bisecting fixing commit since f2d285669aae656dfeafa0bf25e86bbbc5d22329
building syzkaller on 676bd07e7e80f8a270af7f0276443c68f4a99e25
testing commit f2d285669aae656dfeafa0bf25e86bbbc5d22329 with gcc (GCC) 8.1.0
run #0: crashed: WARNING in hfs_bnode_create
run #1: crashed: WARNING in hfs_bnode_create
run #2: crashed: WARNING in corrupted
run #3: crashed: WARNING in hfs_bnode_create
run #4: crashed: WARNING in hfs_bnode_create
run #5: crashed: WARNING in hfs_bnode_create
run #6: crashed: WARNING in corrupted
run #7: crashed: WARNING in hfs_bnode_create
run #8: crashed: WARNING in corrupted
run #9: crashed: WARNING in hfs_bnode_create
testing current HEAD 5c6207539aea8b22490f9569db5aa72ddfd0d486
testing commit 5c6207539aea8b22490f9569db5aa72ddfd0d486 with gcc (GCC) 8.1.0
run #0: crashed: WARNING in hfs_bnode_create
run #1: crashed: WARNING in hfs_bnode_create
run #2: crashed: WARNING in hfs_bnode_create
run #3: crashed: WARNING in hfs_bnode_create
run #4: crashed: WARNING in hfs_bnode_create
run #5: crashed: WARNING in corrupted
run #6: crashed: WARNING in hfs_bnode_create
run #7: crashed: WARNING in hfs_bnode_create
run #8: crashed: WARNING in hfs_bnode_create
run #9: crashed: WARNING in hfs_bnode_create
revisions tested: 2, total time: 18m19.176059034s (build: 10m7.450058255s, test: 6m37.149971609s)
the crash still happens on HEAD
crash: WARNING in hfs_bnode_create
IPVS: ftp: loaded support on port[0] = 21
hfs: unable to locate alternate MDB
hfs: continuing without an alternate MDB
hfs: new node 0 already hashed?
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4410 at fs/hfs/bnode.c:416 hfs_bnode_create.cold.12+0x1a/0x25 fs/hfs/bnode.c:416
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 4410 Comm: syz-executor Not tainted 5.3.0-rc2+ #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x115/0x167 lib/dump_stack.c:113
 panic+0x223/0x4ee kernel/panic.c:219
 __warn.cold.10+0x1b/0x45 kernel/panic.c:576
 report_bug+0x1a4/0x200 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291
 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1026
RIP: 0010:hfs_bnode_create.cold.12+0x1a/0x25 fs/hfs/bnode.c:416
Code: c7 c7 40 f6 1a 87 e8 29 27 60 ff e9 8f f6 ff ff 89 de 48 c7 c7 80 f6 1a 87 e8 16 27 60 ff 48 c7 c7 e0 f6 1a 87 e8 0a 27 60 ff <0f> 0b e9 bc fe ff ff 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 55
RSP: 0018:ffff8881cd41f880 EFLAGS: 00010282
RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000006
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000282
RBP: ffff8881cd41f8c8 R08: 0000000000000006 R09: fffffbfff12bf258
R10: dffffc0000000000 R11: ffffffff895f92bf R12: ffff8881cd3ae790
R13: dffffc0000000000 R14: ffff8881d3645400 R15: ffff8881d3645400
 hfs_bmap_alloc+0x423/0x5d0 fs/hfs/btree.c:288
 hfs_bnode_split+0xbd/0xe20 fs/hfs/brec.c:241
 hfs_brec_insert+0x2f0/0xbb0 fs/hfs/brec.c:102
 hfs_cat_create+0x697/0x880 fs/hfs/catalog.c:131
hfs: unable to locate alternate MDB
hfs: continuing without an alternate MDB
 hfs_mkdir+0x57/0xc0 fs/hfs/dir.c:231
 vfs_mkdir+0x384/0x600 fs/namei.c:3815
 do_mkdirat+0x1b7/0x210 fs/namei.c:3838
hfs: new node 0 already hashed?
 __do_sys_mkdir fs/namei.c:3854 [inline]
 __se_sys_mkdir fs/namei.c:3852 [inline]
 __x64_sys_mkdir+0x57/0x80 fs/namei.c:3852
 do_syscall_64+0xd6/0x550 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455429
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f96abf23c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007f96abf246d4 RCX: 0000000000455429
RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000020000180
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000003ea R14: 00000000006f8e90 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..