=====================================================
BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:121 [inline]
BUG: KMSAN: kernel-infoleak in copyout+0xbc/0x100 lib/iov_iter.c:169
 instrument_copy_to_user include/linux/instrumented.h:121 [inline]
 copyout+0xbc/0x100 lib/iov_iter.c:169
 _copy_to_iter+0x479/0x1ce0 lib/iov_iter.c:523
 copy_to_iter include/linux/uio.h:181 [inline]
 simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:513
 __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:419
 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:527
 skb_copy_datagram_msg include/linux/skbuff.h:3934 [inline]
 netlink_recvmsg+0x4ae/0x1520 net/netlink/af_netlink.c:1999
 sock_recvmsg_nosec net/socket.c:1017 [inline]
 sock_recvmsg net/socket.c:1038 [inline]
 __sys_recvfrom+0x502/0x810 net/socket.c:2194
 __do_sys_recvfrom net/socket.c:2212 [inline]
 __se_sys_recvfrom net/socket.c:2208 [inline]
 __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2208
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was stored to memory at:
 copy_to_user_auth net/xfrm/xfrm_user.c:996 [inline]
 copy_to_user_state_extra+0xe5a/0x1d40 net/xfrm/xfrm_user.c:1128
 dump_one_state+0x2cc/0x7c0 net/xfrm/xfrm_user.c:1206
 xfrm_state_walk+0x721/0x1300 net/xfrm/xfrm_state.c:2308
 xfrm_dump_sa+0x1de/0x6a0 net/xfrm/xfrm_user.c:1277
 netlink_dump+0x9d1/0x1310 net/netlink/af_netlink.c:2299
 __netlink_dump_start+0xa75/0xc40 net/netlink/af_netlink.c:2404
 netlink_dump_start include/linux/netlink.h:308 [inline]
 xfrm_user_rcv_msg+0x75e/0xf30 net/xfrm/xfrm_user.c:3128
 netlink_rcv_skb+0x371/0x650 net/netlink/af_netlink.c:2577
 xfrm_netlink_rcv+0x76/0xb0 net/xfrm/xfrm_user.c:3165
 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
 netlink_unicast+0xf28/0x1230 net/netlink/af_netlink.c:1365
 netlink_sendmsg+0x122f/0x13d0 net/netlink/af_netlink.c:1942
 sock_sendmsg_nosec net/socket.c:724 [inline]
 sock_sendmsg net/socket.c:747 [inline]
 ____sys_sendmsg+0x999/0xd50 net/socket.c:2501
 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2555
 __sys_sendmsg net/socket.c:2584 [inline]
 __do_sys_sendmsg net/socket.c:2593 [inline]
 __se_sys_sendmsg net/socket.c:2591 [inline]
 __x64_sys_sendmsg+0x304/0x490 net/socket.c:2591
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was created at:
 slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:774
 slab_alloc_node mm/slub.c:3452 [inline]
 __kmem_cache_alloc_node+0x4ff/0x8b0 mm/slub.c:3491
 __do_kmalloc_node mm/slab_common.c:966 [inline]
 __kmalloc+0x121/0x3c0 mm/slab_common.c:980
 kmalloc include/linux/slab.h:584 [inline]
 pfkey_msg2xfrm_state net/key/af_key.c:1177 [inline]
 pfkey_add+0x1a95/0x3ad0 net/key/af_key.c:1504
 pfkey_process net/key/af_key.c:2844 [inline]
 pfkey_sendmsg+0x1690/0x1b80 net/key/af_key.c:3695
 sock_sendmsg_nosec net/socket.c:724 [inline]
 sock_sendmsg net/socket.c:747 [inline]
 ____sys_sendmsg+0x999/0xd50 net/socket.c:2501
 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2555
 __sys_sendmsg net/socket.c:2584 [inline]
 __do_sys_sendmsg net/socket.c:2593 [inline]
 __se_sys_sendmsg net/socket.c:2591 [inline]
 __x64_sys_sendmsg+0x304/0x490 net/socket.c:2591
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Bytes 364-415 of 3288 are uninitialized
Memory access of size 3288 starts at ffff88804680f000
Data copied to user address 00007ffb29bfd140

CPU: 0 PID: 12082 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-g81af97bdef5e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
=====================================================