[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 138.309414][ T8407] sshd (8407) used greatest stack depth: 4536 bytes left Warning: Permanently added '10.128.15.201' (ECDSA) to the list of known hosts. executing program [ 148.666947][ T8486] ===================================================== [ 148.674021][ T8486] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 148.681496][ T8486] CPU: 1 PID: 8486 Comm: syz-executor135 Not tainted 5.8.0-rc5-syzkaller #0 [ 148.690159][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.700195][ T8486] Call Trace: [ 148.703479][ T8486] dump_stack+0x21c/0x280 [ 148.707816][ T8486] kmsan_report+0xf7/0x1e0 [ 148.712238][ T8486] kmsan_internal_check_memory+0x358/0x3d0 [ 148.718043][ T8486] ? crypto_shash_final+0x3cd/0x480 [ 148.723256][ T8486] kmsan_copy_to_user+0x81/0x90 [ 148.728095][ T8486] _copy_to_user+0x18e/0x260 [ 148.732686][ T8486] __keyctl_dh_compute+0x24ea/0x2fa0 [ 148.738018][ T8486] keyctl_dh_compute+0x234/0x280 [ 148.742974][ T8486] __se_sys_keyctl+0x1181/0x1fe0 [ 148.747919][ T8486] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.753726][ T8486] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 148.759863][ T8486] ? __prepare_exit_to_usermode+0x16c/0x560 [ 148.765741][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 148.771183][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 148.776385][ T8486] ? kmsan_set_origin_checked+0x95/0xf0 [ 148.781929][ T8486] __x64_sys_keyctl+0x62/0x80 [ 148.786595][ T8486] do_syscall_64+0xad/0x160 [ 148.791085][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.796961][ T8486] RIP: 0033:0x440469 [ 148.800844][ T8486] Code: Bad RIP value. [ 148.804890][ T8486] RSP: 002b:00007ffc440157b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 148.813284][ T8486] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440469 [ 148.821238][ T8486] RDX: 0000000020000540 RSI: 0000000020000400 RDI: 0000000000000017 [ 148.829200][ T8486] RBP: 00000000006ca018 R08: 0000000020000980 R09: 00000000004002c8 [ 148.837175][ T8486] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000401c70 [ 148.845156][ T8486] R13: 0000000000401d00 R14: 0000000000000000 R15: 0000000000000000 [ 148.853121][ T8486] [ 148.855446][ T8486] Uninit was created at: [ 148.859677][ T8486] kmsan_internal_poison_shadow+0x66/0xd0 [ 148.865380][ T8486] kmsan_slab_alloc+0x8a/0xe0 [ 148.870039][ T8486] __kmalloc+0x312/0x410 [ 148.874269][ T8486] __keyctl_dh_compute+0x1f82/0x2fa0 [ 148.879556][ T8486] keyctl_dh_compute+0x234/0x280 [ 148.884481][ T8486] __se_sys_keyctl+0x1181/0x1fe0 [ 148.889402][ T8486] __x64_sys_keyctl+0x62/0x80 [ 148.894081][ T8486] do_syscall_64+0xad/0x160 [ 148.898566][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.904441][ T8486] [ 148.906752][ T8486] Bytes 0-2 of 3 are uninitialized [ 148.911853][ T8486] Memory access of size 3 starts at ffff888106ae3dc0 [ 148.918510][ T8486] Data copied to user address 0000000020000540 [ 148.924644][ T8486] ===================================================== [ 148.931566][ T8486] Disabling lock debugging due to kernel taint [ 148.937713][ T8486] Kernel panic - not syncing: panic_on_warn set ... [ 148.944303][ T8486] CPU: 1 PID: 8486 Comm: syz-executor135 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 148.954342][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.964391][ T8486] Call Trace: [ 148.967675][ T8486] dump_stack+0x21c/0x280 [ 148.972003][ T8486] panic+0x4d7/0xef7 [ 148.975917][ T8486] ? add_taint+0x17c/0x210 [ 148.980436][ T8486] kmsan_report+0x1df/0x1e0 [ 148.984940][ T8486] kmsan_internal_check_memory+0x358/0x3d0 [ 148.990754][ T8486] ? crypto_shash_final+0x3cd/0x480 [ 148.995975][ T8486] kmsan_copy_to_user+0x81/0x90 [ 149.000817][ T8486] _copy_to_user+0x18e/0x260 [ 149.005408][ T8486] __keyctl_dh_compute+0x24ea/0x2fa0 [ 149.010738][ T8486] keyctl_dh_compute+0x234/0x280 [ 149.015682][ T8486] __se_sys_keyctl+0x1181/0x1fe0 [ 149.020616][ T8486] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 149.026410][ T8486] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 149.032567][ T8486] ? __prepare_exit_to_usermode+0x16c/0x560 [ 149.038466][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 149.043678][ T8486] ? kmsan_get_metadata+0x116/0x180 [ 149.048880][ T8486] ? kmsan_set_origin_checked+0x95/0xf0 [ 149.054422][ T8486] __x64_sys_keyctl+0x62/0x80 [ 149.059091][ T8486] do_syscall_64+0xad/0x160 [ 149.063589][ T8486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.069479][ T8486] RIP: 0033:0x440469 [ 149.073352][ T8486] Code: Bad RIP value. [ 149.077400][ T8486] RSP: 002b:00007ffc440157b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 149.085801][ T8486] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440469 [ 149.093760][ T8486] RDX: 0000000020000540 RSI: 0000000020000400 RDI: 0000000000000017 [ 149.101735][ T8486] RBP: 00000000006ca018 R08: 0000000020000980 R09: 00000000004002c8 [ 149.109711][ T8486] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000401c70 [ 149.117768][ T8486] R13: 0000000000401d00 R14: 0000000000000000 R15: 0000000000000000 [ 149.126810][ T8486] Kernel Offset: disabled [ 149.131147][ T8486] Rebooting in 86400 seconds..