program:
mkdir(&(0x7f0000000080)='./file0\x00', 0x3c)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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")
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x81fd)
mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
chdir(&(0x7f0000000240)='./file0\x00')
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
[ 87.063554][ T5338] loop0: detected capacity change from 0 to 1024
[ 87.071521][ T4682] Bluetooth: hci0: command tx timeout
[ 87.232168][ T5338] hfsplus: new node 0 already hashed?
[ 87.234403][ T5338] ------------[ cut here ]------------
[ 87.236627][ T5338] WARNING: fs/hfsplus/bnode.c:631 at hfsplus_bnode_create+0x461/0x4f0, CPU#0: syz.0.0/5338
[ 87.241604][ T5338] Modules linked in:
[ 87.243465][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.248245][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 87.253531][ T5338] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0
[ 87.256248][ T5338] Code: a2 8b 89 ee e8 00 c8 85 fe e9 cf fc ff ff e8 46 de 1f ff 4c 89 ef e8 ce 6b be 08 48 c7 c7 00 97 a2 8b 89 ee e8 e0 c7 85 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff
[ 87.265147][ T5338] RSP: 0018:ffffc9000a3774e0 EFLAGS: 00010246
[ 87.267644][ T5338] RAX: 0000000000000023 RBX: ffff888033d28000 RCX: cd906d602fde1000
[ 87.271471][ T5338] RDX: ffffc90020802000 RSI: 0000000000003ab1 RDI: 0000000000003ab2
[ 87.274981][ T5338] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 87.278639][ T5338] R10: dffffc0000000000 R11: fffffbfff1bfae28 R12: 0000000000000000
[ 87.282464][ T5338] R13: ffff888033d280e0 R14: ffff88801f15f200 R15: dffffc0000000000
[ 87.286256][ T5338] FS: 00007f65786c46c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000
[ 87.290438][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.293176][ T5338] CR2: 000055b07a979a19 CR3: 000000001fc6e000 CR4: 0000000000352ef0
[ 87.296172][ T5338] Call Trace:
[ 87.298033][ T5338]
[ 87.299826][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.302210][ T5338] hfsplus_bmap_alloc+0x746/0xaf0
[ 87.304385][ T5338] ? __pfx_hfsplus_bmap_alloc+0x10/0x10
[ 87.306690][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.309010][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.311525][ T5338] hfs_bnode_split+0xcc/0x1080
[ 87.313620][ T5338] ? hfsplus_bnode_read+0x2f0/0x7a0
[ 87.315728][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.317860][ T5338] ? __asan_memcpy+0x40/0x70
[ 87.319912][ T5338] ? hfsplus_bnode_read+0x2f0/0x7a0
[ 87.322089][ T5338] ? hfsplus_bnode_read_u16+0x87/0xd0
[ 87.324343][ T5338] ? __pfx_hfs_bnode_split+0x10/0x10
[ 87.326650][ T5338] hfsplus_brec_insert+0x3b6/0xd70
[ 87.329694][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.332165][ T5338] ? __pfx_hfsplus_brec_insert+0x10/0x10
[ 87.334808][ T5338] ? hfsplus_cat_set_perms+0x33f/0x5a0
[ 87.337210][ T5338] hfsplus_create_cat+0x9a9/0x10d0
[ 87.339634][ T5338] ? __pfx_hfsplus_create_cat+0x10/0x10
[ 87.342065][ T5338] ? __pfx_hlock_conflict+0x10/0x10
[ 87.344632][ T5338] ? check_path+0x21/0x40
[ 87.346525][ T5338] ? check_noncircular+0xda/0x150
[ 87.348717][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.351142][ T5338] ? _raw_spin_unlock+0x28/0x50
[ 87.353203][ T5338] ? hfsplus_new_inode+0x643/0x820
[ 87.355353][ T5338] hfsplus_mknod+0x16a/0x290
[ 87.357277][ T5338] hfsplus_mkdir+0x2c/0x40
[ 87.359302][ T5338] vfs_mkdir+0x512/0x5b0
[ 87.361199][ T5338] do_mkdirat+0x276/0x4b0
[ 87.363112][ T5338] ? __pfx_do_mkdirat+0x10/0x10
[ 87.365052][ T5338] ? getname_flags+0x1e5/0x540
[ 87.367074][ T5338] __x64_sys_mkdir+0x6c/0x80
[ 87.368998][ T5338] do_syscall_64+0xfa/0xf80
[ 87.371055][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.373674][ T5338] ? clear_bhb_loop+0x60/0xb0
[ 87.375649][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.377986][ T5338] RIP: 0033:0x7f657778f7c9
[ 87.380229][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 87.389246][ T5338] RSP: 002b:00007f65786c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 87.393215][ T5338] RAX: ffffffffffffffda RBX: 00007f65779e5fa0 RCX: 00007f657778f7c9
[ 87.396831][ T5338] RDX: 0000000000000000 RSI: 0000000000000044 RDI: 00002000000003c0
[ 87.401050][ T5338] RBP: 00007f6577813f91 R08: 0000000000000000 R09: 0000000000000000
[ 87.404790][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.408337][ T5338] R13: 00007f65779e6038 R14: 00007f65779e5fa0 R15: 00007ffed9cf7af8
[ 87.411726][ T5338]
[ 87.413279][ T5338] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.416627][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.420479][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 87.425302][ T5338] Call Trace:
[ 87.426814][ T5338]
[ 87.428087][ T5338] dump_stack_lvl+0x99/0x250
[ 87.430135][ T5338] ? __asan_memcpy+0x40/0x70
[ 87.432269][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.434590][ T5338] ? __pfx__printk+0x10/0x10
[ 87.436655][ T5338] vpanic+0x237/0x6d0
[ 87.438286][ T5338] ? __pfx_vpanic+0x10/0x10
[ 87.439998][ T5338] ? is_bpf_text_address+0x292/0x2b0
[ 87.442143][ T5338] ? is_bpf_text_address+0x26/0x2b0
[ 87.444280][ T5338] panic+0xb9/0xc0
[ 87.445865][ T5338] ? __pfx_panic+0x10/0x10
[ 87.447765][ T5338] __warn+0x317/0x4b0
[ 87.449425][ T5338] ? hfsplus_bnode_create+0x461/0x4f0
[ 87.451716][ T5338] ? hfsplus_bnode_create+0x461/0x4f0
[ 87.454052][ T5338] __report_bug+0x288/0x500
[ 87.456145][ T5338] ? hfsplus_bnode_create+0x461/0x4f0
[ 87.458722][ T5338] ? __pfx___report_bug+0x10/0x10
[ 87.460840][ T5338] ? __pfx_vprintk_emit+0x10/0x10
[ 87.463168][ T5338] ? hfsplus_bnode_create+0x461/0x4f0
[ 87.465535][ T5338] report_bug+0x16a/0x220
[ 87.467613][ T5338] ? hfsplus_bnode_create+0x461/0x4f0
[ 87.469852][ T5338] ? hfsplus_bnode_create+0x463/0x4f0
[ 87.472269][ T5338] handle_bug+0x98/0x200
[ 87.474032][ T5338] exc_invalid_op+0x1a/0x50
[ 87.476065][ T5338] asm_exc_invalid_op+0x1a/0x20
[ 87.477952][ T5338] RIP: 0010:hfsplus_bnode_create+0x461/0x4f0
[ 87.480517][ T5338] Code: a2 8b 89 ee e8 00 c8 85 fe e9 cf fc ff ff e8 46 de 1f ff 4c 89 ef e8 ce 6b be 08 48 c7 c7 00 97 a2 8b 89 ee e8 e0 c7 85 fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c d6 fb ff ff
[ 87.488734][ T5338] RSP: 0018:ffffc9000a3774e0 EFLAGS: 00010246
[ 87.491199][ T5338] RAX: 0000000000000023 RBX: ffff888033d28000 RCX: cd906d602fde1000
[ 87.494879][ T5338] RDX: ffffc90020802000 RSI: 0000000000003ab1 RDI: 0000000000003ab2
[ 87.498695][ T5338] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 87.502231][ T5338] R10: dffffc0000000000 R11: fffffbfff1bfae28 R12: 0000000000000000
[ 87.505723][ T5338] R13: ffff888033d280e0 R14: ffff88801f15f200 R15: dffffc0000000000
[ 87.509211][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.511424][ T5338] hfsplus_bmap_alloc+0x746/0xaf0
[ 87.513661][ T5338] ? __pfx_hfsplus_bmap_alloc+0x10/0x10
[ 87.515975][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.518415][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.520702][ T5338] hfs_bnode_split+0xcc/0x1080
[ 87.522825][ T5338] ? hfsplus_bnode_read+0x2f0/0x7a0
[ 87.525222][ T5338] ? hfsplus_bnode_read+0x1e5/0x7a0
[ 87.527488][ T5338] ? __asan_memcpy+0x40/0x70
[ 87.529572][ T5338] ? hfsplus_bnode_read+0x2f0/0x7a0
[ 87.531916][ T5338] ? hfsplus_bnode_read_u16+0x87/0xd0
[ 87.534382][ T5338] ? __pfx_hfs_bnode_split+0x10/0x10
[ 87.536794][ T5338] hfsplus_brec_insert+0x3b6/0xd70
[ 87.539124][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.541476][ T5338] ? __pfx_hfsplus_brec_insert+0x10/0x10
[ 87.543975][ T5338] ? hfsplus_cat_set_perms+0x33f/0x5a0
[ 87.546408][ T5338] hfsplus_create_cat+0x9a9/0x10d0
[ 87.548600][ T5338] ? __pfx_hfsplus_create_cat+0x10/0x10
[ 87.550893][ T5338] ? __pfx_hlock_conflict+0x10/0x10
[ 87.553182][ T5338] ? check_path+0x21/0x40
[ 87.555147][ T5338] ? check_noncircular+0xda/0x150
[ 87.557494][ T5338] ? do_raw_spin_unlock+0x4d/0x240
[ 87.559813][ T5338] ? _raw_spin_unlock+0x28/0x50
[ 87.562083][ T5338] ? hfsplus_new_inode+0x643/0x820
[ 87.564430][ T5338] hfsplus_mknod+0x16a/0x290
[ 87.566545][ T5338] hfsplus_mkdir+0x2c/0x40
[ 87.568632][ T5338] vfs_mkdir+0x512/0x5b0
[ 87.570580][ T5338] do_mkdirat+0x276/0x4b0
[ 87.572491][ T5338] ? __pfx_do_mkdirat+0x10/0x10
[ 87.574677][ T5338] ? getname_flags+0x1e5/0x540
[ 87.576925][ T5338] __x64_sys_mkdir+0x6c/0x80
[ 87.579018][ T5338] do_syscall_64+0xfa/0xf80
[ 87.581103][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.583852][ T5338] ? clear_bhb_loop+0x60/0xb0
[ 87.585979][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.588605][ T5338] RIP: 0033:0x7f657778f7c9
[ 87.590601][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 87.598960][ T5338] RSP: 002b:00007f65786c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 87.602640][ T5338] RAX: ffffffffffffffda RBX: 00007f65779e5fa0 RCX: 00007f657778f7c9
[ 87.606187][ T5338] RDX: 0000000000000000 RSI: 0000000000000044 RDI: 00002000000003c0
[ 87.609822][ T5338] RBP: 00007f6577813f91 R08: 0000000000000000 R09: 0000000000000000
[ 87.613393][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.616897][ T5338] R13: 00007f65779e6038 R14: 00007f65779e5fa0 R15: 00007ffed9cf7af8
[ 87.620406][ T5338]
[ 87.622172][ T5338] Kernel Offset: disabled
[ 87.624061][ T5338] Rebooting in 86400 seconds..