===================================================== BUG: KMSAN: kernel-infoleak-after-free in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak-after-free in _inline_copy_to_user include/linux/uaccess.h:196 [inline] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xcc/0x120 lib/usercopy.c:26 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _inline_copy_to_user include/linux/uaccess.h:196 [inline] _copy_to_user+0xcc/0x120 lib/usercopy.c:26 copy_to_user include/linux/uaccess.h:225 [inline] copy_siginfo_to_user+0x3f/0x140 kernel/signal.c:3503 x64_setup_rt_frame+0x1392/0x2590 arch/x86/kernel/signal_64.c:194 setup_rt_frame arch/x86/kernel/signal.c:250 [inline] handle_signal arch/x86/kernel/signal.c:294 [inline] arch_do_signal_or_restart+0x63c/0xbf0 arch/x86/kernel/signal.c:339 exit_to_user_mode_loop+0xec/0x330 kernel/entry/common.c:111 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline] do_syscall_64+0x1e3/0x210 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_free_hook mm/slub.c:2307 [inline] slab_free mm/slub.c:4643 [inline] kmem_cache_free+0x2a1/0xec0 mm/slub.c:4745 __sigqueue_free+0x23a/0x270 kernel/signal.c:475 flush_sigqueue+0x1c5/0x3f0 kernel/signal.c:486 release_task+0x2209/0x2960 kernel/exit.c:305 wait_task_zombie kernel/exit.c:1267 [inline] wait_consider_task+0x28e0/0x3df0 kernel/exit.c:1494 do_wait_pid kernel/exit.c:1633 [inline] __do_wait+0x8fe/0xdd0 kernel/exit.c:1668 do_wait+0x10e/0x480 kernel/exit.c:1709 kernel_wait+0xd2/0x290 kernel/exit.c:1885 call_usermodehelper_exec_sync kernel/umh.c:136 [inline] call_usermodehelper_exec_work+0x170/0x300 kernel/umh.c:163 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3321 worker_thread+0xedf/0x1590 kernel/workqueue.c:3402 kthread+0xd5c/0xf00 kernel/kthread.c:464 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Bytes 12-15 of 48 are uninitialized Memory access of size 48 starts at ffff88813e953df0 Data copied to user address 00007ffc853e12f0 CPU: 0 UID: 0 PID: 15720 Comm: syz-executor Tainted: G W 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(undef) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 =====================================================