[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. syzkaller login: [ 145.046908][ T8212] IPVS: ftp: loaded support on port[0] = 21 [ 145.184407][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.192493][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.203187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 145.235662][ T809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.243834][ T809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.254562][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.294775][ T8251] ===================================================== [ 145.302042][ T8251] BUG: KMSAN: uninit-value in hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 145.310846][ T8251] CPU: 1 PID: 8251 Comm: syz-executor918 Not tainted 5.12.0-rc6-syzkaller #0 [ 145.319803][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.330766][ T8251] Call Trace: [ 145.334185][ T8251] dump_stack+0x24c/0x2e0 [ 145.338568][ T8251] kmsan_report+0xfb/0x1e0 [ 145.343305][ T8251] __msan_warning+0x5c/0xa0 [ 145.347840][ T8251] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 145.354541][ T8251] ? hwsim_register_received_nl+0x740/0x740 [ 145.360749][ T8251] genl_rcv_msg+0x1319/0x1610 [ 145.365836][ T8251] ? hwsim_register_received_nl+0x740/0x740 [ 145.372008][ T8251] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.378022][ T8251] netlink_rcv_skb+0x6fa/0x810 [ 145.383049][ T8251] ? genl_bind+0x4b0/0x4b0 [ 145.387599][ T8251] genl_rcv+0x63/0x80 [ 145.391892][ T8251] netlink_unicast+0x11d6/0x14a0 [ 145.396917][ T8251] ? genl_pernet_exit+0x90/0x90 [ 145.401795][ T8251] netlink_sendmsg+0x1740/0x1840 [ 145.407055][ T8251] ? netlink_getsockopt+0x1830/0x1830 [ 145.412635][ T8251] __sys_sendto+0x9ea/0xc60 [ 145.417272][ T8251] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 145.424024][ T8251] ? kmsan_get_metadata+0x116/0x180 [ 145.429446][ T8251] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.435351][ T8251] ? kmsan_get_metadata+0x116/0x180 [ 145.440559][ T8251] __se_sys_sendto+0x107/0x130 [ 145.445414][ T8251] __x64_sys_sendto+0x6e/0x90 [ 145.450289][ T8251] do_syscall_64+0x9f/0x140 [ 145.454910][ T8251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.460921][ T8251] RIP: 0033:0x402d56 [ 145.464847][ T8251] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 145.486506][ T8251] RSP: 002b:00007ffdc1af8308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.495020][ T8251] RAX: ffffffffffffffda RBX: 00007ffdc1af8380 RCX: 0000000000402d56 [ 145.503086][ T8251] RDX: 0000000000000034 RSI: 00007ffdc1af83d0 RDI: 0000000000000003 [ 145.511154][ T8251] RBP: 0000000000000001 R08: 00007ffdc1af8324 R09: 000000000000000c [ 145.519579][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.528339][ T8251] R13: 00007ffdc1af83d0 R14: 0000000000000003 R15: 0000000000000000 [ 145.536876][ T8251] [ 145.539487][ T8251] Uninit was created at: [ 145.544773][ T8251] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.550597][ T8251] kmsan_slab_alloc+0x8e/0xe0 [ 145.555719][ T8251] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.561971][ T8251] __alloc_skb+0x4dd/0xe90 [ 145.567140][ T8251] hwsim_cloned_frame_received_nl+0x223/0x13f0 [ 145.573771][ T8251] genl_rcv_msg+0x1319/0x1610 [ 145.578469][ T8251] netlink_rcv_skb+0x6fa/0x810 [ 145.583518][ T8251] genl_rcv+0x63/0x80 [ 145.587518][ T8251] netlink_unicast+0x11d6/0x14a0 [ 145.592643][ T8251] netlink_sendmsg+0x1740/0x1840 [ 145.597609][ T8251] __sys_sendto+0x9ea/0xc60 [ 145.602486][ T8251] __se_sys_sendto+0x107/0x130 [ 145.609698][ T8251] __x64_sys_sendto+0x6e/0x90 [ 145.615525][ T8251] do_syscall_64+0x9f/0x140 [ 145.620150][ T8251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.626483][ T8251] ===================================================== [ 145.634238][ T8251] Disabling lock debugging due to kernel taint [ 145.640799][ T8251] Kernel panic - not syncing: panic_on_kmsan set ... [ 145.647781][ T8251] CPU: 1 PID: 8251 Comm: syz-executor918 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.658162][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.668880][ T8251] Call Trace: [ 145.672253][ T8251] dump_stack+0x24c/0x2e0 [ 145.676816][ T8251] panic+0x4c6/0xea7 [ 145.680810][ T8251] ? add_taint+0x17c/0x210 [ 145.685370][ T8251] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.692142][ T8251] kmsan_report+0x1de/0x1e0 [ 145.697105][ T8251] __msan_warning+0x5c/0xa0 [ 145.701640][ T8251] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 145.708107][ T8251] ? hwsim_register_received_nl+0x740/0x740 [ 145.714239][ T8251] genl_rcv_msg+0x1319/0x1610 [ 145.718945][ T8251] ? hwsim_register_received_nl+0x740/0x740 [ 145.725247][ T8251] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.731073][ T8251] netlink_rcv_skb+0x6fa/0x810 [ 145.736008][ T8251] ? genl_bind+0x4b0/0x4b0 [ 145.740544][ T8251] genl_rcv+0x63/0x80 [ 145.744628][ T8251] netlink_unicast+0x11d6/0x14a0 [ 145.749906][ T8251] ? genl_pernet_exit+0x90/0x90 [ 145.754778][ T8251] netlink_sendmsg+0x1740/0x1840 [ 145.759892][ T8251] ? netlink_getsockopt+0x1830/0x1830 [ 145.765425][ T8251] __sys_sendto+0x9ea/0xc60 [ 145.770457][ T8251] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 145.776549][ T8251] ? kmsan_get_metadata+0x116/0x180 [ 145.782369][ T8251] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.788642][ T8251] ? kmsan_get_metadata+0x116/0x180 [ 145.793968][ T8251] __se_sys_sendto+0x107/0x130 [ 145.798789][ T8251] __x64_sys_sendto+0x6e/0x90 [ 145.803561][ T8251] do_syscall_64+0x9f/0x140 [ 145.809361][ T8251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.815482][ T8251] RIP: 0033:0x402d56 [ 145.820271][ T8251] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 145.840146][ T8251] RSP: 002b:00007ffdc1af8308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.848951][ T8251] RAX: ffffffffffffffda RBX: 00007ffdc1af8380 RCX: 0000000000402d56 [ 145.857041][ T8251] RDX: 0000000000000034 RSI: 00007ffdc1af83d0 RDI: 0000000000000003 [ 145.865151][ T8251] RBP: 0000000000000001 R08: 00007ffdc1af8324 R09: 000000000000000c [ 145.873168][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.881745][ T8251] R13: 00007ffdc1af83d0 R14: 0000000000000003 R15: 0000000000000000 [ 145.891459][ T8251] Kernel Offset: disabled [ 145.895896][ T8251] Rebooting in 86400 seconds..