Extracting prog: 2m58.225916668s
Minimizing prog: 73.467µs
Simplifying prog options: 0s
Extracting C: 55.14822269s
Simplifying C: 6m5.393972242s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x81, 0x6af, &(0x7f00000003c0)="$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")

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x81, 0x6af, &(0x7f00000003c0)="$eJzs3c9vHGcZB/DvrNcbb4hSp00gQkVYiVSQIlInVgrhgkEI5VChqhw4W4nTWNkkyHFRqBC4gOCExKF/QEHyjRMS96BwLrdefayExCXiEPWyaGZn7bW9jr3xz9DPJxq/7+z7zrvPPvPOjGed1Qb4wrpxKc3HKXLj0tuPyvXVlZnO6srMibq5k6SsN5Jmr0hxPymeJLNlezGwZKDc4qOF6+9++nT1s95as16q/mPP226IIX2X6yVT9XhTQ7cc3+1TLNfh5VSSm3W5UWu3Y23oWCbtYl3CketusTzK5qMct8Ax0786Fb3r5haTyckkE/XvAanPDo3Di/BgjHSWAwAAgJfUJw+OOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+Yz3iqJeGnWZqRT97/9v9R+r68fQ7K57Pj7QOAAAAAAAAADgcHz9WZ7lUU7317tF9Tf/C9XK2XzeTb6U9/Mw81nM5TzKXJaylMVcSTI5MFDr0dzS0uKVtS1Lw7e8OnTLq4f1igEAAAAAAADg/9Jv0l7/+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwHRTLWK6rlbF1mMo1m1tuynPwrSeuo4x1BMezBicOPAwAAAPbkRe5lX3mWZ3mU0/31blHd83+5ul+eyPu5n6UsZCmdzOdWfQ9d3vU3VldmOqsrM/fKZfOorXz/PyOFUY1Yv78w/JnPVz3auZ2F6pHLuVkFcyuNastcTM734xke14dlTMX3aruMrFmntXyyP233LsK+eDxi/8kyuCS3M14/0outzMaZXgaK6o2aZHMmdtw7zc3PlEbG13J/JY21d37OHkDOTw68nt8faM5HtZaJRqpMXO3PvvKYeX4mkm/8/a8/vdO5f/fO7YeXjs9L2sHYNo9vnhMzA5n4ykudieaI/aerTJxbW7+RH+UnuZSpvJPFLOTnmctS5tOt2+fq+Vz+nHx+pmY3rL2zUySter/09tluYprKD6vaXC5U257OQoo8yK3M563q39VcybdzLddyfWAPn9s27uq1VUd9Y/NR39/T/xga/MVv1pV2kj/U5ZYcbLLd7NwvvXN/mdczA3ntzfqna73ODBwH0wNZerWfnfGhg7/IubH51bpSPsdv6/J4mKwzUR5A/atEP7rXeploVteirfP8z93qGta5f3fxztzPthl/Oac2rL9Rl+W0WvnabqMcviv2VzlfXs1EfSbZODvKttfWzjJnNlxVW/VfXHptjS1t56q2ougfqT/Og2oCbD1SW/XvcFtHulq1tYe2zVRt5wfaNvy+lQfp5NYh5A+APZrMyVb73+1P2h+3f9e+03574gcnvnPi9VbG/zn+3eb02BuN14u/5eP8av3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHEPf/HB3blOZ35xeKXR6Zyoe27bZ3hlp5E3VYr6C31G2+r4ViY2Z6z6nqNDD6Ndh9F9Zbs+3V8nh56f/pcIDu/zx7LSzG4GnN2pz4dHOhPGjnwe7lwZy/AJcIQnJeBQvLl0r5nkg28t3Jt7b/69+fvj165dn75+7a2ZN28vdOanez+POkrgIKxf9I86EgAAAAAAAAAAAGC3hn0w4MKpkT/tM+wzHv5nIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAvblxK83GKXJm+PF2ur67MdMqlX1/v2UzSaCTFL5PiSTKb3pLJgeGK/OVJukOe56OF6+9++nT1s/Wxmr3+SaMu92C5XjKVZKwu92u8m3ser/hv9QpP9NY+73a7s3uLD/bH/wIAAP//y0zvTg==")

program crashed: WARNING in hfsplus_bnode_create
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
reproducing took 9m58.768211628s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5315 at fs/hfsplus/bnode.c:579 hfsplus_bnode_create+0x461/0x4f0 fs/hfsplus/bnode.c:579
Modules linked in:
CPU: 0 UID: 0 PID: 5315 Comm: syz-executor174 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 fs/hfsplus/bnode.c:579
Code: a1 8b 89 ee e8 00 8f 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 7e ab d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 e0 8e 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff
RSP: 0018:ffffc9000d1c7040 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff88803364e000 RCX: 209e5f1d45884300
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffc9000d1c6d67 R09: 1ffff92001a38dac
R10: dffffc0000000000 R11: fffff52001a38dad R12: 0000000000000000
R13: ffff88803364e0e0 R14: ffff888032d60100 R15: dffffc0000000000
FS:  000055557248b380(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff17a6bb4c CR3: 000000003f875000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x5af/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xcc/0xef0 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x38f/0xcc0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x3b6/0x1000 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1314/0x1b70 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x40b/0x4d0 fs/super.c:1679
 vfs_get_tree+0x92/0x2b0 fs/super.c:1802
 do_new_mount+0x24a/0xa40 fs/namespace.c:3885
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4410
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4c77345e2a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffb557c1e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fffb557c200 RCX: 00007f4c77345e2a
RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fffb557c200
RBP: 0000200000000040 R08: 00007fffb557c240 R09: 00000000000006a9
R10: 0000000002000010 R11: 0000000000000286 R12: 0000200000000000
R13: 00007fffb557c240 R14: 0000000000000003 R15: 0000000002000010
 </TASK>

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5315 at fs/hfsplus/bnode.c:579 hfsplus_bnode_create+0x461/0x4f0 fs/hfsplus/bnode.c:579
Modules linked in:
CPU: 0 UID: 0 PID: 5315 Comm: syz-executor174 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 fs/hfsplus/bnode.c:579
Code: a1 8b 89 ee e8 00 8f 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 7e ab d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 e0 8e 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff
RSP: 0018:ffffc9000d1c7040 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff88803364e000 RCX: 209e5f1d45884300
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffc9000d1c6d67 R09: 1ffff92001a38dac
R10: dffffc0000000000 R11: fffff52001a38dad R12: 0000000000000000
R13: ffff88803364e0e0 R14: ffff888032d60100 R15: dffffc0000000000
FS:  000055557248b380(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff17a6bb4c CR3: 000000003f875000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x5af/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xcc/0xef0 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x38f/0xcc0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x3b6/0x1000 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1314/0x1b70 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x40b/0x4d0 fs/super.c:1679
 vfs_get_tree+0x92/0x2b0 fs/super.c:1802
 do_new_mount+0x24a/0xa40 fs/namespace.c:3885
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4410
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4c77345e2a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffb557c1e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fffb557c200 RCX: 00007f4c77345e2a
RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fffb557c200
RBP: 0000200000000040 R08: 00007fffb557c240 R09: 00000000000006a9
R10: 0000000002000010 R11: 0000000000000286 R12: 0000200000000000
R13: 00007fffb557c240 R14: 0000000000000003 R15: 0000000002000010
 </TASK>