[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. syzkaller login: [ 130.313606][ T8217] IPVS: ftp: loaded support on port[0] = 21 [ 130.415954][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.424770][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.436956][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 130.487144][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.495733][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.503616][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.542417][ T8257] ===================================================== [ 130.549417][ T8257] BUG: KMSAN: uninit-value in hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 130.558071][ T8257] CPU: 0 PID: 8257 Comm: syz-executor350 Not tainted 5.12.0-rc6-syzkaller #0 [ 130.566895][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.577126][ T8257] Call Trace: [ 130.580404][ T8257] dump_stack+0x24c/0x2e0 [ 130.585332][ T8257] kmsan_report+0xfb/0x1e0 [ 130.589759][ T8257] __msan_warning+0x5c/0xa0 [ 130.594492][ T8257] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 130.600749][ T8257] ? hwsim_register_received_nl+0x740/0x740 [ 130.606967][ T8257] genl_rcv_msg+0x1319/0x1610 [ 130.611837][ T8257] ? hwsim_register_received_nl+0x740/0x740 [ 130.617970][ T8257] ? kmsan_internal_set_origin+0x85/0xc0 [ 130.623697][ T8257] netlink_rcv_skb+0x6fa/0x810 [ 130.628475][ T8257] ? genl_bind+0x4b0/0x4b0 [ 130.632884][ T8257] genl_rcv+0x63/0x80 [ 130.636876][ T8257] netlink_unicast+0x11d6/0x14a0 [ 130.641971][ T8257] ? genl_pernet_exit+0x90/0x90 [ 130.646830][ T8257] netlink_sendmsg+0x1740/0x1840 [ 130.651771][ T8257] ? netlink_getsockopt+0x1830/0x1830 [ 130.657260][ T8257] __sys_sendto+0x9ea/0xc60 [ 130.661855][ T8257] ? kmsan_get_metadata+0x116/0x180 [ 130.667233][ T8257] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 130.673058][ T8257] ? kmsan_get_metadata+0x116/0x180 [ 130.678303][ T8257] __se_sys_sendto+0x107/0x130 [ 130.683180][ T8257] __x64_sys_sendto+0x6e/0x90 [ 130.687858][ T8257] do_syscall_64+0x9f/0x140 [ 130.692503][ T8257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.698438][ T8257] RIP: 0033:0x402d56 [ 130.702332][ T8257] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 130.722505][ T8257] RSP: 002b:00007fffca78e128 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 130.730920][ T8257] RAX: ffffffffffffffda RBX: 00007fffca78e1a0 RCX: 0000000000402d56 [ 130.738980][ T8257] RDX: 0000000000000034 RSI: 00007fffca78e1f0 RDI: 0000000000000003 [ 130.746948][ T8257] RBP: 0000000000000001 R08: 00007fffca78e144 R09: 000000000000000c [ 130.754914][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.762878][ T8257] R13: 00007fffca78e1f0 R14: 0000000000000003 R15: 0000000000000000 [ 130.771385][ T8257] [ 130.773706][ T8257] Uninit was created at: [ 130.778024][ T8257] kmsan_internal_poison_shadow+0x5c/0xf0 [ 130.783841][ T8257] kmsan_slab_alloc+0x8e/0xe0 [ 130.788612][ T8257] __kmalloc_node_track_caller+0xa4f/0x1470 [ 130.794654][ T8257] __alloc_skb+0x4dd/0xe90 [ 130.799139][ T8257] hwsim_cloned_frame_received_nl+0x223/0x13f0 [ 130.805511][ T8257] genl_rcv_msg+0x1319/0x1610 [ 130.810312][ T8257] netlink_rcv_skb+0x6fa/0x810 [ 130.815103][ T8257] genl_rcv+0x63/0x80 [ 130.819106][ T8257] netlink_unicast+0x11d6/0x14a0 [ 130.824253][ T8257] netlink_sendmsg+0x1740/0x1840 [ 130.829394][ T8257] __sys_sendto+0x9ea/0xc60 [ 130.833901][ T8257] __se_sys_sendto+0x107/0x130 [ 130.838657][ T8257] __x64_sys_sendto+0x6e/0x90 [ 130.843579][ T8257] do_syscall_64+0x9f/0x140 [ 130.848252][ T8257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.854672][ T8257] ===================================================== [ 130.861614][ T8257] Disabling lock debugging due to kernel taint [ 130.867755][ T8257] Kernel panic - not syncing: panic_on_kmsan set ... [ 130.874418][ T8257] CPU: 0 PID: 8257 Comm: syz-executor350 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 130.884563][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.894634][ T8257] Call Trace: [ 130.897913][ T8257] dump_stack+0x24c/0x2e0 [ 130.902340][ T8257] panic+0x4c6/0xea7 [ 130.906268][ T8257] ? add_taint+0x17c/0x210 [ 130.910680][ T8257] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 130.916840][ T8257] kmsan_report+0x1de/0x1e0 [ 130.921473][ T8257] __msan_warning+0x5c/0xa0 [ 130.926248][ T8257] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 130.932779][ T8257] ? hwsim_register_received_nl+0x740/0x740 [ 130.939032][ T8257] genl_rcv_msg+0x1319/0x1610 [ 130.943918][ T8257] ? hwsim_register_received_nl+0x740/0x740 [ 130.949817][ T8257] ? kmsan_internal_set_origin+0x85/0xc0 [ 130.955543][ T8257] netlink_rcv_skb+0x6fa/0x810 [ 130.960315][ T8257] ? genl_bind+0x4b0/0x4b0 [ 130.964735][ T8257] genl_rcv+0x63/0x80 [ 130.968712][ T8257] netlink_unicast+0x11d6/0x14a0 [ 130.973652][ T8257] ? genl_pernet_exit+0x90/0x90 [ 130.978525][ T8257] netlink_sendmsg+0x1740/0x1840 [ 130.983715][ T8257] ? netlink_getsockopt+0x1830/0x1830 [ 130.989475][ T8257] __sys_sendto+0x9ea/0xc60 [ 130.993995][ T8257] ? kmsan_get_metadata+0x116/0x180 [ 130.999222][ T8257] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 131.005052][ T8257] ? kmsan_get_metadata+0x116/0x180 [ 131.010263][ T8257] __se_sys_sendto+0x107/0x130 [ 131.015208][ T8257] __x64_sys_sendto+0x6e/0x90 [ 131.019977][ T8257] do_syscall_64+0x9f/0x140 [ 131.024511][ T8257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.030430][ T8257] RIP: 0033:0x402d56 [ 131.034431][ T8257] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 131.054383][ T8257] RSP: 002b:00007fffca78e128 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.063147][ T8257] RAX: ffffffffffffffda RBX: 00007fffca78e1a0 RCX: 0000000000402d56 [ 131.071121][ T8257] RDX: 0000000000000034 RSI: 00007fffca78e1f0 RDI: 0000000000000003 [ 131.079286][ T8257] RBP: 0000000000000001 R08: 00007fffca78e144 R09: 000000000000000c [ 131.087265][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.095418][ T8257] R13: 00007fffca78e1f0 R14: 0000000000000003 R15: 0000000000000000 [ 131.104731][ T8257] Kernel Offset: disabled [ 131.109075][ T8257] Rebooting in 86400 seconds..