program:
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=euc-jp,codepage=macturkish,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYBLOB="2c00b5da9d1423dd002677aa1201e709a1d87a5d98dd2d573f736e6187cdccc9836cd3a59342771e3be9d5a347f287a519daaae09a721e14b3df1c8b3936683409026968b019ef655268ae6bc2e6538f397c76c0376ccefb655a71bea92591b7cef711e5315a9e43e69a9ff0c92afd7c8092f1d092e2bf4a38695f12f941e2ea2b7514287242d039208f3a91ce5865b6d0650372cc6345c31c475e32bcfae8d07db6"], 0x5, 0x2d1, &(0x7f0000000600)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300), 0x1000a)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000002, 0x1000001, 0x8, 0x7fff, 0x8000, 0x800, 0x0, 0x0, 0x10}}, 0x50)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (fail_nth: 9)
[ 94.658836][ T4641] Bluetooth: hci0: command tx timeout
[ 94.754131][ T5321] loop0: detected capacity change from 0 to 64
[ 94.839383][ T5321] FAULT_INJECTION: forcing a failure.
[ 94.839383][ T5321] name failslab, interval 1, probability 0, space 0, times 1
[ 94.854219][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.854232][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.854236][ T5321] Call Trace:
[ 94.854239][ T5321]
[ 94.854242][ T5321] dump_stack_lvl+0xe8/0x150
[ 94.854306][ T5321] should_fail_ex+0x410/0x560
[ 94.854373][ T5321] should_failslab+0xa8/0x100
[ 94.854386][ T5321] __kmalloc_noprof+0xfe/0x720
[ 94.854395][ T5321] ? __hfs_bnode_create+0xf4/0x970
[ 94.854405][ T5321] ? __hfs_bnode_create+0xf4/0x970
[ 94.854416][ T5321] __hfs_bnode_create+0xf4/0x970
[ 94.854425][ T5321] ? __pfx_folio_mark_accessed+0x10/0x10
[ 94.854439][ T5321] ? __pfx___hfs_bnode_create+0x10/0x10
[ 94.854447][ T5321] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.854460][ T5321] ? do_raw_spin_unlock+0x4d/0x200
[ 94.854469][ T5321] hfs_bnode_create+0x126/0x4e0
[ 94.854481][ T5321] hfs_btree_inc_height+0xf9/0xac0
[ 94.854493][ T5321] ? __pfx_hfs_btree_inc_height+0x10/0x10
[ 94.854503][ T5321] ? __mutex_trylock_common+0x15f/0x270
[ 94.854512][ T5321] ? __pfx___mutex_trylock_common+0x10/0x10
[ 94.854523][ T5321] hfs_brec_insert+0x144/0xc80
[ 94.854540][ T5321] ? __asan_memset+0x22/0x50
[ 94.854551][ T5321] ? hfs_brec_find+0x19a/0x510
[ 94.854566][ T5321] ? hfs_bmap_reserve+0x3e3/0x430
[ 94.854584][ T5321] ? __pfx_hfs_brec_insert+0x10/0x10
[ 94.854599][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 94.854613][ T5321] __hfs_ext_write_extent+0x2a3/0x470
[ 94.854623][ T5321] __hfs_ext_cache_extent+0x6e/0x9b0
[ 94.854630][ T5321] ? hfs_find_init+0x18d/0x300
[ 94.854640][ T5321] hfs_extend_file+0x3ad/0x1680
[ 94.854651][ T5321] ? __pfx_hfs_extend_file+0x10/0x10
[ 94.854661][ T5321] ? __mutex_lock+0x30b/0x1550
[ 94.854701][ T5321] ? hfs_find_init+0x18d/0x300
[ 94.854710][ T5321] ? __pfx___mutex_lock+0x10/0x10
[ 94.854718][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 94.854726][ T5321] hfs_bmap_reserve+0x108/0x430
[ 94.854741][ T5321] hfs_cat_create+0x23d/0x870
[ 94.854753][ T5321] ? __pfx_hfs_cat_create+0x10/0x10
[ 94.854773][ T5321] ? _raw_spin_unlock+0x28/0x50
[ 94.854783][ T5321] ? hfs_new_inode+0x8e8/0xc50
[ 94.854800][ T5321] hfs_mkdir+0x73/0xe0
[ 94.854812][ T5321] vfs_mkdir+0x40c/0x620
[ 94.854829][ T5321] filename_mkdirat+0x285/0x510
[ 94.854839][ T5321] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.854848][ T5321] ? do_getname+0x151/0x250
[ 94.854858][ T5321] __se_sys_mkdir+0x34/0x150
[ 94.854867][ T5321] do_syscall_64+0x166/0x520
[ 94.854875][ T5321] ? trace_irq_disable+0x3b/0x140
[ 94.854884][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.854908][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 94.854918][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.854924][ T5321] RIP: 0033:0x7fd67ab9e0d9
[ 94.854932][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.854938][ T5321] RSP: 002b:00007fd67b9e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 94.854946][ T5321] RAX: ffffffffffffffda RBX: 00007fd67ae25fa0 RCX: 00007fd67ab9e0d9
[ 94.854951][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[ 94.854955][ T5321] RBP: 00007fd67b9e5050 R08: 0000000000000000 R09: 0000000000000000
[ 94.854959][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 94.854963][ T5321] R13: 00007fd67ae26038 R14: 00007fd67ae25fa0 R15: 00007ffd6b4b07d8
[ 94.854974][ T5321]
[ 94.855239][ T5321] hfs: new node 0 already hashed?
[ 95.007323][ T5321] ------------[ cut here ]------------
[ 95.009683][ T5321] 1
[ 95.009693][ T5321] WARNING: fs/hfs/bnode.c:478 at hfs_bnode_create+0x45a/0x4e0, CPU#0: syz.0.0/5321
[ 95.015011][ T5321] Modules linked in:
[ 95.017368][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.021560][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.025976][ T5321] RIP: 0010:hfs_bnode_create+0x45a/0x4e0
[ 95.028419][ T5321] Code: 29 8c 89 ee e8 e7 4d 6d fe e9 d6 fc ff ff e8 ed c3 0c ff 4c 89 ef e8 55 20 26 09 48 c7 c7 40 e6 29 8c 89 ee e8 c7 4d 6d fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff
[ 95.036415][ T5321] RSP: 0018:ffffc9000decf548 EFLAGS: 00010246
[ 95.038861][ T5321] RAX: 000000000000001f RBX: ffff88803fdc8000 RCX: 89683f45030b7500
[ 95.042061][ T5321] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[ 95.045287][ T5321] RBP: 0000000000000000 R08: ffffc9000decf2c7 R09: 1ffff92001bd9e58
[ 95.048565][ T5321] R10: dffffc0000000000 R11: fffff52001bd9e59 R12: 0000000000000000
[ 95.052062][ T5321] R13: ffff88803fdc80d8 R14: ffff888036a90f00 R15: dffffc0000000000
[ 95.055282][ T5321] FS: 00007fd67b9e56c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 95.059062][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.061752][ T5321] CR2: 00007f13e778c000 CR3: 0000000012605000 CR4: 0000000000352ef0
[ 95.065162][ T5321] Call Trace:
[ 95.066546][ T5321]
[ 95.067829][ T5321] hfs_btree_inc_height+0xf9/0xac0
[ 95.069908][ T5321] ? __pfx_folio_mark_accessed+0x10/0x10
[ 95.072415][ T5321] ? __pfx_hfs_btree_inc_height+0x10/0x10
[ 95.074687][ T5321] ? do_raw_spin_unlock+0x4d/0x200
[ 95.076787][ T5321] hfs_brec_insert+0x7eb/0xc80
[ 95.078853][ T5321] ? __pfx_hfs_brec_insert+0x10/0x10
[ 95.081205][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 95.083212][ T5321] __hfs_ext_write_extent+0x2a3/0x470
[ 95.085560][ T5321] __hfs_ext_cache_extent+0x6e/0x9b0
[ 95.088054][ T5321] ? hfs_find_init+0x18d/0x300
[ 95.090041][ T5321] hfs_extend_file+0x3ad/0x1680
[ 95.092457][ T5321] ? __pfx_hfs_extend_file+0x10/0x10
[ 95.094742][ T5321] ? __mutex_lock+0x30b/0x1550
[ 95.096804][ T5321] ? hfs_find_init+0x18d/0x300
[ 95.098786][ T5321] ? __pfx___mutex_lock+0x10/0x10
[ 95.100858][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 95.102978][ T5321] hfs_bmap_reserve+0x108/0x430
[ 95.105074][ T5321] hfs_cat_create+0x23d/0x870
[ 95.107114][ T5321] ? __pfx_hfs_cat_create+0x10/0x10
[ 95.109390][ T5321] ? _raw_spin_unlock+0x28/0x50
[ 95.111715][ T5321] ? hfs_new_inode+0x8e8/0xc50
[ 95.113801][ T5321] hfs_mkdir+0x73/0xe0
[ 95.115633][ T5321] vfs_mkdir+0x40c/0x620
[ 95.117436][ T5321] filename_mkdirat+0x285/0x510
[ 95.119515][ T5321] ? __pfx_filename_mkdirat+0x10/0x10
[ 95.122069][ T5321] ? do_getname+0x151/0x250
[ 95.124092][ T5321] __se_sys_mkdir+0x34/0x150
[ 95.126060][ T5321] do_syscall_64+0x166/0x520
[ 95.128126][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.130257][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.132962][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 95.134913][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.137549][ T5321] RIP: 0033:0x7fd67ab9e0d9
[ 95.139536][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.147431][ T5321] RSP: 002b:00007fd67b9e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 95.151047][ T5321] RAX: ffffffffffffffda RBX: 00007fd67ae25fa0 RCX: 00007fd67ab9e0d9
[ 95.154397][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[ 95.157351][ T5321] RBP: 00007fd67b9e5050 R08: 0000000000000000 R09: 0000000000000000
[ 95.160786][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 95.163977][ T5321] R13: 00007fd67ae26038 R14: 00007fd67ae25fa0 R15: 00007ffd6b4b07d8
[ 95.167210][ T5321]
[ 95.168533][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.171505][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.175196][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.179090][ T5321] Call Trace:
[ 95.180454][ T5321]
[ 95.181602][ T5321] vpanic+0x56d/0xa60
[ 95.183266][ T5321] ? __pfx__printk+0x10/0x10
[ 95.185285][ T5321] ? __pfx_vpanic+0x10/0x10
[ 95.187249][ T5321] ? is_bpf_text_address+0x292/0x2b0
[ 95.189417][ T5321] ? is_bpf_text_address+0x26/0x2b0
[ 95.191666][ T5321] panic+0xc5/0xd0
[ 95.193257][ T5321] ? __pfx_panic+0x10/0x10
[ 95.195172][ T5321] __warn+0x315/0x4c0
[ 95.196835][ T5321] ? hfs_bnode_create+0x45a/0x4e0
[ 95.198922][ T5321] ? hfs_bnode_create+0x45a/0x4e0
[ 95.200910][ T5321] __report_bug+0x276/0x570
[ 95.202804][ T5321] ? preempt_schedule_thunk+0x16/0x40
[ 95.204976][ T5321] ? hfs_bnode_create+0x45a/0x4e0
[ 95.207085][ T5321] ? __pfx___report_bug+0x10/0x10
[ 95.209242][ T5321] ? __wake_up_klogd+0xf0/0x130
[ 95.211392][ T5321] ? vprintk_emit+0x4ee/0x560
[ 95.213457][ T5321] ? __pfx_vprintk_emit+0x10/0x10
[ 95.215643][ T5321] ? folio_mark_accessed+0x439/0x8b0
[ 95.217906][ T5321] ? hfs_bnode_create+0x45a/0x4e0
[ 95.219940][ T5321] report_bug+0x16b/0x220
[ 95.221712][ T5321] ? hfs_bnode_create+0x45a/0x4e0
[ 95.223897][ T5321] ? hfs_bnode_create+0x45c/0x4e0
[ 95.226045][ T5321] handle_bug+0x9c/0x200
[ 95.227932][ T5321] exc_invalid_op+0x1a/0x50
[ 95.229699][ T5321] asm_exc_invalid_op+0x1a/0x20
[ 95.231743][ T5321] RIP: 0010:hfs_bnode_create+0x45a/0x4e0
[ 95.234211][ T5321] Code: 29 8c 89 ee e8 e7 4d 6d fe e9 d6 fc ff ff e8 ed c3 0c ff 4c 89 ef e8 55 20 26 09 48 c7 c7 40 e6 29 8c 89 ee e8 c7 4d 6d fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff
[ 95.242293][ T5321] RSP: 0018:ffffc9000decf548 EFLAGS: 00010246
[ 95.244856][ T5321] RAX: 000000000000001f RBX: ffff88803fdc8000 RCX: 89683f45030b7500
[ 95.248184][ T5321] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[ 95.251667][ T5321] RBP: 0000000000000000 R08: ffffc9000decf2c7 R09: 1ffff92001bd9e58
[ 95.255141][ T5321] R10: dffffc0000000000 R11: fffff52001bd9e59 R12: 0000000000000000
[ 95.258573][ T5321] R13: ffff88803fdc80d8 R14: ffff888036a90f00 R15: dffffc0000000000
[ 95.262077][ T5321] ? hfs_bnode_create+0x459/0x4e0
[ 95.264245][ T5321] hfs_btree_inc_height+0xf9/0xac0
[ 95.266357][ T5321] ? __pfx_folio_mark_accessed+0x10/0x10
[ 95.268762][ T5321] ? __pfx_hfs_btree_inc_height+0x10/0x10
[ 95.271265][ T5321] ? do_raw_spin_unlock+0x4d/0x200
[ 95.273472][ T5321] hfs_brec_insert+0x7eb/0xc80
[ 95.275187][ T5321] ? __pfx_hfs_brec_insert+0x10/0x10
[ 95.277063][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 95.278782][ T5321] __hfs_ext_write_extent+0x2a3/0x470
[ 95.281073][ T5321] __hfs_ext_cache_extent+0x6e/0x9b0
[ 95.283413][ T5321] ? hfs_find_init+0x18d/0x300
[ 95.285460][ T5321] hfs_extend_file+0x3ad/0x1680
[ 95.287582][ T5321] ? __pfx_hfs_extend_file+0x10/0x10
[ 95.289811][ T5321] ? __mutex_lock+0x30b/0x1550
[ 95.291871][ T5321] ? hfs_find_init+0x18d/0x300
[ 95.293944][ T5321] ? __pfx___mutex_lock+0x10/0x10
[ 95.296046][ T5321] ? trace_kmalloc+0x2a/0xf0
[ 95.297960][ T5321] hfs_bmap_reserve+0x108/0x430
[ 95.300015][ T5321] hfs_cat_create+0x23d/0x870
[ 95.302055][ T5321] ? __pfx_hfs_cat_create+0x10/0x10
[ 95.304270][ T5321] ? _raw_spin_unlock+0x28/0x50
[ 95.306265][ T5321] ? hfs_new_inode+0x8e8/0xc50
[ 95.308214][ T5321] hfs_mkdir+0x73/0xe0
[ 95.309873][ T5321] vfs_mkdir+0x40c/0x620
[ 95.311645][ T5321] filename_mkdirat+0x285/0x510
[ 95.313763][ T5321] ? __pfx_filename_mkdirat+0x10/0x10
[ 95.315951][ T5321] ? do_getname+0x151/0x250
[ 95.317810][ T5321] __se_sys_mkdir+0x34/0x150
[ 95.319632][ T5321] do_syscall_64+0x166/0x520
[ 95.321631][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.323776][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.326250][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 95.328167][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.330609][ T5321] RIP: 0033:0x7fd67ab9e0d9
[ 95.332567][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.340678][ T5321] RSP: 002b:00007fd67b9e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 95.344129][ T5321] RAX: ffffffffffffffda RBX: 00007fd67ae25fa0 RCX: 00007fd67ab9e0d9
[ 95.347407][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[ 95.350719][ T5321] RBP: 00007fd67b9e5050 R08: 0000000000000000 R09: 0000000000000000
[ 95.354071][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 95.357256][ T5321] R13: 00007fd67ae26038 R14: 00007fd67ae25fa0 R15: 00007ffd6b4b07d8
[ 95.360267][ T5321]
[ 95.361763][ T5321] Kernel Offset: disabled
[ 95.363522][ T5321] Rebooting in 86400 seconds..