bisecting fixing commit since f2d285669aae656dfeafa0bf25e86bbbc5d22329 building syzkaller on 676bd07e7e80f8a270af7f0276443c68f4a99e25 testing commit f2d285669aae656dfeafa0bf25e86bbbc5d22329 with gcc (GCC) 8.1.0 kernel signature: 1144575d32269c6cd1329166bed9ede0e1d591c707e994233e62e0173490866f all runs: crashed: WARNING in hfs_bnode_create testing current HEAD 71c061d2443814de15e177489d5cc00a4a253ef3 testing commit 71c061d2443814de15e177489d5cc00a4a253ef3 with gcc (GCC) 8.1.0 kernel signature: cd93a4bf950d1622a1fbf201cc8418b36b7ba9a0f118fb252c7f8ed29ab6773e all runs: crashed: WARNING in hfs_bnode_create revisions tested: 2, total time: 15m44.854620445s (build: 8m48.736880536s, test: 6m12.203745571s) the crash still happens on HEAD commit msg: Merge tag 'for-5.11-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux crash: WARNING in hfs_bnode_create loop4: detected capacity change from 4092 to 0 hfs: unable to locate alternate MDB hfs: continuing without an alternate MDB hfs: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3759 at fs/hfs/bnode.c:416 hfs_bnode_create.cold.13+0xe/0x15 fs/hfs/bnode.c:415 Modules linked in: CPU: 0 PID: 3759 Comm: syz-executor4 Not tainted 5.11.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hfs_bnode_create.cold.13+0xe/0x15 fs/hfs/bnode.c:416 Code: f6 e8 1c 0b ff ff e9 f3 60 80 fe 48 c7 c7 d3 1c c2 83 e8 0b 0b ff ff e9 eb 67 80 fe 89 de 48 c7 c7 a0 1c c2 83 e8 f8 0a ff ff <0f> 0b e9 18 6a 80 fe 48 c7 c7 ea 1c c2 83 e8 e5 0a ff ff 31 c0 e9 RSP: 0018:ffffc90000447bd8 EFLAGS: 00010246 RAX: 000000000000001f RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888237c18f10 RDI: ffff888237c18f10 RBP: ffffc90000447c08 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: ffffc900004479c0 R12: ffff88811110d0e0 R13: ffff888111096900 R14: ffff88811110d000 R15: ffff888111096900 FS: 00007f12da8ef700(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004da4f8 CR3: 00000001110ef000 CR4: 0000000000350ef0 Call Trace: hfs_bmap_alloc+0x218/0x270 fs/hfs/btree.c:288 hfs_bnode_split+0x37/0x390 fs/hfs/brec.c:241 hfs_brec_insert+0xce/0x370 fs/hfs/brec.c:102 hfs_cat_create+0x298/0x2f0 fs/hfs/catalog.c:131 hfs_mkdir+0x3c/0xa0 fs/hfs/dir.c:231 vfs_mkdir+0x10d/0x1c0 fs/namei.c:3652 do_mkdirat+0xe3/0x110 fs/namei.c:3675 __do_sys_mkdir fs/namei.c:3691 [inline] __se_sys_mkdir fs/namei.c:3689 [inline] __x64_sys_mkdir+0x16/0x20 fs/namei.c:3689 do_syscall_64+0x37/0x80 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x4554a9 Code: 9d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f12da8eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00007f12da8ef6d4 RCX: 00000000004554a9 RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000020000180 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000003ea R14: 00000000006f8e90 R15: 0000000000000000