hfs: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at fs/hfs/bnode.c:422 hfs_bnode_create+0x428/0x4dc fs/hfs/bnode.c:421 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.30-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Workqueue: writeback wb_workfn (flush-7:4) pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hfs_bnode_create+0x428/0x4dc fs/hfs/bnode.c:421 lr : hfs_bnode_create+0x428/0x4dc fs/hfs/bnode.c:421 sp : ffff800019b76c10 x29: ffff800019b76c20 x28: dfff800000000000 x27: dfff800000000000 x26: 0000000000000100 x25: ffff0000d1b38488 x24: 0000000000000000 x23: 0000000000000000 x22: ffff0000df5600e0 x21: ffff0000df560000 x20: 0000000000000000 x19: ffff0000d1b38400 x18: ffff800019b76160 x17: 0000000000000000 x16: ffff8000120fc834 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: ff80800008345658 x10: 0000000000000000 x9 : c088ecd63ffa7100 x8 : c088ecd63ffa7100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800019b76518 x4 : ffff800015692ac0 x3 : ffff80000aa73a6c x2 : ffff0001b45d0cd0 x1 : 0000000100000000 x0 : 000000000000001f Call trace: hfs_bnode_create+0x428/0x4dc fs/hfs/bnode.c:421 hfs_bmap_alloc+0x59c/0x664 fs/hfs/btree.c:291 hfs_btree_inc_height+0xf8/0x9d0 fs/hfs/brec.c:471 hfs_brec_insert+0x11c/0x97c fs/hfs/brec.c:77 __hfs_ext_write_extent+0x240/0x468 fs/hfs/extent.c:124 hfs_ext_write_extent+0x148/0x1c0 fs/hfs/extent.c:144 hfs_write_inode+0xc0/0xc1c fs/hfs/inode.c:431 write_inode fs/fs-writeback.c:1443 [inline] __writeback_single_inode+0x614/0x1770 fs/fs-writeback.c:1655 writeback_sb_inodes+0x978/0x16c0 fs/fs-writeback.c:1881 wb_writeback+0x414/0x1130 fs/fs-writeback.c:2055 wb_do_writeback fs/fs-writeback.c:2198 [inline] wb_workfn+0x3a8/0x1034 fs/fs-writeback.c:2238 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289 worker_thread+0x8e4/0xfec kernel/workqueue.c:2436 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 2133372 hardirqs last enabled at (2133371): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (2133372): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (2133094): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (2133094): [] ieee80211_ibss_work+0x2d8/0x1230 net/mac80211/ibss.c:1701 softirqs last disabled at (2133092): [] spin_lock_bh include/linux/spinlock.h:355 [inline] softirqs last disabled at (2133092): [] ieee80211_ibss_work+0xd8/0x1230 net/mac80211/ibss.c:1690 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfs/bnode.c:467! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W 6.1.30-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Workqueue: writeback wb_workfn (flush-7:4) pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hfs_bnode_put+0x318/0x324 fs/hfs/bnode.c:467 lr : hfs_bnode_put+0x318/0x324 fs/hfs/bnode.c:467 sp : ffff800019b76d30 x29: ffff800019b76d30 x28: dfff800000000000 x27: ffff70000336edbc x26: 1fffe0001beac003 x25: 0000000000000200 x24: 1fffe0001a367080 x23: dfff800000000000 x22: ffff0000df560000 x21: ffff0000d1b38480 x20: 0000000000000000 x19: ffff0000d1b38400 x18: ffff800019b76160 x17: 0000000000000000 x16: ffff8000120fc964 x15: 0000000000000000 x14: 1ffff00002ab60b0 x13: dfff800000000000 x12: 0000000000000001 x11: ff80800009092358 x10: 0000000000000000 x9 : ffff800009092358 x8 : ffff0000c0998000 x7 : ffff8000089cbe20 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800009092098 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfs_bnode_put+0x318/0x324 fs/hfs/bnode.c:467 hfs_btree_inc_height+0x4c0/0x9d0 fs/hfs/brec.c:525 hfs_brec_insert+0x11c/0x97c fs/hfs/brec.c:77 __hfs_ext_write_extent+0x240/0x468 fs/hfs/extent.c:124 hfs_ext_write_extent+0x148/0x1c0 fs/hfs/extent.c:144 hfs_write_inode+0xc0/0xc1c fs/hfs/inode.c:431 write_inode fs/fs-writeback.c:1443 [inline] __writeback_single_inode+0x614/0x1770 fs/fs-writeback.c:1655 writeback_sb_inodes+0x978/0x16c0 fs/fs-writeback.c:1881 wb_writeback+0x414/0x1130 fs/fs-writeback.c:2055 wb_do_writeback fs/fs-writeback.c:2198 [inline] wb_workfn+0x3a8/0x1034 fs/fs-writeback.c:2238 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289 worker_thread+0x8e4/0xfec kernel/workqueue.c:2436 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 Code: aa1503e0 97e36b24 17ffffd5 97d1a00c (d4210000) ---[ end trace 0000000000000000 ]---