[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.125' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.499753] [ 33.501407] ============================================ [ 33.506848] WARNING: possible recursive locking detected [ 33.512286] 4.19.211-syzkaller #0 Not tainted [ 33.516843] -------------------------------------------- [ 33.522787] syz-executor857/8061 is trying to acquire lock: [ 33.528470] 000000005b63b3cf (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 33.537991] [ 33.537991] but task is already holding lock: [ 33.543942] 00000000e4194eba (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.553639] [ 33.553639] other info that might help us debug this: [ 33.560279] Possible unsafe locking scenario: [ 33.560279] [ 33.566319] CPU0 [ 33.568878] ---- [ 33.571434] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.576593] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.581672] [ 33.581672] *** DEADLOCK *** [ 33.581672] [ 33.587711] May be due to missing lock nesting notation [ 33.587711] [ 33.594613] 4 locks held by syz-executor857/8061: [ 33.599437] #0: 000000003d5471c5 (sb_writers#11){.+.+}, at: vfs_writev+0x259/0x2e0 [ 33.607323] #1: 0000000075dddad3 (&sb->s_type->i_mutex_key#17){+.+.}, at: generic_file_write_iter+0x99/0x730 [ 33.617359] #2: 00000000e4194eba (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.627568] #3: 00000000138ca128 (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_allocate+0xe0/0xa60 [ 33.636757] [ 33.636757] stack backtrace: [ 33.641239] CPU: 0 PID: 8061 Comm: syz-executor857 Not tainted 4.19.211-syzkaller #0 [ 33.649090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.658454] Call Trace: [ 33.661024] dump_stack+0x1fc/0x2ef [ 33.664717] __lock_acquire.cold+0x121/0x57e [ 33.669106] ? mark_held_locks+0xf0/0xf0 [ 33.673144] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 33.678483] ? save_trace+0xd6/0x290 [ 33.682178] ? __lock_acquire+0x22f9/0x3ff0 [ 33.686476] lock_acquire+0x170/0x3c0 [ 33.690253] ? hfsplus_get_block+0x292/0x960 [ 33.694657] ? hfsplus_get_block+0x292/0x960 [ 33.699052] __mutex_lock+0xd7/0x1190 [ 33.702838] ? hfsplus_get_block+0x292/0x960 [ 33.707229] ? check_preemption_disabled+0x41/0x280 [ 33.712397] ? hfsplus_get_block+0x292/0x960 [ 33.716790] ? mutex_trylock+0x1a0/0x1a0 [ 33.720920] ? create_page_buffers+0x212/0x350 [ 33.725920] ? alloc_page_buffers+0x2da/0x5c0 [ 33.730392] ? lock_downgrade+0x720/0x720 [ 33.734534] ? do_raw_spin_lock+0xcb/0x220 [ 33.738855] hfsplus_get_block+0x292/0x960 [ 33.743081] block_read_full_page+0x288/0xd10 [ 33.747562] ? hfsplus_file_extend+0xf40/0xf40 [ 33.752126] ? __bread_gfp+0x300/0x300 [ 33.756018] ? add_to_page_cache_locked+0x40/0x40 [ 33.760844] do_read_cache_page+0x533/0x1170 [ 33.765231] ? hfsplus_bmap+0x30/0x30 [ 33.769010] hfsplus_block_allocate+0x197/0xa60 [ 33.773666] ? __lock_acquire+0x6de/0x3ff0 [ 33.777878] hfsplus_file_extend+0x436/0xf40 [ 33.782354] ? hfsplus_free_fork+0x7e0/0x7e0 [ 33.786855] ? check_usage_backwards+0x300/0x300 [ 33.791775] ? __radix_tree_lookup+0x216/0x370 [ 33.796343] ? find_get_entry+0x4cd/0x8a0 [ 33.800476] hfsplus_get_block+0x196/0x960 [ 33.806877] __block_write_begin_int+0x46c/0x17b0 [ 33.811703] ? hfsplus_file_extend+0xf40/0xf40 [ 33.816272] ? __breadahead_gfp+0x130/0x130 [ 33.820592] ? wait_for_stable_page+0x122/0x360 [ 33.825260] ? hfsplus_file_extend+0xf40/0xf40 [ 33.829820] block_write_begin+0x58/0x2e0 [ 33.833947] cont_write_begin+0x55a/0x820 [ 33.838112] ? hfsplus_file_extend+0xf40/0xf40 [ 33.842684] ? block_write_begin+0x2e0/0x2e0 [ 33.847071] ? lock_downgrade+0x720/0x720 [ 33.851203] ? check_preemption_disabled+0x41/0x280 [ 33.856199] ? calc_wheel_index+0x6a/0x230 [ 33.860412] hfsplus_write_begin+0x87/0x150 [ 33.864713] ? hfsplus_file_extend+0xf40/0xf40 [ 33.869272] cont_write_begin+0x2ee/0x820 [ 33.873410] ? hfsplus_file_extend+0xf40/0xf40 [ 33.877985] ? block_write_begin+0x2e0/0x2e0 [ 33.882519] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 33.887698] hfsplus_write_begin+0x87/0x150 [ 33.892005] ? hfsplus_file_extend+0xf40/0xf40 [ 33.896577] generic_perform_write+0x1f8/0x4d0 [ 33.901163] ? __mnt_drop_write_file+0x6f/0xa0 [ 33.905729] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 33.910376] ? current_time+0x1c0/0x1c0 [ 33.914504] ? lock_acquire+0x170/0x3c0 [ 33.918456] __generic_file_write_iter+0x24b/0x610 [ 33.923376] generic_file_write_iter+0x3f8/0x730 [ 33.928127] ? common_file_perm+0x4e5/0x850 [ 33.932437] do_iter_readv_writev+0x668/0x790 [ 33.936916] ? clone_verify_area+0x240/0x240 [ 33.941313] ? security_file_permission+0x1c0/0x220 [ 33.946311] do_iter_write+0x182/0x5d0 [ 33.950188] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.955181] vfs_writev+0x153/0x2e0 [ 33.958861] ? vfs_iter_write+0xa0/0xa0 [ 33.962820] ? lock_downgrade+0x720/0x720 [ 33.966979] ? debug_check_no_obj_freed+0xb5/0x490 [ 33.971908] ? trace_hardirqs_off+0x64/0x200 [ 33.976393] ? debug_check_no_obj_freed+0x201/0x490 [ 33.981390] ? check_preemption_disabled+0x41/0x280 [ 33.986382] ? putname+0xe1/0x120 [ 33.989814] ? putname+0xe1/0x120 [ 33.993331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.998408] ? kmem_cache_free+0x226/0x260 [ 34.002617] do_pwritev+0x1b6/0x270 [ 34.006221] ? do_writev+0x330/0x330 [ 34.009911] ? filp_open+0x70/0x70 [ 34.013430] __x64_sys_pwritev2+0xeb/0x150 [ 34.017666] do_syscall_64+0xf9/0x620 [ 34.021455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.026628] RIP: 0033:0x7f0c5218dad9 [ 34.030330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.049324] RSP: 002b:00007ffd128b1388 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 34.057012] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c5218dad9 [ 34.064371] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000004 [ 34.071630] RBP: 00007f0c5214d0e0 R08: 0000000000000000 R09: 0000000000000000 [ 34.078917] R10: 0000000000005405 R11: 0000000000000246 R12: 00007f0c5214d170 [ 34.086168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.102022] hfsplus: request for non-existent node 31668 in B*Tree [ 34.108360] hfsplus: request for non-existent node 31668 in B*Tree [ 34.115357] hfsplus: request for non-existent node 31668 in B*Tree [ 34.121720] hfsplus: request for non-existent node 31668 in B*Tree [ 34.128182] hfsplus: request for non-existent node 31668 in B*Tree [ 34.134688] hfsplus: request for non-existent node 31668 in B*Tree [ 34.141325] hfsplus: request for non-existent node 31668 in B*Tree [ 34.147729] hfsplus: request for non-existent node 316