Extracting prog: 9m32.179151575s
Minimizing prog: 1h23m6.423565786s
Simplifying prog options: 0s
Extracting C: 3m9.535948719s
Simplifying C: 1h52m53.581329275s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program crashed: WARNING in hfs_bnode_create
program crashed: WARNING in hfs_bnode_create
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

program did not crash
testing program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage=koi8-r,part=0x0000000000000006,quiet,iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0038ff4ab22ac1126a3319aea6729c1fb77e250aa3f3f3a514013df539dfc3ec70b40bf2cd9342fd15771ee81882b03759a2444d8600"], 0x1, 0x2de, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=53.327928396s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
simplifying C reproducer
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program did not crash
testing compiled C program (duration=53.327928396s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro-write$binfmt_script-mmap-mkdirat
program crashed: WARNING in hfs_bnode_create
reproducing took 3h28m41.720017616s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 64
hfs: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5893 at fs/hfs/bnode.c:428 hfs_bnode_create+0x3c2/0x450 fs/hfs/bnode.c:428
Modules linked in:
CPU: 1 UID: 0 PID: 5893 Comm: syz-executor340 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:hfs_bnode_create+0x3c2/0x450 fs/hfs/bnode.c:428
Code: 81 8b 89 ee e8 8f b3 90 fe e9 6e fd ff ff e8 e5 13 29 ff 4c 89 ef e8 bd 2b c2 08 48 c7 c7 60 89 81 8b 89 ee e8 6f b3 90 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 75 fc ff ff
RSP: 0018:ffffc9000325f798 EFLAGS: 00010246
RAX: 000000000000001f RBX: ffff888033188000 RCX: 6743fd7a52b8fa00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffc9000325f487 R09: 1ffff9200064be90
R10: dffffc0000000000 R11: fffff5200064be91 R12: 0000000000000000
R13: ffff8880331880e0 R14: ffff88801eff0e00 R15: dffffc0000000000
FS:  000055558dd09480(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 000000007417f000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 hfs_bmap_alloc+0x539/0x5c0 fs/hfs/btree.c:291
 hfs_bnode_split+0xcc/0xef0 fs/hfsplus/brec.c:245
 hfs_brec_insert+0x377/0xbd0 fs/hfs/brec.c:102
 hfs_cat_create+0x344/0x640 fs/hfs/catalog.c:118
 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232
 vfs_mkdir+0x306/0x510 fs/namei.c:4359
 do_mkdirat+0x247/0x590 fs/namei.c:4392
 __do_sys_mkdirat fs/namei.c:4409 [inline]
 __se_sys_mkdirat fs/namei.c:4407 [inline]
 __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4407
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8acfbb4f79
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe49451228 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00656d69742e7166 RCX: 00007f8acfbb4f79
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000ffffff9c
RBP: 00007ffe49451238 R08: 00007ffe49451238 R09: 00007f8acfb80d20
R10: 00007ffe49451230 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe49451498 R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 64
hfs: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5893 at fs/hfs/bnode.c:428 hfs_bnode_create+0x3c2/0x450 fs/hfs/bnode.c:428
Modules linked in:
CPU: 1 UID: 0 PID: 5893 Comm: syz-executor340 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:hfs_bnode_create+0x3c2/0x450 fs/hfs/bnode.c:428
Code: 81 8b 89 ee e8 8f b3 90 fe e9 6e fd ff ff e8 e5 13 29 ff 4c 89 ef e8 bd 2b c2 08 48 c7 c7 60 89 81 8b 89 ee e8 6f b3 90 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 75 fc ff ff
RSP: 0018:ffffc9000325f798 EFLAGS: 00010246
RAX: 000000000000001f RBX: ffff888033188000 RCX: 6743fd7a52b8fa00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffc9000325f487 R09: 1ffff9200064be90
R10: dffffc0000000000 R11: fffff5200064be91 R12: 0000000000000000
R13: ffff8880331880e0 R14: ffff88801eff0e00 R15: dffffc0000000000
FS:  000055558dd09480(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 000000007417f000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 hfs_bmap_alloc+0x539/0x5c0 fs/hfs/btree.c:291
 hfs_bnode_split+0xcc/0xef0 fs/hfsplus/brec.c:245
 hfs_brec_insert+0x377/0xbd0 fs/hfs/brec.c:102
 hfs_cat_create+0x344/0x640 fs/hfs/catalog.c:118
 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232
 vfs_mkdir+0x306/0x510 fs/namei.c:4359
 do_mkdirat+0x247/0x590 fs/namei.c:4392
 __do_sys_mkdirat fs/namei.c:4409 [inline]
 __se_sys_mkdirat fs/namei.c:4407 [inline]
 __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4407
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8acfbb4f79
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe49451228 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
RAX: ffffffffffffffda RBX: 00656d69742e7166 RCX: 00007f8acfbb4f79
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000ffffff9c
RBP: 00007ffe49451238 R08: 00007ffe49451238 R09: 00007f8acfb80d20
R10: 00007ffe49451230 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe49451498 R14: 0000000000000001 R15: 0000000000000001
 </TASK>