[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 45.167751] [ 45.169404] ============================================ [ 45.174841] WARNING: possible recursive locking detected [ 45.180281] 4.19.211-syzkaller #0 Not tainted [ 45.184760] -------------------------------------------- [ 45.190201] syz-executor304/8112 is trying to acquire lock: [ 45.195892] 0000000034b146a4 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 45.205412] [ 45.205412] but task is already holding lock: [ 45.211365] 00000000b61bf66b (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 45.221313] [ 45.221313] other info that might help us debug this: [ 45.227956] Possible unsafe locking scenario: [ 45.227956] [ 45.233984] CPU0 [ 45.236538] ---- [ 45.239091] lock(&HFSPLUS_I(inode)->extents_lock); [ 45.244168] lock(&HFSPLUS_I(inode)->extents_lock); [ 45.249241] [ 45.249241] *** DEADLOCK *** [ 45.249241] [ 45.255274] May be due to missing lock nesting notation [ 45.255274] [ 45.262176] 7 locks held by syz-executor304/8112: [ 45.266989] #0: 00000000c8761763 (sb_writers#11){.+.+}, at: mnt_want_write+0x3a/0xb0 [ 45.274942] #1: 0000000075aaa9ef (&type->i_mutex_dir_key#7/1){+.+.}, at: lock_rename+0x225/0x280 [ 45.283939] #2: 00000000915ba412 (&sb->s_type->i_mutex_key#18){+.+.}, at: lock_two_nondirectories+0xec/0x110 [ 45.293974] #3: 000000003d18756e (&sb->s_type->i_mutex_key#17/4){+.+.}, at: lock_two_nondirectories+0xd1/0x110 [ 45.304186] #4: 000000009d8a3937 (&sbi->vh_mutex){+.+.}, at: hfsplus_unlink+0x140/0x820 [ 45.312394] #5: 00000000b61bf66b (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 45.322773] #6: 00000000e6578e34 (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_free+0xdb/0x5d0 [ 45.331505] [ 45.331505] stack backtrace: [ 45.335977] CPU: 1 PID: 8112 Comm: syz-executor304 Not tainted 4.19.211-syzkaller #0 [ 45.343828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 45.353156] Call Trace: [ 45.355725] dump_stack+0x1fc/0x2ef [ 45.359330] __lock_acquire.cold+0x121/0x57e [ 45.363717] ? mark_held_locks+0xf0/0xf0 [ 45.367754] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 45.373096] ? save_trace+0xd6/0x290 [ 45.376783] ? __lock_acquire+0x22f9/0x3ff0 [ 45.381082] lock_acquire+0x170/0x3c0 [ 45.384859] ? hfsplus_get_block+0x292/0x960 [ 45.389243] ? hfsplus_get_block+0x292/0x960 [ 45.393626] __mutex_lock+0xd7/0x1190 [ 45.397400] ? hfsplus_get_block+0x292/0x960 [ 45.401789] ? check_preemption_disabled+0x41/0x280 [ 45.406779] ? hfsplus_get_block+0x292/0x960 [ 45.411163] ? mutex_trylock+0x1a0/0x1a0 [ 45.415202] ? create_page_buffers+0x212/0x350 [ 45.419762] ? alloc_page_buffers+0x2da/0x5c0 [ 45.424234] ? lock_downgrade+0x720/0x720 [ 45.428356] ? do_raw_spin_lock+0xcb/0x220 [ 45.432631] hfsplus_get_block+0x292/0x960 [ 45.436847] block_read_full_page+0x288/0xd10 [ 45.441323] ? hfsplus_file_extend+0xf40/0xf40 [ 45.445885] ? __bread_gfp+0x300/0x300 [ 45.449753] ? add_to_page_cache_locked+0x40/0x40 [ 45.454580] do_read_cache_page+0x533/0x1170 [ 45.458968] ? hfsplus_bmap+0x30/0x30 [ 45.462749] hfsplus_block_free+0x18b/0x5d0 [ 45.467047] ? __mutex_unlock_slowpath+0xea/0x610 [ 45.471870] hfsplus_free_extents+0x228/0x520 [ 45.476345] hfsplus_file_truncate+0xd96/0x1040 [ 45.480993] ? hfsplus_delete_cat+0x129/0xe30 [ 45.485470] ? hfsplus_get_block+0x960/0x960 [ 45.489859] ? mark_held_locks+0xf0/0xf0 [ 45.493903] ? char2uni+0xb2/0x130 [ 45.497426] hfsplus_delete_inode+0x18d/0x220 [ 45.501901] hfsplus_unlink+0x595/0x820 [ 45.505861] ? hfsplus_symlink+0x2e0/0x2e0 [ 45.510077] ? lock_acquire+0x170/0x3c0 [ 45.514027] ? lock_two_nondirectories+0xd1/0x110 [ 45.518853] hfsplus_rename+0xbe/0x200 [ 45.522718] ? down_write_nested+0x36/0x90 [ 45.526935] ? lock_two_nondirectories+0xd1/0x110 [ 45.531757] vfs_rename+0x67e/0x1bc0 [ 45.535448] ? path_openat+0x2df0/0x2df0 [ 45.539486] ? security_path_rename+0x1ed/0x2e0 [ 45.544131] do_renameat2+0xb59/0xc70 [ 45.547907] ? do_mknodat.part.0+0x480/0x480 [ 45.552288] ? do_mknodat.part.0+0x480/0x480 [ 45.556781] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 45.562124] __x64_sys_renameat2+0xba/0x150 [ 45.566425] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 45.570984] do_syscall_64+0xf9/0x620 [ 45.574766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.579929] RIP: 0033:0x7feac8ef1b89 [ 45.583621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.602503] RSP: 002b:00007ffc2a503dc8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 45.610188] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007feac8ef1b89 [ 45.617432] RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000005 [ 45.624676] RBP: 00007feac8eb1190 R08: 0000000000000000 R09: 0000000000000000 [ 45.631922] R10: 0000000020000200 R11: 0000000000000246 R12: 00007feac8eb1220 [ 45.639167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.648677] hfsplus: request for non-existent node 31668 in B*Tree [ 45.655003] hfsplus: request for non-existent node 31668 in B*Tree [ 45.661742] hfsplus: request for non-existent node 31668 in B*Tree [ 45.668067] hfsplus: