===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:131 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 lib/iov_iter.c:197 instrument_copy_to_user include/linux/instrumented.h:131 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:302 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0xef3/0x3400 lib/iov_iter.c:197 copy_to_iter include/linux/uio.h:220 [inline] simple_copy_to_iter net/core/datagram.c:521 [inline] __skb_datagram_iter+0x18f/0x12b0 net/core/datagram.c:402 skb_copy_datagram_iter+0x5b/0x240 net/core/datagram.c:535 skb_copy_datagram_msg include/linux/skbuff.h:4218 [inline] netlink_recvmsg+0x4bb/0xfe0 net/netlink/af_netlink.c:1951 sock_recvmsg_nosec net/socket.c:1078 [inline] sock_recvmsg+0x27b/0x310 net/socket.c:1100 __sys_recvfrom+0x282/0x550 net/socket.c:2256 __compat_sys_recvfrom net/compat.c:389 [inline] __do_compat_sys_socketcall net/compat.c:-1 [inline] __se_compat_sys_socketcall net/compat.c:423 [inline] __ia32_compat_sys_socketcall+0xb4a/0x1b70 net/compat.c:423 ia32_sys_call+0x2c57/0x4360 arch/x86/include/generated/asm/syscalls_32.h:103 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] do_int80_emulation+0x15a/0x330 arch/x86/entry/syscall_32.c:172 asm_int80_emulation+0x1f/0x30 arch/x86/include/asm/idtentry.h:621 Uninit was created at: slab_post_alloc_hook mm/slub.c:4549 [inline] slab_alloc_node mm/slub.c:4869 [inline] __do_kmalloc_node mm/slub.c:5262 [inline] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 mm/slub.c:5371 kmalloc_reserve net/core/skbuff.c:635 [inline] __alloc_skb+0x90d/0x1190 net/core/skbuff.c:713 alloc_skb include/linux/skbuff.h:1383 [inline] netlink_dump+0x248/0x1800 net/netlink/af_netlink.c:2290 __netlink_dump_start+0x716/0xd60 net/netlink/af_netlink.c:2440 netlink_dump_start include/linux/netlink.h:341 [inline] rtnetlink_dump_start net/core/rtnetlink.c:6856 [inline] rtnetlink_rcv_msg+0x1262/0x14b0 net/core/rtnetlink.c:6923 netlink_rcv_skb+0x54d/0x680 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x35/0x40 net/core/rtnetlink.c:6985 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0xf04/0x12b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x10b2/0x1250 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xf37/0xfd0 net/socket.c:2592 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2646 __sys_sendmsg+0x1aa/0x300 net/socket.c:2678 __compat_sys_sendmsg net/compat.c:346 [inline] __do_compat_sys_sendmsg net/compat.c:353 [inline] __se_compat_sys_sendmsg net/compat.c:350 [inline] __ia32_compat_sys_sendmsg+0xa4/0x100 net/compat.c:350 ia32_sys_call+0x1e4a/0x4360 arch/x86/include/generated/asm/syscalls_32.h:371 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0x17f/0x3f0 arch/x86/entry/syscall_32.c:307 do_fast_syscall_32+0x37/0x80 arch/x86/entry/syscall_32.c:332 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:370 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Bytes 32-35 of 44 are uninitialized Memory access of size 44 starts at ffff888018a0f000 Data copied to user address 00000000f549c510 CPU: 0 UID: 0 PID: 8995 Comm: syz.2.793 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 =====================================================