===================================================== BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253 CPU: 0 PID: 23568 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x21c/0x280 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122 kmsan_internal_check_memory+0x358/0x3d0 mm/kmsan/kmsan.c:459 kmsan_copy_to_user+0x81/0x90 mm/kmsan/kmsan_hooks.c:253 instrument_copy_to_user include/linux/instrumented.h:91 [inline] _copy_to_user+0x18e/0x260 lib/usercopy.c:30 copy_to_user include/linux/uaccess.h:177 [inline] keyctl_dh_compute_kdf security/keys/dh.c:219 [inline] __keyctl_dh_compute+0x24ea/0x2fa0 security/keys/dh.c:386 keyctl_dh_compute+0x234/0x280 security/keys/dh.c:422 __do_sys_keyctl security/keys/keyctl.c:1973 [inline] __se_sys_keyctl+0x1181/0x1fe0 security/keys/keyctl.c:1869 __x64_sys_keyctl+0x62/0x80 security/keys/keyctl.c:1869 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45d5f9 Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f2f415d3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa RAX: ffffffffffffffda RBX: 000000000001fe40 RCX: 000000000045d5f9 RDX: 0000000020000700 RSI: 0000000020000000 RDI: 0000000000000017 RBP: 000000000118cf90 R08: 0000000020000040 R09: 0000000000000000 R10: 00000000000000ed R11: 0000000000000246 R12: 000000000118cf4c R13: 000000000169fb6f R14: 00007f2f415d49c0 R15: 000000000118cf4c Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:143 [inline] kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:126 kmsan_slab_alloc+0x8a/0xe0 mm/kmsan/kmsan_hooks.c:80 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2916 [inline] __kmalloc+0x2bb/0x4b0 mm/slub.c:3982 kmalloc include/linux/slab.h:559 [inline] keyctl_dh_compute_kdf security/keys/dh.c:208 [inline] __keyctl_dh_compute+0x1f82/0x2fa0 security/keys/dh.c:386 keyctl_dh_compute+0x234/0x280 security/keys/dh.c:422 __do_sys_keyctl security/keys/keyctl.c:1973 [inline] __se_sys_keyctl+0x1181/0x1fe0 security/keys/keyctl.c:1869 __x64_sys_keyctl+0x62/0x80 security/keys/keyctl.c:1869 do_syscall_64+0x9f/0x140 arch/x86/entry/common.c:48 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Bytes 0-236 of 237 are uninitialized Memory access of size 237 starts at ffff88810bd93300 Data copied to user address 0000000020000700 =====================================================