hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5357 at fs/hfsplus/bnode.c:630 hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 Modules linked in: CPU: 1 PID: 5357 Comm: syz.4.195 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 lr : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 sp : ffff800021376dc0 x29: ffff800021376de0 x28: 1ffff0000426edcc x27: dfff800000000000 x26: 0000000000000000 x25: 00000000000000f8 x24: ffff0000d556a888 x23: 0000000000000080 x22: 0000000000000000 x21: ffff0000ca3bc000 x20: 0000000000000000 x19: ffff0000d556a800 x18: ffff800011a5bd40 x17: 0000000000000000 x16: ffff8000082d3a08 x15: 0000000000000002 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 x11: 000000000002d8d1 x10: ffff80002b524000 x9 : 0a5e9e7e4ceac300 x8 : 0a5e9e7e4ceac300 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800021376898 x4 : ffff800015134e00 x3 : ffff80000852f9b8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 hfsplus_bmap_alloc+0x5ac/0x8d8 fs/hfsplus/btree.c:421 hfs_bnode_split+0xc8/0xbb8 fs/hfsplus/brec.c:245 hfsplus_brec_insert+0x2f4/0xaa8 fs/hfsplus/brec.c:100 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 5788 hardirqs last enabled at (5787): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (5788): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (5734): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (5734): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (5637): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5357 at fs/hfsplus/bnode.c:630 hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 Modules linked in: CPU: 1 PID: 5357 Comm: syz.4.195 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 lr : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 sp : ffff800021376e20 x29: ffff800021376e40 x28: 1ffff0000426edd8 x27: dfff800000000000 x26: 0000000000000000 x25: 0000000000000222 x24: ffff0000d556a888 x23: 0000000000000080 x22: 0000000000000000 x21: ffff0000ca3bc000 x20: 0000000000000000 x19: ffff0000d556a800 x18: ffff800011a5bd40 x17: 0000000000000000 x16: ffff8000082d3a08 x15: 0000000000000002 x14: 0000000000000000 x13: 1ffff00002a0a0b1 x12: 0000000000080000 x11: 000000000007ffff x10: ffff80002b524000 x9 : 0a5e9e7e4ceac300 x8 : 0a5e9e7e4ceac300 x7 : ffff80000830e2fc x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000a84818c x2 : ffff00019f75ed10 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 hfsplus_bmap_alloc+0x5ac/0x8d8 fs/hfsplus/btree.c:421 hfs_btree_inc_height+0xf8/0x8e0 fs/hfsplus/brec.c:475 hfsplus_brec_insert+0x5c8/0xaa8 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 6106 hardirqs last enabled at (6105): [] console_emit_next_record+0x7b0/0x954 kernel/printk/printk.c:2783 hardirqs last disabled at (6106): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (6016): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (6016): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (5791): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfsplus/bnode.c:675! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 5357 Comm: syz.4.195 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 lr : hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 sp : ffff800021376f20 x29: ffff800021376f20 x28: ffff0000d321d000 x27: dfff800000000000 x26: ffff70000426edf8 x25: ffff800021376fc0 x24: 1fffe0001aaad500 x23: ffff0000ca3bc000 x22: dfff800000000000 x21: 0000000000000000 x20: ffff0000d556a880 x19: ffff0000d556a800 x18: ffff800011a5bd40 x17: 0000000000000000 x16: ffff8000082e9244 x15: 0000000000000002 x14: 0000000000000001 x13: 1ffff00002a0a0b1 x12: 0000000000080000 x11: 000000000007ffff x10: ffff80002b524000 x9 : ffff800008f71264 x8 : 0000000000080000 x7 : ffff800011794ea4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008f70e30 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 hfs_btree_inc_height+0x48c/0x8e0 fs/hfsplus/brec.c:530 hfsplus_brec_insert+0x5c8/0xaa8 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1403e0 97e59e6f 17ffffb4 97d4c7a8 (d4210000) ---[ end trace 0000000000000000 ]---