Extracting prog: 1m29.993159911s
Minimizing prog: 4m34.157589137s
Simplifying prog options: 0s
Extracting C: 30.119031609s
Simplifying C: 16m18.68399s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=49.027312263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$eJzs3U9rE0EYx/Hf7CZp+oe6thXBi1It6KVYFRQvEcnVuydRmxSKoWJbQb1YxaP4Arx79OqL8KL4BvTkyRfQkyszmaS76WbTYJO19fuBxsnszOwz7G5mnoKNAPy3bte/f7j60/4YKVQo6aYUSKpKJX28fkqnq083tte3W81G3kCh62F/jGzP9r9pqxvNrK62n+vhRfZdSTPJOoxGHMe3fhQdBArnnn4n/dAF0oSvcserBcQ2CjvS2aJjGLcwUTa72tUzzRYYDgDgH+DX/8AvEzOuyigIpCW/7B+r9X+36AAO17XWvqo4t0Ni/Xe7u9jY63vCHdrL91wKZ48HnSzxIMGUe95X1L6zwlQAg7JKF0swubZe0vLqKzUCvVbNSzRbcK+N9q3bMSDaxYzcNEf/0cq6M9WejdtR9uqEtLbeak7YQkb888Od8e+Zz+aruWcivVeju/8rxcZeJnelop4rFZRt/Jf7jzjtetlW8ml/rVYLUk1OupOc8Wfw/CxrfYatpsNIqvgxO7nKTjeCvDhdr7meDKc9u5UBveazekXdd316LaR6hf5OWF593Mr9VcpodKZo3pm7ZlG/9En1xP4/sPEt6SBPpm3jWvo7oz2fSnbLkmsZ7Vs59h6Xc90IvInhJ4dhvdVD3dDs1vMXj8JWq7lpCw8yCk9mNo2vKb+RMtuMvhAq45DxBe3sHYqtl3F80JHjUQZ/6VAHtJ8f3Rr7+GQ1tk9ZtyYY62Wyy34R90ay0FnYR3yu+pesU1RU6NyHKJjfvhDHUp82RX9AYRy2TOei+4rJggPCuNl9l2nnf24n73d17pPUvkQ52Uh+kqnUiCvdDC69FZxzr1NDZXDT/TO4xBmv9MkZ3Qbz/EXpQqLSKPeMkY/zmDB1fdN9fv8PAAAAAAAAAAAAAAAAAABw1IzjvxwUPUcAAAAAAAAAAAAAAAAAAAAAAI66Ad//K2V9/2/W34h33/8b8f2/wBHyJwAA///qHXOD")

program did not crash
testing program (duration=49.027312263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): truncate
detailed listing:
executing program 0:
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program did not crash
testing program (duration=49.027312263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$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")
truncate(0x0, 0x28)

program did not crash
extracting C reproducer
testing compiled C program (duration=49.027312263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program did not crash
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=49.027312263s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
reproducing took 22m52.953813248s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 153 Comm: kworker/u4:3 Not tainted 6.1.126-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
lr : hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
sp : ffff80001d817180
x29: ffff80001d8172e0 x28: dfff800000000000 x27: ffff700003b02e34
x26: ffff80001d8171a0 x25: ffff800015a8d360 x24: 0000000000000001
x23: ffff8000125db980 x22: 0000000000000007 x21: ffff0000d8c394d8
x20: ffff80001d817220 x19: ffff80001d8171c0 x18: ffff80001d8169c0
x17: ffff800018b7c000 x16: ffff80001227e580 x15: 0000000000000000
x14: 0000000000000004 x13: ffff0000c6859bc0 x12: 0000000000ff0100
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff8000090b71e4
x8 : ffff0000c6859bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000030
x2 : 0000000000000008 x1 : ffff800015e479e0 x0 : 0000000000000007
Call trace:
 hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1460 [inline]
 __writeback_single_inode+0x614/0x1770 fs/fs-writeback.c:1677
 writeback_sb_inodes+0x978/0x1718 fs/fs-writeback.c:1903
 wb_writeback+0x414/0x1130 fs/fs-writeback.c:2077
 wb_do_writeback fs/fs-writeback.c:2220 [inline]
 wb_workfn+0x3a8/0x1034 fs/fs-writeback.c:2260
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
Code: aa1803e0 97e2f907 17ffff00 97d0ef82 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 153 Comm: kworker/u4:3 Not tainted 6.1.126-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
lr : hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
sp : ffff80001d817180
x29: ffff80001d8172e0 x28: dfff800000000000 x27: ffff700003b02e34
x26: ffff80001d8171a0 x25: ffff800015a8d360 x24: 0000000000000001
x23: ffff8000125db980 x22: 0000000000000007 x21: ffff0000d8c394d8
x20: ffff80001d817220 x19: ffff80001d8171c0 x18: ffff80001d8169c0
x17: ffff800018b7c000 x16: ffff80001227e580 x15: 0000000000000000
x14: 0000000000000004 x13: ffff0000c6859bc0 x12: 0000000000ff0100
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff8000090b71e4
x8 : ffff0000c6859bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000030
x2 : 0000000000000008 x1 : ffff800015e479e0 x0 : 0000000000000007
Call trace:
 hfs_write_inode+0xc18/0xc1c fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1460 [inline]
 __writeback_single_inode+0x614/0x1770 fs/fs-writeback.c:1677
 writeback_sb_inodes+0x978/0x1718 fs/fs-writeback.c:1903
 wb_writeback+0x414/0x1130 fs/fs-writeback.c:2077
 wb_do_writeback fs/fs-writeback.c:2220 [inline]
 wb_workfn+0x3a8/0x1034 fs/fs-writeback.c:2260
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
Code: aa1803e0 97e2f907 17ffff00 97d0ef82 (d4210000) 
---[ end trace 0000000000000000 ]---