[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. syzkaller login: [ 134.977767][ T8225] IPVS: ftp: loaded support on port[0] = 21 [ 135.076493][ T811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.084624][ T811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.093445][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 135.156584][ T811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.164765][ T811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.173642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.212139][ T8264] ===================================================== [ 135.219117][ T8264] BUG: KMSAN: uninit-value in hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 135.227753][ T8264] CPU: 1 PID: 8264 Comm: syz-executor752 Not tainted 5.12.0-rc6-syzkaller #0 [ 135.236526][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.246582][ T8264] Call Trace: [ 135.249848][ T8264] dump_stack+0x24c/0x2e0 [ 135.254173][ T8264] kmsan_report+0xfb/0x1e0 [ 135.258632][ T8264] __msan_warning+0x5c/0xa0 [ 135.263283][ T8264] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 135.269606][ T8264] ? hwsim_register_received_nl+0x740/0x740 [ 135.275486][ T8264] genl_rcv_msg+0x1319/0x1610 [ 135.280429][ T8264] ? hwsim_register_received_nl+0x740/0x740 [ 135.286325][ T8264] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.291942][ T8264] netlink_rcv_skb+0x6fa/0x810 [ 135.296693][ T8264] ? genl_bind+0x4b0/0x4b0 [ 135.301097][ T8264] genl_rcv+0x63/0x80 [ 135.305064][ T8264] netlink_unicast+0x11d6/0x14a0 [ 135.310076][ T8264] ? genl_pernet_exit+0x90/0x90 [ 135.314921][ T8264] netlink_sendmsg+0x1740/0x1840 [ 135.319863][ T8264] ? netlink_getsockopt+0x1830/0x1830 [ 135.325227][ T8264] __sys_sendto+0x9ea/0xc60 [ 135.329739][ T8264] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.335573][ T8264] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 135.341644][ T8264] ? __msan_instrument_asm_store+0x104/0x130 [ 135.347680][ T8264] ? kmsan_get_metadata+0x116/0x180 [ 135.352881][ T8264] __se_sys_sendto+0x107/0x130 [ 135.357651][ T8264] __x64_sys_sendto+0x6e/0x90 [ 135.362422][ T8264] do_syscall_64+0x9f/0x140 [ 135.366920][ T8264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.372798][ T8264] RIP: 0033:0x402d56 [ 135.376686][ T8264] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 135.396285][ T8264] RSP: 002b:00007ffcbdd1df38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.404855][ T8264] RAX: ffffffffffffffda RBX: 00007ffcbdd1dfb0 RCX: 0000000000402d56 [ 135.412997][ T8264] RDX: 0000000000000034 RSI: 00007ffcbdd1e000 RDI: 0000000000000003 [ 135.420959][ T8264] RBP: 0000000000000001 R08: 00007ffcbdd1df54 R09: 000000000000000c [ 135.429141][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.437121][ T8264] R13: 00007ffcbdd1e000 R14: 0000000000000003 R15: 0000000000000000 [ 135.445081][ T8264] [ 135.447398][ T8264] Uninit was created at: [ 135.451609][ T8264] kmsan_internal_poison_shadow+0x66/0xd0 [ 135.457342][ T8264] kmsan_slab_alloc+0x8e/0xe0 [ 135.462003][ T8264] __kmalloc_node_track_caller+0xa4f/0x1470 [ 135.467884][ T8264] __alloc_skb+0x4dd/0xe90 [ 135.472308][ T8264] hwsim_cloned_frame_received_nl+0x223/0x13f0 [ 135.478551][ T8264] genl_rcv_msg+0x1319/0x1610 [ 135.483401][ T8264] netlink_rcv_skb+0x6fa/0x810 [ 135.488251][ T8264] genl_rcv+0x63/0x80 [ 135.492250][ T8264] netlink_unicast+0x11d6/0x14a0 [ 135.497171][ T8264] netlink_sendmsg+0x1740/0x1840 [ 135.502189][ T8264] __sys_sendto+0x9ea/0xc60 [ 135.506863][ T8264] __se_sys_sendto+0x107/0x130 [ 135.511619][ T8264] __x64_sys_sendto+0x6e/0x90 [ 135.516290][ T8264] do_syscall_64+0x9f/0x140 [ 135.520820][ T8264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.526976][ T8264] ===================================================== [ 135.533879][ T8264] Disabling lock debugging due to kernel taint [ 135.540023][ T8264] Kernel panic - not syncing: panic_on_kmsan set ... [ 135.546683][ T8264] CPU: 1 PID: 8264 Comm: syz-executor752 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 135.556816][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.567033][ T8264] Call Trace: [ 135.570307][ T8264] dump_stack+0x24c/0x2e0 [ 135.574637][ T8264] panic+0x4c6/0xea7 [ 135.578530][ T8264] ? add_taint+0x17c/0x210 [ 135.583050][ T8264] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 135.589281][ T8264] kmsan_report+0x1de/0x1e0 [ 135.593766][ T8264] __msan_warning+0x5c/0xa0 [ 135.598275][ T8264] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 135.604516][ T8264] ? hwsim_register_received_nl+0x740/0x740 [ 135.610503][ T8264] genl_rcv_msg+0x1319/0x1610 [ 135.615170][ T8264] ? hwsim_register_received_nl+0x740/0x740 [ 135.621157][ T8264] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.626798][ T8264] netlink_rcv_skb+0x6fa/0x810 [ 135.631634][ T8264] ? genl_bind+0x4b0/0x4b0 [ 135.636216][ T8264] genl_rcv+0x63/0x80 [ 135.640183][ T8264] netlink_unicast+0x11d6/0x14a0 [ 135.645216][ T8264] ? genl_pernet_exit+0x90/0x90 [ 135.650144][ T8264] netlink_sendmsg+0x1740/0x1840 [ 135.655169][ T8264] ? netlink_getsockopt+0x1830/0x1830 [ 135.660542][ T8264] __sys_sendto+0x9ea/0xc60 [ 135.665032][ T8264] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.670734][ T8264] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 135.676907][ T8264] ? __msan_instrument_asm_store+0x104/0x130 [ 135.682967][ T8264] ? kmsan_get_metadata+0x116/0x180 [ 135.688154][ T8264] __se_sys_sendto+0x107/0x130 [ 135.693033][ T8264] __x64_sys_sendto+0x6e/0x90 [ 135.697692][ T8264] do_syscall_64+0x9f/0x140 [ 135.702179][ T8264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.708056][ T8264] RIP: 0033:0x402d56 [ 135.711932][ T8264] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 135.731532][ T8264] RSP: 002b:00007ffcbdd1df38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.740101][ T8264] RAX: ffffffffffffffda RBX: 00007ffcbdd1dfb0 RCX: 0000000000402d56 [ 135.748093][ T8264] RDX: 0000000000000034 RSI: 00007ffcbdd1e000 RDI: 0000000000000003 [ 135.756045][ T8264] RBP: 0000000000000001 R08: 00007ffcbdd1df54 R09: 000000000000000c [ 135.763997][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.771956][ T8264] R13: 00007ffcbdd1e000 R14: 0000000000000003 R15: 0000000000000000 [ 135.781575][ T8264] Kernel Offset: disabled [ 135.786045][ T8264] Rebooting in 86400 seconds..