[ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.734116] hfsplus: xattr search failed [ 34.738686] [ 34.740310] ============================================ [ 34.745743] WARNING: possible recursive locking detected [ 34.751170] 4.19.211-syzkaller #0 Not tainted [ 34.755640] -------------------------------------------- [ 34.761064] syz-executor398/8088 is trying to acquire lock: [ 34.766752] 000000003c3dd1f3 (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_get_block+0x292/0x960 [ 34.776272] [ 34.776272] but task is already holding lock: [ 34.782219] 0000000059d7beea (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 34.792166] [ 34.792166] other info that might help us debug this: [ 34.798802] Possible unsafe locking scenario: [ 34.798802] [ 34.804831] CPU0 [ 34.807388] ---- [ 34.809942] lock(&HFSPLUS_I(inode)->extents_lock); [ 34.815016] lock(&HFSPLUS_I(inode)->extents_lock); [ 34.820112] [ 34.820112] *** DEADLOCK *** [ 34.820112] [ 34.826145] May be due to missing lock nesting notation [ 34.826145] [ 34.833046] 6 locks held by syz-executor398/8088: [ 34.837859] #0: 000000001b7d9d59 (sb_writers#11){.+.+}, at: mnt_want_write+0x3a/0xb0 [ 34.845814] #1: 000000004c185153 (&type->i_mutex_dir_key#7/1){+.+.}, at: do_unlinkat+0x27d/0x660 [ 34.854804] #2: 00000000df9c2d32 (&sb->s_type->i_mutex_key#17){+.+.}, at: vfs_unlink+0xca/0x4e0 [ 34.863707] #3: 00000000d2948c71 (&sbi->vh_mutex){+.+.}, at: hfsplus_unlink+0x140/0x820 [ 34.871920] #4: 0000000059d7beea (&HFSPLUS_I(inode)->extents_lock){+.+.}, at: hfsplus_file_truncate+0x1e2/0x1040 [ 34.882301] #5: 0000000015d58936 (&sbi->alloc_mutex){+.+.}, at: hfsplus_block_free+0xdb/0x5d0 [ 34.891031] [ 34.891031] stack backtrace: [ 34.895504] CPU: 0 PID: 8088 Comm: syz-executor398 Not tainted 4.19.211-syzkaller #0 [ 34.903357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 34.912689] Call Trace: [ 34.915264] dump_stack+0x1fc/0x2ef [ 34.918872] __lock_acquire.cold+0x121/0x57e [ 34.923262] ? mark_held_locks+0xf0/0xf0 [ 34.927299] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 34.932646] ? save_trace+0xd6/0x290 [ 34.936338] ? __lock_acquire+0x22f9/0x3ff0 [ 34.940635] lock_acquire+0x170/0x3c0 [ 34.944421] ? hfsplus_get_block+0x292/0x960 [ 34.948817] ? hfsplus_get_block+0x292/0x960 [ 34.953204] __mutex_lock+0xd7/0x1190 [ 34.956983] ? hfsplus_get_block+0x292/0x960 [ 34.961370] ? check_preemption_disabled+0x41/0x280 [ 34.966370] ? hfsplus_get_block+0x292/0x960 [ 34.970766] ? mutex_trylock+0x1a0/0x1a0 [ 34.974809] ? create_page_buffers+0x212/0x350 [ 34.979369] ? alloc_page_buffers+0x2da/0x5c0 [ 34.983899] ? lock_downgrade+0x720/0x720 [ 34.988020] ? do_raw_spin_lock+0xcb/0x220 [ 34.992233] hfsplus_get_block+0x292/0x960 [ 34.996459] block_read_full_page+0x288/0xd10 [ 35.000939] ? hfsplus_file_extend+0xf40/0xf40 [ 35.005527] ? __bread_gfp+0x300/0x300 [ 35.009393] ? add_to_page_cache_locked+0x40/0x40 [ 35.014214] do_read_cache_page+0x533/0x1170 [ 35.018604] ? hfsplus_bmap+0x30/0x30 [ 35.022381] hfsplus_block_free+0x18b/0x5d0 [ 35.026684] ? __mutex_unlock_slowpath+0xea/0x610 [ 35.031505] hfsplus_free_extents+0x228/0x520 [ 35.035981] hfsplus_file_truncate+0xd96/0x1040 [ 35.040630] ? hfsplus_delete_cat+0x129/0xe30 [ 35.045106] ? hfsplus_get_block+0x960/0x960 [ 35.049493] ? common_perm+0x4be/0x800 [ 35.053356] hfsplus_delete_inode+0x18d/0x220 [ 35.057843] hfsplus_unlink+0x595/0x820 [ 35.061807] ? hfsplus_symlink+0x2e0/0x2e0 [ 35.066031] ? lock_acquire+0x170/0x3c0 [ 35.069987] ? vfs_unlink+0xca/0x4e0 [ 35.073678] vfs_unlink+0x27d/0x4e0 [ 35.077282] do_unlinkat+0x3b8/0x660 [ 35.080973] ? __ia32_sys_rmdir+0x40/0x40 [ 35.085098] ? strncpy_from_user+0x2a2/0x350 [ 35.089486] ? getname_flags+0x25b/0x590 [ 35.093525] do_syscall_64+0xf9/0x620 [ 35.097305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.102474] RIP: 0033:0x7fd32f219769 [ 35.106167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.125131] RSP: 002b:00007ffe243c0198 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 35.132819] RAX: ffffffffffffffda