[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 92.410766] audit: type=1800 audit(1546325499.454:25): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 92.430049] audit: type=1800 audit(1546325499.454:26): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 92.449528] audit: type=1800 audit(1546325499.484:27): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 103.908383] ================================================================== [ 103.915786] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 103.922270] CPU: 0 PID: 11245 Comm: syz-executor633 Not tainted 4.20.0-rc7+ #2 [ 103.930655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.940000] Call Trace: [ 103.942591] dump_stack+0x173/0x1d0 [ 103.946365] kmsan_report+0x12e/0x2a0 [ 103.950195] kmsan_internal_check_memory+0x9d4/0xb00 [ 103.955313] kmsan_copy_to_user+0xab/0xc0 [ 103.959456] _copy_to_user+0x16b/0x1f0 [ 103.963352] capi_unlocked_ioctl+0x1a0b/0x1bf0 [ 103.967938] ? do_vfs_ioctl+0x187/0x2bf0 [ 103.971997] ? capi_poll+0x2d0/0x2d0 [ 103.975708] do_vfs_ioctl+0xebd/0x2bf0 [ 103.979592] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 103.984962] ? security_file_ioctl+0x92/0x200 [ 103.989459] __se_sys_ioctl+0x1da/0x270 [ 103.993440] __x64_sys_ioctl+0x4a/0x70 [ 103.997318] do_syscall_64+0xbc/0xf0 [ 104.001029] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 104.006227] RIP: 0033:0x440019 [ 104.009412] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 104.028309] RSP: 002b:00007ffdd4659fb8 EFLAGS: 00000213 ORIG_RAX: 0000000000000010 [ 104.036011] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440019 [ 104.043269] RDX: 0000000020000080 RSI: 00000000c0044306 RDI: 0000000000000003 [ 104.050536] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 104.057799] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018a0 [ 104.065059] R13: 0000000000401930 R14: 0000000000000000 R15: 0000000000000000 [ 104.072347] [ 104.073976] Local variable description: ----data.i@capi_unlocked_ioctl [ 104.080621] Variable was created at: [ 104.084350] capi_unlocked_ioctl+0x82/0x1bf0 [ 104.088747] do_vfs_ioctl+0xebd/0x2bf0 [ 104.092614] [ 104.094230] Bytes 12-63 of 64 are uninitialized [ 104.098880] Memory access of size 64 starts at ffff88807ac5fce8 [ 104.104932] Data copied to user address 0000000020000080 [ 104.110361] ================================================================== [ 104.117716] Disabling lock debugging due to kernel taint [ 104.123156] Kernel panic - not syncing: panic_on_warn set ... [ 104.129032] CPU: 0 PID: 11245 Comm: syz-executor633 Tainted: G B 4.20.0-rc7+ #2 [ 104.137766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.147127] Call Trace: [ 104.149715] dump_stack+0x173/0x1d0 [ 104.153348] panic+0x3ce/0x961 [ 104.156565] kmsan_report+0x293/0x2a0 [ 104.160366] kmsan_internal_check_memory+0x9d4/0xb00 [ 104.165479] kmsan_copy_to_user+0xab/0xc0 [ 104.169617] _copy_to_user+0x16b/0x1f0 [ 104.173510] capi_unlocked_ioctl+0x1a0b/0x1bf0 [ 104.178106] ? do_vfs_ioctl+0x187/0x2bf0 [ 104.182166] ? capi_poll+0x2d0/0x2d0 [ 104.185868] do_vfs_ioctl+0xebd/0x2bf0 [ 104.189762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 104.195132] ? security_file_ioctl+0x92/0x200 [ 104.199639] __se_sys_ioctl+0x1da/0x270 [ 104.203618] __x64_sys_ioctl+0x4a/0x70 [ 104.207500] do_syscall_64+0xbc/0xf0 [ 104.211211] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 104.216400] RIP: 0033:0x440019 [ 104.219589] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 104.238529] RSP: 002b:00007ffdd4659fb8 EFLAGS: 00000213 ORIG_RAX: 0000000000000010 [ 104.246230] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440019 [ 104.253491] RDX: 0000000020000080 RSI: 00000000c0044306 RDI: 0000000000000003 [ 104.260763] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 104.268023] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018a0 [ 104.275282] R13: 0000000000401930 R14: 0000000000000000 R15: 0000000000000000 [ 104.283595] Kernel Offset: disabled [ 104.287227] Rebooting in 86400 seconds..