Extracting prog: 1m59.00205969s
Minimizing prog: 4m0.155578335s
Simplifying prog options: 0s
Extracting C: 27.888641255s
Simplifying C: 14m9.863226314s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=43.041248761s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$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")

program did not crash
testing program (duration=43.041248761s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro
detailed listing:
executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program did not crash
testing program (duration=43.041248761s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=43.041248761s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program did not crash
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$eJzs3U1r1E4cB/DvJNnd7L+l/9hWCp6kWvBU2npQvFikeBHvHqRY2y2UxgpaQQti9SziTRA8evMs+hb0Ir4BPfUgnvRSPBiZycNOwkw3u103rf1+wN1tMg+/yWSSmZY1IKIj69LCl9dnd+Q/UQPgArgAOAB8wJMpRLmC3OyTzOAZMy5vtExZfSQ5EoH8ycOwvo3+jiiKoq8dU/0YSCxUHaGPYI0DNJLRqfb7A49sfxqW7dv2Xf8urYfFLnZxHyNVhkNERNVL7v9OcpcYTubvjgNMJfPwQ3n/1+TmN7vVxXEgZPd/J/45EvL4/K92+fc2Ntc2w9ZKvISTve+kq0RTWcZzImof7jriM8sd0qZcWi1mKhanuboWtqa3VQFPcDGhJRtXrytIG6LYoq3Hb5NlF7Uyqb20DhrAkGpDTbZhzhL/WPw2k8ua1mhcAL//hhfmGhc/lghLfBCfxKII8BIr2fzPi4Q8OOr4BIWhEsc/Yy9RtTKIU+Va2Q7/mKrkRNoD7960W9m0HVcfrozFRJYiivP3II3zed2eC6PI/1ohbt2svXUq1xjgCbVq0HPNZYl+GXONF+tqrtbC1vTy7dB20veXcUUnnolrYhLf8RYL2vzfkamnYB+ZuVEuVMrkzNizPZ5KaenHHDWAb5UemZS5bOzovT3FTZzHyN0HW+tLYdi6U/2HdKj0mP1kn+OJT8TkdJRb5LuWBr78UAPQt0p/R1Fk3OVhEF1QU00996rd5K31JZFc88qUc9Wx9aC8chYSz1vLkUXMA0i2pFeEXtr1KMvVaBdYKvtP2dtqi/mETKMawABJq8rtctEoNVKaPVR65eH6Utj9JYUOn3anY+J61cFQFeRFW8TrP229MqOuOvIl2GP9E3UqXCtx1rICGlWv/5VbwWXFWueJQ+mHDmuuU2eA04UaHaQ1Pi4WGyRx4iD+VbL7P2WIBXzGDf7+n4iIiIiIiIiIiIiIiIiIiIiIiIjosOn22wi9fJ0gX+POEfyPN4iIiIiIiIiIiIiIiIiIiIiIiIiIiIiI9kd7/i/gqifG1HPP/z2OiU5PalLc+Akxfj+e/+t2eP6vLFlsd9lSIir6EwAA//+rOFqF")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=43.041248761s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x2210084, &(0x7f000000f3c0)=ANY=[@ANYBLOB="636f6465706167653d63703433372c696f636861727365743d6575632d6a702c00a26550b3bd2e70a4031d010695e18635faa8d6f06a91de4f295559ef9ce2a9773ed0f3a0fea8c90cb62bbe6d0294488fa60accd3b7aae7a6a67b20a0afd180825526b7c21ab1886d1ec9ccaf41379d12b7c9afd7fad169fa393a32f203fd201aa07e4872b0de9111e8f6ab4ad957f255f931fd5bf27748a5ae293163e016b964853fe3026aadd32200fec25398e608b6"], 0x4, 0x33c, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
reproducing took 23m51.093444166s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
lr : hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
sp : ffff80001c887280
x29: ffff80001c8873c0 x28: 1fffe0001abad2b6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001c887280 x24: ffff700003910e50
x23: ffff800011c0c840 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d5d694d8 x19: ffff80001c887300 x18: 0000000000000000
x17: ffff8000181f9000 x16: ffff8000082e7b10 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008f960e0 x10: 0000000000000000 x9 : ffff800008f960e0
x8 : ffff0000c09ab780 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff80001547e940 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1460 [inline]
 __writeback_single_inode+0x5e0/0x157c fs/fs-writeback.c:1677
 writeback_sb_inodes+0x824/0x1404 fs/fs-writeback.c:1903
 wb_writeback+0x400/0xfb0 fs/fs-writeback.c:2077
 wb_do_writeback fs/fs-writeback.c:2220 [inline]
 wb_workfn+0x34c/0xd98 fs/fs-writeback.c:2260
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e50203 17ffff9c 97d42e97 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
lr : hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
sp : ffff80001c887280
x29: ffff80001c8873c0 x28: 1fffe0001abad2b6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001c887280 x24: ffff700003910e50
x23: ffff800011c0c840 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d5d694d8 x19: ffff80001c887300 x18: 0000000000000000
x17: ffff8000181f9000 x16: ffff8000082e7b10 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008f960e0 x10: 0000000000000000 x9 : ffff800008f960e0
x8 : ffff0000c09ab780 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff80001547e940 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x87c/0x880 fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1460 [inline]
 __writeback_single_inode+0x5e0/0x157c fs/fs-writeback.c:1677
 writeback_sb_inodes+0x824/0x1404 fs/fs-writeback.c:1903
 wb_writeback+0x400/0xfb0 fs/fs-writeback.c:2077
 wb_do_writeback fs/fs-writeback.c:2220 [inline]
 wb_workfn+0x34c/0xd98 fs/fs-writeback.c:2260
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e50203 17ffff9c 97d42e97 (d4210000) 
---[ end trace 0000000000000000 ]---