From nobody Sat Feb 7 17:55:35 2026 Received: from mail-oo1-f69.google.com (mail-oo1-f69.google.com [209.85.161.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4B8DC357734 for ; Wed, 21 Jan 2026 05:50:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.69 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768974611; cv=none; b=grs18Yg/jA9FOu5LVvIqtcaK8t/A65nCiy5QPW21wIBlcRqFp4PiV47HTI5K/EA0jje2pFq4Rq8xGG5NT362lcX2zQSKb+tbhIEpMjP0E/ztmLGNk76uYb1RZKDp5HKcqizlDpmfwF3moJ+ldkNgJl3o8rcV4ZvL93rgP+IaFtE= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768974611; c=relaxed/simple; bh=4jlqdxbHCOSodc+vZxreH2Aah3l1XBIlkapuHnwfvXQ=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=rxJwLrsIzoKSLC93Nzr+ej24Jxm2C0GeHIFaLUqcJp/iVCtUQoTib8QsKwLlT9JLUQ74iaYELgheXHIMroTUwOnDxnyQYJBzwxKvTZs0OwHCTl79FvbzTTG3PeFMmfBH1vB+L8raPCrdFaZY6KC91lPAIqAqB1VTfKResIkE5+c= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.161.69 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-66115eb3950so8895556eaf.3 for ; Tue, 20 Jan 2026 21:50:05 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768974603; x=1769579403; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=pCw3Pj4hrp/GJU6mlzZsHnLr87XoNEXua/A4W8WA9mo=; b=Y9YGQMoE5SCWJXVnjVBqK865bb+jD/XXE3L56axoROXSySWf7XhY/fEh9bLFakyHxf kOGv9dgxiHk4RQsVjMdexYJQcGlWjA7Rmw27jRBcj6TZX/H9khQBjsFK+o3YbgkCa8t4 oxPXoX5ty4oWUohZsvzMhsFcueqXmpd+6EGrzNzM771DC9B/Tc0CmNLqulcE8HqgEUCK KgnXXnvLE6OZ08oLhupp41WanqVOWelm4KXLRCLUL8274tWn1pq2jKH3mcocgFMSzVme suH1G9jCRuzhSvV90p8OEO7OnBxY1/KPyqWo/za/lF3O5sfr+oleVjFPduLzV9Bo9wUn o5sA== X-Gm-Message-State: AOJu0YxnobST0cm8jdnNvDCbdWDNj4h6Sr4JJgQbTACAvfNMKeTB+yQY Xk7zyy6TZnCEvOU5/WiI9OESdTLEP7mLcUh5bb4hZ8SJlVL38Kh6ljMQTTmED1dllsqmSzfw+kb MDFr9DiceHedg9Il0ea23Jt0zyBEKXPrGfTrhmqIT697uE/NNtVtItKDCoAg= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6820:217:b0:65f:65cc:ad98 with SMTP id 006d021491bc7-66118924defmr6235776eaf.40.1768974603399; Tue, 20 Jan 2026 21:50:03 -0800 (PST) Date: Tue, 20 Jan 2026 21:50:03 -0800 In-Reply-To: <696ea368.a70a0220.34546f.04b7.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6970690b.a00a0220.3ad28e.4e2c.GAE@google.com> Subject: Forwarded: [PATCH] hfsplus: add debug printk to show uninitialized values in case_fold From: syzbot To: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [PATCH] hfsplus: add debug printk to show uninitialized values in = case_fold Author: kartikey406@gmail.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git= master This is a debug patch to demonstrate the uninit-value bug reported by syzbot. Added printk in case_fold() to show what uninitialized values are being read from the unicode array and used as array indices. This patch intentionally does NOT include the fix (no initialization of tmp variable) to demonstrate the bug behavior. Link: https://syzkaller.appspot.com/bug?extid=3Dd80abb5b890d39261e72 Signed-off-by: Deepanshu Kartikey --- fs/hfsplus/unicode.c | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/fs/hfsplus/unicode.c b/fs/hfsplus/unicode.c index d3a142f4518b..418806c27943 100644 --- a/fs/hfsplus/unicode.c +++ b/fs/hfsplus/unicode.c @@ -11,7 +11,6 @@ =20 #include #include - #include =20 #include "hfsplus_fs.h" @@ -22,12 +21,18 @@ static inline u16 case_fold(u16 c) { u16 tmp; - + pr_alert("CASE_FOLD: Input c=3D0x%04x, c>>8=3D0x%02x (this is array index= !)\n", c, c >> 8); tmp =3D hfsplus_case_fold_table[c >> 8]; - if (tmp) + pr_alert("CASE_FOLD: table[0x%02x]=3D0x%04x\n", c >> 8, tmp); + + if (tmp) { + pr_alert("CASE_FOLD: Second lookup: table[0x%04x + 0x%02x]\n",tmp, c & 0= xff); tmp =3D hfsplus_case_fold_table[tmp + (c & 0xff)]; - else + } else { tmp =3D c; + } + pr_alert("CASE_FOLD: Final result=3D0x%04x\n", tmp); + return tmp; } =20 --=20 2.43.0