[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.185' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.662872] [ 33.664506] ============================================ [ 33.669936] WARNING: possible recursive locking detected [ 33.675378] 4.19.211-syzkaller #0 Not tainted [ 33.679866] -------------------------------------------- [ 33.685303] syz-executor836/8113 is trying to acquire lock: [ 33.690989] 0000000073a45c01 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 33.700505] [ 33.700505] but task is already holding lock: [ 33.706452] 00000000c965ea01 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.716141] [ 33.716141] other info that might help us debug this: [ 33.722781] Possible unsafe locking scenario: [ 33.722781] [ 33.728811] CPU0 [ 33.731366] ---- [ 33.733949] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.739025] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.744100] [ 33.744100] *** DEADLOCK *** [ 33.744100] [ 33.750134] May be due to missing lock nesting notation [ 33.750134] [ 33.757035] 5 locks held by syz-executor836/8113: [ 33.761858] #0: 000000004f4d4acc (&type->s_umount_key#46/1){+.+.}, at: sget_userns+0x20b/0xcd0 [ 33.770726] #1: 00000000316b90e1 (&sbi->vh_mutex){+.+.}, at: hfsplus_fill_super+0x1421/0x19e0 [ 33.779459] #2: 0000000041be8d8a (&tree->tree_lock){+.+.}, at: hfsplus_find_init+0x1b7/0x220 [ 33.788106] #3: 00000000c965ea01 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_extend+0x1bb/0xf40 [ 33.798225] #4: 0000000007aae80c (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_allocate+0xe0/0xa60 [ 33.807309] [ 33.807309] stack backtrace: [ 33.811810] CPU: 0 PID: 8113 Comm: syz-executor836 Not tainted 4.19.211-syzkaller #0 [ 33.819664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.828995] Call Trace: [ 33.831565] dump_stack+0x1fc/0x2ef [ 33.835172] __lock_acquire.cold+0x121/0x57e [ 33.839580] ? kasan_kmalloc+0x139/0x160 [ 33.843621] ? mark_held_locks+0xf0/0xf0 [ 33.847658] ? kmem_cache_alloc+0x122/0x370 [ 33.851958] ? alloc_buffer_head+0x20/0x130 [ 33.856259] ? alloc_page_buffers+0x169/0x5c0 [ 33.860733] ? create_empty_buffers+0x2c/0x760 [ 33.865291] ? create_page_buffers+0x212/0x350 [ 33.869851] ? block_read_full_page+0xcf/0xd10 [ 33.874504] ? do_read_cache_page+0x533/0x1170 [ 33.879062] ? hfsplus_block_allocate+0x6de/0xa60 [ 33.883885] ? hfsplus_file_extend+0x436/0xf40 [ 33.888891] ? __lock_acquire+0x6de/0x3ff0 [ 33.893123] ? __lock_acquire+0x6de/0x3ff0 [ 33.897350] lock_acquire+0x170/0x3c0 [ 33.901141] ? hfsplus_get_block+0x292/0x960 [ 33.905530] ? hfsplus_get_block+0x292/0x960 [ 33.909927] __mutex_lock+0xd7/0x1190 [ 33.913726] ? hfsplus_get_block+0x292/0x960 [ 33.918123] ? check_preemption_disabled+0x41/0x280 [ 33.923128] ? hfsplus_get_block+0x292/0x960 [ 33.927518] ? mutex_trylock+0x1a0/0x1a0 [ 33.931562] ? create_page_buffers+0x212/0x350 [ 33.936124] ? alloc_page_buffers+0x2da/0x5c0 [ 33.940598] ? lock_downgrade+0x720/0x720 [ 33.944723] ? do_raw_spin_lock+0xcb/0x220 [ 33.948948] hfsplus_get_block+0x292/0x960 [ 33.953173] block_read_full_page+0x288/0xd10 [ 33.957681] ? hfsplus_file_extend+0xf40/0xf40 [ 33.962246] ? __bread_gfp+0x300/0x300 [ 33.966113] ? add_to_page_cache_lru+0x259/0x680 [ 33.970887] ? add_to_page_cache_locked+0x40/0x40 [ 33.975712] do_read_cache_page+0x533/0x1170 [ 33.980104] ? __set_page_dirty_buffers+0x254/0x4c0 [ 33.985102] ? hfsplus_bmap+0x30/0x30 [ 33.988895] hfsplus_block_allocate+0x6de/0xa60 [ 33.993545] hfsplus_file_extend+0x436/0xf40 [ 33.997933] ? hfsplus_free_fork+0x7e0/0x7e0 [ 34.002320] ? mutex_trylock+0x1a0/0x1a0 [ 34.006358] ? lock_acquire+0x170/0x3c0 [ 34.010311] ? check_preemption_disabled+0x41/0x280 [ 34.015390] hfsplus_bmap_reserve+0x298/0x440 [ 34.019868] hfsplus_create_cat+0x1e3/0x1210 [ 34.024258] ? debug_object_activate+0x295/0x450 [ 34.029011] ? hfsplus_find_cat+0x480/0x480 [ 34.033308] ? lock_acquire+0x170/0x3c0 [ 34.037257] ? debug_object_activate+0x12f/0x450 [ 34.041989] ? trace_hardirqs_off+0x64/0x200 [ 34.046374] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 34.051456] ? mod_timer+0x4ea/0x1010 [ 34.055235] ? lock_downgrade+0x720/0x720 [ 34.059369] ? check_preemption_disabled+0x41/0x280 [ 34.064360] ? calc_wheel_index+0x6a/0x230 [ 34.068572] ? trace_hardirqs_off+0x64/0x200 [ 34.072960] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 34.078038] ? mod_timer+0x4ef/0x1010 [ 34.081819] ? round_jiffies_up_relative+0xd0/0xd0 [ 34.086731] ? hfsplus_mark_mdb_dirty+0x185/0x200 [ 34.091553] ? lock_downgrade+0x720/0x720 [ 34.095677] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 34.100243] ? do_raw_spin_unlock+0x171/0x230 [ 34.104802] ? _raw_spin_unlock+0x29/0x40 [ 34.108930] ? hfsplus_mark_mdb_dirty+0x185/0x200 [ 34.113778] ? hfsplus_new_inode+0x57a/0x9a0 [ 34.118166] hfsplus_fill_super+0x14a8/0x19e0 [ 34.122643] ? hfsplus_iget+0x790/0x790 [ 34.126603] ? widen_string+0x2a0/0x2a0 [ 34.130557] ? bdev_name.constprop.0+0x1ed/0x260 [ 34.135312] ? pointer+0x18a/0x850 [ 34.138833] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 34.144003] ? resource_string.isra.0+0x9c0/0x9c0 [ 34.148822] ? enable_ptr_key_workfn+0x30/0x30 [ 34.153381] ? vsnprintf+0x2cc/0x14f0 [ 34.157158] ? pointer+0x850/0x850 [ 34.160675] ? lock_downgrade+0x720/0x720 [ 34.164797] ? snprintf+0xbb/0xf0 [ 34.168227] ? vsprintf+0x30/0x30 [ 34.171660] ? wait_for_completion_io+0x10/0x10 [ 34.176309] ? set_blocksize+0x163/0x3f0 [ 34.180351] mount_bdev+0x2fc/0x3b0 [ 34.183958] ? hfsplus_iget+0x790/0x790 [ 34.187915] mount_fs+0xa3/0x310 [ 34.191262] vfs_kern_mount.part.0+0x68/0x470 [ 34.195737] do_mount+0x115c/0x2f50 [ 34.199346] ? __do_page_fault+0x180/0xd60 [ 34.203557] ? copy_mount_string+0x40/0x40 [ 34.207768] ? copy_mount_options+0x1cd/0x380 [ 34.212239] ? copy_mount_options+0x1da/0x380 [ 34.216714] ? copy_mount_options+0x1e9/0x380 [ 34.221190] ? copy_mount_options+0x26f/0x380 [ 34.225665] ksys_mount+0xcf/0x130 [ 34.229184] __x64_sys_mount+0xba/0x150 [ 34.233139] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 34.237699] do_syscall_64+0xf9/0x620 [ 34.241481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.246649] RIP: 0033:0x7fd68ae1be8a [ 34.250340] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.269220] RSP: 002b:00007ffc1d1beb08 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 34.276906] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd68ae1be8a [ 34.284151] RDX: 0000000020000600 RSI: 00000000200000c0 RDI: 00007ffc1d1beb20 [ 34.291397] RBP: 00007ffc1d1beb20 R08: 00007ffc1d1beb60 R09: 0000000000000618 [ 34.298641] R10: 0000000002a14010 R11: 0000000000000286 R12: 0000000000000004 [ 34.305907] R13: 0000555555a882c0 R14: 0000000002a14010 R15: 00007ffc1d1beb60