Extracting prog: 4m42.135742641s
Minimizing prog: 6m47.871823598s
Simplifying prog options: 0s
Extracting C: 39.536555337s
Simplifying C: 11m37.305118483s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$eJzs3b1vEz0cwPGfLy9Nn6cKoS2qxFioxISgLIilCPU/QEIMgChNkKpGRWqLRFmomBFi42VjYGNGLIzsFbAimCoG9nY7ZJ+dXJrz3aVpkxa+HymRudi+nx3fnY2UWgD8s67N/3h3aVu/lEhBCiJyRSQQkYpIUUROyVTl4cr60nqzUU+rqGBK6JeSqKTqyrO40kgqqsuZElZN/6soY/FjOBxhGIY/vxbS85wYWDgYEnP1h93jIBAZsVen+bAyjOAOweawAxgytSu78kiqw44DADBc+vlfiib++jk/ZufvQSAyYx/7x+z5nz5r3R1cIEdS7PlvVlmh0t+v6TLVXu+ZJVx8FbadUqP3k7JEE8mO2aXKWlWaWILR+0vNxvnFB816IE9lzoplmzTv9WjoOm5N66l6OiXYBL7aRlqpsqekaXFQ0m2Y9cQ/0csZnZe9hL/HTqi21B1VkzdSl6r9UoqharWjZuKutQpE8V8w6RulhBr/129KmVyeVp40Jznteurj+xytrIh3WVq2dUZD90l0sObifOH5Oszh8c4BbVt30XcmW2oisdRsRqnJdqlf7s5pR7O/5P75RmEn9VzdVNPyWz7IfGz+H+jenjEZXLenBKlMTjsyUttTNDlrOQILcoWPvJIu1bZnck8uS3Vt4/HyQrPZWM2b+PS9h8wHlXj9NkoU+qnHtbzro6L0G2FoHwWH1QlF+Vb1BO9NqMaqvuWk5NFPwfgRN2AOMvhyQswismmPuO/EW4+7pyWdQvXQG7kS1/NlLnvi6SEhfcdckBFZdvfMA+sE29ubywvNKJU8URrd1w0JR0/s9jh1Kzt7OIiYMFD6HqKi9Z+ZyUezuqvmM2Uudj1PLyWu/TLHg6nx1e2taPkQWxu0J6vj5v2/XlZwaTPdWBtS11xnzomclfa8c+8ZP3dWW7Nx/iXUvHyRu/z/PwAAAAAAAAAAAAAAAAAAwHGT+cOAnXB1bcP90rG/H94AAAAAAAAAAAAAAAAAAAAAAID9Sdv/1+yRmbH/b2sPJO/+v7G/6p29/++crsiz/2/XbkCJWycByO1PAAAA//9UX14t")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$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")
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro
detailed listing:
executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
program crashed: kernel BUG in hfs_write_inode
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$eJzs3b1vEz0cwPGfLy9Nn6cKoS2qxFioxISgLIilCPU/QEIMgChNkKpGRWqLRFmomBFi42VjYGNGLIzsFbAimCoG9nY7ZJ+dXJrz3aVpkxa+HymRudi+nx3fnY2UWgD8s67N/3h3aVu/lEhBCiJyRSQQkYpIUUROyVTl4cr60nqzUU+rqGBK6JeSqKTqyrO40kgqqsuZElZN/6soY/FjOBxhGIY/vxbS85wYWDgYEnP1h93jIBAZsVen+bAyjOAOweawAxgytSu78kiqw44DADBc+vlfiib++jk/ZufvQSAyYx/7x+z5nz5r3R1cIEdS7PlvVlmh0t+v6TLVXu+ZJVx8FbadUqP3k7JEE8mO2aXKWlWaWILR+0vNxvnFB816IE9lzoplmzTv9WjoOm5N66l6OiXYBL7aRlqpsqekaXFQ0m2Y9cQ/0csZnZe9hL/HTqi21B1VkzdSl6r9UoqharWjZuKutQpE8V8w6RulhBr/129KmVyeVp40Jznteurj+xytrIh3WVq2dUZD90l0sObifOH5Oszh8c4BbVt30XcmW2oisdRsRqnJdqlf7s5pR7O/5P75RmEn9VzdVNPyWz7IfGz+H+jenjEZXLenBKlMTjsyUttTNDlrOQILcoWPvJIu1bZnck8uS3Vt4/HyQrPZWM2b+PS9h8wHlXj9NkoU+qnHtbzro6L0G2FoHwWH1QlF+Vb1BO9NqMaqvuWk5NFPwfgRN2AOMvhyQswismmPuO/EW4+7pyWdQvXQG7kS1/NlLnvi6SEhfcdckBFZdvfMA+sE29ubywvNKJU8URrd1w0JR0/s9jh1Kzt7OIiYMFD6HqKi9Z+ZyUezuqvmM2Uudj1PLyWu/TLHg6nx1e2taPkQWxu0J6vj5v2/XlZwaTPdWBtS11xnzomclfa8c+8ZP3dWW7Nx/iXUvHyRu/z/PwAAAAAAAAAAAAAAAAAAwHGT+cOAnXB1bcP90rG/H94AAAAAAAAAAAAAAAAAAAAAAID9Sdv/1+yRmbH/b2sPJO/+v7G/6p29/++crsiz/2/XbkCJWycByO1PAAAA//9UX14t")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-openat$cgroup_ro
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000340)=ANY=[], 0x3, 0x324, &(0x7f0000002b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
reproducing took 28m57.664095347s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 1183 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 40 52 05 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 52 05 99 e8 23 e6 8c ff e9 6c fe ff ff e8 69 af 2d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90004e57180 EFLAGS: 00010293
RAX: ffffffff8290ace7 RBX: ffff888036429048 RCX: ffff888026b4bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004e57310 R08: ffff888026b4bb80 R09: 0000000000000003
R10: 0000000000000100 R11: 0000000000000004 R12: dffffc0000000000
R13: 1ffff920009cae34 R14: ffff888036429008 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6494d1f000 CR3: 0000000036814000 CR4: 00000000003526f0
Call Trace:
write_inode fs/fs-writeback.c:1525 [inline]
__writeback_single_inode+0x6f1/0x1000 fs/fs-writeback.c:1745
writeback_sb_inodes+0x6b7/0xf60 fs/fs-writeback.c:1976
wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2156
wb_do_writeback fs/fs-writeback.c:2303 [inline]
wb_workfn+0x40e/0xf00 fs/fs-writeback.c:2343
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 40 52 05 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 52 05 99 e8 23 e6 8c ff e9 6c fe ff ff e8 69 af 2d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90004e57180 EFLAGS: 00010293
RAX: ffffffff8290ace7 RBX: ffff888036429048 RCX: ffff888026b4bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004e57310 R08: ffff888026b4bb80 R09: 0000000000000003
R10: 0000000000000100 R11: 0000000000000004 R12: dffffc0000000000
R13: 1ffff920009cae34 R14: ffff888036429008 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6494d1f000 CR3: 0000000036814000 CR4: 00000000003526f0
final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:444!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 1183 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 40 52 05 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 52 05 99 e8 23 e6 8c ff e9 6c fe ff ff e8 69 af 2d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90004e57180 EFLAGS: 00010293
RAX: ffffffff8290ace7 RBX: ffff888036429048 RCX: ffff888026b4bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004e57310 R08: ffff888026b4bb80 R09: 0000000000000003
R10: 0000000000000100 R11: 0000000000000004 R12: dffffc0000000000
R13: 1ffff920009cae34 R14: ffff888036429008 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6494d1f000 CR3: 0000000036814000 CR4: 00000000003526f0
Call Trace:
write_inode fs/fs-writeback.c:1525 [inline]
__writeback_single_inode+0x6f1/0x1000 fs/fs-writeback.c:1745
writeback_sb_inodes+0x6b7/0xf60 fs/fs-writeback.c:1976
wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2156
wb_do_writeback fs/fs-writeback.c:2303 [inline]
wb_workfn+0x40e/0xf00 fs/fs-writeback.c:2343
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfs_write_inode+0x7c8/0x7d0 fs/hfs/inode.c:444
Code: c1 40 52 05 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 52 05 99 e8 23 e6 8c ff e9 6c fe ff ff e8 69 af 2d ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90004e57180 EFLAGS: 00010293
RAX: ffffffff8290ace7 RBX: ffff888036429048 RCX: ffff888026b4bb80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004e57310 R08: ffff888026b4bb80 R09: 0000000000000003
R10: 0000000000000100 R11: 0000000000000004 R12: dffffc0000000000
R13: 1ffff920009cae34 R14: ffff888036429008 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6494d1f000 CR3: 0000000036814000 CR4: 00000000003526f0