===================================================== BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:30 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:302 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:330 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:30 [inline] iterate_and_advance2 include/linux/iov_iter.h:302 [inline] iterate_and_advance include/linux/iov_iter.h:330 [inline] _copy_to_iter+0xef3/0x33f0 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:220 [inline] simple_copy_to_iter net/core/datagram.c:521 [inline] __skb_datagram_iter+0x196/0x12c0 net/core/datagram.c:402 skb_copy_datagram_iter+0x5b/0x1e0 net/core/datagram.c:535 skb_copy_datagram_msg include/linux/skbuff.h:4217 [inline] netlink_recvmsg+0x4bb/0xfe0 net/netlink/af_netlink.c:1953 sock_recvmsg_nosec net/socket.c:1069 [inline] sock_recvmsg+0x2df/0x390 net/socket.c:1091 __sys_recvfrom+0x282/0x550 net/socket.c:2272 __do_sys_recvfrom net/socket.c:2287 [inline] __se_sys_recvfrom net/socket.c:2283 [inline] __x64_sys_recvfrom+0x130/0x200 net/socket.c:2283 x64_sys_call+0x3227/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:46 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1ec/0x270 lib/nlattr.c:1099 fill_res_cm_id_entry+0x682/0x9d0 drivers/infiniband/core/nldev.c:610 res_get_common_dumpit+0x12e4/0x1a20 drivers/infiniband/core/nldev.c:1650 nldev_res_get_cm_id_dumpit+0x42/0x50 drivers/infiniband/core/nldev.c:1711 netlink_dump+0xb9b/0x17d0 net/netlink/af_netlink.c:2327 __netlink_dump_start+0x716/0xd60 net/netlink/af_netlink.c:2442 netlink_dump_start include/linux/netlink.h:341 [inline] rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:190 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0xe6d/0x11c0 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0xf04/0x12b0 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x10b3/0x1250 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x333/0x3d0 net/socket.c:733 ____sys_sendmsg+0x7f5/0xcf0 net/socket.c:2608 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2662 __sys_sendmsg net/socket.c:2694 [inline] __do_sys_sendmsg net/socket.c:2699 [inline] __se_sys_sendmsg net/socket.c:2697 [inline] __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2697 x64_sys_call+0x1c60/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: cma_listen_on_dev+0x337/0xb00 drivers/infiniband/core/cma.c:2734 cma_add_one+0x968/0x1290 drivers/infiniband/core/cma.c:5382 add_client_context+0x5c8/0x970 drivers/infiniband/core/device.c:757 enable_device_and_get+0x1f3/0x4d0 drivers/infiniband/core/device.c:1368 ib_register_device+0x1d28/0x1f80 drivers/infiniband/core/device.c:1487 rxe_register_device+0x277/0x300 drivers/infiniband/sw/rxe/rxe_verbs.c:1556 rxe_add+0xa9d/0xb50 drivers/infiniband/sw/rxe/rxe.c:212 rxe_net_add+0xe3/0x1f0 drivers/infiniband/sw/rxe/rxe_net.c:537 rxe_newlink+0x28e/0x480 drivers/infiniband/sw/rxe/rxe.c:234 nldev_newlink+0xa0e/0xb60 drivers/infiniband/core/nldev.c:1797 rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline] rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline] rdma_nl_rcv+0xefa/0x11c0 drivers/infiniband/core/netlink.c:259 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0xf04/0x12b0 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x10b3/0x1250 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x333/0x3d0 net/socket.c:733 ____sys_sendmsg+0x7f5/0xcf0 net/socket.c:2608 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2662 __sys_sendmsg net/socket.c:2694 [inline] __do_sys_sendmsg net/socket.c:2699 [inline] __se_sys_sendmsg net/socket.c:2697 [inline] __x64_sys_sendmsg+0x211/0x3e0 net/socket.c:2697 x64_sys_call+0x1c60/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: rdma_bind_addr_dst+0x389/0x4b20 drivers/infiniband/core/cma.c:4020 rdma_bind_addr+0x3d/0x50 drivers/infiniband/core/cma.c:4182 rds_rdma_listen_init_common+0xc2/0x380 net/rds/rdma_transport.c:217 rds_rdma_listen_init net/rds/rdma_transport.c:258 [inline] rds_rdma_init+0xde/0x1e0 net/rds/rdma_transport.c:304 do_one_initcall+0x237/0xb60 init/main.c:1283 do_initcall_level+0x157/0x2e0 init/main.c:1345 do_initcalls+0x176/0x310 init/main.c:1361 do_basic_setup+0x1d/0x30 init/main.c:1380 kernel_init_freeable+0x275/0x4a0 init/main.c:1593 kernel_init+0x2f/0x5e0 init/main.c:1483 ret_from_fork+0x1fe/0x6f0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Local variable sin.i created at: rds_rdma_listen_init net/rds/rdma_transport.c:253 [inline] rds_rdma_init+0x84/0x1e0 net/rds/rdma_transport.c:304 do_one_initcall+0x237/0xb60 init/main.c:1283 Bytes 72-79 of 392 are uninitialized Memory access of size 392 starts at ffff888059af7000 Data copied to user address 00007f957c90b010 CPU: 1 UID: 0 PID: 8722 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 =====================================================