program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) open(&(0x7f0000000100)='./file1\x00', 0x101040, 0x1c9) [ 76.688035][ T5314] Bluetooth: hci0: command tx timeout [ 76.691805][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.694450][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.821763][ T5331] loop0: detected capacity change from 0 to 1024 [ 76.892283][ T5331] [ 76.893265][ T5331] ====================================================== [ 76.895953][ T5331] WARNING: possible circular locking dependency detected [ 76.898773][ T5331] 6.14.0-syzkaller #0 Not tainted [ 76.900840][ T5331] ------------------------------------------------------ [ 76.903615][ T5331] syz.0.0/5331 is trying to acquire lock: [ 76.905925][ T5331] ffff888011c4e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x14a/0x1c0 [ 76.909995][ T5331] [ 76.909995][ T5331] but task is already holding lock: [ 76.912876][ T5331] ffff888045e1b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x383/0x14f0 [ 76.916909][ T5331] [ 76.916909][ T5331] which lock already depends on the new lock. [ 76.916909][ T5331] [ 76.920805][ T5331] [ 76.920805][ T5331] the existing dependency chain (in reverse order) is: [ 76.924053][ T5331] [ 76.924053][ T5331] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 76.927403][ T5331] lock_acquire+0x1ed/0x550 [ 76.929358][ T5331] __mutex_lock+0x19c/0x1010 [ 76.931365][ T5331] hfsplus_file_extend+0x21b/0x1b70 [ 76.933568][ T5331] hfsplus_bmap_reserve+0x105/0x4e0 [ 76.935783][ T5331] __hfsplus_ext_write_extent+0x2a4/0x5c0 [ 76.938395][ T5331] __hfsplus_ext_cache_extent+0x84/0xe10 [ 76.940861][ T5331] hfsplus_file_extend+0x48c/0x1b70 [ 76.943116][ T5331] hfsplus_get_block+0x406/0x14f0 [ 76.945272][ T5331] __block_write_begin_int+0x692/0x19a0 [ 76.947652][ T5331] cont_write_begin+0x77f/0xb40 [ 76.949775][ T5331] hfsplus_write_begin+0x68/0xb0 [ 76.951881][ T5331] generic_perform_write+0x327/0xa00 [ 76.954183][ T5331] generic_file_write_iter+0x10c/0x5e0 [ 76.956603][ T5331] aio_write+0x56b/0x7c0 [ 76.958504][ T5331] io_submit_one+0x8a7/0x18a0 [ 76.960612][ T5331] __se_sys_io_submit+0x171/0x2e0 [ 76.962848][ T5331] do_syscall_64+0xf3/0x230 [ 76.964939][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.967508][ T5331] [ 76.967508][ T5331] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 76.970353][ T5331] validate_chain+0x18ef/0x5920 [ 76.972418][ T5331] __lock_acquire+0x1397/0x2100 [ 76.974558][ T5331] lock_acquire+0x1ed/0x550 [ 76.976560][ T5331] __mutex_lock+0x19c/0x1010 [ 76.978539][ T5331] hfsplus_find_init+0x14a/0x1c0 [ 76.980540][ T5331] hfsplus_get_block+0x5c4/0x14f0 [ 76.982582][ T5331] block_read_full_folio+0x3ee/0xae0 [ 76.984882][ T5331] read_pages+0x35c/0x570 [ 76.986735][ T5331] page_cache_ra_unbounded+0x708/0x820 [ 76.989117][ T5331] filemap_get_pages+0x59a/0x1fb0 [ 76.991258][ T5331] filemap_read+0x464/0x1260 [ 76.993365][ T5331] __kernel_read+0x52e/0xa00 [ 76.995452][ T5331] integrity_kernel_read+0xb0/0x100 [ 76.997834][ T5331] ima_calc_file_hash+0xae6/0x1b30 [ 77.000099][ T5331] ima_collect_measurement+0x529/0xb20 [ 77.002523][ T5331] process_measurement+0x1351/0x1fb0 [ 77.004959][ T5331] ima_file_check+0xd9/0x120 [ 77.007100][ T5331] security_file_post_open+0xb9/0x280 [ 77.009367][ T5331] path_openat+0x2cca/0x3590 [ 77.011473][ T5331] do_filp_open+0x27f/0x4e0 [ 77.013525][ T5331] do_sys_openat2+0x13e/0x1d0 [ 77.015491][ T5331] __x64_sys_open+0x225/0x270 [ 77.017615][ T5331] do_syscall_64+0xf3/0x230 [ 77.019507][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.021909][ T5331] [ 77.021909][ T5331] other info that might help us debug this: [ 77.021909][ T5331] [ 77.025781][ T5331] Possible unsafe locking scenario: [ 77.025781][ T5331] [ 77.028648][ T5331] CPU0 CPU1 [ 77.030754][ T5331] ---- ---- [ 77.033260][ T5331] lock(&HFSPLUS_I(inode)->extents_lock); [ 77.036164][ T5331] lock(&tree->tree_lock/1); [ 77.039705][ T5331] lock(&HFSPLUS_I(inode)->extents_lock); [ 77.043427][ T5331] lock(&tree->tree_lock/1); [ 77.045631][ T5331] [ 77.045631][ T5331] *** DEADLOCK *** [ 77.045631][ T5331] [ 77.048908][ T5331] 3 locks held by syz.0.0/5331: [ 77.050749][ T5331] #0: ffff8880435a16c8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 77.054904][ T5331] #1: ffff888045e1b3d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x156/0x820 [ 77.059362][ T5331] #2: ffff888045e1b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x383/0x14f0 [ 77.063805][ T5331] [ 77.063805][ T5331] stack backtrace: [ 77.066260][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.14.0-syzkaller #0 [ 77.066269][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.066275][ T5331] Call Trace: [ 77.066280][ T5331] [ 77.066284][ T5331] dump_stack_lvl+0x241/0x360 [ 77.066297][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.066304][ T5331] ? __pfx__printk+0x10/0x10 [ 77.066313][ T5331] print_circular_bug+0x13a/0x1b0 [ 77.066322][ T5331] check_noncircular+0x36a/0x4a0 [ 77.066330][ T5331] ? mark_lock+0x9a/0x360 [ 77.066337][ T5331] ? __pfx_check_noncircular+0x10/0x10 [ 77.066345][ T5331] ? lockdep_lock+0x123/0x2b0 [ 77.066360][ T5331] validate_chain+0x18ef/0x5920 [ 77.066376][ T5331] ? __pfx_validate_chain+0x10/0x10 [ 77.066387][ T5331] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.066407][ T5331] ? free_frozen_pages+0x757/0x10e0 [ 77.066424][ T5331] ? __pfx_lock_release+0x10/0x10 [ 77.066439][ T5331] ? mark_lock+0x9a/0x360 [ 77.066449][ T5331] __lock_acquire+0x1397/0x2100 [ 77.066467][ T5331] lock_acquire+0x1ed/0x550 [ 77.066481][ T5331] ? hfsplus_find_init+0x14a/0x1c0 [ 77.066498][ T5331] ? __pfx_lock_acquire+0x10/0x10 [ 77.066510][ T5331] ? hfsplus_find_init+0x85/0x1c0 [ 77.066519][ T5331] ? hfsplus_get_block+0x5c4/0x14f0 [ 77.066526][ T5331] ? __pfx___might_resched+0x10/0x10 [ 77.066534][ T5331] ? filemap_read+0x464/0x1260 [ 77.066543][ T5331] ? __kernel_read+0x52e/0xa00 [ 77.066549][ T5331] ? integrity_kernel_read+0xb0/0x100 [ 77.066558][ T5331] ? ima_calc_file_hash+0xae6/0x1b30 [ 77.066566][ T5331] ? ima_collect_measurement+0x529/0xb20 [ 77.066575][ T5331] ? process_measurement+0x1351/0x1fb0 [ 77.066583][ T5331] ? ima_file_check+0xd9/0x120 [ 77.066597][ T5331] ? security_file_post_open+0xb9/0x280 [ 77.066609][ T5331] ? path_openat+0x2cca/0x3590 [ 77.066619][ T5331] ? do_sys_openat2+0x13e/0x1d0 [ 77.066633][ T5331] ? __x64_sys_open+0x225/0x270 [ 77.066645][ T5331] ? do_syscall_64+0xf3/0x230 [ 77.066656][ T5331] __mutex_lock+0x19c/0x1010 [ 77.066670][ T5331] ? hfsplus_find_init+0x14a/0x1c0 [ 77.066686][ T5331] ? hfsplus_find_init+0x14a/0x1c0 [ 77.066702][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 77.066717][ T5331] ? rcu_is_watching+0x15/0xb0 [ 77.066729][ T5331] ? __kmalloc_noprof+0x2a5/0x4c0 [ 77.066743][ T5331] ? hfsplus_find_init+0x85/0x1c0 [ 77.066757][ T5331] hfsplus_find_init+0x14a/0x1c0 [ 77.066771][ T5331] hfsplus_get_block+0x5c4/0x14f0 [ 77.066784][ T5331] ? __pfx_hfsplus_get_block+0x10/0x10 [ 77.066796][ T5331] ? _raw_spin_unlock+0x28/0x50 [ 77.066808][ T5331] ? create_empty_buffers+0x471/0x530 [ 77.066823][ T5331] block_read_full_folio+0x3ee/0xae0 [ 77.066839][ T5331] ? __pfx_hfsplus_get_block+0x10/0x10 [ 77.066850][ T5331] ? __pfx_block_read_full_folio+0x10/0x10 [ 77.066865][ T5331] ? __folio_batch_add_and_move+0x83c/0xd70 [ 77.066880][ T5331] ? readahead_folio+0x2ed/0x440 [ 77.066892][ T5331] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 77.066902][ T5331] read_pages+0x35c/0x570 [ 77.066916][ T5331] ? __pfx_read_pages+0x10/0x10 [ 77.066932][ T5331] page_cache_ra_unbounded+0x708/0x820 [ 77.066949][ T5331] filemap_get_pages+0x59a/0x1fb0 [ 77.066964][ T5331] ? __pfx_hlock_conflict+0x10/0x10 [ 77.066974][ T5331] ? __pfx___bfs+0x10/0x10 [ 77.066984][ T5331] ? mark_lock+0x9a/0x360 [ 77.066998][ T5331] ? __pfx_filemap_get_pages+0x10/0x10 [ 77.067013][ T5331] ? __lock_acquire+0x1397/0x2100 [ 77.067026][ T5331] ? __pfx___might_resched+0x10/0x10 [ 77.067043][ T5331] filemap_read+0x464/0x1260 [ 77.067059][ T5331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.067075][ T5331] ? __pfx_filemap_read+0x10/0x10 [ 77.067093][ T5331] ? generic_file_read_iter+0x98/0x550 [ 77.067118][ T5331] ? kasan_save_track+0x51/0x80 [ 77.067132][ T5331] __kernel_read+0x52e/0xa00 [ 77.067143][ T5331] ? do_sys_openat2+0x13e/0x1d0 [ 77.067158][ T5331] ? __pfx___kernel_read+0x10/0x10 [ 77.067173][ T5331] integrity_kernel_read+0xb0/0x100 [ 77.067187][ T5331] ? __pfx_integrity_kernel_read+0x10/0x10 [ 77.067201][ T5331] ? __kmalloc_cache_noprof+0x243/0x390 [ 77.067215][ T5331] ? ima_calc_file_hash+0xaae/0x1b30 [ 77.067225][ T5331] ima_calc_file_hash+0xae6/0x1b30 [ 77.067238][ T5331] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 77.067256][ T5331] ? stack_depot_save_flags+0x7b4/0x940 [ 77.067274][ T5331] ? kasan_save_track+0x51/0x80 [ 77.067284][ T5331] ? kasan_save_track+0x3f/0x80 [ 77.067293][ T5331] ? kasan_save_free_info+0x40/0x50 [ 77.067307][ T5331] ? __kasan_slab_free+0x59/0x70 [ 77.067317][ T5331] ? kfree+0x196/0x430 [ 77.067328][ T5331] ? hfsplus_getxattr+0x121/0x180 [ 77.067337][ T5331] ? vfs_getxattr_alloc+0x472/0x5c0 [ 77.067349][ T5331] ? ima_read_xattr+0x38/0x60 [ 77.067360][ T5331] ? process_measurement+0x117a/0x1fb0 [ 77.067369][ T5331] ? make_vfsgid+0x51/0xa0 [ 77.067378][ T5331] ? generic_fillattr+0x58f/0x830 [ 77.067393][ T5331] ima_collect_measurement+0x529/0xb20 [ 77.067407][ T5331] ? __pfx_ima_collect_measurement+0x10/0x10 [ 77.067419][ T5331] ? lockdep_hardirqs_on+0x99/0x150 [ 77.067435][ T5331] ? kfree+0x196/0x430 [ 77.067446][ T5331] ? hfsplus_getxattr+0x100/0x180 [ 77.067454][ T5331] ? hfsplus_getxattr+0x121/0x180 [ 77.067462][ T5331] ? ima_get_hash_algo+0x156/0x4d0 [ 77.067470][ T5331] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 77.067479][ T5331] process_measurement+0x1351/0x1fb0 [ 77.067488][ T5331] ? __pfx_process_measurement+0x10/0x10 [ 77.067494][ T5331] ? tomoyo_check_open_permission+0x207/0x4f0 [ 77.067503][ T5331] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 77.067515][ T5331] ? __pfx_apparmor_file_open+0x10/0x10 [ 77.067523][ T5331] ? do_raw_spin_unlock+0x58/0x8b0 [ 77.067531][ T5331] ? inode_to_bdi+0x69/0xf0 [ 77.067540][ T5331] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 77.067550][ T5331] ima_file_check+0xd9/0x120 [ 77.067560][ T5331] ? __pfx_ima_file_check+0x10/0x10 [ 77.067569][ T5331] security_file_post_open+0xb9/0x280 [ 77.067578][ T5331] path_openat+0x2cca/0x3590 [ 77.067588][ T5331] ? __pfx_path_openat+0x10/0x10 [ 77.067596][ T5331] do_filp_open+0x27f/0x4e0 [ 77.067603][ T5331] ? __pfx_do_filp_open+0x10/0x10 [ 77.067609][ T5331] ? do_raw_spin_lock+0x14f/0x370 [ 77.067620][ T5331] do_sys_openat2+0x13e/0x1d0 [ 77.067628][ T5331] ? __might_fault+0xaa/0x120 [ 77.067634][ T5331] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.067643][ T5331] ? rcu_is_watching+0x15/0xb0 [ 77.067649][ T5331] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 77.067661][ T5331] __x64_sys_open+0x225/0x270 [ 77.067669][ T5331] ? __pfx___x64_sys_open+0x10/0x10 [ 77.067680][ T5331] ? do_syscall_64+0x100/0x230 [ 77.067689][ T5331] ? do_syscall_64+0xb6/0x230 [ 77.067697][ T5331] do_syscall_64+0xf3/0x230 [ 77.067706][ T5331] ? clear_bhb_loop+0x35/0x90 [ 77.067718][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.067727][ T5331] RIP: 0033:0x7f9c0d38d169 [ 77.067736][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.067744][ T5331] RSP: 002b:00007f9c0e202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 77.067756][ T5331] RAX: ffffffffffffffda RBX: 00007f9c0d5a5fa0 RCX: 00007f9c0d38d169 [ 77.067764][ T5331] RDX: 00000000000001c9 RSI: 0000000000101040 RDI: 0000200000000100 [ 77.067771][ T5331] RBP: 00007f9c0d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.067777][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.067782][ T5331] R13: 0000000000000000 R14: 00007f9c0d5a5fa0 R15: 00007ffd81b7d698 [ 77.067788][ T5331] [ 77.375180][ T25] audit: type=1800 audit(1742828148.130:2): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 77.383213][ T5331] syz.0.0 (5331) used greatest stack depth: 18064 bytes left