write_extent+0x2a4/0x5c0 [ 70.487532][ T5321] __hfsplus_ext_cache_extent+0x84/0xe10 [ 70.489654][ T5321] hfsplus_file_extend+0x48c/0x1b70 [ 70.491635][ T5321] hfsplus_get_block+0x406/0x14f0 [ 70.493722][ T5321] __block_write_begin_int+0x692/0x19a0 [ 70.495976][ T5321] cont_write_begin+0x77f/0xb40 [ 70.498011][ T5321] hfsplus_write_begin+0x68/0xb0 [ 70.500161][ T5321] generic_perform_write+0x327/0xa00 [ 70.502500][ T5321] generic_file_write_iter+0x10c/0x5e0 [ 70.504849][ T5321] aio_write+0x56b/0x7c0 [ 70.506734][ T5321] io_submit_one+0x8a7/0x18a0 [ 70.508778][ T5321] __se_sys_io_submit+0x171/0x2e0 [ 70.510910][ T5321] do_syscall_64+0xf3/0x230 [ 70.512887][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.515491][ T5321] [ 70.515491][ T5321] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 70.518415][ T5321] validate_chain+0x18ef/0x5920 [ 70.520529][ T5321] __lock_acquire+0x1397/0x2100 [ 70.522599][ T5321] lock_acquire+0x1ed/0x550 [ 70.524509][ T5321] __mutex_lock+0x19c/0x1010 [ 70.526405][ T5321] hfsplus_find_init+0x14a/0x1c0 [ 70.528510][ T5321] hfsplus_get_block+0x5c4/0x14f0 [ 70.530620][ T5321] block_read_full_folio+0x3ee/0xae0 [ 70.532851][ T5321] read_pages+0x35c/0x570 [ 70.534724][ T5321] page_cache_ra_unbounded+0x708/0x820 [ 70.536779][ T5321] filemap_get_pages+0x59a/0x1fb0 [ 70.538828][ T5321] filemap_read+0x464/0x1260 [ 70.540815][ T5321] __kernel_read+0x52e/0xa00 [ 70.542706][ T5321] integrity_kernel_read+0xb0/0x100 [ 70.544803][ T5321] ima_calc_file_hash+0xae6/0x1b30 [ 70.546840][ T5321] ima_collect_measurement+0x529/0xb20 [ 70.549089][ T5321] process_measurement+0x1351/0x1fb0 [ 70.551263][ T5321] ima_file_check+0xd9/0x120 [ 70.553232][ T5321] security_file_post_open+0xb9/0x280 [ 70.555333][ T5321] path_openat+0x2cca/0x3590 [ 70.557275][ T5321] do_filp_open+0x27f/0x4e0 [ 70.559246][ T5321] do_sys_openat2+0x13e/0x1d0 [ 70.561271][ T5321] __x64_sys_openat+0x247/0x2a0 [ 70.563346][ T5321] do_syscall_64+0xf3/0x230 [ 70.565336][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.567730][ T5321] [ 70.567730][ T5321] other info that might help us debug this: [ 70.567730][ T5321] [ 70.571529][ T5321] Possible unsafe locking scenario: [ 70.571529][ T5321] [ 70.574566][ T5321] CPU0 CPU1 [ 70.577036][ T5321] ---- ---- [ 70.579598][ T5321] lock(&HFSPLUS_I(inode)->extents_lock); [ 70.582183][ T5321] lock(&tree->tree_lock/1); [ 70.584879][ T5321] lock(&HFSPLUS_I(inode)->extents_lock); [ 70.588048][ T5321] lock(&tree->tree_lock/1); [ 70.589857][ T5321] [ 70.589857][ T5321] *** DEADLOCK *** [ 70.589857][ T5321] [ 70.592816][ T5321] 4 locks held by syz.0.0/5321: [ 70.594583][ T5321] #0: ffff888040f54420 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 70.597990][ T5321] #1: ffff88803f4a66c8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 70.602064][ T5321] #2: ffff88805332b3d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x156/0x820 [ 70.606092][ T5321] #3: ffff88805332b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x383/0x14f0 [ 70.610289][ T5321] [ 70.610289][ T5321] stack backtrace: [ 70.612657][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-syzkaller #0 [ 70.612672][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.612680][ T5321] Call Trace: [ 70.612687][ T5321] [ 70.612693][ T5321] dump_stack_lvl+0x241/0x360 [ 70.612711][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.612723][ T5321] ? __pfx__printk+0x10/0x10 [ 70.612737][ T5321] print_circular_bug+0x13a/0x1b0 [ 70.612752][ T5321] check_noncircular+0x36a/0x4a0 [ 70.612764][ T5321] ? __pfx_check_noncircular+0x10/0x10 [ 70.612776][ T5321] ? lockdep_lock+0x123/0x2b0 [ 70.612792][ T5321] validate_chain+0x18ef/0x5920 [ 70.612806][ T5321] ? __pfx_validate_chain+0x10/0x10 [ 70.612822][ T5321] ? mark_lock+0x9a/0x360 [ 70.612831][ T5321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.612845][ T5321] ? mark_lock+0x9a/0x360 [ 70.612854][ T5321] __lock_acquire+0x1397/0x2100 [ 70.612871][ T5321] lock_acquire+0x1ed/0x550 [ 70.612885][ T5321] ? hfsplus_find_init+0x14a/0x1c0 [ 70.612903][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 70.612916][ T5321] ? hfsplus_find_init+0x85/0x1c0 [ 70.612930][ T5321] ? hfsplus_get_block+0x5c4/0x14f0 [ 70.612942][ T5321] ? __pfx___might_resched+0x10/0x10 [ 70.612961][ T5321] ? filemap_read+0x464/0x1260 [ 70.612977][ T5321] ? __kernel_read+0x52e/0xa00 [ 70.612989][ T5321] ? integrity_kernel_read+0xb0/0x100 [ 70.613005][ T5321] ? ima_calc_file_hash+0xae6/0x1b30 [ 70.613014][ T5321] ? ima_collect_measurement+0x529/0xb20 [ 70.613024][ T5321] ? process_measurement+0x1351/0x1fb0 [ 70.613033][ T5321] ? ima_file_check+0xd9/0x120 [ 70.613048][ T5321] ? security_file_post_open+0xb9/0x280 [ 70.613061][ T5321] ? path_openat+0x2cca/0x3590 [ 70.613072][ T5321] ? do_sys_openat2+0x13e/0x1d0 [ 70.613085][ T5321] ? __x64_sys_openat+0x247/0x2a0 [ 70.613098][ T5321] ? do_syscall_64+0xf3/0x230 [ 70.613109][ T5321] __mutex_lock+0x19c/0x1010 [ 70.613124][ T5321] ? hfsplus_find_init+0x14a/0x1c0 [ 70.613144][ T5321] ? hfsplus_find_init+0x14a/0x1c0 [ 70.613161][ T5321] ? __pfx___mutex_lock+0x10/0x10 [ 70.613176][ T5321] ? rcu_is_watching+0x15/0xb0 [ 70.613187][ T5321] ? __kmalloc_noprof+0x2a5/0x4c0 [ 70.613200][ T5321] ? hfsplus_find_init+0x85/0x1c0 [ 70.613214][ T5321] hfsplus_find_init+0x14a/0x1c0 [ 70.613229][ T5321] hfsplus_get_block+0x5c4/0x14f0 [ 70.613244][ T5321] ? __pfx_hfsplus_get_block+0x10/0x10 [ 70.613256][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 70.613267][ T5321] ? create_empty_buffers+0x471/0x530 [ 70.613283][ T5321] block_read_full_folio+0x3ee/0xae0 [ 70.613300][ T5321] ? __pfx_hfsplus_get_block+0x10/0x10 [ 70.613310][ T5321] ? __pfx_block_read_full_folio+0x10/0x10 [ 70.613324][ T5321] ? __folio_batch_add_and_move+0x83c/0xd70 [ 70.613341][ T5321] ? readahead_folio+0x2ed/0x440 [ 70.613355][ T5321] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 70.613365][ T5321] read_pages+0x35c/0x570 [ 70.613379][ T5321] ? __pfx_read_pages+0x10/0x10 [ 70.613394][ T5321] page_cache_ra_unbounded+0x708/0x820 [ 70.613412][ T5321] filemap_get_pages+0x59a/0x1fb0 [ 70.613428][ T5321] ? mark_lock+0x9a/0x360 [ 70.613443][ T5321] ? __pfx_filemap_get_pages+0x10/0x10 [ 70.613458][ T5321] ? __pfx___might_resched+0x10/0x10 [ 70.613472][ T5321] ? unwind_next_frame+0x18e6/0x22d0 [ 70.613489][ T5321] filemap_read+0x464/0x1260 [ 70.613506][ T5321] ? __kernel_text_address+0xd/0x40 [ 70.613518][ T5321] ? __pfx_filemap_read+0x10/0x10 [ 70.613538][ T5321] ? generic_file_read_iter+0x98/0x550 [ 70.613553][ T5321] ? kasan_save_track+0x51/0x80 [ 70.613564][ T5321] __kernel_read+0x52e/0xa00 [ 70.613574][ T5321] ? do_sys_openat2+0x13e/0x1d0 [ 70.613588][ T5321] ? __pfx___kernel_read+0x10/0x10 [ 70.613603][ T5321] integrity_kernel_read+0xb0/0x100 [ 70.613618][ T5321] ? __pfx_integrity_kernel_read+0x10/0x10 [ 70.613632][ T5321] ? __kmalloc_cache_noprof+0x243/0x390 [ 70.613645][ T5321] ? ima_calc_file_hash+0xaae/0x1b30 [ 70.613664][ T5321] ima_calc_file_hash+0xae6/0x1b30 [ 70.613676][ T5321] ? unwind_next_frame+0x18e6/0x22d0 [ 70.613692][ T5321] ? preempt_count_add+0x93/0x190 [ 70.613705][ T5321] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 70.613724][ T5321] ? stack_depot_save_flags+0x37/0x940 [ 70.613741][ T5321] ? kasan_save_track+0x51/0x80 [ 70.613750][ T5321] ? kasan_save_track+0x3f/0x80 [ 70.613760][ T5321] ? kasan_save_free_info+0x40/0x50 [ 70.613774][ T5321] ? __kasan_slab_free+0x59/0x70 [ 70.613784][ T5321] ? kfree+0x196/0x430 [ 70.613795][ T5321] ? hfsplus_getxattr+0x121/0x180 [ 70.613804][ T5321] ? vfs_getxattr_alloc+0x472/0x5c0 [ 70.613817][ T5321] ? ima_read_xattr+0x38/0x60 [ 70.613829][ T5321] ? process_measurement+0x117a/0x1fb0 [ 70.613837][ T5321] ? make_vfsgid+0x51/0xa0 [ 70.613847][ T5321] ? generic_fillattr+0x58f/0x830 [ 70.613862][ T5321] ima_collect_measurement+0x529/0xb20 [ 70.613875][ T5321] ? __pfx_ima_collect_measurement+0x10/0x10 [ 70.613887][ T5321] ? lockdep_hardirqs_on+0x99/0x150 [ 70.613902][ T5321] ? kfree+0x196/0x430 [ 70.613914][ T5321] ? hfsplus_getxattr+0x100/0x180 [ 70.613923][ T5321] ? hfsplus_getxattr+0x121/0x180 [ 70.613935][ T5321] ? ima_get_hash_algo+0x156/0x4d0 [ 70.613948][ T5321] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 70.613973][ T5321] process_measurement+0x1351/0x1fb0 [ 70.613987][ T5321] ? __pfx_process_measurement+0x10/0x10 [ 70.613997][ T5321] ? tomoyo_check_open_permission+0x207/0x4f0 [ 70.614011][ T5321] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 70.614030][ T5321] ? __pfx_apparmor_file_open+0x10/0x10 [ 70.614043][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.614056][ T5321] ? inode_to_bdi+0x69/0xf0 [ 70.614070][ T5321] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 70.614086][ T5321] ima_file_check+0xd9/0x120 [ 70.614101][ T5321] ? __pfx_ima_file_check+0x10/0x10 [ 70.614117][ T5321] security_file_post_open+0xb9/0x280 [ 70.614132][ T5321] path_openat+0x2cca/0x3590 [ 70.614148][ T5321] ? __pfx_path_openat+0x10/0x10 [ 70.614162][ T5321] do_filp_open+0x27f/0x4e0 [ 70.614173][ T5321] ? __pfx_do_filp_open+0x10/0x10 [ 70.614182][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 70.614201][ T5321] do_sys_openat2+0x13e/0x1d0 [ 70.614216][ T5321] ? __might_fault+0xaa/0x120 [ 70.614227][ T5321] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.614240][ T5321] ? rcu_is_watching+0x15/0xb0 [ 70.614250][ T5321] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 70.614267][ T5321] __x64_sys_openat+0x247/0x2a0 [ 70.614282][ T5321] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.614296][ T5321] ? do_syscall_64+0x100/0x230 [ 70.614306][ T5321] ? do_syscall_64+0xb6/0x230 [ 70.614314][ T5321] do_syscall_64+0xf3/0x230 [ 70.614324][ T5321] ? clear_bhb_loop+0x35/0x90 [ 70.614339][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.614353][ T5321] RIP: 0033:0x7f524698d169 [ 70.614363][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.614372][ T5321] RSP: 002b:00007f52478d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.614384][ T5321] RAX: ffffffffffffffda RBX: 00007f5246ba5fa0 RCX: 00007f524698d169 [ 70.614391][ T5321] RDX: 0000000000101740 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 70.614399][ T5321] RBP: 00007f5246a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.614405][ T5321] R10: 0000000000000179 R11: 0000000000000246 R12: 0000000000000000 [ 70.614411][ T5321] R13: 0000000000000000 R14: 00007f5246ba5fa0 R15: 00007ffd7105f0b8 [ 70.614421][ T5321] [ 70.905431][ T25] audit: type=1800 audit(1742828141.644:4): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 70.918239][ T5321] syz.0.0 (5321) used greatest stack depth: 18064 bytes left