Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. executing program [ 35.613167][ T4218] loop0: detected capacity change from 0 to 1024 [ 35.628660][ T4218] [ 35.629272][ T4218] ====================================================== [ 35.630776][ T4218] WARNING: possible circular locking dependency detected [ 35.632253][ T4218] 6.1.44-syzkaller #0 Not tainted [ 35.633369][ T4218] ------------------------------------------------------ [ 35.634848][ T4218] syz-executor205/4218 is trying to acquire lock: [ 35.636214][ T4218] ffff0000de1107c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x198/0x14cc [ 35.638684][ T4218] [ 35.638684][ T4218] but task is already holding lock: [ 35.640304][ T4218] ffff0000de0dc0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 35.642430][ T4218] [ 35.642430][ T4218] which lock already depends on the new lock. [ 35.642430][ T4218] [ 35.644753][ T4218] [ 35.644753][ T4218] the existing dependency chain (in reverse order) is: [ 35.646843][ T4218] [ 35.646843][ T4218] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 35.648608][ T4218] __mutex_lock_common+0x190/0x21a0 [ 35.649829][ T4218] mutex_lock_nested+0x38/0x44 [ 35.651037][ T4218] hfsplus_file_truncate+0x6d0/0x9b8 [ 35.652289][ T4218] hfsplus_setattr+0x18c/0x25c [ 35.653435][ T4218] notify_change+0xc24/0xec0 [ 35.654633][ T4218] do_truncate+0x1c0/0x28c [ 35.655724][ T4218] path_openat+0x1fa0/0x2548 [ 35.656845][ T4218] do_filp_open+0x1bc/0x3cc [ 35.657908][ T4218] do_sys_openat2+0x128/0x3d8 [ 35.659086][ T4218] __arm64_sys_openat2+0x308/0x3b8 [ 35.660332][ T4218] invoke_syscall+0x98/0x2c0 [ 35.661534][ T4218] el0_svc_common+0x138/0x258 [ 35.662675][ T4218] do_el0_svc+0x64/0x218 [ 35.663699][ T4218] el0_svc+0x58/0x168 [ 35.664672][ T4218] el0t_64_sync_handler+0x84/0xf0 [ 35.665867][ T4218] el0t_64_sync+0x18c/0x190 [ 35.666942][ T4218] [ 35.666942][ T4218] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 35.669016][ T4218] __lock_acquire+0x3338/0x764c [ 35.670134][ T4218] lock_acquire+0x26c/0x7cc [ 35.671265][ T4218] __mutex_lock_common+0x190/0x21a0 [ 35.672412][ T4218] mutex_lock_nested+0x38/0x44 [ 35.673551][ T4218] hfsplus_file_extend+0x198/0x14cc [ 35.674797][ T4218] hfsplus_bmap_reserve+0xec/0x474 [ 35.676154][ T4218] hfsplus_rename_cat+0x1ac/0xf30 [ 35.677298][ T4218] hfsplus_rename+0x120/0x1b0 [ 35.678355][ T4218] vfs_rename+0x8b8/0xd04 [ 35.679327][ T4218] do_renameat2+0x980/0x1040 [ 35.680441][ T4218] __arm64_sys_renameat2+0xe0/0xfc [ 35.681631][ T4218] invoke_syscall+0x98/0x2c0 [ 35.682835][ T4218] el0_svc_common+0x138/0x258 [ 35.683979][ T4218] do_el0_svc+0x64/0x218 [ 35.685012][ T4218] el0_svc+0x58/0x168 [ 35.686010][ T4218] el0t_64_sync_handler+0x84/0xf0 [ 35.687188][ T4218] el0t_64_sync+0x18c/0x190 [ 35.688391][ T4218] [ 35.688391][ T4218] other info that might help us debug this: [ 35.688391][ T4218] [ 35.690582][ T4218] Possible unsafe locking scenario: [ 35.690582][ T4218] [ 35.692262][ T4218] CPU0 CPU1 [ 35.693501][ T4218] ---- ---- [ 35.694692][ T4218] lock(&tree->tree_lock); [ 35.695655][ T4218] lock(&HFSPLUS_I(inode)->extents_lock); [ 35.697469][ T4218] lock(&tree->tree_lock); [ 35.698946][ T4218] lock(&HFSPLUS_I(inode)->extents_lock); [ 35.700204][ T4218] [ 35.700204][ T4218] *** DEADLOCK *** [ 35.700204][ T4218] [ 35.702001][ T4218] 4 locks held by syz-executor205/4218: [ 35.703152][ T4218] #0: ffff0000de0d8460 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 35.705201][ T4218] #1: ffff0000de111e00 (&type->i_mutex_dir_key#6/1){+.+.}-{3:3}, at: lock_rename+0xdc/0x198 [ 35.707448][ T4218] #2: ffff0000de1124c0 (&type->i_mutex_dir_key#6){++++}-{3:3}, at: lock_two_inodes+0xdc/0x158 [ 35.709775][ T4218] #3: ffff0000de0dc0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 35.711951][ T4218] [ 35.711951][ T4218] stack backtrace: [ 35.713180][ T4218] CPU: 1 PID: 4218 Comm: syz-executor205 Not tainted 6.1.44-syzkaller #0 [ 35.715051][ T4218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 35.717232][ T4218] Call trace: [ 35.717989][ T4218] dump_backtrace+0x1c8/0x1f4 [ 35.719127][ T4218] show_stack+0x2c/0x3c [ 35.720002][ T4218] dump_stack_lvl+0x108/0x170 [ 35.721008][ T4218] dump_stack+0x1c/0x58 [ 35.721927][ T4218] print_circular_bug+0x150/0x1b8 [ 35.723083][ T4218] check_noncircular+0x2cc/0x378 [ 35.724155][ T4218] __lock_acquire+0x3338/0x764c [ 35.725260][ T4218] lock_acquire+0x26c/0x7cc [ 35.726267][ T4218] __mutex_lock_common+0x190/0x21a0 [ 35.727442][ T4218] mutex_lock_nested+0x38/0x44 [ 35.728479][ T4218] hfsplus_file_extend+0x198/0x14cc [ 35.729597][ T4218] hfsplus_bmap_reserve+0xec/0x474 [ 35.730753][ T4218] hfsplus_rename_cat+0x1ac/0xf30 [ 35.731768][ T4218] hfsplus_rename+0x120/0x1b0 [ 35.732819][ T4218] vfs_rename+0x8b8/0xd04 [ 35.733849][ T4218] do_renameat2+0x980/0x1040 [ 35.734809][ T4218] __arm64_sys_renameat2+0xe0/0xfc [ 35.735934][ T4218] invoke_syscall+0x98/0x2c0 [ 35.736934][ T4218] el0_svc_common+0x138/0x258 [ 35.737902][ T4218] do_el0_svc+0x64/0x218 [ 35.738772][ T4218] el0_svc+0x58/0x168 [ 35.739631][ T4218] el0t_64_sync_handler+0x84/0xf0 [ 35.740759][ T4218] el0t_64_sync+0x18c/0x190