Extracting prog: 7m39.612888521s
Minimizing prog: 19m7.854271858s
Simplifying prog options: 0s
Extracting C: 3m47.20904811s
Simplifying C: 26m28.669898475s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$eJzs3c1vHGcdB/DvrB3Ha5DrtklbEAgrOYAakdjeNjUSEilCyIcKKnHppQcrcRorG7eyXeRWCCW8XvkP2h6cMycOiIOlcuZfsMShQkjcfTOa2dn1+iXuhjhZm34+0rPzPPPM88xvfpmX3YmiBPjKWngn57ZSZOHKWxtle3uz1d7ebN3r1pOcT9JIRjuLFCtJ8XlyI52Sb5Qr6+mKR+3n3U/emP9i9uGDTmu0LtX2jePGDeZ+XTKdZKRentR8N594vqJ3hGXCLncTB8O2e8j9xxn+hNctcBoUnefmIVPJRJLx+ntA6rtD49lGd/Ie6y4HAAAAZ0DziHXP7WQnG5kcQjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZtX//39Rl0a3Pp1iIvns50nG6nWp62fa1rADAAAAAAAAAIAT8J2d7GQjk6N1e7eo/s7/UtW4UH1+LR9mLUtZzdVsZDHrWc9qZpNM9U00trG4vr46O8DIuSNHzj2jAwYAAAAAAACA/0+/yUImhx0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0K5KRzqIqvdVTaYwmGU8yVq64n/ytWz/LtoYdAAAAADwDz+1kJxuZ7LZ3i1xI8lL1+388H2Yl61nOetpZyq36nUD5q7+xvdlqb2+27pXl8Lxv/qf8nBg0jGrGdN49HL3nmWqLi70RC/lpfpErmc7bWc1yfpnFrGcp0/lJVVtMkan6LcZUN86j472xr/X2I4OsX4i8UkXSzO0sV7Fdzc28n3ZupVEdQ7XN8Xt8UGan+FFtwBzd6gvjTwfezwzFD75eV6aqjJzrZWSmzn2ZjeePz0TnPBnYwT3NptF7B3XhKeS8ewKXuf7DEHJeVG/ajnIwE3N9Z99Lx2ciufTPb//lTnvl7p3ba1eGfho9qYOZaPVl4uWvVCbG6myMVEfyeHfLS9XYySznZ3k/t7KU1zOf1zOX1/JaZjKf6315vTjAtdZ4vGvt8vfqSjPJH+vlsOyO97fKvD7fezrtv9NNVX39a/ay9MLJ35FGv1lXyn38tl6eDgczMduXiRePz8Rnu+XnWnvl7uqdxQ8G3N9362V5sv/+NDwPe8rz5YXyD6tq7T87yr4Xe/f1/fkq+y70xjUO9V3s9X3ZlTpWf4c7PNNc1ffykX2tqu+Vvr6jvuUAcOpNvDox1vx38x/NT5u/a95pvjX+4/Pz5781lnN/H/3ryJ8bDxs/LF7Np/n13u9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf7f20cd3F9vtpVUVlS+vFAfWbP0rORWBqZx0Zdh3JuBpu7Z+74Nrax99/P3le4vvLb23tNJqzV6fm78+P3f92u3l9tJM53PYYQJPwd5Df9iRAAAAAAAAAAAAAIN6Fv+cYNjHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxtC+/k3FaKzM5cnSnb25utdlm69b0tR5M0khS/SorPkxvplEz1TVc8aj/vfvLG/BezDx/szTXa3b7xqHGjAx/F/bpkOslIvXwC++a7eex8bw4QZdE7wjJhl7uJg2H7bwAAAP//Ih0ROA==")
unlink(&(0x7f0000000240)='./file1\x00')

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$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")
unlink(&(0x7f0000000240)='./file1\x00')

program crashed: INFO: task hung in hfsplus_find_init
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$eJzs3c1vHGcdB/DvrB3Ha5DrtklbEAgrOYAakdjeNjUSEilCyIcKKnHppQcrcRorG7eyXeRWCCW8XvkP2h6cMycOiIOlcuZfsMShQkjcfTOa2dn1+iXuhjhZm34+0rPzPPPM88xvfpmX3YmiBPjKWngn57ZSZOHKWxtle3uz1d7ebN3r1pOcT9JIRjuLFCtJ8XlyI52Sb5Qr6+mKR+3n3U/emP9i9uGDTmu0LtX2jePGDeZ+XTKdZKRentR8N594vqJ3hGXCLncTB8O2e8j9xxn+hNctcBoUnefmIVPJRJLx+ntA6rtD49lGd/Ie6y4HAAAAZ0DziHXP7WQnG5kcQjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZtX//39Rl0a3Pp1iIvns50nG6nWp62fa1rADAAAAAAAAAIAT8J2d7GQjk6N1e7eo/s7/UtW4UH1+LR9mLUtZzdVsZDHrWc9qZpNM9U00trG4vr46O8DIuSNHzj2jAwYAAAAAAACA/0+/yUImhx0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0K5KRzqIqvdVTaYwmGU8yVq64n/ytWz/LtoYdAAAAADwDz+1kJxuZ7LZ3i1xI8lL1+388H2Yl61nOetpZyq36nUD5q7+xvdlqb2+27pXl8Lxv/qf8nBg0jGrGdN49HL3nmWqLi70RC/lpfpErmc7bWc1yfpnFrGcp0/lJVVtMkan6LcZUN86j472xr/X2I4OsX4i8UkXSzO0sV7Fdzc28n3ZupVEdQ7XN8Xt8UGan+FFtwBzd6gvjTwfezwzFD75eV6aqjJzrZWSmzn2ZjeePz0TnPBnYwT3NptF7B3XhKeS8ewKXuf7DEHJeVG/ajnIwE3N9Z99Lx2ciufTPb//lTnvl7p3ba1eGfho9qYOZaPVl4uWvVCbG6myMVEfyeHfLS9XYySznZ3k/t7KU1zOf1zOX1/JaZjKf6315vTjAtdZ4vGvt8vfqSjPJH+vlsOyO97fKvD7fezrtv9NNVX39a/ay9MLJ35FGv1lXyn38tl6eDgczMduXiRePz8Rnu+XnWnvl7uqdxQ8G3N9362V5sv/+NDwPe8rz5YXyD6tq7T87yr4Xe/f1/fkq+y70xjUO9V3s9X3ZlTpWf4c7PNNc1ffykX2tqu+Vvr6jvuUAcOpNvDox1vx38x/NT5u/a95pvjX+4/Pz5781lnN/H/3ryJ8bDxs/LF7Np/n13u9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf7f20cd3F9vtpVUVlS+vFAfWbP0rORWBqZx0Zdh3JuBpu7Z+74Nrax99/P3le4vvLb23tNJqzV6fm78+P3f92u3l9tJM53PYYQJPwd5Df9iRAAAAAAAAAAAAAIN6Fv+cYNjHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxtC+/k3FaKzM5cnSnb25utdlm69b0tR5M0khS/SorPkxvplEz1TVc8aj/vfvLG/BezDx/szTXa3b7xqHGjAx/F/bpkOslIvXwC++a7eex8bw4QZdE7wjJhl7uJg2H7bwAAAP//Ih0ROA==")

program did not crash
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unlink
detailed listing:
executing program 0:
unlink(&(0x7f0000000240)='./file1\x00')

program did not crash
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$eJzs3c1vHGcdB/DvrB3Ha5DrtklbEAgrOYAakdjeNjUSEilCyIcKKnHppQcrcRorG7eyXeRWCCW8XvkP2h6cMycOiIOlcuZfsMShQkjcfTOa2dn1+iXuhjhZm34+0rPzPPPM88xvfpmX3YmiBPjKWngn57ZSZOHKWxtle3uz1d7ebN3r1pOcT9JIRjuLFCtJ8XlyI52Sb5Qr6+mKR+3n3U/emP9i9uGDTmu0LtX2jePGDeZ+XTKdZKRentR8N594vqJ3hGXCLncTB8O2e8j9xxn+hNctcBoUnefmIVPJRJLx+ntA6rtD49lGd/Ie6y4HAAAAZ0DziHXP7WQnG5kcQjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZtX//39Rl0a3Pp1iIvns50nG6nWp62fa1rADAAAAAAAAAIAT8J2d7GQjk6N1e7eo/s7/UtW4UH1+LR9mLUtZzdVsZDHrWc9qZpNM9U00trG4vr46O8DIuSNHzj2jAwYAAAAAAACA/0+/yUImhx0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0K5KRzqIqvdVTaYwmGU8yVq64n/ytWz/LtoYdAAAAADwDz+1kJxuZ7LZ3i1xI8lL1+388H2Yl61nOetpZyq36nUD5q7+xvdlqb2+27pXl8Lxv/qf8nBg0jGrGdN49HL3nmWqLi70RC/lpfpErmc7bWc1yfpnFrGcp0/lJVVtMkan6LcZUN86j472xr/X2I4OsX4i8UkXSzO0sV7Fdzc28n3ZupVEdQ7XN8Xt8UGan+FFtwBzd6gvjTwfezwzFD75eV6aqjJzrZWSmzn2ZjeePz0TnPBnYwT3NptF7B3XhKeS8ewKXuf7DEHJeVG/ajnIwE3N9Z99Lx2ciufTPb//lTnvl7p3ba1eGfho9qYOZaPVl4uWvVCbG6myMVEfyeHfLS9XYySznZ3k/t7KU1zOf1zOX1/JaZjKf6315vTjAtdZ4vGvt8vfqSjPJH+vlsOyO97fKvD7fezrtv9NNVX39a/ay9MLJ35FGv1lXyn38tl6eDgczMduXiRePz8Rnu+XnWnvl7uqdxQ8G3N9362V5sv/+NDwPe8rz5YXyD6tq7T87yr4Xe/f1/fkq+y70xjUO9V3s9X3ZlTpWf4c7PNNc1ffykX2tqu+Vvr6jvuUAcOpNvDox1vx38x/NT5u/a95pvjX+4/Pz5781lnN/H/3ryJ8bDxs/LF7Np/n13u9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf7f20cd3F9vtpVUVlS+vFAfWbP0rORWBqZx0Zdh3JuBpu7Z+74Nrax99/P3le4vvLb23tNJqzV6fm78+P3f92u3l9tJM53PYYQJPwd5Df9iRAAAAAAAAAAAAAIN6Fv+cYNjHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxtC+/k3FaKzM5cnSnb25utdlm69b0tR5M0khS/SorPkxvplEz1TVc8aj/vfvLG/BezDx/szTXa3b7xqHGjAx/F/bpkOslIvXwC++a7eex8bw4QZdE7wjJhl7uJg2H7bwAAAP//Ih0ROA==")
unlink(0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
simplifying C reproducer
testing compiled C program (duration=6m15.396359463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in __writeback_single_inode
a never seen crash title: INFO: task hung in __writeback_single_inode, ignore
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
program crashed: INFO: task hung in hfsplus_find_init
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$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")
unlink(&(0x7f0000000240)='./file1\x00')

program crashed: INFO: task hung in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$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")
unlink(&(0x7f0000000240)='./file1\x00')

program crashed: INFO: task hung in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m15.396359463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-unlink
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x60a, &(0x7f0000003400)="$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")
unlink(&(0x7f0000000240)='./file1\x00')

program crashed: INFO: task hung in worker_thread
validation run: crashed=true
reproducing took 1h9m38.344038038s
repro crashed as (corrupted=false):
INFO: task kworker/u8:5:78 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:23136 pid:78    tgid:78    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-7:0)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5295 [inline]
 __schedule+0x1539/0x5080 kernel/sched/core.c:6907
 process_scheduled_works kernel/workqueue.c:3362 [inline]
 worker_thread+0xb46/0x1140 kernel/workqueue.c:3443
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e7601a0
 (
){....}-{1:3}
ffff8880206a0148
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:3/49:
 #0: 
ffff8880206a0148
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
 #1: 
ffffc90000ba7c40
 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 kernel/workqueue.c:3255
 #2: ffff88802b4f00e0 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
 #3: ffff88802b4f20b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:5/78:
 #0: ffff8880206a0148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
 #1: ffffc900025cfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 kernel/workqueue.c:3255
 #2: ffff8880348a80e0 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
 #3: ffff8880361ee0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:6/1143:
 #0: ffff8880206a0148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254

final repro crashed as (corrupted=false):
INFO: task kworker/u8:5:78 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:5    state:D stack:23136 pid:78    tgid:78    ppid:2      task_flags:0x4208060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-7:0)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5295 [inline]
 __schedule+0x1539/0x5080 kernel/sched/core.c:6907
 process_scheduled_works kernel/workqueue.c:3362 [inline]
 worker_thread+0xb46/0x1140 kernel/workqueue.c:3443
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
1 lock held by khungtaskd/30:
 #0: 
ffffffff8e7601a0
 (
){....}-{1:3}
ffff8880206a0148
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:3/49:
 #0: 
ffff8880206a0148
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
 #1: 
ffffc90000ba7c40
 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 kernel/workqueue.c:3255
 #2: ffff88802b4f00e0 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
 #3: ffff88802b4f20b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:5/78:
 #0: ffff8880206a0148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254
 #1: ffffc900025cfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x15a0 kernel/workqueue.c:3255
 #2: ffff8880348a80e0 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:565
 #3: ffff8880361ee0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u8:6/1143:
 #0: ffff8880206a0148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x15a0 kernel/workqueue.c:3254