netlink: 2 bytes leftover after parsing attributes in process `syz-executor7'.
==================================================================
BUG: KMSAN: uninit-value in copyout lib/iov_iter.c:140 [inline]
BUG: KMSAN: uninit-value in _copy_to_iter+0x1b14/0x2800 lib/iov_iter.c:571
CPU: 1 PID: 9392 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x149/0x260 mm/kmsan/kmsan.c:1084
 kmsan_internal_check_memory+0x135/0x1e0 mm/kmsan/kmsan.c:1177
 kmsan_copy_to_user+0x75/0x160 mm/kmsan/kmsan.c:1219
 copyout lib/iov_iter.c:140 [inline]
 _copy_to_iter+0x1b14/0x2800 lib/iov_iter.c:571
 copy_to_iter include/linux/uio.h:106 [inline]
 skb_copy_datagram_iter+0x443/0xf70 net/core/datagram.c:431
 skb_copy_datagram_msg include/linux/skbuff.h:3268 [inline]
 netlink_recvmsg+0x6f1/0x1900 net/netlink/af_netlink.c:1959
 sock_recvmsg_nosec net/socket.c:802 [inline]
 sock_recvmsg net/socket.c:809 [inline]
 sock_read_iter+0x405/0x480 net/socket.c:886
 do_iter_readv_writev+0x84d/0xa00 include/linux/fs.h:1778
 do_iter_read+0x303/0xd70 fs/read_write.c:922
 vfs_readv fs/read_write.c:986 [inline]
 do_readv+0x295/0x5f0 fs/read_write.c:1019
 __do_sys_readv fs/read_write.c:1106 [inline]
 __se_sys_readv fs/read_write.c:1103 [inline]
 __x64_sys_readv+0xe1/0x120 fs/read_write.c:1103
 do_syscall_64+0x152/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x455a09
RSP: 002b:00007f747daa9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 00007f747daaa6d4 RCX: 0000000000455a09
RDX: 0000000000000007 RSI: 0000000020000580 RDI: 0000000000000013
RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000001

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 kmsan_memcpy_origins+0x11d/0x170 mm/kmsan/kmsan.c:527
 __msan_memcpy+0x109/0x160 mm/kmsan/kmsan_instr.c:478
 __nla_put lib/nlattr.c:569 [inline]
 nla_put+0x276/0x340 lib/nlattr.c:627
 copy_to_user_state_extra+0xf98/0x1e40 net/xfrm/xfrm_user.c:868
 dump_one_state+0x33f/0x5e0 net/xfrm/xfrm_user.c:930
 xfrm_state_walk+0x445/0x13c0 net/xfrm/xfrm_state.c:1847
 xfrm_dump_sa+0x267/0x6a0 net/xfrm/xfrm_user.c:990
 netlink_dump+0x9b0/0x1540 net/netlink/af_netlink.c:2226
 __netlink_dump_start+0x1127/0x1260 net/netlink/af_netlink.c:2323
 netlink_dump_start include/linux/netlink.h:214 [inline]
 xfrm_user_rcv_msg+0x896/0x9a0 net/xfrm/xfrm_user.c:2577
 netlink_rcv_skb+0x378/0x600 net/netlink/af_netlink.c:2448
 xfrm_netlink_rcv+0xb2/0xf0 net/xfrm/xfrm_user.c:2598
 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
 netlink_unicast+0x1678/0x1750 net/netlink/af_netlink.c:1336
 netlink_sendmsg+0x104f/0x1350 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 __sys_sendto+0x6c0/0x7e0 net/socket.c:1789
 __do_sys_sendto net/socket.c:1801 [inline]
 __se_sys_sendto net/socket.c:1797 [inline]
 __x64_sys_sendto+0x1a1/0x210 net/socket.c:1797
 do_syscall_64+0x152/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:189
 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:315
 __kmalloc+0x141/0x350 mm/slub.c:3818
 kmalloc include/linux/slab.h:517 [inline]
 pfkey_msg2xfrm_state net/key/af_key.c:1236 [inline]
 pfkey_add+0x39aa/0x3ef0 net/key/af_key.c:1524
 pfkey_process net/key/af_key.c:2844 [inline]
 pfkey_sendmsg+0x15ee/0x1aa0 net/key/af_key.c:3683
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 ___sys_sendmsg+0xec0/0x1310 net/socket.c:2117
 __sys_sendmsg net/socket.c:2155 [inline]
 __do_sys_sendmsg net/socket.c:2164 [inline]
 __se_sys_sendmsg net/socket.c:2162 [inline]
 __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162
 do_syscall_64+0x152/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Bytes 674-700 of 721 are uninitialized
Memory access starts at ffff88013609cd5e
==================================================================