Extracting prog: 2m38.657274061s
Minimizing prog: 71.771µs
Simplifying prog options: 0s
Extracting C: 1m14.374206123s
Simplifying C: 9m27.594817246s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2200410, &(0x7f00000000c0)=ANY=[], 0xf, 0x6cf, &(0x7f0000000e80)="$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")

program crashed: WARNING in hfsplus_bnode_create
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=1m1.37561283s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
simplifying C reproducer
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=1m1.37561283s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
reproducing took 13m20.626387009s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5818 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Modules linked in:
CPU: 1 UID: 0 PID: 5818 Comm: syz-executor239 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Code: 44 89 e6 e8 fc 10 89 fe e9 78 fd ff ff e8 d2 80 21 ff 4c 89 ff e8 6a ea 45 09 48 c7 c7 00 78 20 8c 44 89 e6 e8 db 10 89 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48
RSP: 0018:ffffc90003faef98 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff888020699800 RCX: 0638a95698ce9600
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817f0b0c R09: 1ffff920007f5d90
R10: dffffc0000000000 R11: fffff520007f5d91 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88806c6d4000 R15: ffff88806c6d40e0
FS:  0000555577177380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055cef18a3c58 CR3: 000000007881a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x59a/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xde/0x1110 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x3a6/0xde0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x49f/0x1b70 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1354/0x1be0 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3511
 do_mount fs/namespace.c:3851 [inline]
 __do_sys_mount fs/namespace.c:4061 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4038
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f598cc41dea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffff7484598 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffff74845b0 RCX: 00007f598cc41dea
RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffff74845b0
RBP: 0000000000000004 R08: 00007ffff74845f0 R09: 00000000000006c9
R10: 0000000002200410 R11: 0000000000000286 R12: 0000000002200410
R13: 00007ffff74845f0 R14: 0000000000000003 R15: 0000000000080000
 </TASK>

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5818 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Modules linked in:
CPU: 1 UID: 0 PID: 5818 Comm: syz-executor239 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Code: 44 89 e6 e8 fc 10 89 fe e9 78 fd ff ff e8 d2 80 21 ff 4c 89 ff e8 6a ea 45 09 48 c7 c7 00 78 20 8c 44 89 e6 e8 db 10 89 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48
RSP: 0018:ffffc90003faef98 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff888020699800 RCX: 0638a95698ce9600
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817f0b0c R09: 1ffff920007f5d90
R10: dffffc0000000000 R11: fffff520007f5d91 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88806c6d4000 R15: ffff88806c6d40e0
FS:  0000555577177380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055cef18a3c58 CR3: 000000007881a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x59a/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xde/0x1110 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x3a6/0xde0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x49f/0x1b70 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1354/0x1be0 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3511
 do_mount fs/namespace.c:3851 [inline]
 __do_sys_mount fs/namespace.c:4061 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4038
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f598cc41dea
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffff7484598 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffff74845b0 RCX: 00007f598cc41dea
RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffff74845b0
RBP: 0000000000000004 R08: 00007ffff74845f0 R09: 00000000000006c9
R10: 0000000002200410 R11: 0000000000000286 R12: 0000000002200410
R13: 00007ffff74845f0 R14: 0000000000000003 R15: 0000000000080000
 </TASK>