===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:121 [inline] BUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:154 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668 instrument_copy_to_user include/linux/instrumented.h:121 [inline] copyout lib/iov_iter.c:154 [inline] _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668 copy_to_iter include/linux/uio.h:162 [inline] simple_copy_to_iter+0xf3/0x140 net/core/datagram.c:519 __skb_datagram_iter+0x2d5/0x11b0 net/core/datagram.c:425 skb_copy_datagram_iter+0xdc/0x270 net/core/datagram.c:533 skb_copy_datagram_msg include/linux/skbuff.h:3696 [inline] netlink_recvmsg+0x669/0x1c80 net/netlink/af_netlink.c:1977 ____sys_recvmsg+0x590/0xb00 ___sys_recvmsg net/socket.c:2674 [inline] __sys_recvmsg+0x59b/0xce0 net/socket.c:2704 __do_sys_recvmsg net/socket.c:2714 [inline] __se_sys_recvmsg net/socket.c:2711 [inline] __x64_sys_recvmsg+0xe2/0x120 net/socket.c:2711 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was stored to memory at: pskb_expand_head+0x3c9/0x1ca0 net/core/skbuff.c:1708 netlink_trim+0x3f6/0x450 net/netlink/af_netlink.c:1299 netlink_broadcast+0x112/0x2340 net/netlink/af_netlink.c:1495 nlmsg_multicast include/net/netlink.h:1033 [inline] nlmsg_notify+0x29e/0x550 net/netlink/af_netlink.c:2537 rtnl_notify+0x193/0x1b0 net/core/rtnetlink.c:730 wireless_nlevent_flush net/wireless/wext-core.c:353 [inline] wireless_nlevent_process+0x139/0x270 net/wireless/wext-core.c:413 process_one_work+0xdb6/0x1820 kernel/workqueue.c:2307 worker_thread+0x10b3/0x21e0 kernel/workqueue.c:2454 kthread+0x3c7/0x500 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 Uninit was stored to memory at: wireless_send_event+0x8d1/0x1670 net/wireless/wext-core.c:578 ioctl_standard_iw_point+0x1477/0x1900 net/wireless/wext-core.c:870 compat_standard_call+0x2b5/0x560 net/wireless/wext-core.c:1082 wext_ioctl_dispatch+0x344/0x950 net/wireless/wext-core.c:988 compat_wext_handle_ioctl+0x282/0x460 net/wireless/wext-core.c:1111 compat_sock_ioctl+0x3d6/0x1860 net/socket.c:3351 __do_compat_sys_ioctl fs/ioctl.c:972 [inline] __se_compat_sys_ioctl+0x876/0x1150 fs/ioctl.c:914 __ia32_compat_sys_ioctl+0xd9/0x110 fs/ioctl.c:914 do_syscall_32_irqs_on arch/x86/entry/common.c:114 [inline] __do_fast_syscall_32+0x96/0xf0 arch/x86/entry/common.c:180 do_fast_syscall_32+0x34/0x70 arch/x86/entry/common.c:205 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:248 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Local variable iwp created at: compat_standard_call+0xb4/0x560 net/wireless/wext-core.c:1069 wext_ioctl_dispatch+0x344/0x950 net/wireless/wext-core.c:988 Bytes 60-63 of 64 are uninitialized Memory access of size 64 starts at ffff88808bad9000 Data copied to user address 00007fff35b90038 CPU: 1 PID: 3047 Comm: dhcpcd Not tainted 5.17.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================