loop7: detected capacity change from 0 to 1024 ===================================================== BUG: KMSAN: uninit-value in hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 fs/hfsplus/catalog.c:513 hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline] hfsplus_rename_cat+0x1173/0x17e0 fs/hfsplus/catalog.c:513 hfsplus_rename+0x1fc/0x2f0 fs/hfsplus/dir.c:552 vfs_rename+0x1e87/0x2460 fs/namei.c:5137 do_renameat2+0x175e/0x1d70 fs/namei.c:5286 __do_sys_rename fs/namei.c:5333 [inline] __se_sys_rename fs/namei.c:5331 [inline] __ia32_sys_rename+0xd7/0x140 fs/namei.c:5331 ia32_sys_call+0x3d36/0x42c0 arch/x86/include/generated/asm/syscalls_32.h:39 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_rename_cat+0x10a9/0x17e0 fs/hfsplus/catalog.c:496 hfsplus_rename+0x1fc/0x2f0 fs/hfsplus/dir.c:552 vfs_rename+0x1e87/0x2460 fs/namei.c:5137 do_renameat2+0x175e/0x1d70 fs/namei.c:5286 __do_sys_rename fs/namei.c:5333 [inline] __se_sys_rename fs/namei.c:5331 [inline] __ia32_sys_rename+0xd7/0x140 fs/namei.c:5331 ia32_sys_call+0x3d36/0x42c0 arch/x86/include/generated/asm/syscalls_32.h:39 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was stored to memory at: hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline] hfsplus_create_cat+0x18fb/0x1910 fs/hfsplus/catalog.c:314 hfsplus_fill_super+0x212e/0x2740 fs/hfsplus/super.c:561 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1681 get_tree_bdev+0x38/0x50 fs/super.c:1704 hfsplus_get_tree+0x35/0x40 fs/hfsplus/super.c:640 vfs_get_tree+0xb3/0x5c0 fs/super.c:1804 do_new_mount+0x738/0x1610 fs/namespace.c:3885 path_mount+0x6db/0x1e90 fs/namespace.c:4209 do_mount fs/namespace.c:4222 [inline] __do_sys_mount fs/namespace.c:4433 [inline] __se_sys_mount+0x6eb/0x7d0 fs/namespace.c:4410 __ia32_sys_mount+0xe2/0x150 fs/namespace.c:4410 ia32_sys_call+0x2733/0x42c0 arch/x86/include/generated/asm/syscalls_32.h:22 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was created at: __alloc_frozen_pages_noprof+0x689/0xf00 mm/page_alloc.c:4982 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2419 alloc_frozen_pages_noprof+0xf7/0x200 mm/mempolicy.c:2490 alloc_slab_page mm/slub.c:2451 [inline] allocate_slab+0x24d/0x1220 mm/slub.c:2619 new_slab mm/slub.c:2673 [inline] ___slab_alloc+0xfec/0x3480 mm/slub.c:3859 __slab_alloc mm/slub.c:3949 [inline] __slab_alloc_node mm/slub.c:4024 [inline] slab_alloc_node mm/slub.c:4185 [inline] kmem_cache_alloc_lru_noprof+0x922/0xed0 mm/slub.c:4216 hfsplus_alloc_inode+0x5a/0xd0 fs/hfsplus/super.c:627 alloc_inode+0x87/0x4a0 fs/inode.c:346 iget_locked+0x239/0x12d0 fs/inode.c:1439 hfsplus_iget+0x5c/0xb80 fs/hfsplus/super.c:65 hfsplus_btree_open+0x134/0x1d00 fs/hfsplus/btree.c:150 hfsplus_fill_super+0x12a3/0x2740 fs/hfsplus/super.c:486 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1681 get_tree_bdev+0x38/0x50 fs/super.c:1704 hfsplus_get_tree+0x35/0x40 fs/hfsplus/super.c:640 vfs_get_tree+0xb3/0x5c0 fs/super.c:1804 do_new_mount+0x738/0x1610 fs/namespace.c:3885 path_mount+0x6db/0x1e90 fs/namespace.c:4209 do_mount fs/namespace.c:4222 [inline] __do_sys_mount fs/namespace.c:4433 [inline] __se_sys_mount+0x6eb/0x7d0 fs/namespace.c:4410 __ia32_sys_mount+0xe2/0x150 fs/namespace.c:4410 ia32_sys_call+0x2733/0x42c0 arch/x86/include/generated/asm/syscalls_32.h:22 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e CPU: 1 UID: 0 PID: 6840 Comm: syz.7.262 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 =====================================================