===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:302 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 copy_page_to_iter+0x482/0x900 lib/iov_iter.c:374 copy_folio_to_iter include/linux/uio.h:204 [inline] filemap_read+0x1cd6/0x2300 mm/filemap.c:2851 blkdev_read_iter+0x89f/0xb00 block/fops.c:856 new_sync_read fs/read_write.c:491 [inline] vfs_read+0x8ec/0xf90 fs/read_write.c:572 ksys_read+0x1d9/0x470 fs/read_write.c:715 __do_sys_read fs/read_write.c:724 [inline] __se_sys_read fs/read_write.c:722 [inline] __x64_sys_read+0x97/0xf0 fs/read_write.c:722 x64_sys_call+0x3123/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: memcpy_to_iter lib/iov_iter.c:77 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:306 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0x130f/0x33f0 lib/iov_iter.c:197 copy_page_to_iter+0x482/0x900 lib/iov_iter.c:374 copy_folio_to_iter include/linux/uio.h:204 [inline] shmem_file_read_iter+0x904/0x1140 mm/shmem.c:3438 lo_rw_aio+0x116e/0x14b0 drivers/block/loop.c:-1 do_req_filebacked drivers/block/loop.c:-1 [inline] loop_handle_cmd drivers/block/loop.c:1947 [inline] loop_process_work+0xf13/0x2010 drivers/block/loop.c:1982 loop_rootcg_workfn+0x2b/0x40 drivers/block/loop.c:2013 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb03/0x1da0 kernel/workqueue.c:3340 worker_thread+0xede/0x1590 kernel/workqueue.c:3421 kthread+0xd5a/0xf00 kernel/kthread.c:463 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: memcpy_from_iter lib/iov_iter.c:85 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:306 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] __copy_from_iter lib/iov_iter.c:261 [inline] copy_folio_from_iter_atomic+0xe83/0x3870 lib/iov_iter.c:491 generic_perform_write+0x8b7/0x1050 mm/filemap.c:4332 shmem_file_write_iter+0x2b7/0x2f0 mm/shmem.c:3490 lo_rw_aio+0x116e/0x14b0 drivers/block/loop.c:-1 do_req_filebacked drivers/block/loop.c:-1 [inline] loop_handle_cmd drivers/block/loop.c:1947 [inline] loop_process_work+0xf13/0x2010 drivers/block/loop.c:1982 loop_workfn+0x3e/0x60 drivers/block/loop.c:2006 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb03/0x1da0 kernel/workqueue.c:3340 worker_thread+0xede/0x1590 kernel/workqueue.c:3421 kthread+0xd5a/0xf00 kernel/kthread.c:463 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: xlog_write_iovec fs/xfs/xfs_log.c:1939 [inline] xlog_write_full fs/xfs/xfs_log.c:1974 [inline] xlog_write+0x1d5b/0x2380 fs/xfs/xfs_log.c:2243 xlog_cil_write_chain fs/xfs/xfs_log_cil.c:1077 [inline] xlog_cil_push_work+0x2fab/0x46e0 fs/xfs/xfs_log_cil.c:1429 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb03/0x1da0 kernel/workqueue.c:3340 worker_thread+0xede/0x1590 kernel/workqueue.c:3421 kthread+0xd5a/0xf00 kernel/kthread.c:463 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: xlog_copy_iovec fs/xfs/xfs_log.h:123 [inline] xfs_inode_item_format_attr_fork+0xa5a/0x10e0 fs/xfs/xfs_inode_item.c:456 xfs_inode_item_format+0x2285/0x24f0 fs/xfs/xfs_inode_item.c:677 xlog_cil_insert_format_items fs/xfs/xfs_log_cil.c:505 [inline] xlog_cil_insert_items fs/xfs/xfs_log_cil.c:556 [inline] xlog_cil_commit+0x17fd/0x4730 fs/xfs/xfs_log_cil.c:1752 __xfs_trans_commit+0x55c/0xf60 fs/xfs/xfs_trans.c:870 xfs_trans_roll+0xfc/0x500 fs/xfs/xfs_trans.c:1033 xfs_defer_trans_roll+0x106/0x520 fs/xfs/libxfs/xfs_defer.c:479 xfs_defer_finish_noroll+0xd03/0x1db0 fs/xfs/libxfs/xfs_defer.c:688 xfs_trans_commit+0x165/0x270 fs/xfs/xfs_trans.c:921 xfs_attr_set+0x1c28/0x1d70 fs/xfs/libxfs/xfs_attr.c:1150 xfs_attr_change+0x408/0x5b0 fs/xfs/xfs_xattr.c:128 xfs_xattr_set+0x1d4/0x2f0 fs/xfs/xfs_xattr.c:186 __vfs_setxattr+0x742/0x850 fs/xattr.c:200 __vfs_setxattr_noperm+0x224/0xad0 fs/xattr.c:234 __vfs_setxattr_locked+0x43c/0x480 fs/xattr.c:295 vfs_setxattr+0x28d/0x650 fs/xattr.c:321 do_setxattr fs/xattr.c:636 [inline] filename_setxattr+0x3a4/0xcc0 fs/xattr.c:665 path_setxattrat+0x6c8/0x7c0 fs/xattr.c:713 __do_sys_lsetxattr fs/xattr.c:754 [inline] __se_sys_lsetxattr fs/xattr.c:750 [inline] __x64_sys_lsetxattr+0x103/0x1c0 fs/xattr.c:750 x64_sys_call+0x3c8b/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:4960 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_node_track_caller_noprof+0xb6e/0x1c70 mm/slub.c:5764 __do_krealloc mm/slub.c:7014 [inline] krealloc_node_align_noprof+0x478/0xf40 mm/slub.c:7073 xfs_broot_realloc+0x361/0x480 fs/xfs/libxfs/xfs_inode_fork.c:431 xfs_bmap_broot_realloc+0x243/0x650 fs/xfs/libxfs/xfs_bmap_btree.c:-1 xfs_bmap_extents_to_btree+0x1f8/0x1440 fs/xfs/libxfs/xfs_bmap.c:660 xfs_bmap_add_extent_hole_real+0x2287/0x3060 fs/xfs/libxfs/xfs_bmap.c:2791 xfs_bmapi_allocate+0x48d6/0x4f50 fs/xfs/libxfs/xfs_bmap.c:3977 xfs_bmapi_write+0x10ac/0x26b0 fs/xfs/libxfs/xfs_bmap.c:4267 xfs_da_grow_inode_int+0x36e/0x1110 fs/xfs/libxfs/xfs_da_btree.c:2315 xfs_da_grow_inode+0xdb/0x350 fs/xfs/libxfs/xfs_da_btree.c:2380 xfs_attr3_leaf_split+0x8e/0xbc0 fs/xfs/libxfs/xfs_attr_leaf.c:1341 xfs_da3_split+0x3aa/0x15a0 fs/xfs/libxfs/xfs_da_btree.c:595 xfs_attr_node_try_addname fs/xfs/libxfs/xfs_attr.c:1427 [inline] xfs_attr_node_addname fs/xfs/libxfs/xfs_attr.c:599 [inline] xfs_attr_set_iter+0x53f0/0x79b0 fs/xfs/libxfs/xfs_attr.c:828 xfs_attr_finish_item+0x16c/0x540 fs/xfs/xfs_attr_item.c:506 xfs_defer_finish_one+0x528/0x13e0 fs/xfs/libxfs/xfs_defer.c:595 xfs_defer_finish_noroll+0x1084/0x1db0 fs/xfs/libxfs/xfs_defer.c:707 xfs_trans_commit+0x165/0x270 fs/xfs/xfs_trans.c:921 xfs_attr_set+0x1c28/0x1d70 fs/xfs/libxfs/xfs_attr.c:1150 xfs_attr_change+0x408/0x5b0 fs/xfs/xfs_xattr.c:128 xfs_xattr_set+0x1d4/0x2f0 fs/xfs/xfs_xattr.c:186 __vfs_setxattr+0x742/0x850 fs/xattr.c:200 __vfs_setxattr_noperm+0x224/0xad0 fs/xattr.c:234 __vfs_setxattr_locked+0x43c/0x480 fs/xattr.c:295 vfs_setxattr+0x28d/0x650 fs/xattr.c:321 do_setxattr fs/xattr.c:636 [inline] filename_setxattr+0x3a4/0xcc0 fs/xattr.c:665 path_setxattrat+0x6c8/0x7c0 fs/xattr.c:713 __do_sys_lsetxattr fs/xattr.c:754 [inline] __se_sys_lsetxattr fs/xattr.c:750 [inline] __x64_sys_lsetxattr+0x103/0x1c0 fs/xattr.c:750 x64_sys_call+0x3c8b/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Bytes 1684-1687 of 4096 are uninitialized Memory access of size 4096 starts at ffff888116b8f000 Data copied to user address 00007f6dc6fa7000 CPU: 0 UID: 0 PID: 6001 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(voluntary) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 =====================================================