Extracting prog: 2m18.870717037s
Minimizing prog: 39.46µs
Simplifying prog options: 0s
Extracting C: 31.046061825s
Simplifying C: 9m39.778846539s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x81, 0x6af, &(0x7f00000003c0)="$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")

program crashed: WARNING in hfsplus_bnode_create
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=53.453567569s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
simplifying C reproducer
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
testing compiled C program (duration=53.453567569s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus
program crashed: WARNING in hfsplus_bnode_create
reproducing took 12m29.695706982s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5816 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Modules linked in:
CPU: 1 UID: 0 PID: 5816 Comm: syz-executor152 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Code: 44 89 e6 e8 8c 17 89 fe e9 78 fd ff ff e8 e2 88 21 ff 4c 89 ff e8 ba 6e 45 09 48 c7 c7 00 76 20 8c 44 89 e6 e8 6b 17 89 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48
RSP: 0018:ffffc90003e8ef98 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff888020293900 RCX: e0de1b174ec1ed00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817f09fc R09: 1ffff920007d1d90
R10: dffffc0000000000 R11: fffff520007d1d91 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88805f8ee000 R15: ffff88805f8ee0e0
FS:  000055555872b380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f202b67fc00 CR3: 0000000078f86000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x59a/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xde/0x1110 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x3a6/0xde0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x49f/0x1b70 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1354/0x1be0 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4057 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4034
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2033bb58fa
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd6ea8f378 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffd6ea8f390 RCX: 00007f2033bb58fa
RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd6ea8f390
RBP: 0000000000000004 R08: 00007ffd6ea8f3d0 R09: 00000000000006a9
R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010
R13: 00007ffd6ea8f3d0 R14: 0000000000000003 R15: 0000000000080000
 </TASK>

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
hfsplus: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5816 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Modules linked in:
CPU: 1 UID: 0 PID: 5816 Comm: syz-executor152 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:hfsplus_bnode_create+0x3b6/0x440 fs/hfsplus/bnode.c:573
Code: 44 89 e6 e8 8c 17 89 fe e9 78 fd ff ff e8 e2 88 21 ff 4c 89 ff e8 ba 6e 45 09 48 c7 c7 00 76 20 8c 44 89 e6 e8 6b 17 89 fe 90 <0f> 0b 90 eb af 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 fc ff ff 48
RSP: 0018:ffffc90003e8ef98 EFLAGS: 00010246
RAX: 0000000000000023 RBX: ffff888020293900 RCX: e0de1b174ec1ed00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817f09fc R09: 1ffff920007d1d90
R10: dffffc0000000000 R11: fffff520007d1d91 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88805f8ee000 R15: ffff88805f8ee0e0
FS:  000055555872b380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f202b67fc00 CR3: 0000000078f86000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_bmap_alloc+0x59a/0x640 fs/hfsplus/btree.c:415
 hfs_bnode_split+0xde/0x1110 fs/hfsplus/brec.c:245
 hfsplus_brec_insert+0x3a6/0xde0 fs/hfsplus/brec.c:100
 hfsplus_create_cat+0x49f/0x1b70 fs/hfsplus/catalog.c:292
 hfsplus_fill_super+0x1354/0x1be0 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x48c/0x5c0 fs/super.c:1636
 vfs_get_tree+0x90/0x2b0 fs/super.c:1814
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4057 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4034
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2033bb58fa
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd6ea8f378 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffd6ea8f390 RCX: 00007f2033bb58fa
RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd6ea8f390
RBP: 0000000000000004 R08: 00007ffd6ea8f3d0 R09: 00000000000006a9
R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010
R13: 00007ffd6ea8f3d0 R14: 0000000000000003 R15: 0000000000080000
 </TASK>