===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:167 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x37d/0x1cf0 lib/iov_iter.c:316 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copyout lib/iov_iter.c:167 [inline] _copy_to_iter+0x37d/0x1cf0 lib/iov_iter.c:316 copy_to_iter include/linux/uio.h:201 [inline] simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:513 __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:419 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:527 skb_copy_datagram_msg include/linux/skbuff.h:3957 [inline] netlink_recvmsg+0x432/0x1600 net/netlink/af_netlink.c:1967 sock_recvmsg_nosec net/socket.c:1027 [inline] sock_recvmsg net/socket.c:1049 [inline] ____sys_recvmsg+0x283/0x7f0 net/socket.c:2760 ___sys_recvmsg+0x223/0x840 net/socket.c:2802 __sys_recvmsg net/socket.c:2832 [inline] __do_sys_recvmsg net/socket.c:2842 [inline] __se_sys_recvmsg net/socket.c:2839 [inline] __x64_sys_recvmsg+0x304/0x490 net/socket.c:2839 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: pskb_expand_head+0x305/0x1a00 net/core/skbuff.c:2101 netlink_trim+0x2c0/0x330 net/netlink/af_netlink.c:1324 netlink_broadcast_filtered+0x82/0x2390 net/netlink/af_netlink.c:1531 netlink_broadcast net/netlink/af_netlink.c:1576 [inline] nlmsg_multicast include/net/netlink.h:1079 [inline] nlmsg_notify+0x15f/0x2f0 net/netlink/af_netlink.c:2588 rtnl_notify+0xc3/0xf0 net/core/rtnetlink.c:771 wireless_nlevent_flush net/wireless/wext-core.c:353 [inline] wireless_nlevent_process+0xfe/0x240 net/wireless/wext-core.c:413 process_one_work kernel/workqueue.c:2630 [inline] process_scheduled_works+0x104e/0x1e70 kernel/workqueue.c:2703 worker_thread+0xf45/0x1490 kernel/workqueue.c:2784 kthread+0x3e8/0x540 kernel/kthread.c:388 ret_from_fork+0x66/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 Uninit was stored to memory at: wireless_send_event+0x566/0x1010 net/wireless/wext-core.c:579 ioctl_standard_iw_point+0x12de/0x13b0 compat_standard_call+0x179/0x310 net/wireless/wext-core.c:1107 wext_ioctl_dispatch+0x230/0xa30 net/wireless/wext-core.c:1013 compat_wext_handle_ioctl+0x1ae/0x2f0 net/wireless/wext-core.c:1136 compat_sock_ioctl+0x220/0x1370 net/socket.c:3482 __do_compat_sys_ioctl fs/ioctl.c:972 [inline] __se_compat_sys_ioctl+0x79b/0xfe0 fs/ioctl.c:914 __ia32_compat_sys_ioctl+0x93/0xd0 fs/ioctl.c:914 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 Local variable iwp created at: compat_standard_call+0x48/0x310 net/wireless/wext-core.c:1094 wext_ioctl_dispatch+0x230/0xa30 net/wireless/wext-core.c:1013 Bytes 60-63 of 64 are uninitialized Memory access of size 64 starts at ffff8880a638ea00 Data copied to user address 00007fff88b4da98 CPU: 0 PID: 4645 Comm: dhcpcd Not tainted 6.6.0-rc2-syzkaller-00018-g2cf0f7156238 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 =====================================================