loop1: detected capacity change from 0 to 1024 hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4519 at fs/hfsplus/bnode.c:630 hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 Modules linked in: CPU: 1 PID: 4519 Comm: syz.1.20 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 lr : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 sp : ffff800020d36dc0 x29: ffff800020d36de0 x28: 1ffff000041a6dcc x27: dfff800000000000 x26: 0000000000000000 x25: 00000000000008f8 x24: ffff0000d2ca5888 x23: 0000000000000080 x22: 0000000000000000 x21: ffff0000d17a0000 x20: 0000000000000000 x19: ffff0000d2ca5800 x18: ffff800011abbcc0 x17: 1fffe00033edbb7e x16: ffff8000082d25ac x15: 0000000040000000 x14: 0000000000000002 x13: 1ffff00002a180b1 x12: 0000000000080000 x11: 0000000000047562 x10: ffff800021d3b000 x9 : a06e449290fdc500 x8 : a06e449290fdc500 x7 : ffff800008251e80 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000a8467ac x2 : ffff00019f6ddd10 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 hfsplus_bmap_alloc+0x5ac/0x8d8 fs/hfsplus/btree.c:421 hfs_bnode_split+0xc8/0xbb8 fs/hfsplus/brec.c:245 hfsplus_brec_insert+0x2f4/0xaa8 fs/hfsplus/brec.c:100 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 3916 hardirqs last enabled at (3915): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline] hardirqs last enabled at (3915): [] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5003 hardirqs last disabled at (3916): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (2954): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (2952): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4519 at fs/hfsplus/bnode.c:630 hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 Modules linked in: CPU: 1 PID: 4519 Comm: syz.1.20 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 lr : hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 sp : ffff800020d36e20 x29: ffff800020d36e40 x28: 1ffff000041a6dd8 x27: dfff800000000000 x26: 0000000000000000 x25: 0000000000000222 x24: ffff0000d2ca5888 x23: 0000000000000080 x22: 0000000000000000 x21: ffff0000d17a0000 x20: 0000000000000000 x19: ffff0000d2ca5800 x18: ffff800011abbcc0 x17: 0000000000000000 x16: ffff8000082d25ac x15: 0000000000000002 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 x11: 0000000000063fd5 x10: ffff800021d3b000 x9 : a06e449290fdc500 x8 : a06e449290fdc500 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800020d368f8 x4 : ffff8000151a4920 x3 : ffff80000a8467ac x2 : ffff00019f6ddd10 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x40c/0x4c8 fs/hfsplus/bnode.c:629 hfsplus_bmap_alloc+0x5ac/0x8d8 fs/hfsplus/btree.c:421 hfs_btree_inc_height+0xf8/0x8e0 fs/hfsplus/brec.c:475 hfsplus_brec_insert+0x5c8/0xaa8 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4180 hardirqs last enabled at (4179): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (4180): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (4102): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (4102): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (3919): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfsplus/bnode.c:675! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 4519 Comm: syz.1.20 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 lr : hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 sp : ffff800020d36f20 x29: ffff800020d36f20 x28: ffff0000d2ca5400 x27: dfff800000000000 x26: ffff7000041a6df8 x25: ffff800020d36fc0 x24: 1fffe0001a594b00 x23: ffff0000d17a0000 x22: dfff800000000000 x21: 0000000000000000 x20: ffff0000d2ca5880 x19: ffff0000d2ca5800 x18: ffff800011abbcc0 x17: 0000000000000000 x16: ffff8000082e7de8 x15: 0000000000000002 x14: 0000000000000001 x13: 1ffff00002a180b1 x12: 0000000000080000 x11: 000000000007e533 x10: ffff800021d3b000 x9 : ffff800008f6fc48 x8 : 000000000007e534 x7 : ffff8000117f71e4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008f6f814 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfsplus_bnode_put+0x490/0x49c fs/hfsplus/bnode.c:675 hfs_btree_inc_height+0x48c/0x8e0 fs/hfsplus/brec.c:530 hfsplus_brec_insert+0x5c8/0xaa8 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x31c/0xdd4 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf88/0x16c0 fs/hfsplus/super.c:573 mount_bdev+0x264/0x358 fs/super.c:1443 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:654 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3078 path_mount+0x5b4/0xe78 fs/namespace.c:3408 do_mount fs/namespace.c:3421 [inline] __do_sys_mount fs/namespace.c:3629 [inline] __se_sys_mount fs/namespace.c:3606 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3606 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1403e0 97e59e52 17ffffb4 97d4c80f (d4210000) ---[ end trace 0000000000000000 ]---