===================================================== BUG: KMSAN: kernel-infoleak-after-free in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak-after-free in _inline_copy_to_user include/linux/uaccess.h:196 [inline] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xcc/0x120 lib/usercopy.c:26 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _inline_copy_to_user include/linux/uaccess.h:196 [inline] _copy_to_user+0xcc/0x120 lib/usercopy.c:26 copy_to_user include/linux/uaccess.h:225 [inline] do_insn_ioctl+0x59c/0x6d0 drivers/comedi/comedi_fops.c:1678 comedi_unlocked_ioctl+0xa5e/0x1f60 drivers/comedi/comedi_fops.c:2303 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl+0x23c/0x400 fs/ioctl.c:584 __x64_sys_ioctl+0x97/0xe0 fs/ioctl.c:584 x64_sys_call+0x1cbc/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_free_hook mm/slub.c:2343 [inline] slab_free mm/slub.c:4680 [inline] kfree+0x252/0xec0 mm/slub.c:4879 load_elf_binary+0x4662/0x5670 fs/binfmt_elf.c:1271 search_binary_handler fs/exec.c:1670 [inline] exec_binprm fs/exec.c:1702 [inline] bprm_execve+0xb24/0x18e0 fs/exec.c:1754 kernel_execve+0x1070/0x1210 fs/exec.c:1920 call_usermodehelper_exec_async+0x4a1/0x6f0 kernel/umh.c:109 ret_from_fork+0x1e3/0x310 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Bytes 4-583 of 584 are uninitialized Memory access of size 584 starts at ffff88804d20e400 CPU: 1 UID: 0 PID: 15182 Comm: syz.8.2101 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 =====================================================