[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.762277] hfsplus: xattr searching failed [ 32.767040] [ 32.768659] ============================================ [ 32.774089] WARNING: possible recursive locking detected [ 32.779513] 4.14.301-syzkaller #0 Not tainted [ 32.783974] -------------------------------------------- [ 32.789404] syz-executor309/7981 is trying to acquire lock: [ 32.795096] (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_get_block+0x1f9/0x820 [ 32.805052] [ 32.805052] but task is already holding lock: [ 32.810996] (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_file_truncate+0x1ba/0xe80 [ 32.821285] [ 32.821285] other info that might help us debug this: [ 32.827916] Possible unsafe locking scenario: [ 32.827916] [ 32.833940] CPU0 [ 32.836490] ---- [ 32.839042] lock(&HFSPLUS_I(inode)->extents_lock); [ 32.844111] lock(&HFSPLUS_I(inode)->extents_lock); [ 32.849183] [ 32.849183] *** DEADLOCK *** [ 32.849183] [ 32.855207] May be due to missing lock nesting notation [ 32.855207] [ 32.862102] 5 locks held by syz-executor309/7981: [ 32.866930] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 32.875310] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] do_truncate+0xf0/0x1a0 [ 32.884730] #2: (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_file_truncate+0x1ba/0xe80 [ 32.895449] #3: (&tree->tree_lock/1){+.+.}, at: [] hfsplus_find_init+0x161/0x220 [ 32.904693] #4: (&sbi->alloc_mutex){+.+.}, at: [] hfsplus_block_free+0xc7/0x560 [ 32.913855] [ 32.913855] stack backtrace: [ 32.918322] CPU: 0 PID: 7981 Comm: syz-executor309 Not tainted 4.14.301-syzkaller #0 [ 32.926168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 32.935491] Call Trace: [ 32.938051] dump_stack+0x1b2/0x281 [ 32.941652] __lock_acquire.cold+0x180/0x97c [ 32.946033] ? register_lock_class+0x1d0/0x1180 [ 32.950670] ? trace_hardirqs_on+0x10/0x10 [ 32.954877] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 32.960207] ? save_trace+0xd6/0x290 [ 32.963890] ? __lock_acquire+0x2190/0x3f20 [ 32.968180] lock_acquire+0x170/0x3f0 [ 32.971953] ? hfsplus_get_block+0x1f9/0x820 [ 32.976331] ? hfsplus_get_block+0x1f9/0x820 [ 32.980708] __mutex_lock+0xc4/0x1310 [ 32.984480] ? hfsplus_get_block+0x1f9/0x820 [ 32.988857] ? hfsplus_get_block+0x1f9/0x820 [ 32.993236] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 32.998655] ? lock_acquire+0x170/0x3f0 [ 33.002597] ? create_page_buffers+0x14d/0x1c0 [ 33.007154] hfsplus_get_block+0x1f9/0x820 [ 33.011359] ? _raw_spin_unlock+0x29/0x40 [ 33.015475] ? create_page_buffers+0xce/0x1c0 [ 33.019938] block_read_full_page+0x25e/0x8d0 [ 33.024405] ? hfsplus_file_extend+0xef0/0xef0 [ 33.029409] ? __lru_cache_add+0x178/0x250 [ 33.033620] ? __bread_gfp+0x2e0/0x2e0 [ 33.037481] ? add_to_page_cache_lru+0x136/0x2b0 [ 33.042208] ? add_to_page_cache_locked+0x40/0x40 [ 33.047029] ? alloc_pages_current+0x15d/0x260 [ 33.051929] do_read_cache_page+0x38e/0xc10 [ 33.056229] ? hfsplus_bmap+0x30/0x30 [ 33.060011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 33.065442] hfsplus_block_free+0x177/0x560 [ 33.069740] hfsplus_free_extents+0x170/0x440 [ 33.074207] hfsplus_file_truncate+0xbc0/0xe80 [ 33.078760] ? hfsplus_get_block+0x820/0x820 [ 33.083140] ? up_write+0x17/0x60 [ 33.086572] ? unmap_mapping_range+0xe9/0x250 [ 33.091039] ? inode_newsize_ok+0x145/0x1c0 [ 33.095342] hfsplus_setattr+0x182/0x310 [ 33.099373] ? hfsplus_file_fsync+0x4a0/0x4a0 [ 33.103840] notify_change+0x56b/0xd10 [ 33.107701] do_truncate+0xff/0x1a0 [ 33.111298] ? finish_open+0x170/0x170 [ 33.115158] ? apparmor_path_truncate+0x163/0x1d0 [ 33.119972] path_openat+0x1dcc/0x2970 [ 33.123830] ? path_lookupat+0x780/0x780 [ 33.127862] ? trace_hardirqs_on+0x10/0x10 [ 33.132067] ? trace_hardirqs_on+0x10/0x10 [ 33.136272] do_filp_open+0x179/0x3c0 [ 33.140222] ? may_open_dev+0xe0/0xe0 [ 33.143992] ? lock_downgrade+0x740/0x740 [ 33.148108] ? do_raw_spin_unlock+0x164/0x220 [ 33.152576] ? _raw_spin_unlock+0x29/0x40 [ 33.156703] ? __alloc_fd+0x1be/0x490 [ 33.160485] ? _raw_spin_unlock_irq+0x24/0x80 [ 33.164968] do_sys_open+0x296/0x410 [ 33.168698] ? filp_open+0x60/0x60 [ 33.172213] ? do_syscall_64+0x4c/0x640 [ 33.176158] ? compat_SyS_openat+0x30/0x30 [ 33.180365] do_syscall_64+0x1d5/0x640 [ 33.184230] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 33.189392] RIP: 0033:0x7f70936d6779 [ 33.193073] RSP: 002b:00007ffdd6efbaf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 33.200748] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f70936d6779 [ 33.207989] RDX: 00007f7093694df3 RSI: 0000000000000000 RDI: 0000000020000040 [ 33.215228] RBP: 00007f7093696010 R08: 00000000000005cd R09: 0000000000000000 [ 33.222701] R10: 00007ffdd6efb9c0 R11: 0000000000000246 R12: 00007f70936960a0 [ 33.229950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000