hfs: new node 0 already hashed?
------------[ cut here ]------------
WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create+0x384/0x430 fs/hfs/bnode.c:519, CPU#0: kworker/u8:17/4958
Modules linked in:
CPU: 0 UID: 0 PID: 4958 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: writeback wb_workfn (flush-7:1)
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : hfs_bnode_create+0x384/0x430 fs/hfs/bnode.c:519
lr : hfs_bnode_create+0x384/0x430 fs/hfs/bnode.c:519
sp : ffff8000a1cc6bd0
x29: ffff8000a1cc6be0 x28: 0000000000000000 x27: dfff800000000000
x26: 0000000000000080 x25: dfff800000000000 x24: 0000000000000000
x23: ffff0000eadab08c x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000fb3b0000 x19: ffff0000dd518a00 x18: 00000000ffffffff
x17: ffff800093599000 x16: ffff800082e5e68c x15: 0000000000000001
x14: 1ffff00014398cf4 x13: 0000000000000000 x12: 0000000000000000
x11: ffff700014398cf5 x10: 0000000000ff0100 x9 : 02e79d00e730a700
x8 : 02e79d00e730a700 x7 : ffff8000805761f8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001f
Call trace:
 hfs_bnode_create+0x384/0x430 fs/hfs/bnode.c:519 (P)
 hfs_bmap_alloc+0x5b0/0x688 fs/hfs/btree.c:326
 hfs_btree_inc_height+0xf8/0x870 fs/hfs/brec.c:490
 hfs_brec_insert+0x664/0xa10 fs/hfs/brec.c:148
 __hfs_ext_write_extent+0x230/0x488 fs/hfs/extent.c:124
 hfs_ext_write_extent+0x144/0x1bc fs/hfs/extent.c:144
 hfs_write_inode+0xc4/0x7b8 fs/hfs/inode.c:441
 write_inode fs/fs-writeback.c:1582 [inline]
 __writeback_single_inode+0x6b0/0x16b8 fs/fs-writeback.c:1802
 writeback_sb_inodes+0x73c/0x16b4 fs/fs-writeback.c:2030
 wb_writeback+0x3b4/0xd70 fs/fs-writeback.c:2216
 wb_do_writeback fs/fs-writeback.c:2363 [inline]
 wb_workfn+0x320/0xdc0 fs/fs-writeback.c:2403
 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3421
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 59726
hardirqs last  enabled at (59725): [<ffff80008af995cc>] irqentry_exit+0x1b4/0x308 kernel/entry/common.c:219
hardirqs last disabled at (59726): [<ffff80008af93820>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412
softirqs last  enabled at (59610): [<ffff80008a8215ec>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (59610): [<ffff80008a8215ec>] ieee80211_ibss_work+0x294/0xd54 net/mac80211/ibss.c:1662
softirqs last disabled at (59608): [<ffff80008a821418>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (59608): [<ffff80008a821418>] ieee80211_ibss_work+0xc0/0xd54 net/mac80211/ibss.c:1651
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
kernel BUG at fs/hfs/bnode.c:565!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 0 UID: 0 PID: 4958 Comm: kworker/u8:17 Tainted: G        W           syzkaller #0 PREEMPT 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: writeback wb_workfn (flush-7:1)
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : hfs_bnode_put+0x348/0x3c4 fs/hfs/bnode.c:565
lr : hfs_bnode_put+0x348/0x3c4 fs/hfs/bnode.c:565
sp : ffff8000a1cc6cc0
x29: ffff8000a1cc6cd0 x28: 0000000000000302 x27: dfff800000000000
x26: ffff700014398dac x25: ffff8000a1cc6d60 x24: 0000000000000200
x23: ffff0000fb3b0000 x22: dfff800000000000 x21: 0000000000000000
x20: ffff0000dd518a80 x19: ffff0000dd518a00 x18: 00000000ffffffff
x17: ffff800093599000 x16: ffff800080544d7c x15: 0000000000000001
x14: 1fffe0001baa3150 x13: 0000000000000000 x12: 0000000000000000
x11: ffff60001baa3151 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000d75c0000 x7 : ffff80008af09f78 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800081364f98
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 hfs_bnode_put+0x348/0x3c4 fs/hfs/bnode.c:565 (P)
 hfs_btree_inc_height+0x448/0x870 fs/hfs/brec.c:544
 hfs_brec_insert+0x664/0xa10 fs/hfs/brec.c:148
 __hfs_ext_write_extent+0x230/0x488 fs/hfs/extent.c:124
 hfs_ext_write_extent+0x144/0x1bc fs/hfs/extent.c:144
 hfs_write_inode+0xc4/0x7b8 fs/hfs/inode.c:441
 write_inode fs/fs-writeback.c:1582 [inline]
 __writeback_single_inode+0x6b0/0x16b8 fs/fs-writeback.c:1802
 writeback_sb_inodes+0x73c/0x16b4 fs/fs-writeback.c:2030
 wb_writeback+0x3b4/0xd70 fs/fs-writeback.c:2216
 wb_do_writeback fs/fs-writeback.c:2363 [inline]
 wb_workfn+0x320/0xdc0 fs/fs-writeback.c:2403
 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3421
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
Code: f94007f7 f2fbfff6 17ffff45 97cfa621 (d4210000) 
---[ end trace 0000000000000000 ]---