program: r0 = fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0x1, 0x5f9, &(0x7f0000001280)="$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") open(&(0x7f0000000200)='./file2\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000003900000004000000f40000009500000000004000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/sync_on_suspend', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000002c80)={0x30}, 0x30) openat(r2, &(0x7f00000000c0)='./file3\x00', 0x82, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ffffffff000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ebffffff000000000000000000000000000000000000000000000000000000000000000000000000b5e80ac7411fc65159c1242b6d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff0000000000000000010002000000000044000500ac141400000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000400000000000000000000000800000072e29522fffbcf340c649d21bf7aa4560e34677429036727036c3475109f75401a431a91e641939540cf4c802f2b5a1a1fa59e5811ac7368d2ebe3e1919461c20a0c83eaef024e506762a3877b991bcf81ca8355469a2a"], 0xfc}}, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x5) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$eJzs3UtvVFUcAPD/nT54KiVBoi5MExZikCltfWDiApdGiSS6x0l7aUinDOlMCa0kwkI2bAwxMUYS4wdw75L4BfwUJEpCDGl04abmTu+Ugc70MQzMyPx+yYVz7qPnnDn3nPnfuTO5AQys8eyfQsRrEfFtEnGoadtw5BvH1/dbfXhtJluSWFv7/K8kknxdY/8k//9Annk1In77JuJEYXO51eWV+VK5nC7m+YnawuWJ6vLKyYsLpbl0Lr00NT19+t3pqQ/ef69rbX3r3D8/fHb349O3jq1+/8v9w7eTOBMH823N7XgK15sz4zGevyYjceaJHSe7UFg/SXpdAToylI/zkcjmgEMxlI964MX3dUSsAQMqMf5hQDXigMa1fZeug/83Hny0fgG0uf3D65+NxN76tdH+1eSxK6PsenesC+VnZfz6553b2RLd+xwCYFvXb0TEqeHhzfNfks9/nTu1g32eLMP8B8/P3Sz+ebtV/FPYiH+iRfxzoMXY7cT2479wv8VhSbc+pc7ivw9bxr8bN63GhiLilYh4qR7zjSQXLpbTbG57OSKOx8ieLL/V/ZzTq/fW2m1rjv+yJSu/EQvm9bg/vOfxY2ZLtdLTtLnZgxsRr7eMf5ON/k9a9H/26pzbYRlH0ztvtNu2ffufrbWfI95s2f+P7mglW9+fnKifDxONs2Kzv28e/b1d+b1uf9b/+7du/1jSfL+2uvsyftr7b9puW6fn/2jyRT09mq+7WqrVFicjRpNPN6+fenRsI9/YP2v/8WNbz3+tzv99EfHlDtt/88jNtrv2Q//P7qr/d5+498lXP7Yrf2f9/049dTxfs5P5b6cVfJrXDgAAAAAAAPpNISIORlIobqQLhWJx/fsdR2J/oVyp1k5cqCxdmo36b2XHYqTQuNN9qOn7EJP592Eb+akn8tMRcTgivhvaV88XZyrl2V43HgAAAAAAAAAAAAAAAAAAAPrEgTa//8/8MdTykNHnW0PgmfLIbxhc247/bjzpCehLu3//FzHAi6Kj0byv+/UAnj/v5jCgRnpdAaCXvP/D4DL+YXAZ/zC4jH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqnNnz2bL2urDazNZfvbK8tJ85crJ2bQ6X1xYminOVBYvF+cqlblyWpypLGz398qVyuXJqVi6OlFLq7WJ6vLK+YXK0qXa+YsLpbn0fOppQwAAAAAAAAAAAAAAAAAAALBZdXllvlQup4sSEh0lhvujGhJNiVtdGN09npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMl/AQAA///VUDYA") [ 74.520783][ T4678] Bluetooth: hci0: command tx timeout [ 74.605534][ T5329] loop0: detected capacity change from 0 to 1024 [ 74.693416][ T5329] netlink: 68 bytes leftover after parsing attributes in process `syz.0.0'. [ 74.705398][ T5329] hfsplus: new node 0 already hashed? [ 74.709046][ T5329] ------------[ cut here ]------------ [ 74.712356][ T5329] WARNING: CPU: 0 PID: 5329 at fs/hfsplus/bnode.c:579 hfsplus_bnode_create+0x461/0x4f0 [ 74.716967][ T5329] Modules linked in: [ 74.718969][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 74.724707][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.729627][ T5329] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 [ 74.733643][ T5329] Code: a1 8b 89 ee e8 b0 91 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 ae cd d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 90 91 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 74.743084][ T5329] RSP: 0018:ffffc9000f69f100 EFLAGS: 00010246 [ 74.745878][ T5329] RAX: 0000000000000023 RBX: ffff888043c90000 RCX: 209e3a37a3e17000 [ 74.749729][ T5329] RDX: ffffc9000dd92000 RSI: 000000000000119a RDI: 000000000000119b [ 74.754502][ T5329] RBP: 0000000000000000 R08: ffffc9000f69ee27 R09: 1ffff92001ed3dc4 [ 74.758535][ T5329] R10: dffffc0000000000 R11: fffff52001ed3dc5 R12: 0000000000000000 [ 74.762093][ T5329] R13: ffff888043c900e0 R14: ffff88803442b500 R15: dffffc0000000000 [ 74.765577][ T5329] FS: 00007fb966c046c0(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 74.769087][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.773982][ T5329] CR2: 00007f8a2ff909c0 CR3: 0000000043136000 CR4: 0000000000352ef0 [ 74.778470][ T5329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.782162][ T5329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.785290][ T5329] Call Trace: [ 74.786821][ T5329] [ 74.788209][ T5329] ? do_raw_spin_unlock+0x4d/0x240 [ 74.791071][ T5329] hfsplus_bmap_alloc+0x5af/0x640 [ 74.793433][ T5329] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 74.796092][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 74.798707][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 74.801214][ T5329] hfs_bnode_split+0xcc/0xef0 [ 74.803164][ T5329] ? hfsplus_bnode_read+0x255/0x2a0 [ 74.805595][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 74.808004][ T5329] ? __asan_memcpy+0x40/0x70 [ 74.810119][ T5329] ? hfsplus_bnode_read_u16+0x87/0xd0 [ 74.812973][ T5329] ? __pfx_hfs_bnode_split+0x10/0x10 [ 74.815771][ T5329] hfsplus_brec_insert+0x38f/0xcc0 [ 74.818016][ T5329] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 74.820676][ T5329] ? hfsplus_find_init+0x8c/0x1d0 [ 74.822865][ T5329] ? hfsplus_cat_set_perms+0x277/0x5a0 [ 74.825448][ T5329] hfsplus_create_cat+0x9e9/0x1000 [ 74.827928][ T5329] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 74.830903][ T5329] ? do_raw_spin_unlock+0x4d/0x240 [ 74.833520][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 74.835916][ T5329] ? hfsplus_new_inode+0x643/0x820 [ 74.838218][ T5329] hfsplus_mknod+0x16a/0x290 [ 74.840226][ T5329] ? __pfx_hfsplus_create+0x10/0x10 [ 74.842638][ T5329] path_openat+0x14f1/0x3830 [ 74.844630][ T5329] ? arch_stack_walk+0xfc/0x150 [ 74.846821][ T5329] ? __pfx_path_openat+0x10/0x10 [ 74.849136][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.852390][ T5329] do_filp_open+0x1fa/0x410 [ 74.854872][ T5329] ? __lock_acquire+0xab9/0xd20 [ 74.857146][ T5329] ? __pfx_do_filp_open+0x10/0x10 [ 74.859338][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 74.861457][ T5329] ? alloc_fd+0x64c/0x6c0 [ 74.863313][ T5329] do_sys_openat2+0x121/0x1c0 [ 74.865747][ T5329] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.868437][ T5329] ? rcu_is_watching+0x15/0xb0 [ 74.871552][ T5329] __x64_sys_openat+0x138/0x170 [ 74.873624][ T5329] do_syscall_64+0xfa/0x3b0 [ 74.875750][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.878483][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.881894][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 74.884780][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.887346][ T5329] RIP: 0033:0x7fb965d8e929 [ 74.889188][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.898023][ T5329] RSP: 002b:00007fb966c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.902546][ T5329] RAX: ffffffffffffffda RBX: 00007fb965fb5fa0 RCX: 00007fb965d8e929 [ 74.906430][ T5329] RDX: 000000000000275a RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 74.909831][ T5329] RBP: 00007fb965e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.913494][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.917627][ T5329] R13: 0000000000000000 R14: 00007fb965fb5fa0 R15: 00007ffcbd976338 [ 74.921982][ T5329] [ 74.923424][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.926673][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 74.931964][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.937425][ T5329] Call Trace: [ 74.938915][ T5329] [ 74.940257][ T5329] dump_stack_lvl+0x99/0x250 [ 74.942362][ T5329] ? __asan_memcpy+0x40/0x70 [ 74.944598][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.947082][ T5329] ? __pfx__printk+0x10/0x10 [ 74.949523][ T5329] panic+0x2db/0x790 [ 74.951597][ T5329] ? __pfx_panic+0x10/0x10 [ 74.953550][ T5329] ? show_trace_log_lvl+0x4fb/0x550 [ 74.955861][ T5329] __warn+0x31b/0x4b0 [ 74.957655][ T5329] ? hfsplus_bnode_create+0x461/0x4f0 [ 74.959991][ T5329] ? hfsplus_bnode_create+0x461/0x4f0 [ 74.962565][ T5329] report_bug+0x2be/0x4f0 [ 74.964930][ T5329] ? hfsplus_bnode_create+0x461/0x4f0 [ 74.967619][ T5329] ? hfsplus_bnode_create+0x461/0x4f0 [ 74.970058][ T5329] ? hfsplus_bnode_create+0x463/0x4f0 [ 74.972325][ T5329] handle_bug+0x84/0x160 [ 74.974157][ T5329] exc_invalid_op+0x1a/0x50 [ 74.976334][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 74.978399][ T5329] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0 [ 74.980953][ T5329] Code: a1 8b 89 ee e8 b0 91 8f fe e9 cf fc ff ff e8 16 5f 28 ff 4c 89 ef e8 ae cd d0 08 48 c7 c7 e0 b0 a1 8b 89 ee e8 90 91 8f fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff [ 74.989926][ T5329] RSP: 0018:ffffc9000f69f100 EFLAGS: 00010246 [ 74.992673][ T5329] RAX: 0000000000000023 RBX: ffff888043c90000 RCX: 209e3a37a3e17000 [ 74.996134][ T5329] RDX: ffffc9000dd92000 RSI: 000000000000119a RDI: 000000000000119b [ 74.999547][ T5329] RBP: 0000000000000000 R08: ffffc9000f69ee27 R09: 1ffff92001ed3dc4 [ 75.003714][ T5329] R10: dffffc0000000000 R11: fffff52001ed3dc5 R12: 0000000000000000 [ 75.007561][ T5329] R13: ffff888043c900e0 R14: ffff88803442b500 R15: dffffc0000000000 [ 75.011040][ T5329] ? do_raw_spin_unlock+0x4d/0x240 [ 75.013290][ T5329] hfsplus_bmap_alloc+0x5af/0x640 [ 75.015635][ T5329] ? __pfx_hfsplus_bmap_alloc+0x10/0x10 [ 75.018216][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 75.020850][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 75.023534][ T5329] hfs_bnode_split+0xcc/0xef0 [ 75.025728][ T5329] ? hfsplus_bnode_read+0x255/0x2a0 [ 75.027967][ T5329] ? hfsplus_bnode_read+0x135/0x2a0 [ 75.030232][ T5329] ? __asan_memcpy+0x40/0x70 [ 75.032346][ T5329] ? hfsplus_bnode_read_u16+0x87/0xd0 [ 75.034718][ T5329] ? __pfx_hfs_bnode_split+0x10/0x10 [ 75.037120][ T5329] hfsplus_brec_insert+0x38f/0xcc0 [ 75.039750][ T5329] ? __pfx_hfsplus_brec_insert+0x10/0x10 [ 75.043378][ T5329] ? hfsplus_find_init+0x8c/0x1d0 [ 75.045969][ T5329] ? hfsplus_cat_set_perms+0x277/0x5a0 [ 75.048302][ T5329] hfsplus_create_cat+0x9e9/0x1000 [ 75.050544][ T5329] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 75.053046][ T5329] ? do_raw_spin_unlock+0x4d/0x240 [ 75.055402][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 75.057646][ T5329] ? hfsplus_new_inode+0x643/0x820 [ 75.060214][ T5329] hfsplus_mknod+0x16a/0x290 [ 75.062825][ T5329] ? __pfx_hfsplus_create+0x10/0x10 [ 75.065665][ T5329] path_openat+0x14f1/0x3830 [ 75.067768][ T5329] ? arch_stack_walk+0xfc/0x150 [ 75.069840][ T5329] ? __pfx_path_openat+0x10/0x10 [ 75.071899][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.074506][ T5329] do_filp_open+0x1fa/0x410 [ 75.076960][ T5329] ? __lock_acquire+0xab9/0xd20 [ 75.079935][ T5329] ? __pfx_do_filp_open+0x10/0x10 [ 75.082497][ T5329] ? _raw_spin_unlock+0x28/0x50 [ 75.084825][ T5329] ? alloc_fd+0x64c/0x6c0 [ 75.086709][ T5329] do_sys_openat2+0x121/0x1c0 [ 75.088866][ T5329] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.091113][ T5329] ? rcu_is_watching+0x15/0xb0 [ 75.093516][ T5329] __x64_sys_openat+0x138/0x170 [ 75.096250][ T5329] do_syscall_64+0xfa/0x3b0 [ 75.098949][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.101879][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.104549][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 75.106742][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.109389][ T5329] RIP: 0033:0x7fb965d8e929 [ 75.111415][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.120732][ T5329] RSP: 002b:00007fb966c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.124384][ T5329] RAX: ffffffffffffffda RBX: 00007fb965fb5fa0 RCX: 00007fb965d8e929 [ 75.128018][ T5329] RDX: 000000000000275a RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 75.132218][ T5329] RBP: 00007fb965e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.136188][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.139882][ T5329] R13: 0000000000000000 R14: 00007fb965fb5fa0 R15: 00007ffcbd976338 [ 75.143441][ T5329] [ 75.145420][ T5329] Kernel Offset: disabled [ 75.147620][ T5329] Rebooting in 86400 seconds..