Extracting prog: 1m59.431330483s
Minimizing prog: 3m6.609843199s
Simplifying prog options: 0s
Extracting C: 1m2.394914989s
Simplifying C: 12m58.4009902s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program crashed: kernel BUG in hfs_write_inode
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=44.175949246s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")

program did not crash
testing program (duration=44.175949246s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): truncate
detailed listing:
executing program 0:
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program did not crash
testing program (duration=44.175949246s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(0x0, 0x1fefff)

program did not crash
extracting C reproducer
testing compiled C program (duration=44.175949246s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
simplifying C reproducer
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program did not crash
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing compiled C program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
program crashed: kernel BUG in hfs_write_inode
testing program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$eJzs3T9v004cx/HP2Wmaqv31Z2gREmJAhQom1JYFsVRCFY+BBQQ0QaqIWgFFAhYqZsQDYGdhYuJBMCEkZpiYGBm6Gd3Fac7NOe4fEjfi/ZICxr4/33Oc830jBQvAP+vm2vf3137al5FixZJuSJE9dEE1SWd0tvFsc3tju91qDmoolhpyLyO5mqavzPpmK1TV1nM1Mon9V00z/j4MR5qm6Y+qg0CVGtnfcehgJE1mn87YLzzOdmJpp+ogKmZ2tavnmq06DgBAtUzn/h5l9/mZbP0eRdJidtv37//f/qs43uO5rN2qQ6iYd/93WVZq7Pv7vzvUy/dcCmePR90s8bD92MVjXZ0rK7fANPmssj9ZdLFEUw832q2r61vtZqTXWs14xeYlraqZ5ayZkmgXAt3l1XXw1gaYdmOYsGNYKYh/LtTp0XssZz6bL+auSfROzb31Xy01tnsXQbL3Tt2a6MW/VNTc1uM7rlanVMEoT7lOzuVP7MBRxkUZibIzlcbKf0GQ5OOsB2vVta9WZ3TLRT1l7cwFa62U1Jq3tT54tXpXc3HNYTNvzW2zoF/6pDVv/R/Zs72o/k9muBFXMrsyuuMJ5oY1VzLxd+2cD7YZHW08CE6fZd7oga5r9umLl4/ut9utJ6PesDGMqK+PlQzwJG90L4KTEk9gw063JWXsHLv/UG14gU158dSPfeoaOlTh/pH6G92p8wANdifp0k7/0syEE633puf3//a2X406KIySnTxMJ//z8pUlt6SwfyQD1ulp2bLNa3E5kBtMejH0WjLu+/lJFWdA08UrnoPmXBevSJe8nSU5V6LT0tTAsY4Ts6avusf3/wAAAAAAAAAAAAAAAAAAAONmFL/o8Lrjf/QBAAAAAAAAAAAAAAAAAAAAAOAIip//29AQn/+b+x2A//zfCe2V4Pm/wJD9CQAA//8D8HJl")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
testing program (duration=44.175949246s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfs-truncate
detailed listing:
executing program 0:
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000700)=ANY=[], 0x8b, 0x2c1, &(0x7f0000000c80)="$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")
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

program crashed: kernel BUG in hfs_write_inode
validation run: crashed=true
reproducing took 22m22.779938556s
repro crashed as (corrupted=false):
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
lr : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
sp : ffff80001ca17280
x29: ffff80001ca173c0 x28: 1fffe0001a2832b6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001ca17280 x24: ffff700003942e50
x23: ffff800011cfcf40 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d14194d8 x19: ffff80001ca17300 x18: 0000000000000000
x17: ffff800018381000 x16: ffff800011a529a8 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008fb4c9c x10: 0000000000000000 x9 : ffff800008fb4c9c
x8 : ffff0000c09ab800 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff8000155fe5a0 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1470 [inline]
 __writeback_single_inode+0x5e0/0x1554 fs/fs-writeback.c:1687
 writeback_sb_inodes+0x858/0x143c fs/fs-writeback.c:1913
 wb_writeback+0x414/0xfcc fs/fs-writeback.c:2087
 wb_do_writeback fs/fs-writeback.c:2230 [inline]
 wb_workfn+0x360/0xe18 fs/fs-writeback.c:2270
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e4cd30 17ffff9c 97d3dd93 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
------------[ cut here ]------------
kernel BUG at fs/hfs/inode.c:449!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: writeback wb_workfn (flush-7:0)
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
lr : hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
sp : ffff80001ca17280
x29: ffff80001ca173c0 x28: 1fffe0001a2832b6 x27: dfff800000000000
x26: dfff800000000000 x25: ffff80001ca17280 x24: ffff700003942e50
x23: ffff800011cfcf40 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000d14194d8 x19: ffff80001ca17300 x18: 0000000000000000
x17: ffff800018381000 x16: ffff800011a529a8 x15: 0000000000000000
x14: 0000000000000004 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff00800008fb4c9c x10: 0000000000000000 x9 : ffff800008fb4c9c
x8 : ffff0000c09ab800 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000006 x1 : ffff8000155fe5a0 x0 : 0000000000000000
Call trace:
 hfs_write_inode+0x8d8/0x8dc fs/hfs/inode.c:449
 write_inode fs/fs-writeback.c:1470 [inline]
 __writeback_single_inode+0x5e0/0x1554 fs/fs-writeback.c:1687
 writeback_sb_inodes+0x858/0x143c fs/fs-writeback.c:1913
 wb_writeback+0x414/0xfcc fs/fs-writeback.c:2087
 wb_do_writeback fs/fs-writeback.c:2230 [inline]
 wb_workfn+0x360/0xe18 fs/fs-writeback.c:2270
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: aa1403e0 97e4cd30 17ffff9c 97d3dd93 (d4210000) 
---[ end trace 0000000000000000 ]---