[ OK ] Found device /dev/ttyS0. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.992379] ====================================================== [ 27.992379] WARNING: the mand mount option is being deprecated and [ 27.992379] will be removed in v5.15! [ 27.992379] ====================================================== [ 28.022456] [ 28.024098] ============================================ [ 28.029531] WARNING: possible recursive locking detected [ 28.035085] 4.14.302-syzkaller #0 Not tainted [ 28.039562] -------------------------------------------- [ 28.045081] syz-executor425/7946 is trying to acquire lock: [ 28.050771] (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_get_block+0x1f9/0x820 [ 28.060733] [ 28.060733] but task is already holding lock: [ 28.066690] (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_file_truncate+0x1ba/0xe80 [ 28.077095] [ 28.077095] other info that might help us debug this: [ 28.083817] Possible unsafe locking scenario: [ 28.083817] [ 28.089848] CPU0 [ 28.092402] ---- [ 28.094954] lock(&HFSPLUS_I(inode)->extents_lock); [ 28.100026] lock(&HFSPLUS_I(inode)->extents_lock); [ 28.105099] [ 28.105099] *** DEADLOCK *** [ 28.105099] [ 28.111129] May be due to missing lock nesting notation [ 28.111129] [ 28.118025] 5 locks held by syz-executor425/7946: [ 28.122838] #0: (sb_writers#10){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 28.131223] #1: (&sb->s_type->i_mutex_key#17){+.+.}, at: [] do_truncate+0xf0/0x1a0 [ 28.140644] #2: (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: [] hfsplus_file_truncate+0x1ba/0xe80 [ 28.151368] #3: (&tree->tree_lock/1){+.+.}, at: [] hfsplus_find_init+0x161/0x220 [ 28.160617] #4: (&sbi->alloc_mutex){+.+.}, at: [] hfsplus_block_free+0xc7/0x560 [ 28.169781] [ 28.169781] stack backtrace: [ 28.174252] CPU: 0 PID: 7946 Comm: syz-executor425 Not tainted 4.14.302-syzkaller #0 [ 28.182711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 28.192210] Call Trace: [ 28.194776] dump_stack+0x1b2/0x281 [ 28.198397] __lock_acquire.cold+0x180/0x97c [ 28.202790] ? register_lock_class+0x1d0/0x1180 [ 28.207443] ? trace_hardirqs_on+0x10/0x10 [ 28.211654] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 28.216990] ? save_trace+0xd6/0x290 [ 28.220678] ? __lock_acquire+0x2190/0x3f20 [ 28.224980] lock_acquire+0x170/0x3f0 [ 28.228754] ? hfsplus_get_block+0x1f9/0x820 [ 28.233229] ? hfsplus_get_block+0x1f9/0x820 [ 28.237610] __mutex_lock+0xc4/0x1310 [ 28.241386] ? hfsplus_get_block+0x1f9/0x820 [ 28.245768] ? hfsplus_get_block+0x1f9/0x820 [ 28.250151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 28.255579] ? lock_acquire+0x170/0x3f0 [ 28.259527] ? create_page_buffers+0x14d/0x1c0 [ 28.264168] hfsplus_get_block+0x1f9/0x820 [ 28.268374] ? _raw_spin_unlock+0x29/0x40 [ 28.272493] ? create_page_buffers+0xce/0x1c0 [ 28.276975] block_read_full_page+0x25e/0x8d0 [ 28.281450] ? hfsplus_file_extend+0xef0/0xef0 [ 28.286013] ? __lru_cache_add+0x178/0x250 [ 28.290224] ? __bread_gfp+0x2e0/0x2e0 [ 28.294167] ? add_to_page_cache_lru+0x136/0x2b0 [ 28.298918] ? add_to_page_cache_locked+0x40/0x40 [ 28.303740] ? alloc_pages_current+0x15d/0x260 [ 28.308300] do_read_cache_page+0x38e/0xc10 [ 28.312598] ? hfsplus_bmap+0x30/0x30 [ 28.316475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 28.321922] hfsplus_block_free+0x177/0x560 [ 28.326226] hfsplus_free_extents+0x170/0x440 [ 28.330789] hfsplus_file_truncate+0xbc0/0xe80 [ 28.335350] ? hfsplus_get_block+0x820/0x820 [ 28.339733] ? up_write+0x17/0x60 [ 28.343168] ? unmap_mapping_range+0xe9/0x250 [ 28.347637] ? inode_newsize_ok+0x145/0x1c0 [ 28.351935] hfsplus_setattr+0x182/0x310 [ 28.355968] ? hfsplus_file_fsync+0x4a0/0x4a0 [ 28.360436] notify_change+0x56b/0xd10 [ 28.364297] do_truncate+0xff/0x1a0 [ 28.367900] ? finish_open+0x170/0x170 [ 28.371759] ? apparmor_path_truncate+0x163/0x1d0 [ 28.376577] path_openat+0x1dcc/0x2970 [ 28.380439] ? path_lookupat+0x780/0x780 [ 28.384475] ? trace_hardirqs_on+0x10/0x10 [ 28.388686] ? trace_hardirqs_on+0x10/0x10 [ 28.392892] do_filp_open+0x179/0x3c0 [ 28.396665] ? may_open_dev+0xe0/0xe0 [ 28.400441] ? lock_downgrade+0x740/0x740 [ 28.404648] ? do_raw_spin_unlock+0x164/0x220 [ 28.409117] ? _raw_spin_unlock+0x29/0x40 [ 28.413239] ? __alloc_fd+0x1be/0x490 [ 28.417011] ? _raw_spin_unlock_irq+0x24/0x80 [ 28.421478] do_sys_open+0x296/0x410 [ 28.425254] ? filp_open+0x60/0x60 [ 28.428765] ? do_syscall_64+0x4c/0x640 [ 28.432711] ? compat_SyS_openat+0x30/0x30 [ 28.436919] do_syscall_64+0x1d5/0x640 [ 28.440780] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 28.445958] RIP: 0033:0x7f1500a9a779 [ 28.449644] RSP: 002b:00007ffeced999e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 28.457324] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1500a9a779 [ 28.464563] RDX: 00007f1500a58df3 RSI: 0000000000000000 RDI: 0000000020000300 [ 28.471810] RBP: 00007f1500a5a010 R08: 0000000000000604 R09: 0000000000000000 [ 28.479451] R10: 00007ffeced998b0 R11: 0000000000000246 R12: 00007f1500a5a0a0 [ 28.486701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000