hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: fs/hfsplus/bnode.c:631 at hfsplus_bnode_create+0x384/0x430 fs/hfsplus/bnode.c:630, CPU#1: kworker/u8:25/7080 Modules linked in: CPU: 1 UID: 0 PID: 7080 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: writeback wb_workfn (flush-7:3) pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x384/0x430 fs/hfsplus/bnode.c:630 lr : hfsplus_bnode_create+0x384/0x430 fs/hfsplus/bnode.c:630 sp : ffff8000a41d6d30 x29: ffff8000a41d6d40 x28: 0000000000000f00 x27: dfff800000000000 x26: dfff800000000000 x25: 0000000000000000 x24: 0000000000000080 x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff0000f9d42000 x19: ffff0000d7a46f00 x18: 000000000001a2ae x17: 000000000004fffd x16: ffff800082e5e68c x15: 0000000000000001 x14: 1ffff0001483ad20 x13: 0000000000000000 x12: 0000000000000000 x11: ffff70001483ad21 x10: 0000000000ff0100 x9 : 9e016eccf6ae6400 x8 : 9e016eccf6ae6400 x7 : ffff8000805761f8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x384/0x430 fs/hfsplus/bnode.c:630 (P) hfsplus_bmap_alloc+0x580/0x87c fs/hfsplus/btree.c:421 hfs_btree_inc_height+0xf8/0x8e0 fs/hfsplus/brec.c:475 hfsplus_brec_insert+0x108/0xb18 fs/hfsplus/brec.c:75 __hfsplus_ext_write_extent+0x278/0x4cc fs/hfsplus/extents.c:107 hfsplus_ext_write_extent_locked fs/hfsplus/extents.c:139 [inline] hfsplus_ext_write_extent+0x154/0x1d4 fs/hfsplus/extents.c:150 hfsplus_write_inode+0x3c/0x584 fs/hfsplus/super.c:168 write_inode fs/fs-writeback.c:1582 [inline] __writeback_single_inode+0x6b0/0x16b8 fs/fs-writeback.c:1802 writeback_sb_inodes+0x73c/0x16b4 fs/fs-writeback.c:2030 wb_writeback+0x3b4/0xd70 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x320/0xdc0 fs/fs-writeback.c:2403 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 205418 hardirqs last enabled at (205417): [] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219 hardirqs last disabled at (205418): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (205232): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (205232): [] ieee80211_ibss_work+0x294/0xd54 net/mac80211/ibss.c:1662 softirqs last disabled at (205230): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (205230): [] ieee80211_ibss_work+0xc0/0xd54 net/mac80211/ibss.c:1651 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfsplus/bnode.c:676! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 7080 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: writeback wb_workfn (flush-7:3) pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : hfsplus_bnode_put+0x42c/0x4a8 fs/hfsplus/bnode.c:676 lr : hfsplus_bnode_put+0x42c/0x4a8 fs/hfsplus/bnode.c:676 sp : ffff8000a41d6e20 x29: ffff8000a41d6e30 x28: 0000000000000000 x27: dfff800000000000 x26: ffff70001483add8 x25: ffff8000a41d6ec0 x24: 0000000000001000 x23: ffff0000f9d42000 x22: dfff800000000000 x21: 0000000000000000 x20: ffff0000d7a46f80 x19: ffff0000d7a46f00 x18: 000000000001a2ae x17: 000000000004fffd x16: ffff800080544d7c x15: 0000000000000001 x14: 1fffe0001af48df0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001af48df1 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cb131c80 x7 : ffff800080eb08d4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008134cbd8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfsplus_bnode_put+0x42c/0x4a8 fs/hfsplus/bnode.c:676 (P) hfs_btree_inc_height+0x48c/0x8e0 fs/hfsplus/brec.c:530 hfsplus_brec_insert+0x108/0xb18 fs/hfsplus/brec.c:75 __hfsplus_ext_write_extent+0x278/0x4cc fs/hfsplus/extents.c:107 hfsplus_ext_write_extent_locked fs/hfsplus/extents.c:139 [inline] hfsplus_ext_write_extent+0x154/0x1d4 fs/hfsplus/extents.c:150 hfsplus_write_inode+0x3c/0x584 fs/hfsplus/super.c:168 write_inode fs/fs-writeback.c:1582 [inline] __writeback_single_inode+0x6b0/0x16b8 fs/fs-writeback.c:1802 writeback_sb_inodes+0x73c/0x16b4 fs/fs-writeback.c:2030 wb_writeback+0x3b4/0xd70 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x320/0xdc0 fs/fs-writeback.c:2403 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 Code: f94007f7 f2fbfff6 17ffff0c 97d006d8 (d4210000) ---[ end trace 0000000000000000 ]---