=====================================================
BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline]
BUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:167 [inline]
BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x376/0x1c60 lib/iov_iter.c:316
 instrument_copy_to_user include/linux/instrumented.h:114 [inline]
 copyout lib/iov_iter.c:167 [inline]
 _copy_to_iter+0x376/0x1c60 lib/iov_iter.c:316
 copy_to_iter include/linux/uio.h:194 [inline]
 simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:513
 __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:419
 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:527
 skb_copy_datagram_msg include/linux/skbuff.h:3942 [inline]
 netlink_recvmsg+0x4ae/0x1620 net/netlink/af_netlink.c:1971
 sock_recvmsg_nosec net/socket.c:1020 [inline]
 sock_recvmsg net/socket.c:1041 [inline]
 sock_read_iter+0x467/0x580 net/socket.c:1107
 call_read_iter include/linux/fs.h:1871 [inline]
 aio_read+0x4b4/0x680 fs/aio.c:1556
 io_submit_one+0x25f9/0x3550 fs/aio.c:2015
 __do_compat_sys_io_submit fs/aio.c:2116 [inline]
 __se_compat_sys_io_submit+0x287/0x710 fs/aio.c:2086
 __ia32_compat_sys_io_submit+0x93/0xd0 fs/aio.c:2086
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was stored to memory at:
 copy_to_user_auth net/xfrm/xfrm_user.c:998 [inline]
 copy_to_user_state_extra+0xfa3/0x1e80 net/xfrm/xfrm_user.c:1130
 dump_one_state+0x2cc/0x7c0 net/xfrm/xfrm_user.c:1208
 xfrm_state_walk+0x721/0x1300 net/xfrm/xfrm_state.c:2309
 xfrm_dump_sa+0x1de/0x6a0 net/xfrm/xfrm_user.c:1279
 netlink_dump+0x9d1/0x1310 net/netlink/af_netlink.c:2269
 __netlink_dump_start+0xb1c/0xcf0 net/netlink/af_netlink.c:2376
 netlink_dump_start include/linux/netlink.h:330 [inline]
 xfrm_user_rcv_msg+0x758/0xf20 net/xfrm/xfrm_user.c:3135
 netlink_rcv_skb+0x371/0x650 net/netlink/af_netlink.c:2549
 xfrm_netlink_rcv+0x76/0xb0 net/xfrm/xfrm_user.c:3172
 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
 netlink_unicast+0xf28/0x1230 net/netlink/af_netlink.c:1365
 netlink_sendmsg+0x122f/0x13d0 net/netlink/af_netlink.c:1914
 sock_sendmsg_nosec net/socket.c:725 [inline]
 sock_sendmsg net/socket.c:748 [inline]
 ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2494
 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2548
 __sys_sendmsg+0x225/0x3c0 net/socket.c:2577
 __compat_sys_sendmsg net/compat.c:346 [inline]
 __do_compat_sys_sendmsg net/compat.c:353 [inline]
 __se_compat_sys_sendmsg net/compat.c:350 [inline]
 __ia32_compat_sys_sendmsg+0x9d/0xe0 net/compat.c:350
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Uninit was created at:
 slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767
 slab_alloc_node mm/slub.c:3470 [inline]
 __kmem_cache_alloc_node+0x536/0x8d0 mm/slub.c:3509
 __do_kmalloc_node mm/slab_common.c:984 [inline]
 __kmalloc+0x121/0x3c0 mm/slab_common.c:998
 kmalloc include/linux/slab.h:586 [inline]
 attach_auth net/xfrm/xfrm_user.c:442 [inline]
 xfrm_state_construct net/xfrm/xfrm_user.c:716 [inline]
 xfrm_add_sa+0x29a7/0x4580 net/xfrm/xfrm_user.c:795
 xfrm_user_rcv_msg+0xbc2/0xf20 net/xfrm/xfrm_user.c:3150
 netlink_rcv_skb+0x371/0x650 net/netlink/af_netlink.c:2549
 xfrm_netlink_rcv+0x76/0xb0 net/xfrm/xfrm_user.c:3172
 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
 netlink_unicast+0xf28/0x1230 net/netlink/af_netlink.c:1365
 netlink_sendmsg+0x122f/0x13d0 net/netlink/af_netlink.c:1914
 sock_sendmsg_nosec net/socket.c:725 [inline]
 sock_sendmsg net/socket.c:748 [inline]
 ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2494
 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2548
 __sys_sendmsg+0x225/0x3c0 net/socket.c:2577
 __compat_sys_sendmsg net/compat.c:346 [inline]
 __do_compat_sys_sendmsg net/compat.c:353 [inline]
 __se_compat_sys_sendmsg net/compat.c:350 [inline]
 __ia32_compat_sys_sendmsg+0x9d/0xe0 net/compat.c:350
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203
 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246
 entry_SYSENTER_compat_after_hwframe+0x70/0x82

Bytes 328-379 of 1536 are uninitialized
Memory access of size 1536 starts at ffff88802b2c3000

CPU: 1 PID: 14371 Comm: syz-executor.4 Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
=====================================================