Extracting prog: 4m46.054772682s
Minimizing prog: 5m47.888652897s
Simplifying prog options: 0s
Extracting C: 1m4.009212497s
Simplifying C: 10m14.054666307s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program crashed: kernel BUG in may_open
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat
detailed listing:
executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")
creat(0x0, 0x6)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
program crashed: kernel BUG in may_open
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$eJzs3U9sHGfdB/DvbJy1N6+U+m3TNCCkWo1UQSMSO6uSICE1IIRyiFAEl16txGmsbNLKcVFaIbIBChInTqgHDkUoHHpCCCGVE6KckZC4cPI9EjcOOQBGMzu7Xq83jp3EWbf9fKTZeWafeZ7nN7/Mn93ZWBPgM+v86znYTZHzJy7cKpfX7rY7a3fb1/vlJNNJGslUb5ailRQfJ+fSm/K58s26u+JB47x676Ni6v0P272lqXqq1m9s126LsWt2k5nBwoEkc73iv3fc7Zb+qqnq59JGf4+oGMRdJux4P3EwaetbdDcqGw9tvvPjFti3bveum1vMJofSu7qWnwNSnx0efmaYvG3PTd2nFwcAAADslbHf5Yc9cz/3cyuHn044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OlQ9J4ZWNRTo1+eS9F//n9z6Jn6zQmH+5jeu1LNvvPMpAMBAAAAAAAAgMfy4v3cz60c7i+vF9Vv/i9VC0eq1//L27mZpazkZG5lMatZzUoWkswOddS8tbi6urKwteUvUrZcX1+/Xbc8Pbbl6c1xdUcDHfc/DbasBAAAAAAAAACfWT/M+Y3f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYD8okgO9WTUd6Zdn05hKMpOkWcwNVm9ONNgn4E+TDgAAAAD2XqueHy7+2yusF9V3/qPV9/6ZvJ0bWc1yVtPJUi5X9wJ63/obf+u2O2t329fLaWvHX//nruKoekzv3sP4keerNZ4ftDifb+W7OZG5XMxKlvO9LGY1S5nLN6vSYorM1ncvZtfuttKPdWu85zYtXRyN7cWhchnfsSqSVq5kuYrtZC41+6E36vWODY32h2YyMuKdMjvFa7Ud5uhyPS+36Of1fH+Yrbb84CAj83XuG9Udo6G8b839LveT0ZEW0hjcgzqyMUq5ODrSI+X8UD0vc/2Tvc35Lm+lbc5E92flUn/vO7q2bc6TL/39zxevNm5cu3rl5on9sxs9otF9oj2UiRd2lIlOmYnuY2Ri5nHif3KadTZ6Z9HdnS1fqtoeznK+nTdzOUs5k/ks5Gzm89WcTjunh/L6/PZ5rY61xu6OteNfrAvlNemnQ9emp2b6QRVlXv9/KK/DZ7rZqm74nY0sPbuDLBXNjM/SP8aGMvX5ulCO8aOhK87kjWZiYSgTz22fiV/9Zz3Jzc6NaytXF9/a4Xgv1/PysH1v87n5109kg3av3txyf3m2/MdK77IxvHeUdc/160by1ax/cZmqO9tU10x1PPfqHnaklj0dvTOup17dC2NHaVd1x4bqNn3KyZvpDD6FALCPHXrlULN1r/XX1getH7euti7MfGP67PQXmjn4l6k/Hvht4zeNrxWv5IP8IIcnHSkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwa3Hzn3WuLnc7Syj4spPGEO7wztqqfit47zf2x7Z/UwvR2e9TvkmzTvDmJmFtJ9kXqMvVEj53aSNV0xqx8YfBOK2kM4klybZ884A7YC6dWr7916uY77355+friG0tvLN04ffbMa2faX1m4ferKcmdpvvc66SiBvbDxMWDSkQAAAAAAAAAAAAA79Zh/aTAz+gcG4wpjhi26E9hWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JPp/Os52E2RhfmT8+Xy2t12p5z65Y01p5I0khTfT4qPk3PpTZkd6q540Div3vvoly+//2F7o6+p8rXodzq06u//tb6+y63o1lPmkhyo5w83vaP+Lg31191lYD3FYAvLhB3vJw4m7X8BAAD//wf4Ap8=")
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program crashed: kernel BUG in may_open
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program crashed: kernel BUG in may_open
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-creat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x3, 0x6b3, &(0x7f0000000a00)="$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")
creat(&(0x7f0000000140)='./file0\x00', 0x6)

program crashed: kernel BUG in may_open
validation run: crashed=true
reproducing took 27m14.325151003s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff8880384b01e0
fs hfsplus mode 0 opflags 0x4 flags 0x0 state 0x70 count 2
------------[ cut here ]------------
kernel BUG at fs/namei.c:4210!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6062 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:may_open+0x4b1/0x4c0 fs/namei.c:4210
Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 c9 ec ef ff e9 11 fd ff ff e8 df b3 8d ff 4c 89 f7 48 c7 c6 80 53 f9 8a e8 10 eb f5 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90003ba78e0 EFLAGS: 00010282
RAX: 0000000000000088 RBX: dffffc0000000000 RCX: b41eda36b1e3ff00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000008241 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000774ec1 R12: 0000000000000000
R13: ffffffff8d709d80 R14: ffff8880384b01e0 R15: 0000000000000002
FS:  000055557d7cd500(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f01916a5890 CR3: 0000000040598000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 do_open fs/namei.c:4635 [inline]
 path_openat+0x32a8/0x3df0 fs/namei.c:4796
 do_filp_open+0x1fa/0x410 fs/namei.c:4823
 do_sys_openat2+0x121/0x200 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_creat fs/open.c:1514 [inline]
 __se_sys_creat fs/open.c:1508 [inline]
 __x64_sys_creat+0x8f/0xc0 fs/open.c:1508
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f739c0cf749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd4aa21ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f739c325fa0 RCX: 00007f739c0cf749
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000140
RBP: 00007f739c153f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f739c325fa0 R14: 00007f739c325fa0 R15: 0000000000000002
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_open+0x4b1/0x4c0 fs/namei.c:4210
Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 c9 ec ef ff e9 11 fd ff ff e8 df b3 8d ff 4c 89 f7 48 c7 c6 80 53 f9 8a e8 10 eb f5 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90003ba78e0 EFLAGS: 00010282
RAX: 0000000000000088 RBX: dffffc0000000000 RCX: b41eda36b1e3ff00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000008241 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000774ec1 R12: 0000000000000000
R13: ffffffff8d709d80 R14: ffff8880384b01e0 R15: 0000000000000002
FS:  000055557d7cd500(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f01916a5890 CR3: 0000000040598000 CR4: 00000000003526f0

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff8880384b01e0
fs hfsplus mode 0 opflags 0x4 flags 0x0 state 0x70 count 2
------------[ cut here ]------------
kernel BUG at fs/namei.c:4210!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 6062 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:may_open+0x4b1/0x4c0 fs/namei.c:4210
Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 c9 ec ef ff e9 11 fd ff ff e8 df b3 8d ff 4c 89 f7 48 c7 c6 80 53 f9 8a e8 10 eb f5 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90003ba78e0 EFLAGS: 00010282
RAX: 0000000000000088 RBX: dffffc0000000000 RCX: b41eda36b1e3ff00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000008241 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000774ec1 R12: 0000000000000000
R13: ffffffff8d709d80 R14: ffff8880384b01e0 R15: 0000000000000002
FS:  000055557d7cd500(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f01916a5890 CR3: 0000000040598000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 do_open fs/namei.c:4635 [inline]
 path_openat+0x32a8/0x3df0 fs/namei.c:4796
 do_filp_open+0x1fa/0x410 fs/namei.c:4823
 do_sys_openat2+0x121/0x200 fs/open.c:1430
 do_sys_open fs/open.c:1436 [inline]
 __do_sys_creat fs/open.c:1514 [inline]
 __se_sys_creat fs/open.c:1508 [inline]
 __x64_sys_creat+0x8f/0xc0 fs/open.c:1508
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f739c0cf749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd4aa21ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f739c325fa0 RCX: 00007f739c0cf749
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000140
RBP: 00007f739c153f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f739c325fa0 R14: 00007f739c325fa0 R15: 0000000000000002
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_open+0x4b1/0x4c0 fs/namei.c:4210
Code: 38 c1 0f 8c 1e fd ff ff 4c 89 e7 e8 c9 ec ef ff e9 11 fd ff ff e8 df b3 8d ff 4c 89 f7 48 c7 c6 80 53 f9 8a e8 10 eb f5 fe 90 <0f> 0b 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90003ba78e0 EFLAGS: 00010282
RAX: 0000000000000088 RBX: dffffc0000000000 RCX: b41eda36b1e3ff00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000008241 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000774ec1 R12: 0000000000000000
R13: ffffffff8d709d80 R14: ffff8880384b01e0 R15: 0000000000000002
FS:  000055557d7cd500(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f01916a5890 CR3: 0000000040598000 CR4: 00000000003526f0