program: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}], [{@context={'context', 0x3d, 'root'}}, {@smackfsfloor}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}]}) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) recvmsg$inet_nvme(r0, &(0x7f00000006c0)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000580)=""/171, 0xab}], 0x4, &(0x7f0000000680)=""/49, 0x31}, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e9902, 0x5e) [ 117.320315][ T4670] Bluetooth: hci0: command tx timeout [ 117.388643][ T5337] overlay: Unknown parameter 'context' [ 117.412609][ T5337] loop0: detected capacity change from 0 to 1024 [ 117.518321][ T5337] [ 117.519505][ T5337] ====================================================== [ 117.522743][ T5337] WARNING: possible circular locking dependency detected [ 117.526278][ T5337] syzkaller #0 Not tainted [ 117.528564][ T5337] ------------------------------------------------------ [ 117.531627][ T5337] syz.0.0/5337 is trying to acquire lock: [ 117.534263][ T5337] ffff8880433ae0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 117.538347][ T5337] [ 117.538347][ T5337] but task is already holding lock: [ 117.541529][ T5337] ffff888041d89c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1670 [ 117.546291][ T5337] [ 117.546291][ T5337] which lock already depends on the new lock. [ 117.546291][ T5337] [ 117.551148][ T5337] [ 117.551148][ T5337] the existing dependency chain (in reverse order) is: [ 117.555551][ T5337] [ 117.555551][ T5337] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 117.560558][ T5337] __mutex_lock+0x19f/0x1300 [ 117.563160][ T5337] hfsplus_file_extend+0x215/0x1d70 [ 117.565577][ T5337] hfsplus_bmap_reserve+0x125/0x510 [ 117.568194][ T5337] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 117.570814][ T5337] __hfsplus_ext_cache_extent+0x89/0xe30 [ 117.573774][ T5337] hfsplus_file_extend+0x4af/0x1d70 [ 117.576487][ T5337] hfsplus_get_block+0x42c/0x1670 [ 117.578919][ T5337] __block_write_begin_int+0x6c6/0x1910 [ 117.581415][ T5337] cont_write_begin+0x737/0xae0 [ 117.583535][ T5337] hfsplus_write_begin+0x66/0xb0 [ 117.586283][ T5337] generic_perform_write+0x2e2/0x8f0 [ 117.589229][ T5337] generic_file_write_iter+0x14a/0x680 [ 117.592539][ T5337] aio_write+0x5cd/0x870 [ 117.594849][ T5337] io_submit_one+0x7bb/0x14c0 [ 117.597055][ T5337] __se_sys_io_submit+0x195/0x340 [ 117.599528][ T5337] do_syscall_64+0x14d/0xf80 [ 117.601633][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.604311][ T5337] [ 117.604311][ T5337] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 117.608575][ T5337] __lock_acquire+0x15a5/0x2cf0 [ 117.611881][ T5337] lock_acquire+0xf0/0x2e0 [ 117.614693][ T5337] __mutex_lock+0x19f/0x1300 [ 117.617489][ T5337] hfsplus_find_init+0x168/0x2d0 [ 117.619837][ T5337] hfsplus_get_block+0x91e/0x1670 [ 117.622165][ T5337] block_read_full_folio+0x29f/0x830 [ 117.624592][ T5337] read_pages+0x373/0x5a0 [ 117.626674][ T5337] page_cache_ra_unbounded+0x79c/0xa50 [ 117.629308][ T5337] page_cache_ra_order+0xaf2/0xeb0 [ 117.632107][ T5337] filemap_get_pages+0x4c0/0x1f10 [ 117.635121][ T5337] filemap_read+0x447/0x1230 [ 117.637656][ T5337] __kernel_read+0x504/0x9b0 [ 117.639969][ T5337] integrity_kernel_read+0x89/0xd0 [ 117.642685][ T5337] ima_calc_file_hash+0x12c3/0x17f0 [ 117.645547][ T5337] ima_collect_measurement+0x48b/0x930 [ 117.648573][ T5337] process_measurement+0x12cd/0x1c80 [ 117.651362][ T5337] ima_file_check+0xe1/0x130 [ 117.654701][ T5337] security_file_post_open+0xb3/0x260 [ 117.658485][ T5337] path_openat+0x2e4d/0x3860 [ 117.660765][ T5337] do_file_open+0x23e/0x4a0 [ 117.662993][ T5337] do_sys_openat2+0x113/0x200 [ 117.665122][ T5337] __x64_sys_openat+0x138/0x170 [ 117.667093][ T5337] do_syscall_64+0x14d/0xf80 [ 117.668979][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.671196][ T5337] [ 117.671196][ T5337] other info that might help us debug this: [ 117.671196][ T5337] [ 117.675241][ T5337] Possible unsafe locking scenario: [ 117.675241][ T5337] [ 117.679092][ T5337] CPU0 CPU1 [ 117.681846][ T5337] ---- ---- [ 117.683930][ T5337] lock(&HFSPLUS_I(inode)->extents_lock); [ 117.686133][ T5337] lock(&tree->tree_lock/1); [ 117.689307][ T5337] lock(&HFSPLUS_I(inode)->extents_lock); [ 117.693019][ T5337] lock(&tree->tree_lock/1); [ 117.695349][ T5337] [ 117.695349][ T5337] *** DEADLOCK *** [ 117.695349][ T5337] [ 117.699185][ T5337] 3 locks held by syz.0.0/5337: [ 117.701207][ T5337] #0: ffff888042c6ed28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7f1/0x1c80 [ 117.705778][ T5337] #1: ffff888041d89f98 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_order+0xae2/0xeb0 [ 117.710527][ T5337] #2: ffff888041d89c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1670 [ 117.716572][ T5337] [ 117.716572][ T5337] stack backtrace: [ 117.719863][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 117.719882][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.719890][ T5337] Call Trace: [ 117.719898][ T5337] [ 117.719905][ T5337] dump_stack_lvl+0xe8/0x150 [ 117.719926][ T5337] print_circular_bug+0x2e1/0x300 [ 117.719946][ T5337] check_noncircular+0x12e/0x150 [ 117.719965][ T5337] __lock_acquire+0x15a5/0x2cf0 [ 117.719979][ T5337] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.719995][ T5337] ? kasan_save_track+0x4f/0x80 [ 117.720006][ T5337] ? kasan_save_track+0x3e/0x80 [ 117.720016][ T5337] ? __kasan_kmalloc+0x93/0xb0 [ 117.720026][ T5337] ? __kmalloc_noprof+0x35c/0x760 [ 117.720038][ T5337] ? hfsplus_find_init+0x8c/0x2d0 [ 117.720051][ T5337] ? hfsplus_get_block+0x91e/0x1670 [ 117.720059][ T5337] ? block_read_full_folio+0x29f/0x830 [ 117.720072][ T5337] lock_acquire+0xf0/0x2e0 [ 117.720085][ T5337] ? hfsplus_find_init+0x168/0x2d0 [ 117.720101][ T5337] __mutex_lock+0x19f/0x1300 [ 117.720139][ T5337] ? hfsplus_find_init+0x168/0x2d0 [ 117.720157][ T5337] ? hfsplus_find_init+0x168/0x2d0 [ 117.720174][ T5337] ? __pfx___mutex_lock+0x10/0x10 [ 117.720187][ T5337] ? rcu_is_watching+0x15/0xb0 [ 117.720202][ T5337] ? __kmalloc_noprof+0x37d/0x760 [ 117.720212][ T5337] ? hfsplus_find_init+0x8c/0x2d0 [ 117.720223][ T5337] ? __kmalloc_noprof+0x1b8/0x760 [ 117.720234][ T5337] hfsplus_find_init+0x168/0x2d0 [ 117.720248][ T5337] hfsplus_get_block+0x91e/0x1670 [ 117.720260][ T5337] ? __pfx_hfsplus_get_block+0x10/0x10 [ 117.720273][ T5337] ? block_read_full_folio+0x672/0x830 [ 117.720286][ T5337] block_read_full_folio+0x29f/0x830 [ 117.720299][ T5337] ? __pfx_hfsplus_get_block+0x10/0x10 [ 117.720308][ T5337] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 117.720324][ T5337] read_pages+0x373/0x5a0 [ 117.720341][ T5337] ? __pfx_read_pages+0x10/0x10 [ 117.720358][ T5337] ? filemap_add_folio+0x356/0x530 [ 117.720374][ T5337] page_cache_ra_unbounded+0x79c/0xa50 [ 117.720400][ T5337] page_cache_ra_order+0xaf2/0xeb0 [ 117.720424][ T5337] filemap_get_pages+0x4c0/0x1f10 [ 117.720435][ T5337] ? __lock_acquire+0x6b5/0x2cf0 [ 117.720454][ T5337] ? __pfx_filemap_get_pages+0x10/0x10 [ 117.720463][ T5337] ? unwind_next_frame+0xa5/0x23c0 [ 117.720485][ T5337] filemap_read+0x447/0x1230 [ 117.720494][ T5337] ? is_bpf_text_address+0x292/0x2b0 [ 117.720506][ T5337] ? is_bpf_text_address+0x26/0x2b0 [ 117.720519][ T5337] ? __kernel_text_address+0xd/0x30 [ 117.720531][ T5337] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.720545][ T5337] ? __pfx_filemap_read+0x10/0x10 [ 117.720566][ T5337] ? __kmalloc_cache_noprof+0x31c/0x660 [ 117.720577][ T5337] ? generic_file_read_iter+0x8f/0x510 [ 117.720587][ T5337] ? __asan_memset+0x22/0x50 [ 117.720602][ T5337] ? iov_iter_kvec+0xb8/0x180 [ 117.720619][ T5337] __kernel_read+0x504/0x9b0 [ 117.720637][ T5337] ? __pfx___kernel_read+0x10/0x10 [ 117.720658][ T5337] integrity_kernel_read+0x89/0xd0 [ 117.720675][ T5337] ? __pfx_integrity_kernel_read+0x10/0x10 [ 117.720690][ T5337] ? __kmalloc_cache_noprof+0x31c/0x660 [ 117.720700][ T5337] ? ima_calc_file_hash+0x128f/0x17f0 [ 117.720709][ T5337] ? __kmalloc_cache_noprof+0x15b/0x660 [ 117.720720][ T5337] ima_calc_file_hash+0x12c3/0x17f0 [ 117.720735][ T5337] ? __lock_acquire+0x6b5/0x2cf0 [ 117.720749][ T5337] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 117.720768][ T5337] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.720779][ T5337] ? stack_depot_save_flags+0x3f3/0x810 [ 117.720795][ T5337] ? kasan_save_track+0x4f/0x80 [ 117.720804][ T5337] ? kasan_save_track+0x3e/0x80 [ 117.720813][ T5337] ? kasan_save_free_info+0x46/0x50 [ 117.720825][ T5337] ? __kasan_slab_free+0x5c/0x80 [ 117.720834][ T5337] ? make_vfsgid+0x49/0xa0 [ 117.720844][ T5337] ? generic_fillattr+0x63d/0x9a0 [ 117.720857][ T5337] ? hfsplus_getattr+0x235/0x2f0 [ 117.720875][ T5337] ima_collect_measurement+0x48b/0x930 [ 117.720889][ T5337] ? __pfx_ima_collect_measurement+0x10/0x10 [ 117.720903][ T5337] ? kasan_quarantine_put+0xbb/0x1f0 [ 117.720921][ T5337] ? kfree+0x1c1/0x630 [ 117.720936][ T5337] ? hfsplus_getxattr+0x127/0x330 [ 117.720956][ T5337] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 117.720975][ T5337] process_measurement+0x12cd/0x1c80 [ 117.720990][ T5337] ? __pfx_process_measurement+0x10/0x10 [ 117.721001][ T5337] ? tomoyo_check_open_permission+0x38e/0x470 [ 117.721015][ T5337] ? tomoyo_check_open_permission+0x1d3/0x470 [ 117.721035][ T5337] ? mnt_get_write_access+0x66/0x280 [ 117.721045][ T5337] ? fsnotify_open_perm_and_set_mode+0x13c/0x6d0 [ 117.721062][ T5337] ima_file_check+0xe1/0x130 [ 117.721073][ T5337] ? __pfx_ima_file_check+0x10/0x10 [ 117.721085][ T5337] security_file_post_open+0xb3/0x260 [ 117.721100][ T5337] path_openat+0x2e4d/0x3860 [ 117.721119][ T5337] ? __pfx_path_openat+0x10/0x10 [ 117.721128][ T5337] ? __x64_sys_openat+0x138/0x170 [ 117.721145][ T5337] ? __lock_acquire+0x6b5/0x2cf0 [ 117.721160][ T5337] do_file_open+0x23e/0x4a0 [ 117.721171][ T5337] ? __pfx_do_file_open+0x10/0x10 [ 117.721185][ T5337] ? _raw_spin_unlock+0x28/0x50 [ 117.721196][ T5337] ? alloc_fd+0x64b/0x6c0 [ 117.721212][ T5337] do_sys_openat2+0x113/0x200 [ 117.721227][ T5337] ? __se_sys_futex+0x3a8/0x450 [ 117.721241][ T5337] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.721255][ T5337] ? rcu_is_watching+0x15/0xb0 [ 117.721272][ T5337] __x64_sys_openat+0x138/0x170 [ 117.721287][ T5337] do_syscall_64+0x14d/0xf80 [ 117.721300][ T5337] ? trace_irq_disable+0x3b/0x150 [ 117.721310][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.721321][ T5337] ? clear_bhb_loop+0x40/0x90 [ 117.721334][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.721346][ T5337] RIP: 0033:0x7f30e099c819 [ 117.721360][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.721369][ T5337] RSP: 002b:00007f30dcdecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.721384][ T5337] RAX: ffffffffffffffda RBX: 00007f30e0c15fa0 RCX: 00007f30e099c819 [ 117.721392][ T5337] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 117.721400][ T5337] RBP: 00007f30e0a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.721406][ T5337] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 117.721414][ T5337] R13: 00007f30e0c16038 R14: 00007f30e0c15fa0 R15: 00007ffd39624e58 [ 117.721426][ T5337] [ 118.027759][ T25] audit: type=1800 audit(1775174206.514:2): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0