===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:302 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 copy_page_to_iter+0x482/0x910 lib/iov_iter.c:374 copy_folio_to_iter include/linux/uio.h:204 [inline] filemap_read+0x1cda/0x2300 mm/filemap.c:2851 blkdev_read_iter+0x89f/0xb00 block/fops.c:856 new_sync_read fs/read_write.c:491 [inline] vfs_read+0x8ed/0xf90 fs/read_write.c:572 ksys_read fs/read_write.c:715 [inline] __do_sys_read fs/read_write.c:724 [inline] __se_sys_read fs/read_write.c:722 [inline] __x64_sys_read+0x1fb/0x4d0 fs/read_write.c:722 x64_sys_call+0x3123/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: memcpy_from_iter lib/iov_iter.c:85 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:306 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] __copy_from_iter lib/iov_iter.c:261 [inline] copy_folio_from_iter_atomic+0xe9b/0x3900 lib/iov_iter.c:491 generic_perform_write+0x8b1/0x1050 mm/filemap.c:4332 shmem_file_write_iter+0x2b7/0x2f0 mm/shmem.c:3490 lo_rw_aio+0x11de/0x1520 drivers/block/loop.c:-1 do_req_filebacked drivers/block/loop.c:-1 [inline] loop_handle_cmd drivers/block/loop.c:1926 [inline] loop_process_work+0xf14/0x2020 drivers/block/loop.c:1961 loop_workfn+0x3e/0x60 drivers/block/loop.c:1985 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3340 worker_thread+0xedf/0x1590 kernel/workqueue.c:3421 kthread+0xd5c/0xf00 kernel/kthread.c:463 ret_from_fork+0x208/0x710 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: ntfs_write_bh+0x6ae/0xe90 fs/ntfs3/fsntfs.c:1437 indx_write fs/ntfs3/index.c:1027 [inline] indx_update_dup+0xe3d/0x10f0 fs/ntfs3/index.c:2711 ni_update_parent+0x144c/0x1810 fs/ntfs3/frecord.c:3119 ni_write_inode+0x1be0/0x1cb0 fs/ntfs3/frecord.c:3214 ntfs3_write_inode+0x94/0xb0 fs/ntfs3/inode.c:1043 write_inode fs/fs-writeback.c:1582 [inline] __writeback_single_inode+0x892/0x1190 fs/fs-writeback.c:1802 writeback_sb_inodes+0xb2d/0x1f10 fs/fs-writeback.c:2030 wb_writeback+0x4ce/0xc00 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x397/0x1910 fs/fs-writeback.c:2403 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3340 worker_thread+0xedf/0x1590 kernel/workqueue.c:3421 kthread+0xd5c/0xf00 kernel/kthread.c:463 ret_from_fork+0x208/0x710 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: ntfs_read_run_nb+0x7cf/0x1810 fs/ntfs3/fsntfs.c:1232 ntfs_read_bh+0x6a/0xc00 fs/ntfs3/fsntfs.c:1293 indx_read+0x450/0x1840 fs/ntfs3/index.c:1067 indx_find+0xa80/0x1510 fs/ntfs3/index.c:1179 indx_update_dup+0xb67/0x10f0 fs/ntfs3/index.c:2683 ni_update_parent+0x144c/0x1810 fs/ntfs3/frecord.c:3119 ni_write_inode+0x1be0/0x1cb0 fs/ntfs3/frecord.c:3214 ntfs3_write_inode+0x94/0xb0 fs/ntfs3/inode.c:1043 write_inode fs/fs-writeback.c:1582 [inline] __writeback_single_inode+0x892/0x1190 fs/fs-writeback.c:1802 writeback_sb_inodes+0xb2d/0x1f10 fs/fs-writeback.c:2030 wb_writeback+0x4ce/0xc00 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x397/0x1910 fs/fs-writeback.c:2403 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3340 worker_thread+0xedf/0x1590 kernel/workqueue.c:3421 kthread+0xd5c/0xf00 kernel/kthread.c:463 ret_from_fork+0x208/0x710 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: ntfs_write_bh+0x6ae/0xe90 fs/ntfs3/fsntfs.c:1437 indx_write fs/ntfs3/index.c:1027 [inline] indx_delete_entry+0x27cc/0x8890 fs/ntfs3/index.c:2347 ni_remove_name+0x33d/0xdb0 fs/ntfs3/frecord.c:2805 ni_rename+0x10f/0x220 fs/ntfs3/frecord.c:2964 ntfs_rename+0xdd2/0x1290 fs/ntfs3/namei.c:332 vfs_rename+0x2138/0x2640 fs/namei.c:5929 do_renameat2+0xb7f/0x15a0 fs/namei.c:6047 __do_sys_renameat2 fs/namei.c:6077 [inline] __se_sys_renameat2 fs/namei.c:6074 [inline] __x64_sys_renameat2+0x15d/0x210 fs/namei.c:6074 x64_sys_call+0x3f6/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:317 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: ntfs_read_run_nb+0x7cf/0x1810 fs/ntfs3/fsntfs.c:1232 ntfs_read_bh+0x6a/0xc00 fs/ntfs3/fsntfs.c:1293 indx_read+0x450/0x1840 fs/ntfs3/index.c:1067 indx_find+0xa80/0x1510 fs/ntfs3/index.c:1179 indx_delete_entry+0x11bd/0x8890 fs/ntfs3/index.c:2311 ni_remove_name+0x33d/0xdb0 fs/ntfs3/frecord.c:2805 ni_rename+0x10f/0x220 fs/ntfs3/frecord.c:2964 ntfs_rename+0xdd2/0x1290 fs/ntfs3/namei.c:332 vfs_rename+0x2138/0x2640 fs/namei.c:5929 do_renameat2+0xb7f/0x15a0 fs/namei.c:6047 __do_sys_renameat2 fs/namei.c:6077 [inline] __se_sys_renameat2 fs/namei.c:6074 [inline] __x64_sys_renameat2+0x15d/0x210 fs/namei.c:6074 x64_sys_call+0x3f6/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:317 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: ntfs_write_bh+0x6ae/0xe90 fs/ntfs3/fsntfs.c:1437 indx_write fs/ntfs3/index.c:1027 [inline] indx_insert_into_root+0x37ee/0x38c0 fs/ntfs3/index.c:1776 indx_insert_entry+0xf2a/0x1050 fs/ntfs3/index.c:1991 ni_add_name+0xef7/0x11e0 fs/ntfs3/frecord.c:2931 ni_rename+0x97/0x220 fs/ntfs3/frecord.c:2962 ntfs_rename+0xdd2/0x1290 fs/ntfs3/namei.c:332 vfs_rename+0x2138/0x2640 fs/namei.c:5929 do_renameat2+0xb7f/0x15a0 fs/namei.c:6047 __do_sys_renameat2 fs/namei.c:6077 [inline] __se_sys_renameat2 fs/namei.c:6074 [inline] __x64_sys_renameat2+0x15d/0x210 fs/namei.c:6074 x64_sys_call+0x3f6/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:317 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: hdr_insert_de+0x4c8/0x550 fs/ntfs3/index.c:838 indx_insert_into_root+0x3447/0x38c0 fs/ntfs3/index.c:1768 indx_insert_entry+0xf2a/0x1050 fs/ntfs3/index.c:1991 ni_add_name+0xef7/0x11e0 fs/ntfs3/frecord.c:2931 ni_rename+0x97/0x220 fs/ntfs3/frecord.c:2962 ntfs_rename+0xdd2/0x1290 fs/ntfs3/namei.c:332 vfs_rename+0x2138/0x2640 fs/namei.c:5929 do_renameat2+0xb7f/0x15a0 fs/namei.c:6047 __do_sys_renameat2 fs/namei.c:6077 [inline] __se_sys_renameat2 fs/namei.c:6074 [inline] __x64_sys_renameat2+0x15d/0x210 fs/namei.c:6074 x64_sys_call+0x3f6/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:317 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:4960 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x970/0x1750 mm/slub.c:5270 ntfs_rename+0x874/0x1290 fs/ntfs3/namei.c:307 vfs_rename+0x2138/0x2640 fs/namei.c:5929 do_renameat2+0xb7f/0x15a0 fs/namei.c:6047 __do_sys_renameat2 fs/namei.c:6077 [inline] __se_sys_renameat2 fs/namei.c:6074 [inline] __x64_sys_renameat2+0x15d/0x210 fs/namei.c:6074 x64_sys_call+0x3f6/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:317 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bytes 766-767 of 4096 are uninitialized Memory access of size 4096 starts at ffff888037d64000 Data copied to user address 0000200000193c40 CPU: 0 UID: 0 PID: 14819 Comm: syz.2.2408 Tainted: G W L syzkaller #0 PREEMPT(none) Tainted: [W]=WARN, [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 =====================================================