Skip to contentSkip to conversation

KMSAN: uninit-value in hfs_revalidate_dentry

syzbot syzbot 2 participants 9 messages Nov 25, 2022 – Jun 9, 2024

Subsystems (2)
VFS HFS filesystem
lore
Share & tools
lore

syzbot

author syzbot
#0 lore raw

Hello,

syzbot found the following issue on:

HEAD commit:    a472f15b3d1e kmsan: allow using __msan_instrument_asm_stor..
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=1206a7fd880000
kernel config:  https://syzkaller.appspot.com/x/.config?x=1429f86b132e6d40
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       clang version 15.0.0 (https://github.com/llvm/llvm-project.git 610139d2d9ce6746b3c617fb3e2f7886272d26ff), GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a8bf743ab4c3/disk-a472f15b.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/7248eae68bc7/vmlinux-a472f15b.xz
kernel image: https://storage.googleapis.com/syzbot-assets/0e33e55592a5/bzImage-a472f15b.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by [email protected]

loop0: detected capacity change from 0 to 64
=====================================================

BUG: KMSAN: uninit-value in hfs_revalidate_dentry+0x17f/0x3e0 fs/hfs/sysdep.c:30
 hfs_revalidate_dentry+0x17f/0x3e0 fs/hfs/sysdep.c:30
 d_revalidate fs/namei.c:856 [inline]
 lookup_open fs/namei.c:3345 [inline]
 open_last_lookups fs/namei.c:3481 [inline]
 path_openat+0x115a/0x5600 fs/namei.c:3710
 do_filp_open+0x249/0x660 fs/namei.c:3740
 do_sys_openat2+0x1f0/0x910 fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_compat_sys_openat fs/open.c:1386 [inline]
 __se_compat_sys_openat fs/open.c:1384 [inline]
 __ia32_compat_sys_openat+0x2a7/0x330 fs/open.c:1384
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:

 __alloc_pages+0x9f1/0xe80 mm/page_alloc.c:5578
 alloc_pages+0xaae/0xd80 mm/mempolicy.c:2285
 alloc_slab_page mm/slub.c:1794 [inline]
 allocate_slab+0x1b5/0x1010 mm/slub.c:1939
 new_slab mm/slub.c:1992 [inline]
 ___slab_alloc+0x10c3/0x2d60 mm/slub.c:3180
 __slab_alloc mm/slub.c:3279 [inline]
 slab_alloc_node mm/slub.c:3364 [inline]
 slab_alloc mm/slub.c:3406 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3413 [inline]
 kmem_cache_alloc_lru+0x6f3/0xb30 mm/slub.c:3429
 alloc_inode_sb include/linux/fs.h:3117 [inline]
 hfs_alloc_inode+0x56/0xc0 fs/hfs/super.c:165
 alloc_inode+0x83/0x440 fs/inode.c:259
 iget_locked+0x2a1/0xe20 fs/inode.c:1286
 hfs_btree_open+0x162/0x1ab0 fs/hfs/btree.c:38
 hfs_mdb_get+0x207d/0x29b0 fs/hfs/mdb.c:199
 hfs_fill_super+0x1d13/0x2400 fs/hfs/super.c:406
 mount_bdev+0x508/0x840 fs/super.c:1401
 hfs_mount+0x49/0x60 fs/hfs/super.c:456
 legacy_get_tree+0x10c/0x280 fs/fs_context.c:610
 vfs_get_tree+0xa1/0x500 fs/super.c:1531
 do_new_mount+0x694/0x1580 fs/namespace.c:3040
 path_mount+0x71a/0x1eb0 fs/namespace.c:3370
 do_mount fs/namespace.c:3383 [inline]
 __do_sys_mount fs/namespace.c:3591 [inline]
 __se_sys_mount+0x734/0x840 fs/namespace.c:3568
 __ia32_sys_mount+0xdf/0x140 fs/namespace.c:3568
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 0 PID: 4234 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller-63555-ga472f15b3d1e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
=====================================================

---
This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at [email protected].

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

author syzbot
#1 lore raw
syzbot has found a reproducer for the following issue on:

syzbot has found a reproducer for the following issue on:

HEAD commit:    8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
kernel config:  https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=15c76993480000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by [email protected]

=======================================================
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand option from the mount to silence this warning.
=======================================================
=====================================================

BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
 hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
 hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
 block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
 hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
 filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
 do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
 do_read_cache_page mm/filemap.c:3595 [inline]
 read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
 read_mapping_page include/linux/pagemap.h:755 [inline]
 hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
 hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
 hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
 mount_bdev+0x628/0x920 fs/super.c:1359
 hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
 legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
 vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
 do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
 path_mount+0xf98/0x26a0 fs/namespace.c:3475
 do_mount fs/namespace.c:3488 [inline]
 __do_sys_mount fs/namespace.c:3697 [inline]
 __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
 __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:

 __alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
 alloc_pages+0xb4b/0xec0
 alloc_slab_page mm/slub.c:1851 [inline]
 allocate_slab mm/slub.c:1998 [inline]
 new_slab+0x5c5/0x19b0 mm/slub.c:2051
 ___slab_alloc+0x132b/0x3790 mm/slub.c:3193
 __slab_alloc mm/slub.c:3292 [inline]
 __slab_alloc_node mm/slub.c:3345 [inline]
 slab_alloc_node mm/slub.c:3442 [inline]
 slab_alloc mm/slub.c:3460 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
 kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
 alloc_inode_sb include/linux/fs.h:3119 [inline]
 hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
 alloc_inode+0xad/0x4b0 fs/inode.c:259
 iget_locked+0x340/0xf80 fs/inode.c:1286
 hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
 hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
 hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
 mount_bdev+0x628/0x920 fs/super.c:1359
 hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
 legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
 vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
 do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
 path_mount+0xf98/0x26a0 fs/namespace.c:3475
 do_mount fs/namespace.c:3488 [inline]
 __do_sys_mount fs/namespace.c:3697 [inline]
 __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
 __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
=====================================================
#2 lore raw

#syz test: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc

Quoted 97 lines · syzbot

syzbot has found a reproducer for the following issue on:

HEAD commit:    8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
kernel config:  https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=15c76993480000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by [email protected]

=======================================================
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand option from the mount to silence this warning.
=======================================================
=====================================================

BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
  hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
  hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
  block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
  hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
  filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
  do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
  do_read_cache_page mm/filemap.c:3595 [inline]
  read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
  read_mapping_page include/linux/pagemap.h:755 [inline]
  hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
  hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
  hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
  mount_bdev+0x628/0x920 fs/super.c:1359
  hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
  legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
  vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
  do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
  path_mount+0xf98/0x26a0 fs/namespace.c:3475
  do_mount fs/namespace.c:3488 [inline]
  __do_sys_mount fs/namespace.c:3697 [inline]
  __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
  __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
  do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
  __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
  do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
  do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
  entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:

  __alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
  alloc_pages+0xb4b/0xec0
  alloc_slab_page mm/slub.c:1851 [inline]
  allocate_slab mm/slub.c:1998 [inline]
  new_slab+0x5c5/0x19b0 mm/slub.c:2051
  ___slab_alloc+0x132b/0x3790 mm/slub.c:3193
  __slab_alloc mm/slub.c:3292 [inline]
  __slab_alloc_node mm/slub.c:3345 [inline]
  slab_alloc_node mm/slub.c:3442 [inline]
  slab_alloc mm/slub.c:3460 [inline]
  __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
  kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
  alloc_inode_sb include/linux/fs.h:3119 [inline]
  hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
  alloc_inode+0xad/0x4b0 fs/inode.c:259
  iget_locked+0x340/0xf80 fs/inode.c:1286
  hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
  hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
  hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
  mount_bdev+0x628/0x920 fs/super.c:1359
  hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
  legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
  vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
  do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
  path_mount+0xf98/0x26a0 fs/namespace.c:3475
  do_mount fs/namespace.c:3488 [inline]
  __do_sys_mount fs/namespace.c:3697 [inline]
  __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
  __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
  do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
  __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
  do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
  do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
  entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
=====================================================
author syzbot
#3 lore raw
syzbot tried to test the proposed patch but the build/boot failed:

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

memory: 36984K

[   50.182299][    T1] Write protecting the kernel read-only data: 262144k
[   50.230344][    T1] Freeing unused kernel image (rodata/data gap) memory: 1860K
[   51.888217][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   51.898420][    T1] x86/mm: Checking user space page tables
[   53.414268][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   53.423551][    T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[   53.444612][    T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[   53.456544][    T1] Run /sbin/init as init process
[   54.990987][ T4448] mount (4448) used greatest stack depth: 8080 bytes left
[   55.063339][ T4449] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[   55.407814][ T4452] mount (4452) used greatest stack depth: 5536 bytes left

Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [ 59.268897][ T4482] udevd[4482]: starting version 3.2.11

[   62.847262][ T4483] udevd[4483]: starting eudev-3.2.11
[   62.860816][ T4482] udevd (4482) used greatest stack depth: 5296 bytes left

done
Starting system message bus: [ 101.638329][ T4678] dbus-uuidgen (4678) used greatest stack depth: 5288 bytes left done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-9.4.1 starting
dev: loaded udev
DUID 00:04:98:24:4c:28:99:7c:d9:70:fe:51:ca:fe:56:33:2c:7d
forked to background, child pid 4695

[  110.050686][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.117239][ T4696] eql: remember to turn off Van-Jacobson compression on your slave devices
[  111.294758][ T4772] ssh-keygen (4772) used greatest stack depth: 4480 bytes left

Starting sshd: [ 111.635136][ T779] cfg80211: failed to load regulatory.db OK

syzkaller

syzkaller login: [ 113.824166][ C0] =====================================================

[  113.831324][    C0] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0
[  113.838490][    C0]  receive_buf+0x25e3/0x5fd0
[  113.843430][    C0]  virtnet_poll+0xd1c/0x23c0
[  113.848241][    C0]  __napi_poll+0xe7/0x980
[  113.852660][    C0]  net_rx_action+0x82a/0x1850
[  113.857539][    C0]  handle_softirqs+0x1d8/0x810
[  113.862472][    C0]  __irq_exit_rcu+0x68/0x120
[  113.867263][    C0]  irq_exit_rcu+0x12/0x20
[  113.871748][    C0]  common_interrupt+0x94/0xa0
[  113.876625][    C0]  asm_common_interrupt+0x2b/0x40
[  113.881816][    C0]  __sanitizer_cov_trace_pc+0x0/0x70
[  113.887395][    C0]  update_stack_state+0x64/0x270
[  113.892486][    C0]  unwind_next_frame+0x19a/0x470
[  113.897959][    C0]  arch_stack_walk+0x1ec/0x2d0
[  113.902980][    C0]  stack_trace_save+0xaa/0xe0
[  113.908072][    C0]  kmsan_internal_poison_memory+0x49/0x90
[  113.913988][    C0]  kmsan_slab_alloc+0xdf/0x160
[  113.918925][    C0]  kmem_cache_alloc_noprof+0x637/0xb20
[  113.924598][    C0]  mas_alloc_nodes+0x4a3/0xf00
[  113.929579][    C0]  mas_preallocate+0x183c/0x2730
[  113.934818][    C0]  mmap_region+0x2ca2/0x4460
[  113.939784][    C0]  do_mmap+0xfc5/0x1a40
[  113.944442][    C0]  vm_mmap_pgoff+0x23b/0x5a0
[  113.949284][    C0]  ksys_mmap_pgoff+0x16e/0x7a0
[  113.954302][    C0]  __x64_sys_mmap+0x1a8/0x240
[  113.959245][    C0]  x64_sys_call+0x1bbf/0x3b50
[  113.964185][    C0]  do_syscall_64+0xcf/0x1e0
[  113.969036][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.975180][    C0] 
[  113.977671][    C0] Uninit was created at:
[  113.982057][    C0]  __alloc_pages_noprof+0x9d6/0xe70
[  113.987558][    C0]  alloc_pages_mpol_noprof+0x299/0x990
[  113.993311][    C0]  alloc_pages_noprof+0x1bf/0x1e0
[  113.998471][    C0]  skb_page_frag_refill+0x2bf/0x7c0
[  114.003973][    C0]  virtnet_rq_alloc+0x43/0xbb0
[  114.008926][    C0]  try_fill_recv+0x3f0/0x2f50
[  114.013776][    C0]  virtnet_open+0x1cc/0xb00
[  114.018581][    C0]  __dev_open+0x546/0x6f0
[  114.023118][    C0]  __dev_change_flags+0x309/0x9a0
[  114.028352][    C0]  dev_change_flags+0x8e/0x1d0
[  114.033326][    C0]  devinet_ioctl+0x13ec/0x22c0
[  114.038533][    C0]  inet_ioctl+0x4bd/0x6d0
[  114.042936][    C0]  sock_do_ioctl+0xb7/0x540
[  114.047801][    C0]  sock_ioctl+0x727/0xd70
[  114.052237][    C0]  __se_sys_ioctl+0x261/0x450
[  114.057137][    C0]  __x64_sys_ioctl+0x96/0xe0
[  114.061972][    C0]  x64_sys_call+0x1883/0x3b50
[  114.067162][    C0]  do_syscall_64+0xcf/0x1e0
[  114.071823][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.077958][    C0] 
[  114.080379][    C0] CPU: 0 PID: 4812 Comm: dhcpcd-run-hook Not tainted 6.9.0-syzkaller-10230-g4d30ff38e3f9 #0
[  114.090739][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  114.101012][    C0] =====================================================
[  114.108227][    C0] Disabling lock debugging due to kernel taint
[  114.114572][    C0] Kernel panic - not syncing: kmsan.panic set ...
[  114.121098][    C0] CPU: 0 PID: 4812 Comm: dhcpcd-run-hook Tainted: G    B              6.9.0-syzkaller-10230-g4d30ff38e3f9 #0
[  114.132804][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  114.142969][    C0] Call Trace:
[  114.146437][    C0]  <IRQ>
[  114.149434][    C0]  dump_stack_lvl+0x216/0x2d0
[  114.154230][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.160181][    C0]  dump_stack+0x1e/0x30
[  114.164457][    C0]  panic+0x4e2/0xcd0
[  114.168670][    C0]  ? kmsan_get_metadata+0xb1/0x1d0
[  114.173913][    C0]  kmsan_report+0x2d5/0x2e0
[  114.178526][    C0]  ? is_last_task_frame+0x1d8/0x420
[  114.183941][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.189335][    C0]  ? __msan_warning+0x95/0x120
[  114.194328][    C0]  ? receive_buf+0x25e3/0x5fd0
[  114.199215][    C0]  ? virtnet_poll+0xd1c/0x23c0
[  114.204468][    C0]  ? __napi_poll+0xe7/0x980
[  114.209197][    C0]  ? net_rx_action+0x82a/0x1850
[  114.214155][    C0]  ? handle_softirqs+0x1d8/0x810
[  114.219313][    C0]  ? __irq_exit_rcu+0x68/0x120
[  114.224187][    C0]  ? irq_exit_rcu+0x12/0x20
[  114.228797][    C0]  ? common_interrupt+0x94/0xa0
[  114.233835][    C0]  ? asm_common_interrupt+0x2b/0x40
[  114.239212][    C0]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  114.245388][    C0]  ? update_stack_state+0x64/0x270
[  114.250627][    C0]  ? unwind_next_frame+0x19a/0x470
[  114.255886][    C0]  ? arch_stack_walk+0x1ec/0x2d0
[  114.260934][    C0]  ? stack_trace_save+0xaa/0xe0
[  114.265911][    C0]  ? kmsan_internal_poison_memory+0x49/0x90
[  114.272008][    C0]  ? kmsan_slab_alloc+0xdf/0x160
[  114.277047][    C0]  ? kmem_cache_alloc_noprof+0x637/0xb20
[  114.282820][    C0]  ? mas_alloc_nodes+0x4a3/0xf00
[  114.287876][    C0]  ? mas_preallocate+0x183c/0x2730
[  114.293206][    C0]  ? mmap_region+0x2ca2/0x4460
[  114.298092][    C0]  ? do_mmap+0xfc5/0x1a40
[  114.302532][    C0]  ? vm_mmap_pgoff+0x23b/0x5a0
[  114.307418][    C0]  ? ksys_mmap_pgoff+0x16e/0x7a0
[  114.312494][    C0]  ? __x64_sys_mmap+0x1a8/0x240
[  114.317451][    C0]  ? x64_sys_call+0x1bbf/0x3b50
[  114.322507][    C0]  ? do_syscall_64+0xcf/0x1e0
[  114.327358][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.333581][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.338899][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.344227][    C0]  ? page_to_skb+0xdae/0x1620
[  114.349019][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.354526][    C0]  __msan_warning+0x95/0x120
[  114.359242][    C0]  receive_buf+0x25e3/0x5fd0
[  114.364049][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.369356][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.375284][    C0]  virtnet_poll+0xd1c/0x23c0
[  114.380002][    C0]  ? __pfx_virtnet_poll+0x10/0x10
[  114.385130][    C0]  __napi_poll+0xe7/0x980
[  114.389562][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.394870][    C0]  net_rx_action+0x82a/0x1850
[  114.399646][    C0]  ? sched_clock_cpu+0x55/0x870
[  114.404604][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  114.409827][    C0]  handle_softirqs+0x1d8/0x810
[  114.414700][    C0]  __irq_exit_rcu+0x68/0x120
[  114.419381][    C0]  irq_exit_rcu+0x12/0x20
[  114.423803][    C0]  common_interrupt+0x94/0xa0
[  114.428576][    C0]  </IRQ>
[  114.431555][    C0]  <TASK>
[  114.434531][    C0]  asm_common_interrupt+0x2b/0x40
[  114.439653][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  114.445825][    C0] Code: f6 e8 04 58 80 00 5b 41 5e 5d c3 cc cc cc cc 8b 3a e8 74 ea 92 00 eb e3 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0c 25 80 5e 0a 00 65
[  114.465551][    C0] RSP: 0018:ffff888121413348 EFLAGS: 00000286
[  114.471907][    C0] RAX: ffff888116394cc0 RBX: ffff888121413428 RCX: ffff888116394180
[  114.480131][    C0] RDX: 0000000000000000 RSI: ffff888121413ed0 RDI: ffff888121413ed0
[  114.488297][    C0] RBP: ffff888121413368 R08: ffffea000000000f R09: ffff888121410000
[  114.496384][    C0] R10: ffff888121413428 R11: ffffffff81936f80 R12: ffff888121413e50
[  114.504462][    C0] R13: ffff888121413480 R14: ffff888121413ed0 R15: ffff888116394cc0
[  114.512556][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  114.518864][    C0]  ? decode_frame_pointer+0x19/0x80
[  114.524160][    C0]  update_stack_state+0x64/0x270
[  114.529362][    C0]  unwind_next_frame+0x19a/0x470
[  114.534440][    C0]  arch_stack_walk+0x1ec/0x2d0
[  114.539328][    C0]  ? __x64_sys_mmap+0x1a8/0x240
[  114.544459][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  114.550766][    C0]  stack_trace_save+0xaa/0xe0
[  114.555558][    C0]  kmsan_internal_poison_memory+0x49/0x90
[  114.561409][    C0]  ? kmsan_internal_poison_memory+0x49/0x90
[  114.567444][    C0]  ? kmsan_slab_alloc+0xdf/0x160
[  114.572748][    C0]  ? kmem_cache_alloc_noprof+0x637/0xb20
[  114.578571][    C0]  ? mas_alloc_nodes+0x4a3/0xf00
[  114.583901][    C0]  ? mas_preallocate+0x183c/0x2730
[  114.589207][    C0]  ? mmap_region+0x2ca2/0x4460
[  114.594137][    C0]  ? do_mmap+0xfc5/0x1a40
[  114.598572][    C0]  ? vm_mmap_pgoff+0x23b/0x5a0
[  114.603459][    C0]  ? ksys_mmap_pgoff+0x16e/0x7a0
[  114.608513][    C0]  ? __x64_sys_mmap+0x1a8/0x240
[  114.613461][    C0]  ? __kernel_text_address+0x2a/0xa0
[  114.618867][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.624169][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.629464][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.635372][    C0]  ? kmem_cache_alloc_noprof+0x67/0xb20
[  114.641123][    C0]  ? filter_irq_stacks+0x60/0x1a0
[  114.646435][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.652006][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.658172][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.663506][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.669455][    C0]  kmsan_slab_alloc+0xdf/0x160
[  114.674337][    C0]  kmem_cache_alloc_noprof+0x637/0xb20
[  114.679907][    C0]  ? mas_alloc_nodes+0x4a3/0xf00
[  114.685004][    C0]  mas_alloc_nodes+0x4a3/0xf00
[  114.689945][    C0]  mas_preallocate+0x183c/0x2730
[  114.695111][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.701089][    C0]  mmap_region+0x2ca2/0x4460
[  114.705900][    C0]  ? cap_mmap_addr+0x326/0x490
[  114.711067][    C0]  do_mmap+0xfc5/0x1a40
[  114.715362][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.720773][    C0]  vm_mmap_pgoff+0x23b/0x5a0
[  114.725483][    C0]  ksys_mmap_pgoff+0x16e/0x7a0
[  114.730543][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.735871][    C0]  __x64_sys_mmap+0x1a8/0x240
[  114.740657][    C0]  x64_sys_call+0x1bbf/0x3b50
[  114.745454][    C0]  do_syscall_64+0xcf/0x1e0
[  114.750047][    C0]  ? clear_bhb_loop+0x25/0x80
[  114.754827][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.760872][    C0] RIP: 0033:0x7f2869f18b74
[  114.765415][    C0] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f
[  114.785329][    C0] RSP: 002b:00007ffcbfc0e7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  114.793956][    C0] RAX: ffffffffffffffda RBX: 00000000000003d8 RCX: 00007f2869f18b74
[  114.802084][    C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000
[  114.810199][    C0] RBP: 0000000000002000 R08: 00000000ffffffff R09: 0000000000000000
[  114.818331][    C0] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f2869ca1218
[  114.826406][    C0] R13: 00007f2869ca1248 R14: 00007f2869f2cab0 R15: 00007f2869e22b10
[  114.834505][    C0]  </TASK>
[  114.838107][    C0] Kernel Offset: disabled
[  114.842503][    C0] Rebooting in 86400 seconds..

syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build255802096=/tmp/go-build -gno-record-gcc-switches'

git status (err=<nil>)
HEAD detached at 25905f5d0a
nothing to commit, working tree clean

tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64

gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"25905f5d0a2a7883bd33491997556193582c6059\"

Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=1056f66a980000

Tested on:

commit:         4d30ff38 hfs: fix to initialize .tz_secondswest in hfs..
git tree:       https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
kernel config:  https://syzkaller.appspot.com/x/.config?x=48182e7cc446d358
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.

#4 lore raw
In reply to syzbot

#syz test: https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc

Quoted 97 lines · syzbot

syzbot has found a reproducer for the following issue on:

HEAD commit:    8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
kernel config:  https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=15c76993480000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by [email protected]

=======================================================
WARNING: The mand mount option has been deprecated and
and is ignored by this kernel. Remove the mand option from the mount to silence this warning.
=======================================================
=====================================================

BUG: KMSAN: uninit-value in hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
BUG: KMSAN: uninit-value in hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
  hfs_ext_read_extent fs/hfs/extent.c:196 [inline]
  hfs_get_block+0x92d/0x1620 fs/hfs/extent.c:366
  block_read_full_folio+0x4ff/0x11b0 fs/buffer.c:2271
  hfs_read_folio+0x55/0x60 fs/hfs/inode.c:39
  filemap_read_folio+0x148/0x4f0 mm/filemap.c:2426
  do_read_cache_folio+0x7c8/0xd90 mm/filemap.c:3553
  do_read_cache_page mm/filemap.c:3595 [inline]
  read_cache_page+0xfb/0x2f0 mm/filemap.c:3604
  read_mapping_page include/linux/pagemap.h:755 [inline]
  hfs_btree_open+0x928/0x1ae0 fs/hfs/btree.c:78
  hfs_mdb_get+0x260c/0x3000 fs/hfs/mdb.c:204
  hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
  mount_bdev+0x628/0x920 fs/super.c:1359
  hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
  legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
  vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
  do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
  path_mount+0xf98/0x26a0 fs/namespace.c:3475
  do_mount fs/namespace.c:3488 [inline]
  __do_sys_mount fs/namespace.c:3697 [inline]
  __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
  __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
  do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
  __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
  do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
  do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
  entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:

  __alloc_pages+0x926/0x10a0 mm/page_alloc.c:5572
  alloc_pages+0xb4b/0xec0
  alloc_slab_page mm/slub.c:1851 [inline]
  allocate_slab mm/slub.c:1998 [inline]
  new_slab+0x5c5/0x19b0 mm/slub.c:2051
  ___slab_alloc+0x132b/0x3790 mm/slub.c:3193
  __slab_alloc mm/slub.c:3292 [inline]
  __slab_alloc_node mm/slub.c:3345 [inline]
  slab_alloc_node mm/slub.c:3442 [inline]
  slab_alloc mm/slub.c:3460 [inline]
  __kmem_cache_alloc_lru mm/slub.c:3467 [inline]
  kmem_cache_alloc_lru+0x72f/0xb80 mm/slub.c:3483
  alloc_inode_sb include/linux/fs.h:3119 [inline]
  hfs_alloc_inode+0x80/0xf0 fs/hfs/super.c:165
  alloc_inode+0xad/0x4b0 fs/inode.c:259
  iget_locked+0x340/0xf80 fs/inode.c:1286
  hfs_btree_open+0x20d/0x1ae0 fs/hfs/btree.c:38
  hfs_mdb_get+0x2519/0x3000 fs/hfs/mdb.c:199
  hfs_fill_super+0x1fb1/0x2790 fs/hfs/super.c:406
  mount_bdev+0x628/0x920 fs/super.c:1359
  hfs_mount+0xcd/0xe0 fs/hfs/super.c:456
  legacy_get_tree+0x167/0x2e0 fs/fs_context.c:610
  vfs_get_tree+0xdc/0x5d0 fs/super.c:1489
  do_new_mount+0x7a9/0x16f0 fs/namespace.c:3145
  path_mount+0xf98/0x26a0 fs/namespace.c:3475
  do_mount fs/namespace.c:3488 [inline]
  __do_sys_mount fs/namespace.c:3697 [inline]
  __se_sys_mount+0x919/0x9e0 fs/namespace.c:3674
  __ia32_sys_mount+0x15b/0x1b0 fs/namespace.c:3674
  do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
  __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
  do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
  do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
  entry_SYSENTER_compat_after_hwframe+0x70/0x82

CPU: 1 PID: 5015 Comm: syz-executor119 Not tainted 6.2.0-rc7-syzkaller-80760-g8c89ecf5c13b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
=====================================================
author syzbot
#5 lore raw
syzbot tried to test the proposed patch but the build/boot failed:

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

T1] ALSA device list:

[   49.732806][    T1]   #0: Dummy 1
[   49.736413][    T1]   #1: Loopback 1
[   49.740228][    T1]   #2: Virtual MIDI Card 1
[   49.750262][   T10] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   49.760115][   T10] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   49.769557][    T1] md: Waiting for all devices to be available before autodetect
[   49.777447][    T1] md: If you don't use raid, use raid=noautodetect
[   49.784213][    T1] md: Autodetecting RAID arrays.
[   49.789324][    T1] md: autorun ...
[   49.793191][    T1] md: ... autorun DONE.
[   49.912261][    T1] EXT4-fs (sda1): mounted filesystem 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 ro with ordered data mode. Quota mode: none.
[   49.925661][    T1] VFS: Mounted root (ext4 filesystem) readonly on device 8:1.
[   49.949100][    T1] devtmpfs: mounted
[   50.204085][    T1] Freeing unused kernel image (initmem) memory: 36920K
[   50.216901][    T1] Write protecting the kernel read-only data: 260096k
[   50.263842][    T1] Freeing unused kernel image (rodata/data gap) memory: 1876K
[   51.884629][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   51.895285][    T1] x86/mm: Checking user space page tables
[   53.370836][    T1] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   53.379919][    T1] Failed to set sysctl parameter 'kernel.hung_task_all_cpu_backtrace=1': parameter not found
[   53.401312][    T1] Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found
[   53.413335][    T1] Run /sbin/init as init process
[   55.024257][ T4444] mount (4444) used greatest stack depth: 8112 bytes left
[   55.119469][ T4445] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.
mount: mounting smackfs on /sys/fs/smackfs failed: No such file or directory
mount: mounting selinuxfs on /sys/fs/selinux failed: No such file or directory
[   55.460316][ T4448] mount (4448) used greatest stack depth: 5568 bytes left

Starting syslogd: OK
Starting acpid: OK
Starting klogd: OK
Running sysctl: OK
Populating /dev using udev: [ 59.293786][ T4478] udevd[4478]: starting version 3.2.11

[   62.812014][ T4480] udevd[4480]: starting eudev-3.2.11
[   62.823661][ T4478] udevd (4478) used greatest stack depth: 5344 bytes left
[   96.252561][ T1219] net_ratelimit: 2 callbacks suppressed
[   96.252654][ T1219] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[   96.267801][ T1219] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[   96.276910][ T1219] aoe: packet could not be sent on dummy0.  consider increasing tx_queue_len
[   96.286143][ T1219] aoe: packet could not be sent on eql.  consider increasing tx_queue_len
[   96.295161][ T1219] aoe: packet could not be sent on ifb0.  consider increasing tx_queue_len
[   96.304298][ T1219] aoe: packet could not be sent on ifb1.  consider increasing tx_queue_len
[   96.313312][ T1219] aoe: packet could not be sent on eth0.  consider increasing tx_queue_len
[   96.322319][ T1219] aoe: packet could not be sent on wlan0.  consider increasing tx_queue_len
[   96.331822][ T1219] aoe: packet could not be sent on wlan1.  consider increasing tx_queue_len
[   96.341035][ T1219] aoe: packet could not be sent on hwsim0.  consider increasing tx_queue_len

done
Starting system message bus: done
Starting iptables: OK
Starting network: OK
Starting dhcpcd...
dhcpcd-9.4.1 starting
dev: loaded udev
DUID 00:04:98:24:4c:28:99:7c:d9:70:fe:51:ca:fe:56:33:2c:7d forked to background, child pid 4692

[  110.213007][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.255329][ T4693] eql: remember to turn off Van-Jacobson compression on your slave devices

Starting sshd: [ 111.615530][ T10] cfg80211: failed to load regulatory.db
OK

syzkaller

syzkaller login: [ 114.058251][ C0] =====================================================

[  114.065473][    C0] BUG: KMSAN: uninit-value in receive_buf+0x25e3/0x5fd0
[  114.072524][    C0]  receive_buf+0x25e3/0x5fd0
[  114.077324][    C0]  virtnet_poll+0xd1c/0x23c0
[  114.082110][    C0]  __napi_poll+0xe7/0x980
[  114.086745][    C0]  net_rx_action+0x82a/0x1850
[  114.091708][    C0]  handle_softirqs+0x1ce/0x800
[  114.096721][    C0]  __irq_exit_rcu+0x68/0x120
[  114.101495][    C0]  irq_exit_rcu+0x12/0x20
[  114.106116][    C0]  common_interrupt+0x94/0xa0
[  114.111003][    C0]  asm_common_interrupt+0x2b/0x40
[  114.116235][    C0]  virt_to_page_or_null+0x9b/0x150
[  114.121622][    C0]  kmsan_get_metadata+0x146/0x1d0
[  114.126851][    C0]  kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.132755][    C0]  __msan_metadata_ptr_for_load_8+0x24/0x40
[  114.138838][    C0]  move_page_tables+0x22aa/0x3940
[  114.144062][    C0]  setup_arg_pages+0x1741/0x1eb0
[  114.149161][    C0]  load_elf_binary+0x186e/0x4e10
[  114.154310][    C0]  bprm_execve+0xc57/0x21c0
[  114.158971][    C0]  do_execveat_common+0xceb/0xd70
[  114.164231][    C0]  __x64_sys_execve+0xf4/0x130
[  114.169182][    C0]  x64_sys_call+0x164f/0x3b90
[  114.174097][    C0]  do_syscall_64+0xcd/0x1e0
[  114.178953][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.185159][    C0] 
[  114.187583][    C0] Uninit was created at:
[  114.191970][    C0]  __alloc_pages_noprof+0x9d6/0xe70
[  114.197429][    C0]  alloc_pages_mpol_noprof+0x299/0x990
[  114.203217][    C0]  alloc_pages_noprof+0x1bf/0x1e0
[  114.208521][    C0]  skb_page_frag_refill+0x2bf/0x7c0
[  114.214331][    C0]  virtnet_rq_alloc+0x43/0xbb0
[  114.219311][    C0]  try_fill_recv+0x3f0/0x2f50
[  114.224213][    C0]  virtnet_open+0x1cc/0xb00
[  114.228892][    C0]  __dev_open+0x546/0x6f0
[  114.233458][    C0]  __dev_change_flags+0x309/0x9a0
[  114.238699][    C0]  dev_change_flags+0x8e/0x1d0
[  114.243670][    C0]  devinet_ioctl+0x13ec/0x22c0
[  114.248707][    C0]  inet_ioctl+0x4bd/0x6d0
[  114.253223][    C0]  sock_do_ioctl+0xb7/0x540
[  114.257877][    C0]  sock_ioctl+0x727/0xd70
[  114.262296][    C0]  __se_sys_ioctl+0x261/0x450
[  114.267163][    C0]  __x64_sys_ioctl+0x96/0xe0
[  114.271913][    C0]  x64_sys_call+0x18c0/0x3b90
[  114.276861][    C0]  do_syscall_64+0xcd/0x1e0
[  114.281557][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.287691][    C0] 
[  114.290142][    C0] CPU: 0 PID: 4810 Comm: cmp Not tainted 6.10.0-rc2-syzkaller-00318-g68af0e6e57f1 #0
[  114.299891][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  114.310124][    C0] =====================================================
[  114.317210][    C0] Disabling lock debugging due to kernel taint
[  114.323590][    C0] Kernel panic - not syncing: kmsan.panic set ...
[  114.330063][    C0] CPU: 0 PID: 4810 Comm: cmp Tainted: G    B              6.10.0-rc2-syzkaller-00318-g68af0e6e57f1 #0
[  114.341090][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  114.351224][    C0] Call Trace:
[  114.354569][    C0]  <IRQ>
[  114.357458][    C0]  dump_stack_lvl+0x216/0x2d0
[  114.362339][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.368256][    C0]  dump_stack+0x1e/0x30
[  114.372558][    C0]  panic+0x4e2/0xcd0
[  114.376579][    C0]  ? kmsan_get_metadata+0xa1/0x1d0
[  114.381828][    C0]  kmsan_report+0x2d5/0x2e0
[  114.386474][    C0]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[  114.392494][    C0]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  114.398930][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.404232][    C0]  ? __msan_warning+0x95/0x120
[  114.409102][    C0]  ? receive_buf+0x25e3/0x5fd0
[  114.413993][    C0]  ? virtnet_poll+0xd1c/0x23c0
[  114.418899][    C0]  ? __napi_poll+0xe7/0x980
[  114.423521][    C0]  ? net_rx_action+0x82a/0x1850
[  114.428495][    C0]  ? handle_softirqs+0x1ce/0x800
[  114.433533][    C0]  ? __irq_exit_rcu+0x68/0x120
[  114.438422][    C0]  ? irq_exit_rcu+0x12/0x20
[  114.443046][    C0]  ? common_interrupt+0x94/0xa0
[  114.448005][    C0]  ? asm_common_interrupt+0x2b/0x40
[  114.453326][    C0]  ? virt_to_page_or_null+0x9b/0x150
[  114.458717][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.464012][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.469951][    C0]  ? __msan_metadata_ptr_for_load_8+0x24/0x40
[  114.476138][    C0]  ? move_page_tables+0x22aa/0x3940
[  114.481443][    C0]  ? setup_arg_pages+0x1741/0x1eb0
[  114.487208][    C0]  ? load_elf_binary+0x186e/0x4e10
[  114.492542][    C0]  ? bprm_execve+0xc57/0x21c0
[  114.497428][    C0]  ? do_execveat_common+0xceb/0xd70
[  114.502965][    C0]  ? __x64_sys_execve+0xf4/0x130
[  114.508049][    C0]  ? x64_sys_call+0x164f/0x3b90
[  114.513049][    C0]  ? do_syscall_64+0xcd/0x1e0
[  114.517835][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.524271][    C0]  ? kmsan_internal_memmove_metadata+0x17b/0x230
[  114.530728][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.536028][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.541332][    C0]  ? page_to_skb+0xdae/0x1620
[  114.546091][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.551404][    C0]  __msan_warning+0x95/0x120
[  114.556099][    C0]  receive_buf+0x25e3/0x5fd0
[  114.560811][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.566222][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.572325][    C0]  virtnet_poll+0xd1c/0x23c0
[  114.577052][    C0]  ? __pfx_virtnet_poll+0x10/0x10
[  114.582192][    C0]  __napi_poll+0xe7/0x980
[  114.586804][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.592127][    C0]  net_rx_action+0x82a/0x1850
[  114.596929][    C0]  ? sched_clock_cpu+0x55/0x870
[  114.601889][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  114.607136][    C0]  handle_softirqs+0x1ce/0x800
[  114.612097][    C0]  __irq_exit_rcu+0x68/0x120
[  114.616825][    C0]  irq_exit_rcu+0x12/0x20
[  114.621255][    C0]  common_interrupt+0x94/0xa0
[  114.626143][    C0]  </IRQ>
[  114.629121][    C0]  <TASK>
[  114.632123][    C0]  asm_common_interrupt+0x2b/0x40
[  114.637277][    C0] RIP: 0010:virt_to_page_or_null+0x9b/0x150
[  114.643734][    C0] Code: d6 48 c1 ee 23 48 8b 34 f1 48 85 f6 74 13 48 89 d1 48 c1 e9 1b 0f b6 c9 48 c1 e1 04 48 01 ce eb 02 31 f6 65 ff 05 ad a1 c4 7d <48> 85 f6 74 09 4c 8b 06 41 f6 c0 02 75 17 31 c9 65 ff 0d 96 a1 c4
[  114.663636][    C0] RSP: 0018:ffff888115fa3560 EFLAGS: 00000282
[  114.669801][    C0] RAX: ffff8881a04798b0 RBX: ffff8881204798b0 RCX: 0000000000000240
[  114.678046][    C0] RDX: 00000001204798b0 RSI: ffff88813fff9240 RDI: ffff8881204798b0
[  114.686097][    C0] RBP: ffff888115fa3560 R08: ffffea000000000f R09: 0000000000000000
[  114.694353][    C0] R10: ffff8881157a3588 R11: 0000000000000004 R12: 00007ffffffff000
[  114.702427][    C0] R13: ffff88811759ccc0 R14: 0000000000000001 R15: ffff8881204798b0
[  114.710503][    C0]  kmsan_get_metadata+0x146/0x1d0
[  114.715665][    C0]  kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  114.721472][    C0]  __msan_metadata_ptr_for_load_8+0x24/0x40
[  114.727581][    C0]  move_page_tables+0x22aa/0x3940
[  114.732810][    C0]  setup_arg_pages+0x1741/0x1eb0
[  114.737898][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.743211][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.748534][    C0]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  114.754977][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.760321][    C0]  load_elf_binary+0x186e/0x4e10
[  114.765360][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.770982][    C0]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  114.777440][    C0]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  114.783631][    C0]  ? load_elf_binary+0x1331/0x4e10
[  114.788932][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  114.794247][    C0]  ? __pfx_load_elf_binary+0x10/0x10
[  114.799718][    C0]  bprm_execve+0xc57/0x21c0
[  114.804338][    C0]  do_execveat_common+0xceb/0xd70
[  114.809485][    C0]  __x64_sys_execve+0xf4/0x130
[  114.814370][    C0]  x64_sys_call+0x164f/0x3b90
[  114.819190][    C0]  do_syscall_64+0xcd/0x1e0
[  114.823875][    C0]  ? clear_bhb_loop+0x25/0x80
[  114.828744][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.834741][    C0] RIP: 0033:0x7febec525ef7
[  114.839238][    C0] Code: Unable to access opcode bytes at 0x7febec525ecd.
[  114.846321][    C0] RSP: 002b:00007ffee08c4918 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  114.855113][    C0] RAX: ffffffffffffffda RBX: 000055e293558020 RCX: 00007febec525ef7
[  114.863169][    C0] RDX: 000055e293558048 RSI: 000055e293558020 RDI: 000055e2935580d0
[  114.871237][    C0] RBP: 000055e2935580d0 R08: 000055e2935580d9 R09: 00007ffee08c8ecb
[  114.879289][    C0] R10: 0000000000000008 R11: 0000000000000246 R12: 000055e293558048
[  114.887358][    C0] R13: 00007febec6d3904 R14: 000055e293558048 R15: 0000000000000000
[  114.895462][    C0]  </TASK>
[  114.898839][    C0] Kernel Offset: disabled
[  114.903237][    C0] Rebooting in 86400 seconds..

syzkaller build log:
go env (err=<nil>)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.4'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3593741732=/tmp/go-build -gno-record-gcc-switches'

git status (err=<nil>)
HEAD detached at 25905f5d0a
nothing to commit, working tree clean

tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=25905f5d0a2a7883bd33491997556193582c6059 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240301-171218'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64

gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"25905f5d0a2a7883bd33491997556193582c6059\"

Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=16a96dce980000

Tested on:

commit:         68af0e6e hfs: fix to initialize fields of hfs_inode_in..
git tree:       https://git.kernel.org/pub/scm/linux/kernel/git/chao/linux.git misc
kernel config:  https://syzkaller.appspot.com/x/.config?x=b7d07bfd0c305fe4
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.

author syzbot
#8 lore raw
In reply to syzbot
For archival purposes, forwarding an incoming command email to [email protected], [email protected].

For archival purposes, forwarding an incoming command email to [email protected], [email protected].

***

Subject: Re: [syzbot] [hfs?] KMSAN: uninit-value in hfs_revalidate_dentry
Author: [email protected]

Quoted 12 lines · syzbot

syzbot has found a reproducer for the following issue on:

HEAD commit:    8c89ecf5c13b kmsan: silence -Wmissing-prototypes warnings
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=10b53fff480000
kernel config:  https://syzkaller.appspot.com/x/.config?x=91d3152219aa6b45
dashboard link: https://syzkaller.appspot.com/bug?extid=3ae6be33a50b5aae4dab
compiler:       Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: i386
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1409f0b3480000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=15c76993480000
Quoted 8 lines

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fa537cffb53c/disk-8c89ecf5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/5b9d03c04a3e/vmlinux-8c89ecf5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/55c166dec3af/bzImage-8c89ecf5.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/b234e4e5c704/mount_0.gz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by [email protected]

#syz test https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 771ed66105de

---
  fs/hfs/inode.c | 3 +++
  1 file changed, 3 insertions(+)
fs/hfs/inode.c +3 -0
index 8c34798a0715..744e10b46904 100644
@@ -200,6 +200,7 @@ struct inode *hfs_new_inode(struct inode *dir, const struct qstr *name, umode_t
  	HFS_I(inode)->flags = 0;
  	HFS_I(inode)->rsrc_inode = NULL;
  	HFS_I(inode)->fs_blocks = 0;
+	HFS_I(inode)->tz_secondswest = sys_tz.tz_minuteswest * 60;
  	if (S_ISDIR(mode)) {
  		inode->i_size = 2;
  		HFS_SB(sb)->folder_count++;

@@ -275,6 +276,8 @@ void hfs_inode_read_fork(struct inode *inode, struct hfs_extent *ext,
  	for (count = 0, i = 0; i < 3; i++)
  		count += be16_to_cpu(ext[i].count);
  	HFS_I(inode)->first_blocks = count;
+	HFS_I(inode)->cached_start = 0;
+	HFS_I(inode)->cached_blocks = 0;
 
  	inode->i_size = HFS_I(inode)->phys_size = log_size;
  	HFS_I(inode)->fs_blocks = (log_size + sb->s_blocksize - 1) >> sb->s_blocksize_bits;