===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:167 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x376/0x1c60 lib/iov_iter.c:316 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copyout lib/iov_iter.c:167 [inline] _copy_to_iter+0x376/0x1c60 lib/iov_iter.c:316 copy_to_iter include/linux/uio.h:194 [inline] simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:513 __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:419 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:527 skb_copy_datagram_msg include/linux/skbuff.h:3942 [inline] netlink_recvmsg+0x4ae/0x1620 net/netlink/af_netlink.c:1971 sock_recvmsg_nosec net/socket.c:1020 [inline] sock_recvmsg net/socket.c:1041 [inline] ____sys_recvmsg+0x283/0x7f0 net/socket.c:2713 ___sys_recvmsg+0x223/0x840 net/socket.c:2755 __sys_recvmsg net/socket.c:2785 [inline] __do_sys_recvmsg net/socket.c:2795 [inline] __se_sys_recvmsg net/socket.c:2792 [inline] __x64_sys_recvmsg+0x304/0x490 net/socket.c:2792 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: pskb_expand_head+0x305/0x1a10 net/core/skbuff.c:2050 netlink_trim+0x2c0/0x330 net/netlink/af_netlink.c:1321 netlink_broadcast+0x7b/0x2270 net/netlink/af_netlink.c:1517 nlmsg_multicast include/net/netlink.h:1083 [inline] nlmsg_notify+0x15a/0x2e0 net/netlink/af_netlink.c:2592 rtnl_notify+0xc3/0xf0 net/core/rtnetlink.c:771 wireless_nlevent_flush net/wireless/wext-core.c:353 [inline] wireless_nlevent_process+0xfe/0x240 net/wireless/wext-core.c:413 process_one_work+0xbf6/0x17c0 kernel/workqueue.c:2597 worker_thread+0x107e/0x1d60 kernel/workqueue.c:2748 kthread+0x3e8/0x540 kernel/kthread.c:389 ret_from_fork+0x57/0x80 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:296 Uninit was stored to memory at: wireless_send_event+0x566/0x1010 net/wireless/wext-core.c:579 ioctl_standard_iw_point+0x12de/0x13b0 compat_standard_call+0x179/0x310 net/wireless/wext-core.c:1107 wext_ioctl_dispatch+0x230/0xa30 net/wireless/wext-core.c:1013 compat_wext_handle_ioctl+0x1ae/0x2f0 net/wireless/wext-core.c:1136 compat_sock_ioctl+0x21d/0x1360 net/socket.c:3432 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl+0x79b/0xfe0 fs/ioctl.c:910 __ia32_compat_sys_ioctl+0x93/0xd0 fs/ioctl.c:910 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 Local variable iwp created at: compat_standard_call+0x48/0x310 net/wireless/wext-core.c:1094 wext_ioctl_dispatch+0x230/0xa30 net/wireless/wext-core.c:1013 Bytes 60-63 of 64 are uninitialized Memory access of size 64 starts at ffff888094321400 Data copied to user address 00007ffffbc8e108 CPU: 0 PID: 4639 Comm: dhcpcd Not tainted 6.5.0-rc2-syzkaller-00052-gbfa3037d8280 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 =====================================================