------------[ cut here ]------------ kernel BUG at fs/hfs/bnode.c:311! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 2 PID: 111 Comm: kswapd0 Not tainted 6.9.0-syzkaller-12277-g56fb6f92854f #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:hfs_bnode_unhash fs/hfs/bnode.c:311 [inline] RIP: 0010:hfs_bnode_unhash+0xfd/0x1f0 fs/hfs/bnode.c:302 Code: 48 8d 6b 20 48 89 e8 48 c1 e8 03 42 80 3c 28 00 0f 85 c0 00 00 00 48 8b 5b 20 48 85 db 75 d2 e8 b9 9d 20 ff e8 b4 9d 20 ff 90 <0f> 0b e8 ac 9d 20 ff e8 a7 9d 20 ff e8 a2 9d 20 ff 49 8d 7c 24 20 RSP: 0018:ffffc90000e1f218 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff826eed8b RDX: ffff88801a152440 RSI: ffffffff826ddfdc RDI: ffff88801de1a138 RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88805b430400 R13: ffff88801de1a000 R14: ffff88801de1a000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88802c200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c0006aa000 CR3: 000000000d97a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hfs_release_folio+0x42d/0x570 fs/hfs/inode.c:117 filemap_release_folio+0x1ed/0x280 mm/filemap.c:4173 shrink_folio_list+0x254a/0x4150 mm/vmscan.c:1394 evict_folios+0x6e6/0x1bf0 mm/vmscan.c:4553 try_to_shrink_lruvec+0x618/0x9b0 mm/vmscan.c:4749 shrink_one+0x3f8/0x7c0 mm/vmscan.c:4788 shrink_many mm/vmscan.c:4851 [inline] lru_gen_shrink_node+0x89f/0x1750 mm/vmscan.c:4951 shrink_node mm/vmscan.c:5910 [inline] kswapd_shrink_node mm/vmscan.c:6720 [inline] balance_pgdat+0x1105/0x1970 mm/vmscan.c:6911 kswapd+0x5ea/0xbf0 mm/vmscan.c:7180 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:hfs_bnode_unhash fs/hfs/bnode.c:311 [inline] RIP: 0010:hfs_bnode_unhash+0xfd/0x1f0 fs/hfs/bnode.c:302 Code: 48 8d 6b 20 48 89 e8 48 c1 e8 03 42 80 3c 28 00 0f 85 c0 00 00 00 48 8b 5b 20 48 85 db 75 d2 e8 b9 9d 20 ff e8 b4 9d 20 ff 90 <0f> 0b e8 ac 9d 20 ff e8 a7 9d 20 ff e8 a2 9d 20 ff 49 8d 7c 24 20 RSP: 0018:ffffc90000e1f218 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff826eed8b RDX: ffff88801a152440 RSI: ffffffff826ddfdc RDI: ffff88801de1a138 RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88805b430400 R13: ffff88801de1a000 R14: ffff88801de1a000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88802c200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c0006aa000 CR3: 000000000d97a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400