[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.12' (ECDSA) to the list of known hosts. syzkaller login: [ 143.394652][ T8499] IPVS: ftp: loaded support on port[0] = 21 [ 143.494696][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.502972][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.511886][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 143.581785][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.590977][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.600506][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.680888][ T8539] ===================================================== [ 143.687886][ T8539] BUG: KMSAN: uninit-value in ieee80211_skb_resize+0x8c0/0x980 [ 143.695447][ T8539] CPU: 0 PID: 8539 Comm: syz-executor053 Not tainted 5.9.0-rc4-syzkaller #0 [ 143.704240][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.714303][ T8539] Call Trace: [ 143.717607][ T8539] dump_stack+0x21c/0x280 [ 143.721986][ T8539] kmsan_report+0xf7/0x1e0 [ 143.726425][ T8539] __msan_warning+0x58/0xa0 [ 143.730952][ T8539] ieee80211_skb_resize+0x8c0/0x980 [ 143.736279][ T8539] ieee80211_build_hdr+0x2939/0x41f0 [ 143.741701][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.746937][ T8539] __ieee80211_subif_start_xmit+0x172a/0x7300 [ 143.753036][ T8539] ? __msan_get_context_state+0x9/0x20 [ 143.758519][ T8539] ? irqentry_exit+0x12/0x50 [ 143.763138][ T8539] ? sysvec_apic_timer_interrupt+0x12f/0x140 [ 143.769138][ T8539] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.775315][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.780567][ T8539] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 143.786407][ T8539] ? sock_def_readable+0x189/0x240 [ 143.791546][ T8539] ? ktime_get_with_offset+0x400/0x510 [ 143.797031][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.802279][ T8539] ieee80211_subif_start_xmit+0x14b/0x19a0 [ 143.808102][ T8539] ? dev_queue_xmit_nit+0x127f/0x1380 [ 143.813506][ T8539] ? ieee80211_build_hdr+0x41f0/0x41f0 [ 143.818988][ T8539] xmit_one+0x3cf/0x750 [ 143.823164][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.829986][ T8539] dev_hard_start_xmit+0x196/0x420 [ 143.835212][ T8539] sch_direct_xmit+0x5d3/0x1a50 [ 143.840081][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.845313][ T8539] __qdisc_run+0x35b/0x490 [ 143.849760][ T8539] __dev_queue_xmit+0x2cfa/0x4470 [ 143.854849][ T8539] dev_queue_xmit+0x4b/0x60 [ 143.859370][ T8539] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 143.864771][ T8539] packet_sendmsg+0x8542/0x9a80 [ 143.869655][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.874975][ T8539] ? kmsan_internal_set_origin+0x75/0xb0 [ 143.880778][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 143.886002][ T8539] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 143.891849][ T8539] ? __free_slab+0x7b0/0x8b0 [ 143.896429][ T8539] ? aa_sk_perm+0x7da/0xe70 [ 143.900937][ T8539] ? packet_getsockopt+0x1110/0x1110 [ 143.906214][ T8539] __sys_sendto+0x9dc/0xc80 [ 143.910715][ T8539] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 143.916795][ T8539] ? __fpregs_load_activate+0x3f4/0x420 [ 143.922332][ T8539] __se_sys_sendto+0x107/0x130 [ 143.927103][ T8539] __x64_sys_sendto+0x6e/0x90 [ 143.931790][ T8539] do_syscall_64+0x9f/0x140 [ 143.936301][ T8539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 143.942322][ T8539] RIP: 0033:0x441ea9 [ 143.946221][ T8539] Code: e8 bc 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 143.966425][ T8539] RSP: 002b:00007fffc4414388 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 143.974864][ T8539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ea9 [ 143.982833][ T8539] RDX: 000000000000000e RSI: 00000000200000c0 RDI: 0000000000000003 [ 143.990805][ T8539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.998783][ T8539] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000032 [ 144.006764][ T8539] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 144.014727][ T8539] [ 144.017057][ T8539] Uninit was created at: [ 144.021294][ T8539] kmsan_internal_poison_shadow+0x66/0xd0 [ 144.026997][ T8539] kmsan_slab_alloc+0x8a/0xe0 [ 144.031660][ T8539] __kmalloc_node_track_caller+0x9aa/0x12f0 [ 144.037557][ T8539] __alloc_skb+0x35f/0xb30 [ 144.041982][ T8539] alloc_skb_with_frags+0x1f2/0xc10 [ 144.047163][ T8539] sock_alloc_send_pskb+0xc83/0xe50 [ 144.052350][ T8539] packet_sendmsg+0x6abb/0x9a80 [ 144.057205][ T8539] __sys_sendto+0x9dc/0xc80 [ 144.061691][ T8539] __se_sys_sendto+0x107/0x130 [ 144.066437][ T8539] __x64_sys_sendto+0x6e/0x90 [ 144.071100][ T8539] do_syscall_64+0x9f/0x140 [ 144.075601][ T8539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 144.081481][ T8539] ===================================================== [ 144.088510][ T8539] Disabling lock debugging due to kernel taint [ 144.094750][ T8539] Kernel panic - not syncing: panic_on_warn set ... [ 144.101350][ T8539] CPU: 0 PID: 8539 Comm: syz-executor053 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 144.111392][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.121562][ T8539] Call Trace: [ 144.124847][ T8539] dump_stack+0x21c/0x280 [ 144.129171][ T8539] panic+0x4d7/0xef7 [ 144.133100][ T8539] ? add_taint+0x17c/0x210 [ 144.137521][ T8539] kmsan_report+0x1df/0x1e0 [ 144.142032][ T8539] __msan_warning+0x58/0xa0 [ 144.146640][ T8539] ieee80211_skb_resize+0x8c0/0x980 [ 144.151847][ T8539] ieee80211_build_hdr+0x2939/0x41f0 [ 144.157142][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.162332][ T8539] __ieee80211_subif_start_xmit+0x172a/0x7300 [ 144.168408][ T8539] ? __msan_get_context_state+0x9/0x20 [ 144.173933][ T8539] ? irqentry_exit+0x12/0x50 [ 144.178523][ T8539] ? sysvec_apic_timer_interrupt+0x12f/0x140 [ 144.184564][ T8539] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.190879][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.196092][ T8539] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 144.201894][ T8539] ? sock_def_readable+0x189/0x240 [ 144.207158][ T8539] ? ktime_get_with_offset+0x400/0x510 [ 144.212615][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.217822][ T8539] ieee80211_subif_start_xmit+0x14b/0x19a0 [ 144.224065][ T8539] ? dev_queue_xmit_nit+0x127f/0x1380 [ 144.229457][ T8539] ? ieee80211_build_hdr+0x41f0/0x41f0 [ 144.234912][ T8539] xmit_one+0x3cf/0x750 [ 144.239078][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.244281][ T8539] dev_hard_start_xmit+0x196/0x420 [ 144.249384][ T8539] sch_direct_xmit+0x5d3/0x1a50 [ 144.254231][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.260772][ T8539] __qdisc_run+0x35b/0x490 [ 144.265207][ T8539] __dev_queue_xmit+0x2cfa/0x4470 [ 144.270762][ T8539] dev_queue_xmit+0x4b/0x60 [ 144.275262][ T8539] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 144.280554][ T8539] packet_sendmsg+0x8542/0x9a80 [ 144.285532][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.290723][ T8539] ? kmsan_internal_set_origin+0x75/0xb0 [ 144.296347][ T8539] ? kmsan_get_metadata+0x116/0x180 [ 144.301559][ T8539] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 144.307399][ T8539] ? __free_slab+0x7b0/0x8b0 [ 144.312025][ T8539] ? aa_sk_perm+0x7da/0xe70 [ 144.316557][ T8539] ? packet_getsockopt+0x1110/0x1110 [ 144.321840][ T8539] __sys_sendto+0x9dc/0xc80 [ 144.326361][ T8539] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 144.332421][ T8539] ? __fpregs_load_activate+0x3f4/0x420 [ 144.338564][ T8539] __se_sys_sendto+0x107/0x130 [ 144.343344][ T8539] __x64_sys_sendto+0x6e/0x90 [ 144.348016][ T8539] do_syscall_64+0x9f/0x140 [ 144.352526][ T8539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 144.358424][ T8539] RIP: 0033:0x441ea9 [ 144.362308][ T8539] Code: e8 bc 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 144.381998][ T8539] RSP: 002b:00007fffc4414388 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.390412][ T8539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ea9 [ 144.398401][ T8539] RDX: 000000000000000e RSI: 00000000200000c0 RDI: 0000000000000003 [ 144.406359][ T8539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.414336][ T8539] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000032 [ 144.422296][ T8539] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 144.432427][ T8539] Kernel Offset: disabled [ 144.436882][ T8539] Rebooting in 86400 seconds..