hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7823 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 Modules linked in: CPU: 0 PID: 7823 Comm: syz-executor.0 Not tainted 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 pstate: 60401005 (nZCv daif +PAN -UAO -TCO -DIT +SSBS BTYPE=--) pc : hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 lr : hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 sp : ffff8000a0fa6cb0 x29: ffff8000a0fa6cc0 x28: dfff800000000000 x27: dfff800000000000 x26: ffff0000f5cfb0f8 x25: dfff800000000000 x24: ffff0000ceb66a88 x23: 0000000000000000 x22: ffff0000dd0bc0e0 x21: ffff0000dd0bc000 x20: 0000000000000000 x19: ffff0000ceb66a00 x18: 0000000000000008 x17: 0000000000000000 x16: ffff80008ae725bc x15: 0000000000000001 x14: 1ffff000141f4ce8 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 0000000000012d23 x9 : 1c5566a4d1003900 x8 : 1c5566a4d1003900 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a0fa6438 x4 : ffff80008ef650a0 x3 : ffff800082f1209c x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 hfsplus_bmap_alloc+0x578/0x640 fs/hfsplus/btree.c:415 hfs_bnode_split+0xcc/0xd88 fs/hfsplus/brec.c:245 hfsplus_brec_insert+0x2d4/0xaa0 fs/hfsplus/brec.c:100 hfsplus_create_cat+0x3ac/0x1318 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:566 mount_bdev+0x1d4/0x2a0 fs/super.c:1658 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:647 legacy_get_tree+0xd4/0x16c fs/fs_context.c:662 vfs_get_tree+0x90/0x288 fs/super.c:1779 do_new_mount+0x278/0x900 fs/namespace.c:3352 path_mount+0x590/0xe04 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3875 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 irq event stamp: 3852 hardirqs last enabled at (3851): [] __up_console_sem kernel/printk/printk.c:341 [inline] hardirqs last enabled at (3851): [] __console_unlock kernel/printk/printk.c:2731 [inline] hardirqs last enabled at (3851): [] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3050 hardirqs last disabled at (3852): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (3542): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (3542): [] __do_softirq+0xb10/0xd2c kernel/softirq.c:583 softirqs last disabled at (3537): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 ---[ end trace 0000000000000000 ]--- hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7823 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 Modules linked in: CPU: 1 PID: 7823 Comm: syz-executor.0 Tainted: G W 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 pstate: 60401005 (nZCv daif +PAN -UAO -TCO -DIT +SSBS BTYPE=--) pc : hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 lr : hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 sp : ffff8000a0fa6cf0 x29: ffff8000a0fa6d00 x28: dfff800000000000 x27: dfff800000000000 x26: ffff0000f5cfb134 x25: dfff800000000000 x24: ffff0000ceb66a88 x23: 0000000000000000 x22: ffff0000dd0bc0e0 x21: ffff0000dd0bc000 x20: 0000000000000000 x19: ffff0000ceb66a00 x18: 0000000000000008 x17: 0000000000000000 x16: ffff80008ae725bc x15: 0000000000000001 x14: 1fffe000367bde02 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 000000000003ffff x9 : 1c5566a4d1003900 x8 : 1c5566a4d1003900 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000a0fa6478 x4 : ffff80008ef650a0 x3 : ffff8000805e616c x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x430/0x4e4 fs/hfsplus/bnode.c:572 hfsplus_bmap_alloc+0x578/0x640 fs/hfsplus/btree.c:415 hfs_btree_inc_height+0xf8/0xa60 fs/hfsplus/brec.c:475 hfsplus_brec_insert+0x594/0xaa0 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x3ac/0x1318 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:566 mount_bdev+0x1d4/0x2a0 fs/super.c:1658 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:647 legacy_get_tree+0xd4/0x16c fs/fs_context.c:662 vfs_get_tree+0x90/0x288 fs/super.c:1779 do_new_mount+0x278/0x900 fs/namespace.c:3352 path_mount+0x590/0xe04 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3875 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 irq event stamp: 4226 hardirqs last enabled at (4225): [] __up_console_sem kernel/printk/printk.c:341 [inline] hardirqs last enabled at (4225): [] __console_unlock kernel/printk/printk.c:2731 [inline] hardirqs last enabled at (4225): [] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3050 hardirqs last disabled at (4226): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (4172): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (4172): [] __do_softirq+0xb10/0xd2c kernel/softirq.c:583 softirqs last disabled at (3857): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfsplus/bnode.c:618! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 7823 Comm: syz-executor.0 Tainted: G W 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 pstate: 60401005 (nZCv daif +PAN -UAO -TCO -DIT +SSBS BTYPE=--) pc : hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 lr : hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 sp : ffff8000a0fa6de0 x29: ffff8000a0fa6de0 x28: dfff800000000000 x27: ffff7000141f4dd4 x26: 1fffe0001ba17803 x25: 1fffe00019d6cd40 x24: ffff0000dd0bc000 x23: dfff800000000000 x22: ffff0000ceb66a00 x21: ffff0000ceb66a80 x20: 0000000000000000 x19: ffff0000ceb66a00 x18: 0000000000000008 x17: 0000000000000000 x16: ffff8000802896e4 x15: 0000000000000001 x14: 1fffe00019d6cd50 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 000000000003ffff x9 : ffff8000a1059000 x8 : 0000000000040000 x7 : ffff80008adb226c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000811839f0 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 hfs_btree_inc_height+0x4fc/0xa60 fs/hfsplus/brec.c:530 hfsplus_brec_insert+0x594/0xaa0 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x3ac/0x1318 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:566 mount_bdev+0x1d4/0x2a0 fs/super.c:1658 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:647 legacy_get_tree+0xd4/0x16c fs/fs_context.c:662 vfs_get_tree+0x90/0x288 fs/super.c:1779 do_new_mount+0x278/0x900 fs/namespace.c:3352 path_mount+0x590/0xe04 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3875 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: aa1403e0 97e3232c 17ffffb7 97cf38e1 (d4210000) ---[ end trace 0000000000000000 ]---