===================================================== BUG: KMSAN: uninit-value in vring_map_one_sg drivers/virtio/virtio_ring.c:341 [inline] BUG: KMSAN: uninit-value in virtqueue_add_split drivers/virtio/virtio_ring.c:554 [inline] BUG: KMSAN: uninit-value in virtqueue_add+0x24cd/0x7a80 drivers/virtio/virtio_ring.c:1812 vring_map_one_sg drivers/virtio/virtio_ring.c:341 [inline] virtqueue_add_split drivers/virtio/virtio_ring.c:554 [inline] virtqueue_add+0x24cd/0x7a80 drivers/virtio/virtio_ring.c:1812 virtqueue_add_sgs+0x311/0x330 drivers/virtio/virtio_ring.c:1846 __virtscsi_add_cmd drivers/scsi/virtio_scsi.c:459 [inline] virtscsi_add_cmd+0xa66/0xd50 drivers/scsi/virtio_scsi.c:493 virtscsi_queuecommand+0xc6e/0xec0 drivers/scsi/virtio_scsi.c:590 scsi_dispatch_cmd+0x538/0xd70 drivers/scsi/scsi_lib.c:1519 scsi_queue_rq+0x3c13/0x4140 drivers/scsi/scsi_lib.c:1708 blk_mq_dispatch_rq_list+0x1596/0x3f50 block/blk-mq.c:1663 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:199 [inline] blk_mq_do_dispatch_sched+0xe38/0x1670 block/blk-mq-sched.c:212 __blk_mq_sched_dispatch_requests+0x5d6/0x8d0 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915 blk_mq_sched_insert_requests+0x42f/0x6f0 block/blk-mq-sched.c:511 blk_mq_flush_plug_list+0xb49/0xdc0 block/blk-mq.c:2292 blk_flush_plug+0x775/0x820 block/blk-core.c:1593 blk_finish_plug+0xad/0xe0 block/blk-core.c:1617 ext4_writepages+0x5604/0x6610 fs/ext4/inode.c:2846 do_writepages+0x60e/0xb90 mm/page-writeback.c:2364 filemap_fdatawrite_wbc+0x28f/0x300 mm/filemap.c:407 __filemap_fdatawrite_range mm/filemap.c:440 [inline] file_write_and_wait_range+0x252/0x4f0 mm/filemap.c:824 ext4_sync_file+0x2ab/0x1760 fs/ext4/fsync.c:151 vfs_fsync_range+0x300/0x360 fs/sync.c:182 generic_write_sync include/linux/fs.h:2955 [inline] ext4_buffered_write_iter+0xa69/0xb90 fs/ext4/file.c:277 ext4_file_write_iter+0x1279/0x3800 do_iter_readv_writev+0xa7f/0xc70 do_iter_write+0x52c/0x1500 fs/read_write.c:851 vfs_iter_write+0x118/0x180 fs/read_write.c:892 iter_file_splice_write+0xec2/0x1c10 fs/splice.c:689 do_splice_from fs/splice.c:767 [inline] direct_splice_actor+0x1a4/0x240 fs/splice.c:936 splice_direct_to_actor+0xa7a/0x1410 fs/splice.c:891 do_splice_direct+0x3b2/0x600 fs/splice.c:979 do_sendfile+0xe3c/0x1f50 fs/read_write.c:1245 __do_compat_sys_sendfile fs/read_write.c:1331 [inline] __se_compat_sys_sendfile+0x31f/0x3d0 fs/read_write.c:1314 __ia32_compat_sys_sendfile+0x11a/0x160 fs/read_write.c:1314 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline] __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Uninit was stored to memory at: copy_page_from_iter_atomic+0x1526/0x2a30 lib/iov_iter.c:972 generic_perform_write+0x568/0xc40 mm/filemap.c:3762 ext4_buffered_write_iter+0x740/0xb90 fs/ext4/file.c:269 ext4_file_write_iter+0x1279/0x3800 do_iter_readv_writev+0xa7f/0xc70 do_iter_write+0x52c/0x1500 fs/read_write.c:851 vfs_iter_write+0x118/0x180 fs/read_write.c:892 iter_file_splice_write+0xec2/0x1c10 fs/splice.c:689 do_splice_from fs/splice.c:767 [inline] direct_splice_actor+0x1a4/0x240 fs/splice.c:936 splice_direct_to_actor+0xa7a/0x1410 fs/splice.c:891 do_splice_direct+0x3b2/0x600 fs/splice.c:979 do_sendfile+0xe3c/0x1f50 fs/read_write.c:1245 __do_compat_sys_sendfile fs/read_write.c:1331 [inline] __se_compat_sys_sendfile+0x31f/0x3d0 fs/read_write.c:1314 __ia32_compat_sys_sendfile+0x11a/0x160 fs/read_write.c:1314 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline] __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Uninit was stored to memory at: memcpy_to_page include/linux/highmem.h:356 [inline] copy_pipe_to_iter+0x3f0/0x9a0 lib/iov_iter.c:614 _copy_to_iter+0xbb2/0x2550 lib/iov_iter.c:667 copy_to_iter include/linux/uio.h:155 [inline] seq_read_iter+0x1a26/0x2150 fs/seq_file.c:281 proc_reg_read_iter+0x256/0x480 fs/proc/inode.c:300 call_read_iter include/linux/fs.h:2156 [inline] generic_file_splice_read+0x78b/0xbc0 fs/splice.c:311 do_splice_to fs/splice.c:796 [inline] splice_direct_to_actor+0x750/0x1410 fs/splice.c:870 do_splice_direct+0x3b2/0x600 fs/splice.c:979 do_sendfile+0xe3c/0x1f50 fs/read_write.c:1245 __do_compat_sys_sendfile fs/read_write.c:1331 [inline] __se_compat_sys_sendfile+0x31f/0x3d0 fs/read_write.c:1314 __ia32_compat_sys_sendfile+0x11a/0x160 fs/read_write.c:1314 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline] __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Uninit was stored to memory at: vsnprintf+0x338a/0x3650 lib/vsprintf.c:2794 seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x314/0x4f0 fs/seq_file.c:406 proc_keys_show+0x12fb/0x1500 security/keys/proc.c:226 seq_read_iter+0xaac/0x2150 fs/seq_file.c:230 proc_reg_read_iter+0x256/0x480 fs/proc/inode.c:300 call_read_iter include/linux/fs.h:2156 [inline] generic_file_splice_read+0x78b/0xbc0 fs/splice.c:311 do_splice_to fs/splice.c:796 [inline] splice_direct_to_actor+0x750/0x1410 fs/splice.c:870 do_splice_direct+0x3b2/0x600 fs/splice.c:979 do_sendfile+0xe3c/0x1f50 fs/read_write.c:1245 __do_compat_sys_sendfile fs/read_write.c:1331 [inline] __se_compat_sys_sendfile+0x31f/0x3d0 fs/read_write.c:1314 __ia32_compat_sys_sendfile+0x11a/0x160 fs/read_write.c:1314 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline] __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Local variable err_blk.i created at: ext4_get_inode_loc fs/ext4/inode.c:4544 [inline] ext4_reserve_inode_write+0x13b/0x600 fs/ext4/inode.c:5713 __ext4_mark_inode_dirty+0x170/0xd00 fs/ext4/inode.c:5882 Byte 12 of 4096 is uninitialized Memory access of size 4096 starts at ffff888150313000 CPU: 0 PID: 22846 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================