=====================================================
BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:131 [inline]
BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline]
BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline]
BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline]
BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline]
BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 lib/iov_iter.c:197
 instrument_copy_to_user include/linux/instrumented.h:131 [inline]
 copy_to_user_iter lib/iov_iter.c:24 [inline]
 iterate_ubuf include/linux/iov_iter.h:30 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:302 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 _copy_to_iter+0xef3/0x3400 lib/iov_iter.c:197
 copy_page_to_iter+0x46d/0x790 lib/iov_iter.c:374
 copy_folio_to_iter include/linux/uio.h:204 [inline]
 filemap_read+0x1cd6/0x2300 mm/filemap.c:2857
 blkdev_read_iter+0x89f/0xb00 block/fops.c:855
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x8ec/0xf90 fs/read_write.c:574
 ksys_read+0x1d9/0x470 fs/read_write.c:717
 __do_sys_read fs/read_write.c:726 [inline]
 __se_sys_read fs/read_write.c:724 [inline]
 __x64_sys_read+0x97/0xf0 fs/read_write.c:724
 x64_sys_call+0x311c/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15d/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 memcpy_to_iter lib/iov_iter.c:77 [inline]
 iterate_bvec include/linux/iov_iter.h:123 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:306 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 _copy_to_iter+0x130f/0x3400 lib/iov_iter.c:197
 copy_page_to_iter+0x46d/0x790 lib/iov_iter.c:374
 copy_folio_to_iter include/linux/uio.h:204 [inline]
 shmem_file_read_iter+0x809/0xfe0 mm/shmem.c:3426
 lo_rw_aio+0x1164/0x14a0 drivers/block/loop.c:-1
 do_req_filebacked drivers/block/loop.c:-1 [inline]
 loop_handle_cmd drivers/block/loop.c:1925 [inline]
 loop_process_work+0xf05/0x1ff0 drivers/block/loop.c:1960
 loop_rootcg_workfn+0x2b/0x40 drivers/block/loop.c:1991
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb65/0x1e40 kernel/workqueue.c:3397
 worker_thread+0xee4/0x1590 kernel/workqueue.c:3478
 kthread+0x53a/0x5f0 kernel/kthread.c:436
 ret_from_fork+0x20f/0x8d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was stored to memory at:
 memcpy_from_iter lib/iov_iter.c:85 [inline]
 iterate_bvec include/linux/iov_iter.h:123 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:306 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 __copy_from_iter lib/iov_iter.c:261 [inline]
 copy_folio_from_iter_atomic+0xe91/0x3810 lib/iov_iter.c:491
 generic_perform_write+0x8b7/0x1050 mm/filemap.c:4343
 shmem_file_write_iter+0x2b7/0x2f0 mm/shmem.c:3478
 lo_rw_aio+0x1164/0x14a0 drivers/block/loop.c:-1
 do_req_filebacked drivers/block/loop.c:-1 [inline]
 loop_handle_cmd drivers/block/loop.c:1925 [inline]
 loop_process_work+0xf05/0x1ff0 drivers/block/loop.c:1960
 loop_workfn+0x3e/0x60 drivers/block/loop.c:1984
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb65/0x1e40 kernel/workqueue.c:3397
 worker_thread+0xee4/0x1590 kernel/workqueue.c:3478
 kthread+0x53a/0x5f0 kernel/kthread.c:436
 ret_from_fork+0x20f/0x8d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was stored to memory at:
 xlog_write_iovec fs/xfs/xfs_log.c:1913 [inline]
 xlog_write_full fs/xfs/xfs_log.c:1940 [inline]
 xlog_write+0x1a75/0x20f0 fs/xfs/xfs_log.c:2180
 xlog_cil_write_chain fs/xfs/xfs_log_cil.c:1175 [inline]
 xlog_cil_push_work+0x355c/0x5080 fs/xfs/xfs_log_cil.c:1518
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb65/0x1e40 kernel/workqueue.c:3397
 worker_thread+0xee4/0x1590 kernel/workqueue.c:3478
 kthread+0x53a/0x5f0 kernel/kthread.c:436
 ret_from_fork+0x20f/0x8d0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was stored to memory at:
 xlog_format_copy fs/xfs/xfs_log.h:78 [inline]
 xfs_inode_item_format_attr_fork+0x6f1/0xa80 fs/xfs/xfs_inode_item.c:455
 xfs_inode_item_format+0x2024/0x2280 fs/xfs/xfs_inode_item.c:674
 xlog_cil_insert_format_items fs/xfs/xfs_log_cil.c:603 [inline]
 xlog_cil_insert_items fs/xfs/xfs_log_cil.c:654 [inline]
 xlog_cil_commit+0x18ad/0x47d0 fs/xfs/xfs_log_cil.c:1841
 __xfs_trans_commit+0x55a/0xf40 fs/xfs/xfs_trans.c:868
 xfs_trans_commit+0x227/0x270 fs/xfs/xfs_trans.c:926
 xfs_vn_update_time+0x44f/0x6b0 fs/xfs/xfs_iops.c:1210
 touch_atime+0x52c/0xa90 fs/inode.c:2271
 file_accessed include/linux/fs.h:2264 [inline]
 filemap_read+0x206d/0x2300 mm/filemap.c:2878
 generic_file_read_iter+0x10c/0xae0 mm/filemap.c:2998
 xfs_file_buffered_read+0x19d/0x3d0 fs/xfs/xfs_file.c:315
 xfs_file_read_iter+0x2db/0x680 fs/xfs/xfs_file.c:340
 __kernel_read+0x7e0/0xe20 fs/read_write.c:532
 integrity_kernel_read+0x77/0x90 security/integrity/iint.c:28
 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:222 [inline]
 ima_calc_file_hash+0xaf6/0x12f0 security/integrity/ima/ima_crypto.c:280
 ima_collect_measurement+0x6a1/0xfa0 security/integrity/ima/ima_api.c:300
 process_measurement+0x2d10/0x4170 security/integrity/ima/ima_main.c:425
 ima_file_check+0x91/0xd0 security/integrity/ima/ima_main.c:685
 security_file_post_open+0xbb/0x510 security/security.c:2755
 do_open fs/namei.c:4701 [inline]
 path_openat+0x587d/0x64c0 fs/namei.c:4858
 do_file_open+0x2aa/0x680 fs/namei.c:4887
 do_sys_openat2+0x163/0x370 fs/open.c:1364
 do_sys_open fs/open.c:1370 [inline]
 __do_sys_open fs/open.c:1378 [inline]
 __se_sys_open fs/open.c:1374 [inline]
 __x64_sys_open+0x219/0x2c0 fs/open.c:1374
 x64_sys_call+0x189b/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:3
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15d/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4577 [inline]
 slab_alloc_node mm/slub.c:4899 [inline]
 __do_kmalloc_node mm/slub.c:5295 [inline]
 __kmalloc_node_track_caller_noprof+0x4f6/0x1750 mm/slub.c:5408
 __do_krealloc mm/slub.c:6711 [inline]
 krealloc_node_align_noprof+0x515/0xf20 mm/slub.c:6770
 xfs_broot_realloc+0x361/0x480 fs/xfs/libxfs/xfs_inode_fork.c:431
 xfs_bmap_broot_realloc+0x243/0x650 fs/xfs/libxfs/xfs_bmap_btree.c:-1
 xfs_bmap_extents_to_btree+0x1f8/0x1430 fs/xfs/libxfs/xfs_bmap.c:660
 xfs_bmap_add_extent_hole_real+0x2267/0x3040 fs/xfs/libxfs/xfs_bmap.c:2791
 xfs_bmapi_allocate+0x48d2/0x4f50 fs/xfs/libxfs/xfs_bmap.c:3977
 xfs_bmapi_write+0x10a9/0x26f0 fs/xfs/libxfs/xfs_bmap.c:4267
 xfs_da_grow_inode_int+0x36e/0x1110 fs/xfs/libxfs/xfs_da_btree.c:2346
 xfs_da_grow_inode+0xdf/0x350 fs/xfs/libxfs/xfs_da_btree.c:2411
 xfs_attr3_leaf_split+0x8e/0xc10 fs/xfs/libxfs/xfs_attr_leaf.c:1462
 xfs_da3_split+0x3aa/0x1650 fs/xfs/libxfs/xfs_da_btree.c:595
 xfs_attr_node_try_addname fs/xfs/libxfs/xfs_attr.c:1494 [inline]
 xfs_attr_node_addname fs/xfs/libxfs/xfs_attr.c:595 [inline]
 xfs_attr_set_iter+0x53df/0x7af0 fs/xfs/libxfs/xfs_attr.c:824
 xfs_attr_finish_item+0x16c/0x540 fs/xfs/xfs_attr_item.c:503
 xfs_defer_finish_one+0x529/0x1440 fs/xfs/libxfs/xfs_defer.c:595
 xfs_defer_finish_noroll+0x1081/0x1e10 fs/xfs/libxfs/xfs_defer.c:707
 xfs_trans_commit+0x165/0x270 fs/xfs/xfs_trans.c:919
 xfs_attr_set+0x1da1/0x2030 fs/xfs/libxfs/xfs_attr.c:1244
 xfs_attr_change+0x408/0x5b0 fs/xfs/xfs_xattr.c:128
 xfs_xattr_set+0x1d4/0x2f0 fs/xfs/xfs_xattr.c:186
 __vfs_setxattr+0x742/0x840 fs/xattr.c:218
 __vfs_setxattr_noperm+0x224/0xad0 fs/xattr.c:252
 __vfs_setxattr_locked+0x1f8/0x510 fs/xattr.c:313
 vfs_setxattr+0x276/0x690 fs/xattr.c:339
 do_setxattr fs/xattr.c:654 [inline]
 filename_setxattr+0x396/0xcb0 fs/xattr.c:682
 path_setxattrat+0x702/0x800 fs/xattr.c:726
 __do_sys_setxattr fs/xattr.c:760 [inline]
 __se_sys_setxattr fs/xattr.c:756 [inline]
 __x64_sys_setxattr+0x100/0x1b0 fs/xattr.c:756
 x64_sys_call+0x3c84/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:189
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15d/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Bytes 1732-1735 of 4096 are uninitialized
Memory access of size 4096 starts at ffff888062363000
Data copied to user address 00007f937017f000

CPU: 1 UID: 0 PID: 6318 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
=====================================================