------------[ cut here ]------------ WARNING: CPU: 0 PID: 4268 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 fs/hfs/bnode.c:529 Modules linked in: CPU: 1 PID: 4268 Comm: kworker/u4:5 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: writeback wb_workfn (flush-7:1) RIP: 0010:hfs_bnode_create+0x3d1/0x450 fs/hfs/bnode.c:530 Code: 86 1f 8a 89 ee e8 0f e3 72 07 e9 57 fd ff ff e8 15 c0 4b ff 4c 89 ef e8 4d cf 86 07 48 c7 c7 40 87 1f 8a 89 ee e8 ef e2 72 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c RSP: 0018:ffffc9000337ee70 EFLAGS: 00010246 RAX: 000000000000001f RBX: ffff88801d770000 RCX: ca329de2445c8200 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200066fd31 R10: fffff5200066fd31 R11: 1ffff9200066fd30 R12: 0000000000000000 R13: ffff88801d7700e0 R14: ffff888019bdcf00 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8752619000 CR3: 000000005f8b1000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hfs_bmap_alloc+0x5b2/0x660 fs/hfs/btree.c:288 hfs_btree_inc_height+0xf3/0xac0 fs/hfs/brec.c:490 hfs_brec_insert+0x73e/0xbc0 fs/hfs/brec.c:148 __hfs_ext_write_extent+0x2a1/0x470 fs/hfs/extent.c:124 hfs_ext_write_extent+0x15e/0x1e0 fs/hfs/extent.c:144 hfs_write_inode+0x8e/0x970 fs/hfs/inode.c:432 write_inode fs/fs-writeback.c:1505 [inline] __writeback_single_inode+0x6c3/0xda0 fs/fs-writeback.c:1715 writeback_sb_inodes+0x9fe/0x1610 fs/fs-writeback.c:1940 wb_writeback+0x443/0xb90 fs/fs-writeback.c:2114 wb_do_writeback fs/fs-writeback.c:2257 [inline] wb_workfn+0x423/0xe60 fs/fs-writeback.c:2298 process_one_work+0x863/0x1000 kernel/workqueue.c:2310 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287