Most recent kernel where this bug did not occur:
Distribution: debian amd64
Hardware Environment: acer aspire 1501lce
Problem Description:
----------- [cut here ] --------- [please bite here ] ---------
Kernel BUG at "fs/hfsplus/bnode.c":585
invalid operand: 0000 [1] PREEMPT 
CPU 0 
Modules linked in: nls_utf8 hfsplus rfcomm l2cap bluetooth ipv6 capability
commoncap lp ac battery wbsd mmc_core parport_pc parport pcspkr usb_storage
snd_via82xx_modem snd_seq_dummy snd_seq_oss snd_seq_midi snd_seq_midi_event
snd_seq snd_via82xx gameport snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm
snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device snd
soundcore ehci_hcd eth1394 uhci_hcd usbcore tg3 ohci1394 ieee1394 yenta_socket
rsrc_nonstatic binfmt_misc pcmcia pcmcia_core firmware_class tun ide_cd cdrom
atkbd thermal powernow_k8 freq_table tsdev joydev
Pid: 4281, comm: cp Not tainted 2.6.13-rc6-git5
RIP: 0010:[<ffffffff8825b70c>] <ffffffff8825b70c>{:hfsplus:hfsplus_bnode_create+124}
RSP: 0018:ffff81001b1319d8  EFLAGS: 00010292
RAX: 0000000000000021 RBX: 000000000000119a RCX: ffff81001b130000
RDX: 00000000ffffffff RSI: ffff810013874170 RDI: ffff81001e8c1820
RBP: ffff8100117fcc80 R08: ffff81001b130000 R09: 0000000000000001
R10: 00000000014bc2f8 R11: 00000000079b0356 R12: ffff81001e8ac2e8
R13: ffff8100151f7000 R14: 0000000000001198 R15: ffff81001b131a36
FS:  00002aaaab00acf0(0000) GS:ffffffff804d5800(0000) knlGS:0000000060c1fbb0
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 00002aaaab693000 CR3: 0000000004ec9000 CR4: 00000000000006e0
Process cp (pid: 4281, threadinfo ffff81001b130000, task ffff810013874170)
Stack: ffff8100151f7000 000000000000119a ffff8100114ddc80 ffff81001e8ac2e8 
       ffff8100151f7000 0000000000001198 ffff81001b131a36 ffffffff8825a51e 
       ffff81000f8e4000 ffff81001e8ac540 
Call Trace:<ffffffff8825a51e>{:hfsplus:hfsplus_bmap_alloc+414}
       <ffffffff88257726>{:hfsplus:hfsplus_add_extent+22}
<ffffffff8825bfa8>{:hfsplus:hfs_bnode_split+40}
       <ffffffff8825c7eb>{:hfsplus:hfsplus_brec_insert+283}
       <ffffffff8825892a>{:hfsplus:hfsplus_create_cat+666}
       <ffffffff80198203>{dput+35} <ffffffff8018de35>{do_lookup+117}
       <ffffffff80198203>{dput+35} <ffffffff8018e0c5>{__link_path_walk+293}
       <ffffffff80198203>{dput+35} <ffffffff8019a51a>{new_inode+26}
       <ffffffff88259a4f>{:hfsplus:hfsplus_create+79}
<ffffffff801909ef>{vfs_create+207}
       <ffffffff80190c3d>{open_namei+445} <ffffffff8017d90d>{filp_open+45}
       <ffffffff8017cad2>{get_unused_fd+98} <ffffffff8017da04>{sys_open+84}
       <ffffffff8010ebae>{system_call+126} 

Code: 0f 0b a3 86 e3 25 88 ff ff ff ff c2 49 02 89 de 4c 89 ef e8 
RIP <ffffffff8825b70c>{:hfsplus:hfsplus_bnode_create+124} RSP <ffff81001b1319d8>


Steps to reproduce:
I loopback mounted a hfsplus partition, and copied some files.