Extracting prog: 3m34.947564449s
Minimizing prog: 8m8.505063285s
Simplifying prog options: 0s
Extracting C: 39.34419535s
Simplifying C: 11m31.899313952s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$eJzs3U9rE0EYx/Hf7CZp+oe6thXBi1It6KVYFRQvEcnVuydRmxSKoWJbQb1YxaP4Arx79OqL8KL4BvTkyRfQkyszmaS76WbTYJO19fuBxsnszOwz7G5mnoKNAPy3bte/f7j60/4YKVQo6aYUSKpKJX28fkqnq083tte3W81G3kCh62F/jGzP9r9pqxvNrK62n+vhRfZdSTPJOoxGHMe3fhQdBArnnn4n/dAF0oSvcserBcQ2CjvS2aJjGLcwUTa72tUzzRYYDgDgH+DX/8AvEzOuyigIpCW/7B+r9X+36AAO17XWvqo4t0Ni/Xe7u9jY63vCHdrL91wKZ48HnSzxIMGUe95X1L6zwlQAg7JKF0swubZe0vLqKzUCvVbNSzRbcK+N9q3bMSDaxYzcNEf/0cq6M9WejdtR9uqEtLbeak7YQkb888Od8e+Zz+aruWcivVeju/8rxcZeJnelop4rFZRt/Jf7jzjtetlW8ml/rVYLUk1OupOc8Wfw/CxrfYatpsNIqvgxO7nKTjeCvDhdr7meDKc9u5UBveazekXdd316LaR6hf5OWF593Mr9VcpodKZo3pm7ZlG/9En1xP4/sPEt6SBPpm3jWvo7oz2fSnbLkmsZ7Vs59h6Xc90IvInhJ4dhvdVD3dDs1vMXj8JWq7lpCw8yCk9mNo2vKb+RMtuMvhAq45DxBe3sHYqtl3F80JHjUQZ/6VAHtJ8f3Rr7+GQ1tk9ZtyYY62Wyy34R90ay0FnYR3yu+pesU1RU6NyHKJjfvhDHUp82RX9AYRy2TOei+4rJggPCuNl9l2nnf24n73d17pPUvkQ52Uh+kqnUiCvdDC69FZxzr1NDZXDT/TO4xBmv9MkZ3Qbz/EXpQqLSKPeMkY/zmDB1fdN9fv8PAAAAAAAAAAAAAAAAAABw1IzjvxwUPUcAAAAAAAAAAAAAAAAAAAAAAI66Ad//K2V9/2/W34h33/8b8f2/wBHyJwAA///qHXOD")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$eJzs3U9rE0EYx/Hf7CZp+oe6thXBi1It6KVYFRQvEcnVuydRmxSKoWJbQb1YxaP4Arx79OqL8KL4BvTkyRfQkyszmaS76WbTYJO19fuBxsnszOwz7G5mnoKNAPy3bte/f7j60/4YKVQo6aYUSKpKJX28fkqnq083tte3W81G3kCh62F/jGzP9r9pqxvNrK62n+vhRfZdSTPJOoxGHMe3fhQdBArnnn4n/dAF0oSvcserBcQ2CjvS2aJjGLcwUTa72tUzzRYYDgDgH+DX/8AvEzOuyigIpCW/7B+r9X+36AAO17XWvqo4t0Ni/Xe7u9jY63vCHdrL91wKZ48HnSzxIMGUe95X1L6zwlQAg7JKF0swubZe0vLqKzUCvVbNSzRbcK+N9q3bMSDaxYzcNEf/0cq6M9WejdtR9uqEtLbeak7YQkb888Od8e+Zz+aruWcivVeju/8rxcZeJnelop4rFZRt/Jf7jzjtetlW8ml/rVYLUk1OupOc8Wfw/CxrfYatpsNIqvgxO7nKTjeCvDhdr7meDKc9u5UBveazekXdd316LaR6hf5OWF593Mr9VcpodKZo3pm7ZlG/9En1xP4/sPEt6SBPpm3jWvo7oz2fSnbLkmsZ7Vs59h6Xc90IvInhJ4dhvdVD3dDs1vMXj8JWq7lpCw8yCk9mNo2vKb+RMtuMvhAq45DxBe3sHYqtl3F80JHjUQZ/6VAHtJ8f3Rr7+GQ1tk9ZtyYY62Wyy34R90ay0FnYR3yu+pesU1RU6NyHKJjfvhDHUp82RX9AYRy2TOei+4rJggPCuNl9l2nnf24n73d17pPUvkQ52Uh+kqnUiCvdDC69FZxzr1NDZXDT/TO4xBmv9MkZ3Qbz/EXpQqLSKPeMkY/zmDB1fdN9fv8PAAAAAAAAAAAAAAAAAABw1IzjvxwUPUcAAAAAAAAAAAAAAAAAAAAAAI66Ad//K2V9/2/W34h33/8b8f2/wBHyJwAA///qHXOD")

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): truncate
detailed listing:
executing program 0:
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$eJzs3U9rE0EYx/Hf7CZp+oe6thXBi1It6KVYFRQvEcnVuydRmxSKoWJbQb1YxaP4Arx79OqL8KL4BvTkyRfQkyszmaS76WbTYJO19fuBxsnszOwz7G5mnoKNAPy3bte/f7j60/4YKVQo6aYUSKpKJX28fkqnq083tte3W81G3kCh62F/jGzP9r9pqxvNrK62n+vhRfZdSTPJOoxGHMe3fhQdBArnnn4n/dAF0oSvcserBcQ2CjvS2aJjGLcwUTa72tUzzRYYDgDgH+DX/8AvEzOuyigIpCW/7B+r9X+36AAO17XWvqo4t0Ni/Xe7u9jY63vCHdrL91wKZ48HnSzxIMGUe95X1L6zwlQAg7JKF0swubZe0vLqKzUCvVbNSzRbcK+N9q3bMSDaxYzcNEf/0cq6M9WejdtR9uqEtLbeak7YQkb888Od8e+Zz+aruWcivVeju/8rxcZeJnelop4rFZRt/Jf7jzjtetlW8ml/rVYLUk1OupOc8Wfw/CxrfYatpsNIqvgxO7nKTjeCvDhdr7meDKc9u5UBveazekXdd316LaR6hf5OWF593Mr9VcpodKZo3pm7ZlG/9En1xP4/sPEt6SBPpm3jWvo7oz2fSnbLkmsZ7Vs59h6Xc90IvInhJ4dhvdVD3dDs1vMXj8JWq7lpCw8yCk9mNo2vKb+RMtuMvhAq45DxBe3sHYqtl3F80JHjUQZ/6VAHtJ8f3Rr7+GQ1tk9ZtyYY62Wyy34R90ay0FnYR3yu+pesU1RU6NyHKJjfvhDHUp82RX9AYRy2TOei+4rJggPCuNl9l2nnf24n73d17pPUvkQ52Uh+kqnUiCvdDC69FZxzr1NDZXDT/TO4xBmv9MkZ3Qbz/EXpQqLSKPeMkY/zmDB1fdN9fv8PAAAAAAAAAAAAAAAAAABw1IzjvxwUPUcAAAAAAAAAAAAAAAAAAAAAAI66Ad//K2V9/2/W34h33/8b8f2/wBHyJwAA///qHXOD")
truncate(0x0, 0x28)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$eJzs3U9rE0EYx/Hf7CZp+oe6thXBi1It6KVYFRQvEcnVuydRmxSKoWJbQb1YxaP4Arx79OqL8KL4BvTkyRfQkyszmaS76WbTYJO19fuBxsnszOwz7G5mnoKNAPy3bte/f7j60/4YKVQo6aYUSKpKJX28fkqnq083tte3W81G3kCh62F/jGzP9r9pqxvNrK62n+vhRfZdSTPJOoxGHMe3fhQdBArnnn4n/dAF0oSvcserBcQ2CjvS2aJjGLcwUTa72tUzzRYYDgDgH+DX/8AvEzOuyigIpCW/7B+r9X+36AAO17XWvqo4t0Ni/Xe7u9jY63vCHdrL91wKZ48HnSzxIMGUe95X1L6zwlQAg7JKF0swubZe0vLqKzUCvVbNSzRbcK+N9q3bMSDaxYzcNEf/0cq6M9WejdtR9uqEtLbeak7YQkb888Od8e+Zz+aruWcivVeju/8rxcZeJnelop4rFZRt/Jf7jzjtetlW8ml/rVYLUk1OupOc8Wfw/CxrfYatpsNIqvgxO7nKTjeCvDhdr7meDKc9u5UBveazekXdd316LaR6hf5OWF593Mr9VcpodKZo3pm7ZlG/9En1xP4/sPEt6SBPpm3jWvo7oz2fSnbLkmsZ7Vs59h6Xc90IvInhJ4dhvdVD3dDs1vMXj8JWq7lpCw8yCk9mNo2vKb+RMtuMvhAq45DxBe3sHYqtl3F80JHjUQZ/6VAHtJ8f3Rr7+GQ1tk9ZtyYY62Wyy34R90ay0FnYR3yu+pesU1RU6NyHKJjfvhDHUp82RX9AYRy2TOei+4rJggPCuNl9l2nnf24n73d17pPUvkQ52Uh+kqnUiCvdDC69FZxzr1NDZXDT/TO4xBmv9MkZ3Qbz/EXpQqLSKPeMkY/zmDB1fdN9fv8PAAAAAAAAAAAAAAAAAABw1IzjvxwUPUcAAAAAAAAAAAAAAAAAAAAAAI66Ad//K2V9/2/W34h33/8b8f2/wBHyJwAA///qHXOD")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x3000002, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x101}}, {}, {@codepage={'codepage', 0x3d, 'default'}}, {@creator={'creator', 0x3d, "7a21f6b2"}}]}, 0x1, 0x2e8, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000180)='./file2\x00', 0x28)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
reproducing took 28m48.314802195s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 20 52 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 20 52 af 99 e8 93 15 89 ff e9 6c fe ff ff e8 b9 03 27 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000ac7180 EFLAGS: 00010293
RAX: ffffffff82992317 RBX: ffff888031271518 RCX: ffff888142aa9e00
RDX: 0000000000000000 RSI: ffffffff8e365b20 RDI: 0000000000000007
RBP: ffffc90000ac7310 R08: ffff888142aa9e00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
R13: 1ffff92000158e34 R14: ffff8880312714d8 R15: 0000000000000007
FS:  0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555c2dd5c8 CR3: 0000000028b3f000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 write_inode fs/fs-writeback.c:1525 [inline]
 __writeback_single_inode+0x6f1/0xff0 fs/fs-writeback.c:1745
 writeback_sb_inodes+0x6b5/0x1000 fs/fs-writeback.c:1976
 wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2156
 wb_do_writeback fs/fs-writeback.c:2303 [inline]
 wb_workfn+0x409/0xef0 fs/fs-writeback.c:2343
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 20 52 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 20 52 af 99 e8 93 15 89 ff e9 6c fe ff ff e8 b9 03 27 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000ac7180 EFLAGS: 00010293
RAX: ffffffff82992317 RBX: ffff888031271518 RCX: ffff888142aa9e00
RDX: 0000000000000000 RSI: ffffffff8e365b20 RDI: 0000000000000007
RBP: ffffc90000ac7310 R08: ffff888142aa9e00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
R13: 1ffff92000158e34 R14: ffff8880312714d8 R15: 0000000000000007
FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c007db6000 CR3: 0000000074e1c000 CR4: 0000000000350ef0

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 20 52 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 20 52 af 99 e8 93 15 89 ff e9 6c fe ff ff e8 b9 03 27 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000ac7180 EFLAGS: 00010293
RAX: ffffffff82992317 RBX: ffff888031271518 RCX: ffff888142aa9e00
RDX: 0000000000000000 RSI: ffffffff8e365b20 RDI: 0000000000000007
RBP: ffffc90000ac7310 R08: ffff888142aa9e00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
R13: 1ffff92000158e34 R14: ffff8880312714d8 R15: 0000000000000007
FS:  0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555c2dd5c8 CR3: 0000000028b3f000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 write_inode fs/fs-writeback.c:1525 [inline]
 __writeback_single_inode+0x6f1/0xff0 fs/fs-writeback.c:1745
 writeback_sb_inodes+0x6b5/0x1000 fs/fs-writeback.c:1976
 wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2156
 wb_do_writeback fs/fs-writeback.c:2303 [inline]
 wb_workfn+0x409/0xef0 fs/fs-writeback.c:2343
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 20 52 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 20 52 af 99 e8 93 15 89 ff e9 6c fe ff ff e8 b9 03 27 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000ac7180 EFLAGS: 00010293
RAX: ffffffff82992317 RBX: ffff888031271518 RCX: ffff888142aa9e00
RDX: 0000000000000000 RSI: ffffffff8e365b20 RDI: 0000000000000007
RBP: ffffc90000ac7310 R08: ffff888142aa9e00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
R13: 1ffff92000158e34 R14: ffff8880312714d8 R15: 0000000000000007
FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c007db6000 CR3: 0000000074e1c000 CR4: 0000000000350ef0