program: r0 = socket$inet(0x2, 0x4000000000000001, 0x800000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/234, 0xea, 0x0, &(0x7f00000001c0)=""/10, 0xa}}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x70000}]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x35, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x17) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r0, r4, 0x25, 0x2000, 0x0, @value=r8, @void, @void, @void, r7}, 0x20) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@nobh}]}, 0x1, 0x790, &(0x7f0000000f80)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000002c0)=0x8000000000000001, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, 0x0) shutdown(r0, 0x1) [ 76.030493][ T4688] Bluetooth: hci0: command tx timeout [ 76.103321][ T5341] loop0: detected capacity change from 0 to 1024 [ 76.177042][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.179892][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.186520][ T25] audit: type=1800 audit(1752867096.229:2): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 76.199863][ T5340] [ 76.200993][ T5340] ====================================================== [ 76.204048][ T5340] WARNING: possible circular locking dependency detected [ 76.207008][ T5340] 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 Not tainted [ 76.210016][ T5340] ------------------------------------------------------ [ 76.212847][ T5340] syz.0.0/5340 is trying to acquire lock: [ 76.215248][ T5340] ffff888032fe20b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 76.219282][ T5340] [ 76.219282][ T5340] but task is already holding lock: [ 76.222324][ T5340] ffff8880534df048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 76.227037][ T5340] [ 76.227037][ T5340] which lock already depends on the new lock. [ 76.227037][ T5340] [ 76.231325][ T5340] [ 76.231325][ T5340] the existing dependency chain (in reverse order) is: [ 76.235097][ T5340] [ 76.235097][ T5340] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 76.238865][ T5340] lock_acquire+0x120/0x360 [ 76.241028][ T5340] __mutex_lock+0x182/0xe80 [ 76.243214][ T5340] hfsplus_file_extend+0x1fc/0x1990 [ 76.245613][ T5340] hfsplus_bmap_reserve+0x122/0x500 [ 76.248009][ T5340] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 76.250608][ T5340] __hfsplus_ext_cache_extent+0x89/0xe30 [ 76.253217][ T5340] hfsplus_file_extend+0x444/0x1990 [ 76.255582][ T5340] hfsplus_get_block+0x411/0x1530 [ 76.257696][ T5340] __block_write_begin_int+0x6b2/0x1900 [ 76.260054][ T5340] cont_write_begin+0x789/0xb50 [ 76.262217][ T5340] hfsplus_write_begin+0x66/0xb0 [ 76.264415][ T5340] generic_perform_write+0x2c4/0x910 [ 76.266755][ T5340] generic_file_write_iter+0x10f/0x540 [ 76.269225][ T5340] aio_write+0x535/0x7a0 [ 76.271314][ T5340] io_submit_one+0x78b/0x1310 [ 76.273552][ T5340] __se_sys_io_submit+0x185/0x2f0 [ 76.275996][ T5340] do_syscall_64+0xfa/0x3b0 [ 76.278276][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.281066][ T5340] [ 76.281066][ T5340] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 76.284450][ T5340] validate_chain+0xb9b/0x2140 [ 76.286823][ T5340] __lock_acquire+0xab9/0xd20 [ 76.289118][ T5340] lock_acquire+0x120/0x360 [ 76.291342][ T5340] __mutex_lock+0x182/0xe80 [ 76.293488][ T5340] hfsplus_find_init+0x15a/0x1d0 [ 76.295757][ T5340] hfsplus_get_block+0x8dd/0x1530 [ 76.298085][ T5340] block_read_full_folio+0x29c/0x830 [ 76.300645][ T5340] read_pages+0x35a/0x580 [ 76.302929][ T5340] page_cache_ra_unbounded+0x6b0/0x7b0 [ 76.305318][ T5340] do_sync_mmap_readahead+0x4b5/0x5f0 [ 76.307830][ T5340] filemap_fault+0x62a/0x1200 [ 76.310064][ T5340] __do_fault+0x135/0x390 [ 76.312123][ T5340] __handle_mm_fault+0x198b/0x5620 [ 76.314486][ T5340] handle_mm_fault+0x40a/0x8e0 [ 76.316915][ T5340] do_user_addr_fault+0xa81/0x1390 [ 76.319389][ T5340] exc_page_fault+0x76/0xf0 [ 76.321590][ T5340] asm_exc_page_fault+0x26/0x30 [ 76.323851][ T5340] [ 76.323851][ T5340] other info that might help us debug this: [ 76.323851][ T5340] [ 76.328405][ T5340] Possible unsafe locking scenario: [ 76.328405][ T5340] [ 76.331668][ T5340] CPU0 CPU1 [ 76.333976][ T5340] ---- ---- [ 76.336314][ T5340] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.338875][ T5340] lock(&tree->tree_lock/1); [ 76.341969][ T5340] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.345505][ T5340] lock(&tree->tree_lock/1); [ 76.347586][ T5340] [ 76.347586][ T5340] *** DEADLOCK *** [ 76.347586][ T5340] [ 76.351030][ T5340] 2 locks held by syz.0.0/5340: [ 76.353147][ T5340] #0: ffff8880534df3d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x129/0x7b0 [ 76.358059][ T5340] #1: ffff8880534df048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 76.362704][ T5340] [ 76.362704][ T5340] stack backtrace: [ 76.365269][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 76.365283][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.365290][ T5340] Call Trace: [ 76.365297][ T5340] [ 76.365302][ T5340] dump_stack_lvl+0x189/0x250 [ 76.365319][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.365330][ T5340] ? __pfx__printk+0x10/0x10 [ 76.365343][ T5340] ? print_lock_name+0xde/0x100 [ 76.365356][ T5340] print_circular_bug+0x2ee/0x310 [ 76.365368][ T5340] check_noncircular+0x134/0x160 [ 76.365381][ T5340] validate_chain+0xb9b/0x2140 [ 76.365393][ T5340] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.365408][ T5340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.365424][ T5340] __lock_acquire+0xab9/0xd20 [ 76.365435][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 76.365446][ T5340] lock_acquire+0x120/0x360 [ 76.365456][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 76.365468][ T5340] __mutex_lock+0x182/0xe80 [ 76.365478][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 76.365491][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 76.365501][ T5340] ? __pfx___mutex_lock+0x10/0x10 [ 76.365512][ T5340] ? rcu_is_watching+0x15/0xb0 [ 76.365524][ T5340] ? __kmalloc_noprof+0x29b/0x4f0 [ 76.365534][ T5340] ? hfsplus_find_init+0x8c/0x1d0 [ 76.365544][ T5340] hfsplus_find_init+0x15a/0x1d0 [ 76.365555][ T5340] hfsplus_get_block+0x8dd/0x1530 [ 76.365571][ T5340] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.365584][ T5340] ? _raw_spin_unlock+0x28/0x50 [ 76.365597][ T5340] block_read_full_folio+0x29c/0x830 [ 76.365612][ T5340] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.365624][ T5340] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 76.365636][ T5340] read_pages+0x35a/0x580 [ 76.365648][ T5340] ? __pfx_read_pages+0x10/0x10 [ 76.365660][ T5340] ? filemap_add_folio+0x1af/0x270 [ 76.365673][ T5340] page_cache_ra_unbounded+0x6b0/0x7b0 [ 76.365689][ T5340] do_sync_mmap_readahead+0x4b5/0x5f0 [ 76.365704][ T5340] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 76.365719][ T5340] ? count_memcg_event_mm+0x1d/0x250 [ 76.365732][ T5340] ? count_memcg_event_mm+0x1d/0x250 [ 76.365746][ T5340] filemap_fault+0x62a/0x1200 [ 76.365760][ T5340] ? __pfx_filemap_fault+0x10/0x10 [ 76.365778][ T5340] __do_fault+0x135/0x390 [ 76.365790][ T5340] __handle_mm_fault+0x198b/0x5620 [ 76.365800][ T5340] ? __lock_acquire+0xab9/0xd20 [ 76.365812][ T5340] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.365822][ T5340] ? lock_vma_under_rcu+0xf8/0x710 [ 76.365836][ T5340] ? lock_vma_under_rcu+0xf8/0x710 [ 76.365848][ T5340] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 76.365858][ T5340] ? rcu_is_watching+0x15/0xb0 [ 76.365870][ T5340] handle_mm_fault+0x40a/0x8e0 [ 76.365910][ T5340] do_user_addr_fault+0xa81/0x1390 [ 76.365922][ T5340] ? rcu_is_watching+0x15/0xb0 [ 76.365932][ T5340] ? trace_page_fault_user+0x84/0x1e0 [ 76.365941][ T5340] exc_page_fault+0x76/0xf0 [ 76.365956][ T5340] asm_exc_page_fault+0x26/0x30 [ 76.365966][ T5340] RIP: 0033:0x7f86bc054fc1 [ 76.365977][ T5340] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 76.365985][ T5340] RSP: 002b:00007ffd1cfa3440 EFLAGS: 00010246 [ 76.365996][ T5340] RAX: 0000200000000280 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.366002][ T5340] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000555592f5d3c8 [ 76.366008][ T5340] RBP: 00007ffd1cfa3548 R08: 0000000000000000 R09: 0000000000000000 [ 76.366014][ T5340] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 76.366020][ T5340] R13: 00007f86bc3b5fa0 R14: fffffffffffffffe R15: 00007ffd1cfa3590 [ 76.366030][ T5340] [ 76.524903][ T25] audit: type=1800 audit(1752867096.249:3): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0