[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 133.587806][ T8364] sshd (8364) used greatest stack depth: 4048 bytes left Warning: Permanently added '10.128.0.218' (ECDSA) to the list of known hosts. executing program [ 146.301190][ T8486] ===================================================== [ 146.308156][ T8486] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 146.315625][ T8486] CPU: 1 PID: 8486 Comm: syz-executor773 Not tainted 5.8.0-rc5-syzkaller #0 [ 146.324305][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.334370][ T8486] Call Trace: [ 146.337651][ T8486] dump_stack+0x21c/0x280 [ 146.341977][ T8486] kmsan_report+0xf7/0x1e0 [ 146.346385][ T8486] kmsan_internal_check_memory+0x238/0x3d0 [ 146.352208][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.357392][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.362585][ T8486] kmsan_copy_to_user+0x81/0x90 [ 146.367422][ T8486] _copy_to_user+0x18e/0x260 [ 146.372021][ T8486] move_addr_to_user+0x3de/0x670 [ 146.376968][ T8486] __sys_getsockname+0x407/0x5e0 [ 146.381919][ T8486] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 146.388073][ T8486] ? __prepare_exit_to_usermode+0x16c/0x560 [ 146.393960][ T8486] __se_sys_getsockname+0x91/0xb0 [ 146.398988][ T8486] __x64_sys_getsockname+0x4a/0x70 [ 146.404180][ T8486] do_syscall_64+0xad/0x160 [ 146.408682][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.414556][ T8486] RIP: 0033:0x440219 [ 146.418427][ T8486] Code: Bad RIP value. [ 146.422474][ T8486] RSP: 002b:00007ffd42794658 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 146.430884][ T8486] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440219 [ 146.438855][ T8486] RDX: 0000000020000240 RSI: 0000000020000100 RDI: 0000000000000003 [ 146.446832][ T8486] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 146.454787][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a20 [ 146.462743][ T8486] R13: 0000000000401ab0 R14: 0000000000000000 R15: 0000000000000000 [ 146.470707][ T8486] [ 146.473032][ T8486] Local variable ----address@__sys_getsockname created at: [ 146.480211][ T8486] __sys_getsockname+0x91/0x5e0 [ 146.485044][ T8486] __sys_getsockname+0x91/0x5e0 [ 146.489874][ T8486] [ 146.492186][ T8486] Bytes 2-3 of 24 are uninitialized [ 146.497371][ T8486] Memory access of size 24 starts at ffff8880b95cfde8 [ 146.504106][ T8486] Data copied to user address 0000000020000100 [ 146.510230][ T8486] ===================================================== [ 146.517136][ T8486] Disabling lock debugging due to kernel taint [ 146.523268][ T8486] Kernel panic - not syncing: panic_on_warn set ... [ 146.529854][ T8486] CPU: 1 PID: 8486 Comm: syz-executor773 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 146.539907][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.549943][ T8486] Call Trace: [ 146.553226][ T8486] dump_stack+0x21c/0x280 [ 146.557559][ T8486] panic+0x4d7/0xef7 [ 146.561454][ T8486] ? add_taint+0x17c/0x210 [ 146.565862][ T8486] kmsan_report+0x1df/0x1e0 [ 146.570359][ T8486] kmsan_internal_check_memory+0x238/0x3d0 [ 146.576168][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.581351][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.586543][ T8486] kmsan_copy_to_user+0x81/0x90 [ 146.591381][ T8486] _copy_to_user+0x18e/0x260 [ 146.595983][ T8486] move_addr_to_user+0x3de/0x670 [ 146.600930][ T8486] __sys_getsockname+0x407/0x5e0 [ 146.605864][ T8486] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 146.612010][ T8486] ? __prepare_exit_to_usermode+0x16c/0x560 [ 146.617914][ T8486] __se_sys_getsockname+0x91/0xb0 [ 146.622933][ T8486] __x64_sys_getsockname+0x4a/0x70 [ 146.628045][ T8486] do_syscall_64+0xad/0x160 [ 146.632536][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.638524][ T8486] RIP: 0033:0x440219 [ 146.642398][ T8486] Code: Bad RIP value. [ 146.646457][ T8486] RSP: 002b:00007ffd42794658 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 146.654853][ T8486] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440219 [ 146.666803][ T8486] RDX: 0000000020000240 RSI: 0000000020000100 RDI: 0000000000000003 [ 146.674760][ T8486] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 146.682715][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a20 [ 146.690672][ T8486] R13: 0000000000401ab0 R14: 0000000000000000 R15: 0000000000000000 [ 146.699105][ T8486] ------------[ cut here ]------------ [ 146.704551][ T8486] kernel BUG at mm/kmsan/kmsan.h:87! [ 146.709837][ T8486] invalid opcode: 0000 [#1] SMP [ 146.714672][ T8486] CPU: 1 PID: 8486 Comm: syz-executor773 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 146.724711][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.734770][ T8486] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 146.741341][ T8486] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 146.760937][ T8486] RSP: 0018:ffff8880b95cf808 EFLAGS: 00010046 [ 146.766996][ T8486] RAX: 0000000000000002 RBX: 00000000048000bb RCX: 00000000048000bb [ 146.774949][ T8486] RDX: 0000000000000000 RSI: 00000000000002e0 RDI: ffff8880b95cf8ec [ 146.782901][ T8486] RBP: ffff8880b95cf8b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 146.790853][ T8486] R10: 0000000000000002 R11: ffff888105c5bd00 R12: 0000000000000000 [ 146.798815][ T8486] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 146.806770][ T8486] FS: 000000000235b880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 146.815676][ T8486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.822241][ T8486] CR2: 0000000020000240 CR3: 00000000bbaea000 CR4: 00000000001406e0 [ 146.830196][ T8486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.838155][ T8486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.846110][ T8486] Call Trace: [ 146.849451][ T8486] kmsan_check_memory+0xd/0x10 [ 146.854552][ T8486] iowrite8+0x99/0x300 [ 146.858777][ T8486] pvpanic_panic_notify+0xb7/0xe0 [ 146.863821][ T8486] ? pvpanic_mmio_remove+0x60/0x60 [ 146.868916][ T8486] atomic_notifier_call_chain+0x123/0x290 [ 146.874630][ T8486] panic+0x560/0xef7 [ 146.878536][ T8486] ? add_taint+0x17c/0x210 [ 146.882952][ T8486] kmsan_report+0x1df/0x1e0 [ 146.887449][ T8486] kmsan_internal_check_memory+0x238/0x3d0 [ 146.893240][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.898422][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 146.903623][ T8486] kmsan_copy_to_user+0x81/0x90 [ 146.908483][ T8486] _copy_to_user+0x18e/0x260 [ 146.913073][ T8486] move_addr_to_user+0x3de/0x670 [ 146.918037][ T8486] __sys_getsockname+0x407/0x5e0 [ 146.922971][ T8486] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 146.929119][ T8486] ? __prepare_exit_to_usermode+0x16c/0x560 [ 146.935004][ T8486] __se_sys_getsockname+0x91/0xb0 [ 146.940022][ T8486] __x64_sys_getsockname+0x4a/0x70 [ 146.945122][ T8486] do_syscall_64+0xad/0x160 [ 146.949610][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.955482][ T8486] RIP: 0033:0x440219 [ 146.959351][ T8486] Code: Bad RIP value. [ 146.963395][ T8486] RSP: 002b:00007ffd42794658 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 146.971787][ T8486] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440219 [ 146.979740][ T8486] RDX: 0000000020000240 RSI: 0000000020000100 RDI: 0000000000000003 [ 146.987692][ T8486] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 146.995655][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a20 [ 147.003604][ T8486] R13: 0000000000401ab0 R14: 0000000000000000 R15: 0000000000000000 [ 147.011564][ T8486] Modules linked in: [ 147.015447][ T8486] ---[ end trace 319168ba4f0f0950 ]--- [ 147.020891][ T8486] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 147.027457][ T8486] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 147.047050][ T8486] RSP: 0018:ffff8880b95cf808 EFLAGS: 00010046 [ 147.053096][ T8486] RAX: 0000000000000002 RBX: 00000000048000bb RCX: 00000000048000bb [ 147.061059][ T8486] RDX: 0000000000000000 RSI: 00000000000002e0 RDI: ffff8880b95cf8ec [ 147.069012][ T8486] RBP: ffff8880b95cf8b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 147.076974][ T8486] R10: 0000000000000002 R11: ffff888105c5bd00 R12: 0000000000000000 [ 147.084925][ T8486] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 147.092879][ T8486] FS: 000000000235b880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 147.101788][ T8486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.108352][ T8486] CR2: 0000000020000240 CR3: 00000000bbaea000 CR4: 00000000001406e0 [ 147.116312][ T8486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.124293][ T8486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.132245][ T8486] Kernel panic - not syncing: Fatal exception [ 147.138874][ T8486] Kernel Offset: disabled [ 147.143195][ T8486] Rebooting in 86400 seconds..