===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:300 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:328 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x305/0x2e60 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:300 [inline] iterate_and_advance include/linux/iov_iter.h:328 [inline] _copy_to_iter+0x305/0x2e60 lib/iov_iter.c:185 copy_page_to_iter+0x419/0x880 lib/iov_iter.c:362 copy_folio_to_iter include/linux/uio.h:198 [inline] filemap_read+0xc61/0x1be0 mm/filemap.c:2752 blkdev_read_iter+0x80b/0x970 block/fops.c:796 new_sync_read fs/read_write.c:484 [inline] vfs_read+0xc25/0xf70 fs/read_write.c:565 ksys_read+0x240/0x4b0 fs/read_write.c:708 __do_sys_read fs/read_write.c:717 [inline] __se_sys_read fs/read_write.c:715 [inline] __x64_sys_read+0x93/0xe0 fs/read_write.c:715 x64_sys_call+0x314c/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: memcpy_to_iter lib/iov_iter.c:65 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:304 [inline] iterate_and_advance include/linux/iov_iter.h:328 [inline] _copy_to_iter+0xecc/0x2e60 lib/iov_iter.c:185 copy_page_to_iter+0x419/0x880 lib/iov_iter.c:362 copy_folio_to_iter include/linux/uio.h:198 [inline] shmem_file_read_iter+0x860/0xf80 mm/shmem.c:3425 do_iter_readv_writev+0x93a/0xbc0 vfs_iter_read+0x273/0x770 fs/read_write.c:909 lo_read_simple drivers/block/loop.c:285 [inline] do_req_filebacked drivers/block/loop.c:525 [inline] loop_handle_cmd drivers/block/loop.c:1929 [inline] loop_process_work+0x2111/0x3760 drivers/block/loop.c:1964 loop_rootcg_workfn+0x2b/0x40 drivers/block/loop.c:1995 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xc1a/0x1e80 kernel/workqueue.c:3319 worker_thread+0xea7/0x14f0 kernel/workqueue.c:3400 kthread+0x6b9/0xef0 kernel/kthread.c:464 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Uninit was stored to memory at: memcpy_from_iter lib/iov_iter.c:73 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:304 [inline] iterate_and_advance include/linux/iov_iter.h:328 [inline] __copy_from_iter lib/iov_iter.c:249 [inline] copy_page_from_iter_atomic+0x1314/0x3450 lib/iov_iter.c:483 copy_folio_from_iter_atomic include/linux/uio.h:210 [inline] generic_perform_write+0x83f/0x1060 mm/filemap.c:4120 shmem_file_write_iter+0x2ba/0x2f0 mm/shmem.c:3477 do_iter_readv_writev+0x93a/0xbc0 vfs_iter_write+0x44d/0xd60 fs/read_write.c:974 lo_write_bvec drivers/block/loop.c:245 [inline] lo_write_simple drivers/block/loop.c:266 [inline] do_req_filebacked drivers/block/loop.c:520 [inline] loop_handle_cmd drivers/block/loop.c:1929 [inline] loop_process_work+0x15fb/0x3760 drivers/block/loop.c:1964 loop_workfn+0x48/0x60 drivers/block/loop.c:1988 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xc1a/0x1e80 kernel/workqueue.c:3319 worker_thread+0xea7/0x14f0 kernel/workqueue.c:3400 kthread+0x6b9/0xef0 kernel/kthread.c:464 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Uninit was stored to memory at: memcpy_to_page include/linux/highmem.h:433 [inline] hfsplus_bnode_write+0x136/0x3f0 fs/hfsplus/bnode.c:83 hfsplus_brec_insert+0xa9d/0x1400 fs/hfsplus/brec.c:133 hfsplus_create_cat+0x130d/0x1800 fs/hfsplus/catalog.c:308 hfsplus_link+0x7d8/0xbf0 fs/hfsplus/dir.c:342 vfs_link+0x94c/0xb70 fs/namei.c:4795 do_linkat+0x4f5/0xff0 fs/namei.c:4865 __do_sys_link fs/namei.c:4899 [inline] __se_sys_link fs/namei.c:4897 [inline] __x64_sys_link+0xe8/0x140 fs/namei.c:4897 x64_sys_call+0x3afa/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:87 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hfsplus_cat_build_record fs/hfsplus/catalog.c:167 [inline] hfsplus_create_cat+0x11d5/0x1800 fs/hfsplus/catalog.c:300 hfsplus_link+0x7d8/0xbf0 fs/hfsplus/dir.c:342 vfs_link+0x94c/0xb70 fs/namei.c:4795 do_linkat+0x4f5/0xff0 fs/namei.c:4865 __do_sys_link fs/namei.c:4899 [inline] __se_sys_link fs/namei.c:4897 [inline] __x64_sys_link+0xe8/0x140 fs/namei.c:4897 x64_sys_call+0x3afa/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:87 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_frozen_pages_noprof+0x9a7/0xe00 mm/page_alloc.c:4763 alloc_pages_mpol+0x4cd/0x890 mm/mempolicy.c:2270 alloc_frozen_pages_noprof+0x1bf/0x1e0 mm/mempolicy.c:2341 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab+0x23a/0x1110 mm/slub.c:2587 new_slab mm/slub.c:2640 [inline] ___slab_alloc+0x1287/0x3540 mm/slub.c:3826 __slab_alloc mm/slub.c:3916 [inline] __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] kmem_cache_alloc_lru_noprof+0x855/0xe20 mm/slub.c:4183 hfsplus_alloc_inode+0x5a/0xd0 fs/hfsplus/super.c:627 alloc_inode+0x86/0x460 fs/inode.c:336 new_inode_pseudo fs/inode.c:1174 [inline] new_inode+0x38/0x480 fs/inode.c:1193 hfsplus_new_inode+0x5e/0xa70 fs/hfsplus/inode.c:381 hfsplus_mknod+0xbe/0x560 fs/hfsplus/dir.c:487 vfs_mknod+0x5ed/0x6a0 fs/namei.c:4191 do_mknodat+0x6d7/0xb90 __do_sys_mknod fs/namei.c:4274 [inline] __se_sys_mknod fs/namei.c:4272 [inline] __x64_sys_mknod+0xc4/0x120 fs/namei.c:4272 x64_sys_call+0x1a29/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:134 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bytes 578-581 of 3072 are uninitialized Memory access of size 3072 starts at ffff888020d56000 Data copied to user address 000055dd49ec1ea8 CPU: 0 UID: 0 PID: 5961 Comm: udevd Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 =====================================================