===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:300 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:328 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:300 [inline] iterate_and_advance include/linux/iov_iter.h:328 [inline] _copy_to_iter+0xf0e/0x33f0 lib/iov_iter.c:185 copy_page_to_iter+0x482/0x910 lib/iov_iter.c:362 copy_folio_to_iter include/linux/uio.h:204 [inline] filemap_read+0xcfd/0x2300 mm/filemap.c:2763 blkdev_read_iter+0x89f/0xb00 block/fops.c:849 new_sync_read fs/read_write.c:491 [inline] vfs_read+0x8ea/0xf90 fs/read_write.c:572 ksys_read fs/read_write.c:715 [inline] __do_sys_read fs/read_write.c:724 [inline] __se_sys_read fs/read_write.c:722 [inline] __x64_sys_read+0x1fb/0x4d0 fs/read_write.c:722 x64_sys_call+0x2f9c/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6158 at kernel/stacktrace.c:29 stack_trace_print+0xd4/0xf0 kernel/stacktrace.c:29 Modules linked in: CPU: 0 UID: 0 PID: 6158 Comm: udevd Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:stack_trace_print+0xd4/0xf0 kernel/stacktrace.c:29 Code: 12 22 24 92 89 de ba 20 00 00 00 4c 89 e1 e8 43 28 4d ff 49 83 c6 08 49 ff cd 0f 85 6e ff ff ff eb 0b e8 6f 84 c3 00 eb d4 90 <0f> 0b 90 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1a c4 0c 0f cc 66 0f 1f RSP: 0018:ffff88805002b3a8 EFLAGS: 00010246 RAX: ffff88801ebf4ce0 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88805002b3d0 R08: 0000000000000000 R09: 0000000000000000 R10: ffff88804f82b3e8 R11: 0000000000000001 R12: 0000000000000000 R13: 00000000abcd0100 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f8ffe20f880(0000) GS:ffff8881aa697000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8ffe1f5000 CR3: 000000004c4f2000 CR4: 00000000003526f0 Call Trace: kmsan_print_origin+0xb0/0x340 mm/kmsan/report.c:133 kmsan_report+0x1d3/0x320 mm/kmsan/report.c:196 kmsan_internal_check_memory+0x16c/0x230 mm/kmsan/core.c:293 kmsan_copy_to_user+0xf1/0x190 mm/kmsan/hooks.c:269 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:300 [inline] iterate_and_advance include/linux/iov_iter.h:328 [inline] _copy_to_iter+0xf0e/0x33f0 lib/iov_iter.c:185 copy_page_to_iter+0x482/0x910 lib/iov_iter.c:362 copy_folio_to_iter include/linux/uio.h:204 [inline] filemap_read+0xcfd/0x2300 mm/filemap.c:2763 blkdev_read_iter+0x89f/0xb00 block/fops.c:849 new_sync_read fs/read_write.c:491 [inline] vfs_read+0x8ea/0xf90 fs/read_write.c:572 ksys_read fs/read_write.c:715 [inline] __do_sys_read fs/read_write.c:724 [inline] __se_sys_read fs/read_write.c:722 [inline] __x64_sys_read+0x1fb/0x4d0 fs/read_write.c:722 x64_sys_call+0x2f9c/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8ffdaa7407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffd487f7010 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f8ffe20f880 RCX: 00007f8ffdaa7407 RDX: 0000000000000200 RSI: 00007f8ffe1f4000 RDI: 0000000000000009 RBP: 000055983ec1e090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000004000 R14: 000055983ec29fe8 R15: 00007f8ffe33639c ---[ end trace 0000000000000000 ]--- Uninit was created at: slab_post_alloc_hook mm/slub.c:4186 [inline] slab_alloc_node mm/slub.c:4229 [inline] __do_kmalloc_node mm/slub.c:4364 [inline] __kmalloc_noprof+0x95f/0x1310 mm/slub.c:4377 kmalloc_noprof include/linux/slab.h:909 [inline] ni_create_attr_list+0x1ca/0x1db0 fs/ntfs3/frecord.c:770 ni_ins_attr_ext+0x676/0x1480 fs/ntfs3/frecord.c:924 ni_insert_attr fs/ntfs3/frecord.c:1091 [inline] ni_insert_resident fs/ntfs3/frecord.c:1475 [inline] ni_add_name+0xb09/0x11e0 fs/ntfs3/frecord.c:2987 ntfs_link_inode+0x221/0x350 fs/ntfs3/inode.c:1728 ntfs_link+0x20e/0x500 fs/ntfs3/namei.c:146 vfs_link+0x8eb/0xb30 fs/namei.c:4854 do_linkat+0x4af/0x1040 fs/namei.c:4924 __do_sys_link fs/namei.c:4958 [inline] __se_sys_link fs/namei.c:4956 [inline] __ia32_sys_link+0xd7/0x140 fs/namei.c:4956 ia32_sys_call+0x3684/0x4310 arch/x86/include/generated/asm/syscalls_32.h:10 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x150 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Bytes 202-207 of 512 are uninitialized Memory access of size 512 starts at ffff88812e2f6000 Data copied to user address 00007f8ffe1f4000 CPU: 0 UID: 0 PID: 6158 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(none) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 =====================================================