From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out203-205-221-233.mail.qq.com (out203-205-221-233.mail.qq.com [203.205.221.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id EF0A323D7FF for ; Wed, 15 Apr 2026 00:52:38 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=203.205.221.233 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776214362; cv=none; b=Bm0X/Kr5iCOES2utxT1XbPxdgA0CRPHX67kCPqhEMIFr/Q0Rqurn/oVe0x6Cl2HGFf9/nJDC9CBhgR0v35we5sPSaiucqLzrrl0PBxpta59bqi/zuPxZtYQi1QwHGX1n5+RpRWvB9Zd+KEwjjyT2+o+d/ogeyfzFzbdYkPhuXsM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776214362; c=relaxed/simple; bh=BB7a1MSqL3lO3DLboQNAqxIZ2y5Juu20/TWlTihft3Y=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=ZhISemQFkoKC0wAHRj2EEalaPXsg5Y3PLfNnD9AiVGuM6f44wnaKLnhFcoZ4X8/M1WJCqKpGsVGxxsHyyaiaEM9zrQUKhexhxhasJTRvCt263H7Ts6hoSXjNsdr+pDijOlFFWQgBrJX9sYxRi1HaU5HtJr/lMXvkD6JVD4dECC4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=gU071qQv; arc=none smtp.client-ip=203.205.221.233 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="gU071qQv" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1776214350; bh=bzQ0mdGUW156NC9CFpkuDFiQbr5wZrBy9r8ks1LG8gI=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=gU071qQvfBTCSB5PJ8MHWmQCaLeWp985y67DotAu2IIgtl1dcDlYtF8A889wAFI1N gaNp7d4rKE35edntkg4os3nnjKa2NPAfmx3jt5TXssEnFCzSSWcYaSYDIeXhf/jxcc p7jcbEex+U4NYujRIKxDIjV8KxbL6gDxXNCi7SfA= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszb51-1.qq.com (NewEsmtp) with SMTP id D1C0A8A1; Wed, 15 Apr 2026 08:52:28 +0800 X-QQ-mid: xmsmtpt1776214348t7a1s0dih Message-ID: X-QQ-XMAILINFO: Nq4zXdVTSZRGXPUbh+lRAZ3pdVKt+EajbYwMfxQ6/XOSxEi4OjtXLNaUEqygK7 WCZq0MDOcstz5HKJCshkTw2HhKWcw2IQr8ylZYbm/sQwHhYz1Ya1ABDwE6SknkLc+RCSkc5S6m0G d6gv/jw/Ei6DbZn1GFXRP+QrqqNkEo1RFfnUGzw03nQ3RXYzyHx/AcHhJgu7zeClRHMUgCcPitBO Dt8DibEcALvmlpW5Y/kEMTkJUFmR2rrCj3RoYgIcHkIUNE7St2NKW4PXPEKGYp/kNHklQqktT5lf wwRm1Rj/mX7FB5kbYUXvC0ezj1YxwILepnB1V3iUNovLczSehqdSBsMOs5ecN3yOf+Z4Sqnllm5G uGAXzn6yJd774VMvdFtaYwDX/f5iC+tH1JsDklnbBr+KnQOJ/xARgE+7RCpaa3B7aff6NJY22+db +TtBlIyK9CdVaK9PakezKtJ8owCcxL/IdrKAe+Y0j5ifoL9dKIOU8h6rjkOj6ctRUSQSgPqHIpDS w1RanveiE7U/xknqd5qmC3DvdbZCJcE5vyOulnlHSJ/FHQB8F2Ei+wt9Bs7X7SkBss+Qr6Dhu4j+ EdYmr0W5ADM2u4mkfy3CYnYMPeGCnuHEbAa4YTetoW5pLvd7FGp5R5tfZ56Wq+R8xLFQImrRTfb5 e0vEz78odxjbESrC2XGiQcsPft+yoHhxVIiYIjpd0R8YQJ5GFdvDVCu2gUN8q1KT3LDuezNUjXoE kgO2irt2zamwIZMMtD3VAw5MgJgx/jWj5SY9zFt25NoLX3ncNW9DVuDrucmhh7WZ09jA3xHS755i DFopMg5RCboL2X3hu00anEyHo6cc7jQGr7bIeE5BEQ4y7vndF8U4d1+NTBJvgstFi6NKGz6ZbX9l UB4Z45KegiN7SHoT/tbYu1YutCvkHnkPveUsroTqsBKFlzsHVnsW318Xp4nKRTOvZKFhEMtXMVhN vCB7+Qu1Jecu2ukTxOB9FdyGoTYxsBHVbf8W3hE+Q= X-QQ-XMRINFO: NyFYKkN4Ny6FuXrnB5Ye7Aabb3ujjtK+gg== From: Edward Adam Davis To: syzbot+217eb327242d08197efb@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [hfs?] KMSAN: uninit-value in hfsplus_bnode_find Date: Wed, 15 Apr 2026 08:52:29 +0800 X-OQ-MSGID: <20260415005228.291781-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69decbd0.a00a0220.468cb.006b.GAE@google.com> References: <69decbd0.a00a0220.468cb.006b.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/fs/hfsplus/bnode.c b/fs/hfsplus/bnode.c index 250a226336ea..56a046ba4d54 100644 --- a/fs/hfsplus/bnode.c +++ b/fs/hfsplus/bnode.c @@ -576,7 +576,10 @@ struct hfs_bnode *hfs_bnode_find(struct hfs_btree *tree, u32 num) goto node_error; } - rec_off = tree->node_size - 2; + if (tree->node_size < 2) + goto node_error; + else + rec_off = tree->node_size - 2; off = hfs_bnode_read_u16(node, rec_off); if (off != sizeof(struct hfs_bnode_desc)) goto node_error;