Extracting prog: 6m25.564722635s
Minimizing prog: 56m20.997333913s
Simplifying prog options: 0s
Extracting C: 3m15.339123438s
Simplifying C: 21m38.070739381s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program crashed: INFO: task hung in hfsplus_find_init
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$eJzs3U9oHNcdB/DvrFay1wVFSewmlEBFDGmpqK0/KK16qVtK0SGUkB56FrYcC6+VIClFCaWo/6895FpID7r1VOjd0J6bW646BgqFkpNO3TCzI2n1N5LsaFfx52Nm33v7Zt77zW9nZv8IMwGeWfMTaT5OkfmJN9bL9tbmTHtrc+ZK3d1OUtYbSbNbpFhOmn9J7qS7ZLhnuOK4eT5cmnvrk8+2Pu22mvVSrd/YP8R5bNRLxpMM1WWpM9S72qmn2Tfe3bpsnTu8YjczZcJuluXGuQeDp6dzyJmOzGPPd+DyKLrvm4eMJdeSXK0/B6S+OjQuNrqnz/svAAAAz4LntrOd9Yz2Ow4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4TOr7/xf10tipj6fYuf//SP1c6vql9rjfAQAAAAAAAADAU/DN7WxnPaPJ/6u/5XeK6m/+r1ad16vHr+W9rGYxK7mV9SxkLWtZyVSSsZ6BRtYX1tZWpk6x5fSRW05f3D4DAAAAAAAAwFfQbzOf0X4HAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvYpkqFtUy/Wd+lgazSRXU2SkXG8j+Tjp1i+zx/0OAAAAAC7Ac9vZznpGd9qdovrO//Xqe//VvJflrGUpa2lnMfeq3wK63/obW5sz7a3NmUflcnjcH/33TGFUI6b728PRMzfqNe9nqXrmVu7mnbSrnp2+l3fiOTqu35QxFT+snTKye3VZ7vmf63IwjFU5G97NyGQdW5mN50/OxBlfnYMzTaWx+8vP9SNmurK36blyfq0uy/3548k575xpR57YwUxM10ffx+U5U+592TjurPjWP/72iwft5YcP7q9ODM5hdE4HMzHTcx6+dPLR9xXLxGSViRu77fn8ND/PRMbzZlaylF9mIWtZzHh+UtUW6uO5fBw7OVN39rXe/KJIRurXpXsVPVtMr1bbjmYpP8s7uZfFvF79m85UvpfZzGau5xW+cYorbeNsZ/3Nb9eVVpI/1eVgKPP6fE9ee6+5Y1Vf7zN7WXrh+CwV57w2Nr9RV8o5fleXg+FgJqZ6MvHiycfLX6vL+Gp7+eHKg4V3Tznfa3VZpvIPA/XOXB4vL5QvVtXaf3SUfS8e2TdV9V3f7Wsc6rux2/dFZ+pI/Rnu8EjTVd9LPX3/63R2r+Fl38s9fa0jPm8BMPCufefaSOs/rX+3Pmr9vvWg9cbVH1/5/pVXRjL8r+EfNCeHXmu8Uvw9H+XXe9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA81t9/4OHC+324kqfK0V9I59BiUfl+MpIp9P5sqYouncgygDsaVHfWar/Ce9W6sxcVDz9uyYBF+P22qN3b6++/8F3lx4tvL349uLy8Ozs3OTc7Oszt+8vtRcnu4/9jhL4Muy96fc7EgAAAAAAAAAAAOC0LuK/LvR7HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDLbX4izccpMjV5a7Jsb23OtMtlp763ZjNJI0nxq6T4Z3In3SVjPcMVx83z4dLcW598tvVpt7VRj1et3zhpuyMNH1x/o14ynmSoLp/AvvHuPvF4xe4elgm7uZM46LfPAwAA//9W8AX2")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-openat-renameat2
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, 0x0, r0, &(0x7f0000000180)='./file1\x00', 0x0)
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
program crashed: INFO: task hung in hfsplus_find_init
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program crashed: INFO: task hung in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$eJzs3U9oHNcdB/DvrFay1wVFSewmlEBFDGmpqK0/KK16qVtK0SGUkB56FrYcC6+VIClFCaWo/6895FpID7r1VOjd0J6bW646BgqFkpNO3TCzI2n1N5LsaFfx52Nm33v7Zt77zW9nZv8IMwGeWfMTaT5OkfmJN9bL9tbmTHtrc+ZK3d1OUtYbSbNbpFhOmn9J7qS7ZLhnuOK4eT5cmnvrk8+2Pu22mvVSrd/YP8R5bNRLxpMM1WWpM9S72qmn2Tfe3bpsnTu8YjczZcJuluXGuQeDp6dzyJmOzGPPd+DyKLrvm4eMJdeSXK0/B6S+OjQuNrqnz/svAAAAz4LntrOd9Yz2Ow4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4TOr7/xf10tipj6fYuf//SP1c6vql9rjfAQAAAAAAAADAU/DN7WxnPaPJ/6u/5XeK6m/+r1ad16vHr+W9rGYxK7mV9SxkLWtZyVSSsZ6BRtYX1tZWpk6x5fSRW05f3D4DAAAAAAAAwFfQbzOf0X4HAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvYpkqFtUy/Wd+lgazSRXU2SkXG8j+Tjp1i+zx/0OAAAAAC7Ac9vZznpGd9qdovrO//Xqe//VvJflrGUpa2lnMfeq3wK63/obW5sz7a3NmUflcnjcH/33TGFUI6b728PRMzfqNe9nqXrmVu7mnbSrnp2+l3fiOTqu35QxFT+snTKye3VZ7vmf63IwjFU5G97NyGQdW5mN50/OxBlfnYMzTaWx+8vP9SNmurK36blyfq0uy/3548k575xpR57YwUxM10ffx+U5U+592TjurPjWP/72iwft5YcP7q9ODM5hdE4HMzHTcx6+dPLR9xXLxGSViRu77fn8ND/PRMbzZlaylF9mIWtZzHh+UtUW6uO5fBw7OVN39rXe/KJIRurXpXsVPVtMr1bbjmYpP8s7uZfFvF79m85UvpfZzGau5xW+cYorbeNsZ/3Nb9eVVpI/1eVgKPP6fE9ee6+5Y1Vf7zN7WXrh+CwV57w2Nr9RV8o5fleXg+FgJqZ6MvHiycfLX6vL+Gp7+eHKg4V3Tznfa3VZpvIPA/XOXB4vL5QvVtXaf3SUfS8e2TdV9V3f7Wsc6rux2/dFZ+pI/Rnu8EjTVd9LPX3/63R2r+Fl38s9fa0jPm8BMPCufefaSOs/rX+3Pmr9vvWg9cbVH1/5/pVXRjL8r+EfNCeHXmu8Uvw9H+XXe9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA81t9/4OHC+324kqfK0V9I59BiUfl+MpIp9P5sqYouncgygDsaVHfWar/Ce9W6sxcVDz9uyYBF+P22qN3b6++/8F3lx4tvL349uLy8Ozs3OTc7Oszt+8vtRcnu4/9jhL4Muy96fc7EgAAAAAAAAAAAOC0LuK/LvR7HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDLbX4izccpMjV5a7Jsb23OtMtlp763ZjNJI0nxq6T4Z3In3SVjPcMVx83z4dLcW598tvVpt7VRj1et3zhpuyMNH1x/o14ynmSoLp/AvvHuPvF4xe4elgm7uZM46LfPAwAA//9W8AX2")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program crashed: INFO: task hung in hfsplus_find_init
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-openat-renameat2
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x3, 0x624, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0)
program crashed: INFO: task hung in hfsplus_find_init
validation run: crashed=true
reproducing took 1h37m44.292896121s
repro crashed as (corrupted=false):
INFO: task kworker/u4:0:9 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0 state:D stack:23696 pid: 9 ppid: 2 flags:0x00004000
Workqueue: writeback wb_workfn
(flush-7:0)
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
__mutex_lock_common+0xcfc/0x2400 kernel/locking/mutex.c:669
__mutex_lock kernel/locking/mutex.c:729 [inline]
mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_cat_write_inode+0x21c/0x870 fs/hfsplus/inode.c:613
write_inode fs/fs-writeback.c:1505 [inline]
__writeback_single_inode+0x6c3/0xda0 fs/fs-writeback.c:1715
writeback_sb_inodes+0xa4e/0x1680 fs/fs-writeback.c:1940
__writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:2011
wb_writeback+0x46f/0xbe0 fs/fs-writeback.c:2116
wb_check_background_flush fs/fs-writeback.c:2182 [inline]
wb_do_writeback fs/fs-writeback.c:2270 [inline]
wb_workfn+0xbd6/0xf20 fs/fs-writeback.c:2298
process_one_work+0x85f/0x1010 kernel/workqueue.c:2310
worker_thread+0xaa6/0x1290 kernel/workqueue.c:2457
kthread+0x436/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
#0: ffff8880191d0938
(
(wq_completion)writeback
){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff88807b18a0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88807b73e0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
1 lock held by khungtaskd/27:
#0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
4 locks held by kworker/u4:1/144:
#0: ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000174fd00
(
(work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff888022f3c0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888022f380b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
2 locks held by kworker/u4:3/490:
#0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000333fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
3 locks held by kworker/1:2/1324:
4 locks held by kworker/u4:4/3067:
#0: ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000d44fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff888074b5c0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88807afaa0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
2 locks held by getty/3946:
#0: ffff88802c8fc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
#1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 drivers/tty/n_tty.c:2158
3 locks held by kworker/1:5/4316:
3 locks held by kworker/1:7/4319:
#0:
ffff8880b913a358
(
&rq->__lock
){-.-.}-{2:2}
, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc9000304fd00
((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: __rq_lockp kernel/sched/sched.h:1191 [inline]
#2: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: finish_lock_switch+0x60/0x280 kernel/sched/core.c:4801
7 locks held by syz.0.17/4353:
4 locks held by kworker/u4:5/4372:
#0:
ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc900031efd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff88807d9620e0
(&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3:
ffff88807e2540b0
(&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u4:6/4373:
#0:
ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc900031ffd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff888020fd20e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888020fd60b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u4:7/4374:
#0:
ffff8880191d0938
(
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc9000320fd00
(
(work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff88807deec0e0
(&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88805a17c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
7 locks held by syz.1.18/4391:
10 locks held by syz.2.19/4408:
7 locks held by syz.3.20/4430:
7 locks held by syz.4.21/4455:
3 locks held by kworker/u4:9/4464:
7 locks held by syz.5.22/4486:
1 lock held by syz-executor/4488:
final repro crashed as (corrupted=false):
INFO: task kworker/u4:0:9 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:0 state:D stack:23696 pid: 9 ppid: 2 flags:0x00004000
Workqueue: writeback wb_workfn
(flush-7:0)
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
schedule+0x11b/0x1e0 kernel/sched/core.c:6478
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
__mutex_lock_common+0xcfc/0x2400 kernel/locking/mutex.c:669
__mutex_lock kernel/locking/mutex.c:729 [inline]
mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
hfsplus_cat_write_inode+0x21c/0x870 fs/hfsplus/inode.c:613
write_inode fs/fs-writeback.c:1505 [inline]
__writeback_single_inode+0x6c3/0xda0 fs/fs-writeback.c:1715
writeback_sb_inodes+0xa4e/0x1680 fs/fs-writeback.c:1940
__writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:2011
wb_writeback+0x46f/0xbe0 fs/fs-writeback.c:2116
wb_check_background_flush fs/fs-writeback.c:2182 [inline]
wb_do_writeback fs/fs-writeback.c:2270 [inline]
wb_workfn+0xbd6/0xf20 fs/fs-writeback.c:2298
process_one_work+0x85f/0x1010 kernel/workqueue.c:2310
worker_thread+0xaa6/0x1290 kernel/workqueue.c:2457
kthread+0x436/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
#0: ffff8880191d0938
(
(wq_completion)writeback
){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff88807b18a0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88807b73e0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
1 lock held by khungtaskd/27:
#0: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
4 locks held by kworker/u4:1/144:
#0: ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000174fd00
(
(work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff888022f3c0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888022f380b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
2 locks held by kworker/u4:3/490:
#0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000333fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
3 locks held by kworker/1:2/1324:
4 locks held by kworker/u4:4/3067:
#0: ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc9000d44fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff888074b5c0e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88807afaa0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
2 locks held by getty/3946:
#0: ffff88802c8fc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
#1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 drivers/tty/n_tty.c:2158
3 locks held by kworker/1:5/4316:
3 locks held by kworker/1:7/4319:
#0:
ffff8880b913a358
(
&rq->__lock
){-.-.}-{2:2}
, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc9000304fd00
((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: __rq_lockp kernel/sched/sched.h:1191 [inline]
#2: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: finish_lock_switch+0x60/0x280 kernel/sched/core.c:4801
7 locks held by syz.0.17/4353:
4 locks held by kworker/u4:5/4372:
#0:
ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc900031efd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2:
ffff88807d9620e0
(&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3:
ffff88807e2540b0
(&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u4:6/4373:
#0:
ffff8880191d0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1: ffffc900031ffd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff888020fd20e0 (&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff888020fd60b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
4 locks held by kworker/u4:7/4374:
#0:
ffff8880191d0938
(
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x761/0x1010 kernel/workqueue.c:-1
#1:
ffffc9000320fd00
(
(work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 kernel/workqueue.c:2285
#2: ffff88807deec0e0
(&type->s_umount_key#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
#3: ffff88805a17c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 fs/hfsplus/bfind.c:28
7 locks held by syz.1.18/4391:
10 locks held by syz.2.19/4408:
7 locks held by syz.3.20/4430:
7 locks held by syz.4.21/4455:
3 locks held by kworker/u4:9/4464:
7 locks held by syz.5.22/4486:
1 lock held by syz-executor/4488: