Extracting prog: 2m1.362166497s
Minimizing prog: 3m48.923864658s
Simplifying prog options: 0s
Extracting C: 47.881816767s
Simplifying C: 16m5.506881356s


1 programs, timeouts [30s 6m0s]
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=50.160815187s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")

program did not crash
testing program (duration=50.160815187s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): truncate
detailed listing:
executing program 0:
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program did not crash
testing program (duration=50.160815187s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(0x0, 0x1fefff)

program did not crash
extracting C reproducer
testing compiled C program (duration=50.160815187s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program did not crash
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=50.160815187s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
reproducing took 22m43.674756188s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 3701 Comm: kworker/u8:8 Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0xeb9/0xec0 fs/hfs/inode.c:444
Code: e9 88 fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9d fb ff ff e8 77 db 74 ff e9 93 fb ff ff e8 cd 5c 36 09 e8 58 4d 0e ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000ab87260 EFLAGS: 00010293
RAX: ffffffff828699a8 RBX: 0000000000000000 RCX: ffff88803060da00
RDX: 0000000000000000 RSI: ffffffff8eb67fe0 RDI: 0000000000000000
RBP: ffffc9000ab873f0 R08: 0000000000000007 R09: ffffffff82868c52
R10: 0000000000000003 R11: ffff88803060da00 R12: 1ffff92001570e50
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880119894d8
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a1eff3130 CR3: 000000003184e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 write_inode fs/fs-writeback.c:1503 [inline]
 __writeback_single_inode+0x711/0x10d0 fs/fs-writeback.c:1723
 writeback_sb_inodes+0x80c/0x1370 fs/fs-writeback.c:1954
 wb_writeback+0x41b/0xbd0 fs/fs-writeback.c:2134
 wb_do_writeback fs/fs-writeback.c:2281 [inline]
 wb_workfn+0x410/0x1090 fs/fs-writeback.c:2321
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0xeb9/0xec0 fs/hfs/inode.c:444
Code: e9 88 fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9d fb ff ff e8 77 db 74 ff e9 93 fb ff ff e8 cd 5c 36 09 e8 58 4d 0e ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000ab87260 EFLAGS: 00010293
RAX: ffffffff828699a8 RBX: 0000000000000000 RCX: ffff88803060da00
RDX: 0000000000000000 RSI: ffffffff8eb67fe0 RDI: 0000000000000000
RBP: ffffc9000ab873f0 R08: 0000000000000007 R09: ffffffff82868c52
R10: 0000000000000003 R11: ffff88803060da00 R12: 1ffff92001570e50
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880119894d8
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a1eff3130 CR3: 0000000076292000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 3701 Comm: kworker/u8:8 Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0xeb9/0xec0 fs/hfs/inode.c:444
Code: e9 88 fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9d fb ff ff e8 77 db 74 ff e9 93 fb ff ff e8 cd 5c 36 09 e8 58 4d 0e ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000ab87260 EFLAGS: 00010293
RAX: ffffffff828699a8 RBX: 0000000000000000 RCX: ffff88803060da00
RDX: 0000000000000000 RSI: ffffffff8eb67fe0 RDI: 0000000000000000
RBP: ffffc9000ab873f0 R08: 0000000000000007 R09: ffffffff82868c52
R10: 0000000000000003 R11: ffff88803060da00 R12: 1ffff92001570e50
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880119894d8
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a1eff3130 CR3: 000000003184e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 write_inode fs/fs-writeback.c:1503 [inline]
 __writeback_single_inode+0x711/0x10d0 fs/fs-writeback.c:1723
 writeback_sb_inodes+0x80c/0x1370 fs/fs-writeback.c:1954
 wb_writeback+0x41b/0xbd0 fs/fs-writeback.c:2134
 wb_do_writeback fs/fs-writeback.c:2281 [inline]
 wb_workfn+0x410/0x1090 fs/fs-writeback.c:2321
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0xeb9/0xec0 fs/hfs/inode.c:444
Code: e9 88 fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9d fb ff ff e8 77 db 74 ff e9 93 fb ff ff e8 cd 5c 36 09 e8 58 4d 0e ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000ab87260 EFLAGS: 00010293
RAX: ffffffff828699a8 RBX: 0000000000000000 RCX: ffff88803060da00
RDX: 0000000000000000 RSI: ffffffff8eb67fe0 RDI: 0000000000000000
RBP: ffffc9000ab873f0 R08: 0000000000000007 R09: ffffffff82868c52
R10: 0000000000000003 R11: ffff88803060da00 R12: 1ffff92001570e50
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880119894d8
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a1eff3130 CR3: 0000000076292000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400