[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.113' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.058252] hfsplus: xattr searching failed [ 33.064495] hfsplus: xattr searching failed [ 33.069350] [ 33.070986] ============================================ [ 33.076427] WARNING: possible recursive locking detected [ 33.081866] 4.19.211-syzkaller #0 Not tainted [ 33.086346] -------------------------------------------- [ 33.091773] syz-executor572/8106 is trying to acquire lock: [ 33.097551] 000000007fe4f74c (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 33.107073] [ 33.107073] but task is already holding lock: [ 33.113019] 00000000bf6e1755 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 33.122981] [ 33.122981] other info that might help us debug this: [ 33.129636] Possible unsafe locking scenario: [ 33.129636] [ 33.135679] CPU0 [ 33.138249] ---- [ 33.140813] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.146040] lock(&HFSPLUS_I(inode)->extents_lock); [ 33.151211] [ 33.151211] *** DEADLOCK *** [ 33.151211] [ 33.157251] May be due to missing lock nesting notation [ 33.157251] [ 33.164250] 4 locks held by syz-executor572/8106: [ 33.169152] #0: 000000007a096b87 (sb_writers#11){.+.+}, at: mnt_want_write+0x3a/0xb0 [ 33.177116] #1: 00000000da0ad77e (&sb->s_type->i_mutex_key#17){+.+.}, at: do_truncate+0x125/0x1f0 [ 33.186202] #2: 00000000bf6e1755 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 33.196704] #3: 000000001a97bff1 (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_free+0xdb/0x5d0 [ 33.205535] [ 33.205535] stack backtrace: [ 33.210014] CPU: 0 PID: 8106 Comm: syz-executor572 Not tainted 4.19.211-syzkaller #0 [ 33.217954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.227284] Call Trace: [ 33.229857] dump_stack+0x1fc/0x2ef [ 33.233470] __lock_acquire.cold+0x121/0x57e [ 33.237862] ? mark_held_locks+0xf0/0xf0 [ 33.241903] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 33.247256] ? save_trace+0xd6/0x290 [ 33.250948] ? __lock_acquire+0x22f9/0x3ff0 [ 33.255249] lock_acquire+0x170/0x3c0 [ 33.259030] ? hfsplus_get_block+0x292/0x960 [ 33.263423] ? hfsplus_get_block+0x292/0x960 [ 33.267808] __mutex_lock+0xd7/0x1190 [ 33.271585] ? hfsplus_get_block+0x292/0x960 [ 33.275976] ? check_preemption_disabled+0x41/0x280 [ 33.280971] ? hfsplus_get_block+0x292/0x960 [ 33.285360] ? mutex_trylock+0x1a0/0x1a0 [ 33.289402] ? create_page_buffers+0x212/0x350 [ 33.293965] ? alloc_page_buffers+0x2da/0x5c0 [ 33.298441] ? lock_downgrade+0x720/0x720 [ 33.302567] ? do_raw_spin_lock+0xcb/0x220 [ 33.306783] hfsplus_get_block+0x292/0x960 [ 33.311001] block_read_full_page+0x288/0xd10 [ 33.315480] ? hfsplus_file_extend+0xf40/0xf40 [ 33.320057] ? __bread_gfp+0x300/0x300 [ 33.323932] ? add_to_page_cache_locked+0x40/0x40 [ 33.328764] do_read_cache_page+0x533/0x1170 [ 33.333160] ? hfsplus_bmap+0x30/0x30 [ 33.336941] hfsplus_block_free+0x18b/0x5d0 [ 33.341244] ? __mutex_unlock_slowpath+0xea/0x610 [ 33.346088] hfsplus_free_extents+0x228/0x520 [ 33.350564] hfsplus_file_truncate+0xd96/0x1040 [ 33.355216] ? hfsplus_get_block+0x960/0x960 [ 33.359687] ? up_write+0x18/0x150 [ 33.363221] ? unmap_mapping_pages+0x121/0x2b0 [ 33.367788] ? inode_newsize_ok+0x121/0x1e0 [ 33.372091] hfsplus_setattr+0x1e7/0x310 [ 33.376133] ? hfsplus_file_open+0x140/0x140 [ 33.380613] notify_change+0x70b/0xfc0 [ 33.384490] do_truncate+0x134/0x1f0 [ 33.388193] ? dentry_open+0x1d0/0x1d0 [ 33.392062] ? apparmor_path_truncate+0x183/0x200 [ 33.396993] ? inode_permission+0x3d/0x140 [ 33.401209] path_openat+0x2308/0x2df0 [ 33.405078] ? path_lookupat+0x8d0/0x8d0 [ 33.409119] ? mark_held_locks+0xf0/0xf0 [ 33.413163] ? __lock_acquire+0x6de/0x3ff0 [ 33.417382] do_filp_open+0x18c/0x3f0 [ 33.421162] ? may_open_dev+0xf0/0xf0 [ 33.424942] ? lock_downgrade+0x720/0x720 [ 33.429066] ? lock_acquire+0x170/0x3c0 [ 33.433020] ? __alloc_fd+0x34/0x570 [ 33.436713] ? do_raw_spin_unlock+0x171/0x230 [ 33.441186] ? _raw_spin_unlock+0x29/0x40 [ 33.445331] ? __alloc_fd+0x28d/0x570 [ 33.449136] do_sys_open+0x3b3/0x520 [ 33.452835] ? filp_open+0x70/0x70 [ 33.456362] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 33.461708] ? trace_hardirqs_off_caller+0x6e/0x210 [ 33.466804] ? do_syscall_64+0x21/0x620 [ 33.470765] do_syscall_64+0xf9/0x620 [ 33.474557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.479732] RIP: 0033:0x7f7d5fd48789 [ 33.483426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 33.502321] RSP: 002b:00007ffe39773e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.510022] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f7d5fd48789 [ 33.517278] RDX: 0000000000000e00 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 33.524550] RBP: 00007f7d5fd08020 R08: 00000000000005cd R09: 0000000000000000 [ 33.531808] R10: 0000000000000014 R11: 0000000000000246 R12: 00007f7d5fd080b0 [ 33.539059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3