hfsplus: bad catalog entry type
=====================================================
BUG: KMSAN: uninit-value in hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline]
BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 fs/hfsplus/catalog.c:419
 hfsplus_subfolders_dec fs/hfsplus/catalog.c:248 [inline]
 hfsplus_delete_cat+0x1195/0x13d0 fs/hfsplus/catalog.c:419
 hfsplus_rmdir+0x13c/0x310 fs/hfsplus/dir.c:425
 vfs_rmdir+0x5b3/0x800 fs/namei.c:4470
 do_rmdir+0x87b/0xf30 fs/namei.c:4525
 __do_sys_unlinkat fs/namei.c:4699 [inline]
 __se_sys_unlinkat fs/namei.c:4693 [inline]
 __x64_sys_unlinkat+0x166/0x210 fs/namei.c:4693
 x64_sys_call+0x2be5/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:264
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline]
 hfsplus_create_cat+0x18fb/0x1910 fs/hfsplus/catalog.c:314
 hfsplus_mknod+0x208/0x560 fs/hfsplus/dir.c:494
 hfsplus_mkdir+0x5a/0x80 fs/hfsplus/dir.c:529
 vfs_mkdir+0x4ea/0x850 fs/namei.c:4375
 do_mkdirat+0x41a/0xf30 fs/namei.c:4408
 __do_sys_mkdir fs/namei.c:4430 [inline]
 __se_sys_mkdir fs/namei.c:4428 [inline]
 __x64_sys_mkdir+0x9a/0xf0 fs/namei.c:4428
 x64_sys_call+0x29b6/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:84
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline]
 hfsplus_create_cat+0x18fb/0x1910 fs/hfsplus/catalog.c:314
 hfsplus_mknod+0x208/0x560 fs/hfsplus/dir.c:494
 hfsplus_mkdir+0x5a/0x80 fs/hfsplus/dir.c:529
 vfs_mkdir+0x4ea/0x850 fs/namei.c:4375
 do_mkdirat+0x41a/0xf30 fs/namei.c:4408
 __do_sys_mkdirat fs/namei.c:4425 [inline]
 __se_sys_mkdirat fs/namei.c:4423 [inline]
 __x64_sys_mkdirat+0xc1/0x140 fs/namei.c:4423
 x64_sys_call+0x370b/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:259
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 hfsplus_subfolders_inc fs/hfsplus/catalog.c:232 [inline]
 hfsplus_create_cat+0x18fb/0x1910 fs/hfsplus/catalog.c:314
 hfsplus_fill_super+0x212e/0x2740 fs/hfsplus/super.c:561
 get_tree_bdev_flags+0x6e3/0x920 fs/super.c:1681
 get_tree_bdev+0x38/0x50 fs/super.c:1704
 hfsplus_get_tree+0x35/0x40 fs/hfsplus/super.c:640
 vfs_get_tree+0xb0/0x5c0 fs/super.c:1804
 do_new_mount+0x738/0x1610 fs/namespace.c:3885
 path_mount+0x6db/0x1e90 fs/namespace.c:4209
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x6eb/0x7d0 fs/namespace.c:4410
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4410
 x64_sys_call+0xfa7/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 __alloc_frozen_pages_noprof+0x689/0xf00 mm/page_alloc.c:4982
 alloc_pages_mpol+0x328/0x860 mm/mempolicy.c:2419
 alloc_frozen_pages_noprof+0xf7/0x200 mm/mempolicy.c:2490
 alloc_slab_page mm/slub.c:2451 [inline]
 allocate_slab+0x24d/0x1220 mm/slub.c:2619
 new_slab mm/slub.c:2673 [inline]
 ___slab_alloc+0xfec/0x3480 mm/slub.c:3859
 __slab_alloc mm/slub.c:3949 [inline]
 __slab_alloc_node mm/slub.c:4024 [inline]
 slab_alloc_node mm/slub.c:4185 [inline]
 kmem_cache_alloc_lru_noprof+0x922/0xed0 mm/slub.c:4216
 hfsplus_alloc_inode+0x5a/0xd0 fs/hfsplus/super.c:627
 alloc_inode+0x8a/0x4a0 fs/inode.c:346
 iget_locked+0x239/0x12d0 fs/inode.c:1439
 hfsplus_iget+0x5c/0xb80 fs/hfsplus/super.c:65
 hfsplus_btree_open+0x134/0x1d00 fs/hfsplus/btree.c:150
 hfsplus_fill_super+0x1161/0x2740 fs/hfsplus/super.c:474
 get_tree_bdev_flags+0x6e3/0x920 fs/super.c:1681
 get_tree_bdev+0x38/0x50 fs/super.c:1704
 hfsplus_get_tree+0x35/0x40 fs/hfsplus/super.c:640
 vfs_get_tree+0xb0/0x5c0 fs/super.c:1804
 do_new_mount+0x738/0x1610 fs/namespace.c:3885
 path_mount+0x6db/0x1e90 fs/namespace.c:4209
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x6eb/0x7d0 fs/namespace.c:4410
 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4410
 x64_sys_call+0xfa7/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
=====================================================