[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.94' (ECDSA) to the list of known hosts. syzkaller login: [ 135.658737][ T8227] IPVS: ftp: loaded support on port[0] = 21 [ 135.779043][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.787819][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.807876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 135.827737][ T705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.836042][ T705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.855931][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.899471][ T8266] ===================================================== [ 135.906618][ T8266] BUG: KMSAN: uninit-value in hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 135.915254][ T8266] CPU: 1 PID: 8266 Comm: syz-executor039 Not tainted 5.12.0-rc6-syzkaller #0 [ 135.924242][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.934316][ T8266] Call Trace: [ 135.937624][ T8266] dump_stack+0x24c/0x2e0 [ 135.941981][ T8266] kmsan_report+0xfb/0x1e0 [ 135.946408][ T8266] __msan_warning+0x5c/0xa0 [ 135.950907][ T8266] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 135.957196][ T8266] ? hwsim_register_received_nl+0x740/0x740 [ 135.963079][ T8266] genl_rcv_msg+0x1319/0x1610 [ 135.967805][ T8266] ? hwsim_register_received_nl+0x740/0x740 [ 135.973688][ T8266] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.979320][ T8266] netlink_rcv_skb+0x6fa/0x810 [ 135.984073][ T8266] ? genl_bind+0x4b0/0x4b0 [ 135.988478][ T8266] genl_rcv+0x63/0x80 [ 135.992450][ T8266] netlink_unicast+0x11d6/0x14a0 [ 135.997385][ T8266] ? genl_pernet_exit+0x90/0x90 [ 136.002223][ T8266] netlink_sendmsg+0x1740/0x1840 [ 136.007150][ T8266] ? netlink_getsockopt+0x1830/0x1830 [ 136.012505][ T8266] __sys_sendto+0x9ea/0xc60 [ 136.016996][ T8266] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 136.023086][ T8266] ? kmsan_get_metadata+0x116/0x180 [ 136.028273][ T8266] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.034098][ T8266] ? kmsan_get_metadata+0x116/0x180 [ 136.039320][ T8266] __se_sys_sendto+0x107/0x130 [ 136.044112][ T8266] __x64_sys_sendto+0x6e/0x90 [ 136.048774][ T8266] do_syscall_64+0x9f/0x140 [ 136.053375][ T8266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.059253][ T8266] RIP: 0033:0x402d56 [ 136.063226][ T8266] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 136.082815][ T8266] RSP: 002b:00007ffc61df9688 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.091215][ T8266] RAX: ffffffffffffffda RBX: 00007ffc61df9700 RCX: 0000000000402d56 [ 136.099185][ T8266] RDX: 0000000000000034 RSI: 00007ffc61df9750 RDI: 0000000000000003 [ 136.107140][ T8266] RBP: 0000000000000001 R08: 00007ffc61df96a4 R09: 000000000000000c [ 136.115091][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.123215][ T8266] R13: 00007ffc61df9750 R14: 0000000000000003 R15: 0000000000000000 [ 136.131173][ T8266] [ 136.133477][ T8266] Uninit was created at: [ 136.137715][ T8266] kmsan_internal_poison_shadow+0x66/0xd0 [ 136.143425][ T8266] kmsan_slab_alloc+0x8e/0xe0 [ 136.148084][ T8266] __kmalloc_node_track_caller+0xa4f/0x1470 [ 136.154050][ T8266] __alloc_skb+0x4dd/0xe90 [ 136.158446][ T8266] hwsim_cloned_frame_received_nl+0x223/0x13f0 [ 136.164585][ T8266] genl_rcv_msg+0x1319/0x1610 [ 136.169247][ T8266] netlink_rcv_skb+0x6fa/0x810 [ 136.173996][ T8266] genl_rcv+0x63/0x80 [ 136.177962][ T8266] netlink_unicast+0x11d6/0x14a0 [ 136.182906][ T8266] netlink_sendmsg+0x1740/0x1840 [ 136.187842][ T8266] __sys_sendto+0x9ea/0xc60 [ 136.192390][ T8266] __se_sys_sendto+0x107/0x130 [ 136.197184][ T8266] __x64_sys_sendto+0x6e/0x90 [ 136.201848][ T8266] do_syscall_64+0x9f/0x140 [ 136.206334][ T8266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.212208][ T8266] ===================================================== [ 136.219113][ T8266] Disabling lock debugging due to kernel taint [ 136.225238][ T8266] Kernel panic - not syncing: panic_on_kmsan set ... [ 136.231886][ T8266] CPU: 1 PID: 8266 Comm: syz-executor039 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 136.242207][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.252259][ T8266] Call Trace: [ 136.255522][ T8266] dump_stack+0x24c/0x2e0 [ 136.259844][ T8266] panic+0x4c6/0xea7 [ 136.263738][ T8266] ? add_taint+0x17c/0x210 [ 136.268134][ T8266] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 136.274884][ T8266] kmsan_report+0x1de/0x1e0 [ 136.279550][ T8266] __msan_warning+0x5c/0xa0 [ 136.284055][ T8266] hwsim_cloned_frame_received_nl+0x124f/0x13f0 [ 136.290398][ T8266] ? hwsim_register_received_nl+0x740/0x740 [ 136.296298][ T8266] genl_rcv_msg+0x1319/0x1610 [ 136.300976][ T8266] ? hwsim_register_received_nl+0x740/0x740 [ 136.306858][ T8266] ? kmsan_set_origin_checked+0xa2/0x100 [ 136.312473][ T8266] netlink_rcv_skb+0x6fa/0x810 [ 136.317226][ T8266] ? genl_bind+0x4b0/0x4b0 [ 136.321659][ T8266] genl_rcv+0x63/0x80 [ 136.325643][ T8266] netlink_unicast+0x11d6/0x14a0 [ 136.330571][ T8266] ? genl_pernet_exit+0x90/0x90 [ 136.335504][ T8266] netlink_sendmsg+0x1740/0x1840 [ 136.340570][ T8266] ? netlink_getsockopt+0x1830/0x1830 [ 136.345926][ T8266] __sys_sendto+0x9ea/0xc60 [ 136.350417][ T8266] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 136.356468][ T8266] ? kmsan_get_metadata+0x116/0x180 [ 136.361929][ T8266] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.367718][ T8266] ? kmsan_get_metadata+0x116/0x180 [ 136.372902][ T8266] __se_sys_sendto+0x107/0x130 [ 136.377652][ T8266] __x64_sys_sendto+0x6e/0x90 [ 136.382332][ T8266] do_syscall_64+0x9f/0x140 [ 136.386819][ T8266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.392697][ T8266] RIP: 0033:0x402d56 [ 136.396590][ T8266] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 136.416180][ T8266] RSP: 002b:00007ffc61df9688 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.424577][ T8266] RAX: ffffffffffffffda RBX: 00007ffc61df9700 RCX: 0000000000402d56 [ 136.432532][ T8266] RDX: 0000000000000034 RSI: 00007ffc61df9750 RDI: 0000000000000003 [ 136.440496][ T8266] RBP: 0000000000000001 R08: 00007ffc61df96a4 R09: 000000000000000c [ 136.448451][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.456405][ T8266] R13: 00007ffc61df9750 R14: 0000000000000003 R15: 0000000000000000 [ 136.465911][ T8266] Kernel Offset: disabled [ 136.470222][ T8266] Rebooting in 86400 seconds..