===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:302 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:197 copy_page_to_iter+0x482/0x900 lib/iov_iter.c:374 copy_folio_to_iter include/linux/uio.h:204 [inline] filemap_read+0x1cd6/0x2300 mm/filemap.c:2851 blkdev_read_iter+0x89f/0xb00 block/fops.c:856 new_sync_read fs/read_write.c:491 [inline] vfs_read+0x8ec/0xf90 fs/read_write.c:572 ksys_read+0x1d9/0x470 fs/read_write.c:715 __do_sys_read fs/read_write.c:724 [inline] __se_sys_read fs/read_write.c:722 [inline] __x64_sys_read+0x97/0xf0 fs/read_write.c:722 x64_sys_call+0x3123/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: memcpy_to_iter lib/iov_iter.c:77 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:306 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0x130f/0x33f0 lib/iov_iter.c:197 copy_page_to_iter+0x482/0x900 lib/iov_iter.c:374 copy_folio_to_iter include/linux/uio.h:204 [inline] shmem_file_read_iter+0x904/0x1140 mm/shmem.c:3438 lo_rw_aio+0x116e/0x14b0 drivers/block/loop.c:-1 do_req_filebacked drivers/block/loop.c:-1 [inline] loop_handle_cmd drivers/block/loop.c:1947 [inline] loop_process_work+0xf13/0x2010 drivers/block/loop.c:1982 loop_workfn+0x3e/0x60 drivers/block/loop.c:2006 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb03/0x1da0 kernel/workqueue.c:3340 worker_thread+0xede/0x1590 kernel/workqueue.c:3421 kthread+0xd5a/0xf00 kernel/kthread.c:463 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: memcpy_from_iter lib/iov_iter.c:85 [inline] iterate_bvec include/linux/iov_iter.h:123 [inline] iterate_and_advance2 include/linux/iov_iter.h:306 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] __copy_from_iter lib/iov_iter.c:261 [inline] copy_folio_from_iter_atomic+0xe83/0x3870 lib/iov_iter.c:491 generic_perform_write+0x8b7/0x1050 mm/filemap.c:4332 shmem_file_write_iter+0x2b7/0x2f0 mm/shmem.c:3490 lo_rw_aio+0x116e/0x14b0 drivers/block/loop.c:-1 do_req_filebacked drivers/block/loop.c:-1 [inline] loop_handle_cmd drivers/block/loop.c:1947 [inline] loop_process_work+0xf13/0x2010 drivers/block/loop.c:1982 loop_workfn+0x3e/0x60 drivers/block/loop.c:2006 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xb03/0x1da0 kernel/workqueue.c:3340 worker_thread+0xede/0x1590 kernel/workqueue.c:3421 kthread+0xd5a/0xf00 kernel/kthread.c:463 ret_from_fork+0x207/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Uninit was stored to memory at: lmWriteRecord+0x12f6/0x1df0 fs/jfs/jfs_logmgr.c:473 lmLogInit+0x2004/0x27a0 fs/jfs/jfs_logmgr.c:1366 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline] lmLogOpen+0xadc/0x2140 fs/jfs/jfs_logmgr.c:1069 jfs_mount_rw+0xdf/0x9f0 fs/jfs/jfs_mount.c:257 jfs_fill_super+0xabf/0x18f0 fs/jfs/super.c:532 get_tree_bdev_flags+0x6e6/0x920 fs/super.c:1691 get_tree_bdev+0x38/0x50 fs/super.c:1714 jfs_get_tree+0x35/0x40 fs/jfs/super.c:635 vfs_get_tree+0xb3/0x5c0 fs/super.c:1751 fc_mount fs/namespace.c:1199 [inline] do_new_mount_fc fs/namespace.c:3636 [inline] do_new_mount+0x879/0x1700 fs/namespace.c:3712 path_mount+0x777/0x1fe0 fs/namespace.c:4022 do_mount fs/namespace.c:4035 [inline] __do_sys_mount fs/namespace.c:4224 [inline] __se_sys_mount+0x6f7/0x7e0 fs/namespace.c:4201 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4201 x64_sys_call+0x38cb/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Local variable lrd created at: lmLogInit+0x41/0x27a0 fs/jfs/jfs_logmgr.c:1242 open_inline_log fs/jfs/jfs_logmgr.c:1175 [inline] lmLogOpen+0xadc/0x2140 fs/jfs/jfs_logmgr.c:1069 Bytes 2572-2575 of 4096 are uninitialized Memory access of size 4096 starts at ffff88809a3a1000 Data copied to user address 0000200000f06c40 CPU: 1 UID: 0 PID: 8440 Comm: syz.3.504 Tainted: G L syzkaller #0 PREEMPT(none) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 =====================================================