===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x24b0 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x24b0 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4065 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 ____sys_recvmsg+0x18a/0x620 net/socket.c:2803 ___sys_recvmsg+0x223/0x840 net/socket.c:2845 __sys_recvmsg net/socket.c:2875 [inline] __do_sys_recvmsg net/socket.c:2885 [inline] __se_sys_recvmsg net/socket.c:2882 [inline] __x64_sys_recvmsg+0x304/0x4a0 net/socket.c:2882 x64_sys_call+0x38ff/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:48 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2259 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_broadcast_filtered+0x82/0x23b0 net/netlink/af_netlink.c:1523 nlmsg_multicast_filtered include/net/netlink.h:1111 [inline] nlmsg_multicast include/net/netlink.h:1130 [inline] nlmsg_notify+0x15f/0x2f0 net/netlink/af_netlink.c:2602 rtnl_notify+0xc3/0xf0 net/core/rtnetlink.c:757 wireless_nlevent_flush net/wireless/wext-core.c:354 [inline] wext_netdev_notifier_call+0xfe/0x260 net/wireless/wext-core.c:371 notifier_call_chain kernel/notifier.c:93 [inline] raw_notifier_call_chain+0xe8/0x440 kernel/notifier.c:461 call_netdevice_notifiers_info+0x1be/0x2b0 net/core/dev.c:1950 call_netdevice_notifiers_extack net/core/dev.c:1988 [inline] __dev_open+0x343/0x6f0 net/core/dev.c:1419 __dev_change_flags+0x309/0x9a0 net/core/dev.c:8692 dev_change_flags+0x8e/0x1d0 net/core/dev.c:8764 do_setlink+0x1708/0x7110 net/core/rtnetlink.c:2884 __rtnl_newlink net/core/rtnetlink.c:3680 [inline] rtnl_newlink+0x329c/0x41f0 net/core/rtnetlink.c:3727 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2191 __do_compat_sys_socketcall net/compat.c:475 [inline] __se_compat_sys_socketcall+0xceb/0x1a20 net/compat.c:423 __ia32_compat_sys_socketcall+0x6b/0xa0 net/compat.c:423 ia32_sys_call+0x1bce/0x40a0 arch/x86/include/generated/asm/syscalls_32.h:103 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x38/0x80 arch/x86/entry/common.c:411 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:449 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was stored to memory at: wireless_send_event+0x566/0x1020 net/wireless/wext-core.c:580 ioctl_standard_iw_point+0x12e5/0x13c0 compat_standard_call+0x179/0x310 net/wireless/wext-core.c:1110 wext_ioctl_dispatch+0x234/0xa30 net/wireless/wext-core.c:1016 compat_wext_handle_ioctl+0x1ae/0x2f0 net/wireless/wext-core.c:1139 compat_sock_ioctl+0x26b/0x1370 net/socket.c:3525 __do_compat_sys_ioctl fs/ioctl.c:1004 [inline] __se_compat_sys_ioctl+0x791/0x1090 fs/ioctl.c:947 __ia32_compat_sys_ioctl+0x93/0xe0 fs/ioctl.c:947 ia32_sys_call+0x1481/0x40a0 arch/x86/include/generated/asm/syscalls_32.h:55 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x38/0x80 arch/x86/entry/common.c:411 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:449 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Local variable iwp created at: compat_standard_call+0x48/0x310 net/wireless/wext-core.c:1097 wext_ioctl_dispatch+0x234/0xa30 net/wireless/wext-core.c:1016 Bytes 60-63 of 64 are uninitialized Memory access of size 64 starts at ffff888118422500 Data copied to user address 00007ffdd12a5828 CPU: 0 PID: 4695 Comm: dhcpcd Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 =====================================================