[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started Getty on tty3. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 137.160580][ T8489] ===================================================== [ 137.167535][ T8489] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 137.174968][ T8489] CPU: 1 PID: 8489 Comm: syz-executor112 Not tainted 5.8.0-rc5-syzkaller #0 [ 137.183606][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.193633][ T8489] Call Trace: [ 137.196903][ T8489] dump_stack+0x21c/0x280 [ 137.201211][ T8489] kmsan_report+0xf7/0x1e0 [ 137.205606][ T8489] kmsan_internal_check_memory+0x358/0x3d0 [ 137.211386][ T8489] ? crypto_shash_final+0x3cd/0x480 [ 137.216562][ T8489] kmsan_copy_to_user+0x81/0x90 [ 137.221385][ T8489] _copy_to_user+0x18e/0x260 [ 137.225957][ T8489] __keyctl_dh_compute+0x24ea/0x2fa0 [ 137.231235][ T8489] keyctl_dh_compute+0x234/0x280 [ 137.236162][ T8489] __se_sys_keyctl+0x1181/0x1fe0 [ 137.241212][ T8489] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 137.246993][ T8489] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 137.253118][ T8489] ? __prepare_exit_to_usermode+0x16c/0x560 [ 137.258985][ T8489] ? kmsan_get_metadata+0x116/0x180 [ 137.264154][ T8489] ? kmsan_get_metadata+0x116/0x180 [ 137.269339][ T8489] ? kmsan_set_origin_checked+0x95/0xf0 [ 137.274863][ T8489] __x64_sys_keyctl+0x62/0x80 [ 137.279513][ T8489] do_syscall_64+0xad/0x160 [ 137.284003][ T8489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.289870][ T8489] RIP: 0033:0x440469 [ 137.293734][ T8489] Code: Bad RIP value. [ 137.297771][ T8489] RSP: 002b:00007fffa5664a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 137.306154][ T8489] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440469 [ 137.314140][ T8489] RDX: 0000000020000540 RSI: 0000000020000400 RDI: 0000000000000017 [ 137.322094][ T8489] RBP: 00000000006ca018 R08: 0000000020000980 R09: 00000000004002c8 [ 137.330039][ T8489] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000401c70 [ 137.337994][ T8489] R13: 0000000000401d00 R14: 0000000000000000 R15: 0000000000000000 [ 137.345943][ T8489] [ 137.348243][ T8489] Uninit was created at: [ 137.352463][ T8489] kmsan_internal_poison_shadow+0x66/0xd0 [ 137.358153][ T8489] kmsan_slab_alloc+0x8a/0xe0 [ 137.362801][ T8489] __kmalloc+0x312/0x410 [ 137.367017][ T8489] __keyctl_dh_compute+0x1f82/0x2fa0 [ 137.372275][ T8489] keyctl_dh_compute+0x234/0x280 [ 137.377184][ T8489] __se_sys_keyctl+0x1181/0x1fe0 [ 137.382096][ T8489] __x64_sys_keyctl+0x62/0x80 [ 137.386750][ T8489] do_syscall_64+0xad/0x160 [ 137.391226][ T8489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.397081][ T8489] [ 137.399383][ T8489] Bytes 0-2 of 3 are uninitialized [ 137.404469][ T8489] Memory access of size 3 starts at ffff88810761ff90 [ 137.411121][ T8489] Data copied to user address 0000000020000540 [ 137.417238][ T8489] ===================================================== [ 137.424135][ T8489] Disabling lock debugging due to kernel taint [ 137.430255][ T8489] Kernel panic - not syncing: panic_on_warn set ... [ 137.436815][ T8489] CPU: 1 PID: 8489 Comm: syz-executor112 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 137.446946][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.456973][ T8489] Call Trace: [ 137.460364][ T8489] dump_stack+0x21c/0x280 [ 137.464689][ T8489] panic+0x4d7/0xef7 [ 137.468568][ T8489] ? add_taint+0x17c/0x210 [ 137.472960][ T8489] kmsan_report+0x1df/0x1e0 [ 137.477440][ T8489] kmsan_internal_check_memory+0x358/0x3d0 [ 137.483219][ T8489] ? crypto_shash_final+0x3cd/0x480 [ 137.488398][ T8489] kmsan_copy_to_user+0x81/0x90 [ 137.493221][ T8489] _copy_to_user+0x18e/0x260 [ 137.497793][ T8489] __keyctl_dh_compute+0x24ea/0x2fa0 [ 137.503073][ T8489] keyctl_dh_compute+0x234/0x280 [ 137.507994][ T8489] __se_sys_keyctl+0x1181/0x1fe0 [ 137.512910][ T8489] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 137.518690][ T8489] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 137.524869][ T8489] ? __prepare_exit_to_usermode+0x16c/0x560 [ 137.530733][ T8489] ? kmsan_get_metadata+0x116/0x180 [ 137.535901][ T8489] ? kmsan_get_metadata+0x116/0x180 [ 137.541069][ T8489] ? kmsan_set_origin_checked+0x95/0xf0 [ 137.546592][ T8489] __x64_sys_keyctl+0x62/0x80 [ 137.551246][ T8489] do_syscall_64+0xad/0x160 [ 137.555721][ T8489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.561584][ T8489] RIP: 0033:0x440469 [ 137.565445][ T8489] Code: Bad RIP value. [ 137.569483][ T8489] RSP: 002b:00007fffa5664a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 137.577868][ T8489] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440469 [ 137.585823][ T8489] RDX: 0000000020000540 RSI: 0000000020000400 RDI: 0000000000000017 [ 137.593766][ T8489] RBP: 00000000006ca018 R08: 0000000020000980 R09: 00000000004002c8 [ 137.601726][ T8489] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000401c70 [ 137.609672][ T8489] R13: 0000000000401d00 R14: 0000000000000000 R15: 0000000000000000 [ 137.618918][ T8489] Kernel Offset: disabled [ 137.623232][ T8489] Rebooting in 86400 seconds..