syzbot

=====================================================
BUG: KMSAN: uninit-value in crc32c_arch lib/crc/x86/crc32.h:90 [inline]
BUG: KMSAN: uninit-value in crc32c+0x131/0x540 lib/crc/crc32-main.c:86
 crc32c_arch lib/crc/x86/crc32.h:90 [inline]
 crc32c+0x131/0x540 lib/crc/crc32-main.c:86
 xfs_start_cksum_update fs/xfs/libxfs/xfs_cksum.h:41 [inline]
 xlog_cksum fs/xfs/xfs_log.c:1513 [inline]
 xlog_sync+0x924/0xe00 fs/xfs/xfs_log.c:1751
 xlog_state_release_iclog+0x30b/0x740 fs/xfs/xfs_log.c:518
 xlog_force_iclog fs/xfs/xfs_log.c:753 [inline]
 xlog_force_and_check_iclog fs/xfs/xfs_log.c:2751 [inline]
 xlog_force_lsn+0x93a/0xc20 fs/xfs/xfs_log.c:2923
 xfs_log_force_seq+0x236/0x720 fs/xfs/xfs_log.c:2988
 xfs_fsync_flush_log fs/xfs/xfs_file.c:120 [inline]
 xfs_file_fsync+0x68e/0xe40 fs/xfs/xfs_file.c:163
 vfs_fsync_range+0x135/0x1c0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2640 [inline]
 iomap_dio_complete+0xf3d/0x1480 fs/iomap/direct-io.c:151
 iomap_dio_rw+0x13c/0x180 fs/iomap/direct-io.c:894
 xfs_file_dio_write_aligned+0x506/0x880 fs/xfs/xfs_file.c:737
 xfs_file_dio_write fs/xfs/xfs_file.c:946 [inline]
 xfs_file_write_iter+0xff0/0x1090 fs/xfs/xfs_file.c:1158
 iter_file_splice_write+0x12d8/0x20c0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x31a/0x7d0 fs/splice.c:1159
 splice_direct_to_actor+0x9a3/0x1560 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x1e0/0x350 fs/splice.c:1228
 do_sendfile+0x9fc/0x1130 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64+0x1ea/0x290 fs/read_write.c:1419
 __x64_sys_sendfile64+0xbd/0x120 fs/read_write.c:1419
 x64_sys_call+0x3aa4/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 xlog_pack_data+0x257/0x450 fs/xfs/xfs_log.c:1487
 xlog_sync+0x175/0xe00 fs/xfs/xfs_log.c:1733
 xlog_state_release_iclog+0x30b/0x740 fs/xfs/xfs_log.c:518
 xlog_force_iclog fs/xfs/xfs_log.c:753 [inline]
 xlog_force_and_check_iclog fs/xfs/xfs_log.c:2751 [inline]
 xlog_force_lsn+0x93a/0xc20 fs/xfs/xfs_log.c:2923
 xfs_log_force_seq+0x236/0x720 fs/xfs/xfs_log.c:2988
 xfs_fsync_flush_log fs/xfs/xfs_file.c:120 [inline]
 xfs_file_fsync+0x68e/0xe40 fs/xfs/xfs_file.c:163
 vfs_fsync_range+0x135/0x1c0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2640 [inline]
 iomap_dio_complete+0xf3d/0x1480 fs/iomap/direct-io.c:151
 iomap_dio_rw+0x13c/0x180 fs/iomap/direct-io.c:894
 xfs_file_dio_write_aligned+0x506/0x880 fs/xfs/xfs_file.c:737
 xfs_file_dio_write fs/xfs/xfs_file.c:946 [inline]
 xfs_file_write_iter+0xff0/0x1090 fs/xfs/xfs_file.c:1158
 iter_file_splice_write+0x12d8/0x20c0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x31a/0x7d0 fs/splice.c:1159
 splice_direct_to_actor+0x9a3/0x1560 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x1e0/0x350 fs/splice.c:1228
 do_sendfile+0x9fc/0x1130 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64+0x1ea/0x290 fs/read_write.c:1419
 __x64_sys_sendfile64+0xbd/0x120 fs/read_write.c:1419
 x64_sys_call+0x3aa4/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at:
 xlog_write_iovec fs/xfs/xfs_log.c:1913 [inline]
 xlog_write_full fs/xfs/xfs_log.c:1940 [inline]
 xlog_write+0x1a75/0x20f0 fs/xfs/xfs_log.c:2180
 xlog_cil_write_chain fs/xfs/xfs_log_cil.c:1175 [inline]
 xlog_cil_push_work+0x359c/0x50c0 fs/xfs/xfs_log_cil.c:1518
 process_one_work kernel/workqueue.c:3276 [inline]
 process_scheduled_works+0xb82/0x1e80 kernel/workqueue.c:3359
 worker_thread+0xee4/0x1590 kernel/workqueue.c:3440
 kthread+0x53f/0x600 kernel/kthread.c:436
 ret_from_fork+0x20f/0x910 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Uninit was stored to memory at:
 xlog_format_copy fs/xfs/xfs_log.h:78 [inline]
 xfs_inode_item_format_data_fork+0x3ba/0xc00 fs/xfs/xfs_inode_item.c:376
 xfs_inode_item_format+0x1fb4/0x2280 fs/xfs/xfs_inode_item.c:672
 xlog_cil_insert_format_items fs/xfs/xfs_log_cil.c:603 [inline]
 xlog_cil_insert_items fs/xfs/xfs_log_cil.c:654 [inline]
 xlog_cil_commit+0x184e/0x4890 fs/xfs/xfs_log_cil.c:1841
 __xfs_trans_commit+0x55a/0xf90 fs/xfs/xfs_trans.c:868
 xfs_trans_roll+0xfd/0x670 fs/xfs/xfs_trans.c:1031
 xfs_defer_trans_roll+0x109/0x610 fs/xfs/libxfs/xfs_defer.c:479
 xfs_defer_finish_noroll+0xd35/0x1ed0 fs/xfs/libxfs/xfs_defer.c:688
 xfs_trans_commit+0x165/0x270 fs/xfs/xfs_trans.c:919
 xfs_iomap_write_unwritten+0x921/0x1130 fs/xfs/xfs_iomap.c:697
 xfs_dio_write_end_io+0x7fd/0xc90 fs/xfs/xfs_file.c:617
 iomap_dio_complete+0x188/0x1480 fs/iomap/direct-io.c:111
 iomap_dio_rw+0x13c/0x180 fs/iomap/direct-io.c:894
 xfs_file_dio_write_aligned+0x506/0x880 fs/xfs/xfs_file.c:737
 xfs_file_dio_write fs/xfs/xfs_file.c:946 [inline]
 xfs_file_write_iter+0xff0/0x1090 fs/xfs/xfs_file.c:1158
 iter_file_splice_write+0x12d8/0x20c0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x31a/0x7d0 fs/splice.c:1159
 splice_direct_to_actor+0x9a3/0x1560 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x1e0/0x350 fs/splice.c:1228
 do_sendfile+0x9fc/0x1130 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64+0x1ea/0x290 fs/read_write.c:1419
 __x64_sys_sendfile64+0xbd/0x120 fs/read_write.c:1419
 x64_sys_call+0x3aa4/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:4545 [inline]
 slab_alloc_node mm/slub.c:4866 [inline]
 __do_kmalloc_node mm/slub.c:5259 [inline]
 __kmalloc_node_track_caller_noprof+0x4f6/0x1750 mm/slub.c:5368
 __do_krealloc mm/slub.c:6630 [inline]
 krealloc_node_align_noprof+0x463/0xf10 mm/slub.c:6689
 xfs_broot_realloc+0x361/0x480 fs/xfs/libxfs/xfs_inode_fork.c:431
 xfs_bmap_broot_realloc+0x243/0x650 fs/xfs/libxfs/xfs_bmap_btree.c:-1
 xfs_bmap_extents_to_btree+0x1f8/0x1430 fs/xfs/libxfs/xfs_bmap.c:660
 xfs_bmap_add_extent_hole_real+0x2267/0x3040 fs/xfs/libxfs/xfs_bmap.c:2791
 xfs_bmapi_allocate+0x48d2/0x4f50 fs/xfs/libxfs/xfs_bmap.c:3977
 xfs_bmapi_write+0x10a9/0x26f0 fs/xfs/libxfs/xfs_bmap.c:4267
 xfs_iomap_write_direct+0x6f0/0xa50 fs/xfs/xfs_iomap.c:335
 xfs_direct_write_iomap_begin+0x1a37/0x2570 fs/xfs/xfs_iomap.c:1009
 iomap_iter+0x9b7/0x1540 fs/iomap/iter.c:110
 __iomap_dio_rw+0x14eb/0x3a10 fs/iomap/direct-io.c:795
 iomap_dio_rw+0x5d/0x180 fs/iomap/direct-io.c:890
 xfs_file_dio_write_aligned+0x506/0x880 fs/xfs/xfs_file.c:737
 xfs_file_dio_write fs/xfs/xfs_file.c:946 [inline]
 xfs_file_write_iter+0xff0/0x1090 fs/xfs/xfs_file.c:1158
 iter_file_splice_write+0x12d8/0x20c0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x31a/0x7d0 fs/splice.c:1159
 splice_direct_to_actor+0x9a3/0x1560 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x1e0/0x350 fs/splice.c:1228
 do_sendfile+0x9fc/0x1130 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64+0x1ea/0x290 fs/read_write.c:1419
 __x64_sys_sendfile64+0xbd/0x120 fs/read_write.c:1419
 x64_sys_call+0x3aa4/0x3ea0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x134/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

CPU: 0 UID: 0 PID: 16223 Comm: syz.2.1743 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
=====================================================