program: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x6800, 0x2, 0x1, 0x1, 0x0, 0x1000003}, 0x0, 0x0, 0xffffffffffffffff, 0x1) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) [ 102.167416][ T4669] Bluetooth: hci0: command tx timeout [ 102.243539][ T5330] loop0: detected capacity change from 0 to 64 [ 102.425846][ T30] ------------[ cut here ]------------ [ 102.428470][ T30] kernel BUG at fs/hfs/inode.c:474! [ 102.430919][ T30] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 102.433419][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) [ 102.437473][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.441975][ T30] Workqueue: writeback wb_workfn (flush-7:0) [ 102.444301][ T30] RIP: 0010:hfs_write_inode+0x934/0x960 [ 102.446344][ T30] Code: 40 31 ff e8 ae c7 13 ff 81 e3 00 00 00 40 75 1c e8 61 c3 13 ff 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 dc f7 ff ff e8 4d c3 13 ff 90 <0f> 0b e8 45 c3 13 ff e8 e0 14 81 fe eb dd 44 89 f1 80 e1 07 80 c1 [ 102.454582][ T30] RSP: 0018:ffffc90000387120 EFLAGS: 00010293 [ 102.457463][ T30] RAX: ffffffff82b1ed33 RBX: ffff88801280bc18 RCX: ffff88801ed424c0 [ 102.461064][ T30] RDX: 0000000000000000 RSI: ffffffff8e9c8cc0 RDI: 0000000000000000 [ 102.464723][ T30] RBP: ffffc900003872a8 R08: ffff88801ed424c0 R09: 0000000000000003 [ 102.468807][ T30] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 102.472899][ T30] R13: 1ffff92000070e28 R14: 0000000000000000 R15: ffff88801280bbd8 [ 102.476737][ T30] FS: 0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000 [ 102.480758][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.483630][ T30] CR2: 00007f27c43ed6b8 CR3: 000000000e54c000 CR4: 0000000000352ef0 [ 102.487121][ T30] Call Trace: [ 102.488370][ T30] [ 102.489392][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 102.491342][ T30] ? __pfx_hfs_write_inode+0x10/0x10 [ 102.494575][ T30] ? __pfx_hfs_writepages+0x10/0x10 [ 102.497594][ T30] ? do_raw_spin_unlock+0x4d/0x210 [ 102.499532][ T30] __writeback_single_inode+0x75a/0x11a0 [ 102.501980][ T30] writeback_sb_inodes+0x992/0x1a20 [ 102.504427][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 102.506948][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 102.509324][ T30] ? __pfx___up_read+0x10/0x10 [ 102.511490][ T30] __writeback_inodes_wb+0x111/0x240 [ 102.514011][ T30] wb_writeback+0x46a/0xb70 [ 102.516243][ T30] ? queue_io+0x1d1/0x4a0 [ 102.518502][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 102.520848][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.523479][ T30] wb_workfn+0x95b/0xf50 [ 102.525366][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 102.527548][ T30] ? __perf_event_task_sched_in+0xf2/0x1800 [ 102.530458][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.533398][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.535965][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 102.538636][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 102.541175][ T30] process_scheduled_works+0xb6e/0x18c0 [ 102.543744][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.547131][ T30] ? assign_work+0x3d5/0x5e0 [ 102.550340][ T30] worker_thread+0xa53/0xfc0 [ 102.552520][ T30] kthread+0x388/0x470 [ 102.554319][ T30] ? __pfx_worker_thread+0x10/0x10 [ 102.556499][ T30] ? __pfx_kthread+0x10/0x10 [ 102.558500][ T30] ret_from_fork+0x51e/0xb90 [ 102.560547][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 102.563044][ T30] ? __switch_to+0xc7d/0x1450 [ 102.565786][ T30] ? __pfx_kthread+0x10/0x10 [ 102.569007][ T30] ret_from_fork_asm+0x1a/0x30 [ 102.571704][ T30] [ 102.573146][ T30] Modules linked in: [ 102.575290][ T30] ---[ end trace 0000000000000000 ]---