[ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *** ] A start job is running for OpenBSD …Shell server (1min 28s / 2min 45s)[ *** ] A start job is running for OpenBSD …Shell server (1min 29s / 2min 45s)[ ***] A start job is running for OpenBSD …Shell server (1min 29s / 2min 45s)[ **] A start job is running for OpenBSD …Shell server (1min 30s / 2min 45s)[ *] A start job is running for OpenBSD …Shell server (1min 31s / 2min 45s)[ **] A start job is running for OpenBSD … Shell server (1min 32s / 3min 1s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 144.552116][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.092254][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.101435][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.109757][ T7] usb 1-1: Product: syz [ 145.114238][ T7] usb 1-1: Manufacturer: syz [ 145.119018][ T7] usb 1-1: SerialNumber: syz [ 145.183614][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.892150][ T1984] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.112055][ C0] ===================================================== [ 146.119003][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.126297][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0 [ 146.134276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.144310][ C0] Call Trace: [ 146.147571][ C0] [ 146.150407][ C0] dump_stack+0x24c/0x2e0 [ 146.154728][ C0] kmsan_report+0xfb/0x1e0 [ 146.159146][ C0] __msan_warning+0x5c/0xa0 [ 146.163644][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.168566][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.174650][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.179926][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.186095][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.191909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.197124][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.202951][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.208836][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.214195][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.219404][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.224585][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.230388][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.236528][ C0] dummy_timer+0xda7/0x74f0 [ 146.241025][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.246210][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.252279][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.257473][ C0] call_timer_fn+0x7d/0x450 [ 146.261970][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.267765][ C0] expire_timers+0x328/0x6c0 [ 146.272342][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.277524][ C0] __run_timers+0x624/0x9e0 [ 146.282016][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.288175][ C0] ? irqtime_account_irq+0xe3/0x380 [ 146.293371][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.298562][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 146.299435][ T56] usb 1-1: USB disconnect, device number 2 [ 146.303784][ C0] run_timer_softirq+0x2d/0x50 [ 146.303821][ C0] __do_softirq+0x1b9/0x715 [ 146.303861][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.303892][ C0] __irq_exit_rcu+0x22f/0x280 [ 146.303926][ C0] irq_exit_rcu+0xe/0x10 [ 146.303957][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.339314][ C0] [ 146.342256][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.348311][ C0] RIP: 0010:finish_lock_switch+0x19a/0x1c0 [ 146.354142][ C0] Code: 40 c3 00 4d 85 e4 0f 85 f3 fe ff ff 48 83 7d c8 00 75 22 48 8b 5d c0 48 89 df e8 e1 3a c3 00 c6 00 00 c6 03 00 fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 8b 7d d4 e8 93 40 c3 00 eb d4 8b [ 146.373765][ C0] RSP: 0018:ffffffff91603c88 EFLAGS: 00000286 [ 146.379849][ C0] RAX: ffff88823fee6840 RBX: ffff88813fc95840 RCX: 000000023fe46840 [ 146.387905][ C0] RDX: ffff88823fe46840 RSI: 0000000000000270 RDI: ffff88813fc95840 [ 146.395901][ C0] RBP: ffffffff91603cb0 R08: ffffea000000000f R09: ffff88813fffa000 [ 146.403890][ C0] R10: 000000006815e9a7 R11: 0000000000000000 R12: 0000000000000000 [ 146.411877][ C0] R13: ffff88813fc95840 R14: 0000000000000000 R15: 0000000000000000 [ 146.419861][ C0] finish_task_switch+0xd8/0x2d0 [ 146.424797][ C0] __schedule+0x54b/0x5c0 [ 146.429143][ C0] schedule_idle+0x60/0xa0 [ 146.433545][ C0] do_idle+0x764/0x790 [ 146.437606][ C0] cpu_startup_entry+0x45/0x50 [ 146.442355][ C0] rest_init+0x1c8/0x1f0 [ 146.446580][ C0] arch_call_rest_init+0x13/0x15 [ 146.451503][ C0] start_kernel+0xa17/0xbd8 [ 146.456018][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.461468][ C0] x86_64_start_kernel+0x86/0x89 [ 146.466392][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.472286][ C0] [ 146.474587][ C0] Uninit was created at: [ 146.478807][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.484515][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.489173][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.495049][ C0] __alloc_skb+0x4dd/0xe90 [ 146.499449][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.504465][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.509649][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.515002][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.520181][ C0] dummy_timer+0xda7/0x74f0 [ 146.524666][ C0] call_timer_fn+0x7d/0x450 [ 146.529169][ C0] expire_timers+0x328/0x6c0 [ 146.533751][ C0] __run_timers+0x624/0x9e0 [ 146.538236][ C0] run_timer_softirq+0x2d/0x50 [ 146.542981][ C0] __do_softirq+0x1b9/0x715 [ 146.547480][ C0] ===================================================== [ 146.554385][ C0] Disabling lock debugging due to kernel taint [ 146.560508][ C0] ===================================================== [ 146.567418][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.574700][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.584082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.594143][ C0] Call Trace: [ 146.597408][ C0] [ 146.600236][ C0] dump_stack+0x24c/0x2e0 [ 146.604601][ C0] kmsan_report+0xfb/0x1e0 [ 146.609004][ C0] __msan_warning+0x5c/0xa0 [ 146.613504][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.618461][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.624523][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.629801][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.635939][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.641738][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.646923][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.652715][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.658598][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.663957][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.669140][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.674326][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.680125][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.686275][ C0] dummy_timer+0xda7/0x74f0 [ 146.690786][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.695970][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.702021][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.707212][ C0] call_timer_fn+0x7d/0x450 [ 146.711701][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.717491][ C0] expire_timers+0x328/0x6c0 [ 146.722082][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.727266][ C0] __run_timers+0x624/0x9e0 [ 146.731754][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.737903][ C0] ? irqtime_account_irq+0xe3/0x380 [ 146.743096][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.748277][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 146.753460][ C0] run_timer_softirq+0x2d/0x50 [ 146.758208][ C0] __do_softirq+0x1b9/0x715 [ 146.762698][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.768490][ C0] __irq_exit_rcu+0x22f/0x280 [ 146.773155][ C0] irq_exit_rcu+0xe/0x10 [ 146.777381][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.783027][ C0] [ 146.785953][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.791926][ C0] RIP: 0010:finish_lock_switch+0x19a/0x1c0 [ 146.797722][ C0] Code: 40 c3 00 4d 85 e4 0f 85 f3 fe ff ff 48 83 7d c8 00 75 22 48 8b 5d c0 48 89 df e8 e1 3a c3 00 c6 00 00 c6 03 00 fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 8b 7d d4 e8 93 40 c3 00 eb d4 8b [ 146.817311][ C0] RSP: 0018:ffffffff91603c88 EFLAGS: 00000286 [ 146.823364][ C0] RAX: ffff88823fee6840 RBX: ffff88813fc95840 RCX: 000000023fe46840 [ 146.831317][ C0] RDX: ffff88823fe46840 RSI: 0000000000000270 RDI: ffff88813fc95840 [ 146.839274][ C0] RBP: ffffffff91603cb0 R08: ffffea000000000f R09: ffff88813fffa000 [ 146.847231][ C0] R10: 000000006815e9a7 R11: 0000000000000000 R12: 0000000000000000 [ 146.855184][ C0] R13: ffff88813fc95840 R14: 0000000000000000 R15: 0000000000000000 [ 146.863144][ C0] finish_task_switch+0xd8/0x2d0 [ 146.868072][ C0] __schedule+0x54b/0x5c0 [ 146.872391][ C0] schedule_idle+0x60/0xa0 [ 146.876794][ C0] do_idle+0x764/0x790 [ 146.880852][ C0] cpu_startup_entry+0x45/0x50 [ 146.885602][ C0] rest_init+0x1c8/0x1f0 [ 146.889827][ C0] arch_call_rest_init+0x13/0x15 [ 146.894750][ C0] start_kernel+0xa17/0xbd8 [ 146.899239][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.904682][ C0] x86_64_start_kernel+0x86/0x89 [ 146.909616][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.915499][ C0] [ 146.917801][ C0] Uninit was created at: [ 146.922028][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.927737][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.932393][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.938280][ C0] __alloc_skb+0x4dd/0xe90 [ 146.942680][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.947701][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.952886][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.958259][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.963440][ C0] dummy_timer+0xda7/0x74f0 [ 146.967944][ C0] call_timer_fn+0x7d/0x450 [ 146.972447][ C0] expire_timers+0x328/0x6c0 [ 146.977022][ C0] __run_timers+0x624/0x9e0 [ 146.981508][ C0] run_timer_softirq+0x2d/0x50 [ 146.986255][ C0] __do_softirq+0x1b9/0x715 [ 146.990744][ C0] ===================================================== [ 146.997650][ C0] ===================================================== [ 147.004569][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.011847][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.021225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.031264][ C0] Call Trace: [ 147.034544][ C0] [ 147.037388][ C0] dump_stack+0x24c/0x2e0 [ 147.041709][ C0] kmsan_report+0xfb/0x1e0 [ 147.046112][ C0] __msan_warning+0x5c/0xa0 [ 147.050615][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.055540][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.061594][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.066870][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.073009][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.078806][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.084003][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.089810][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.095690][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.101048][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.106229][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.111410][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.117199][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.123339][ C0] dummy_timer+0xda7/0x74f0 [ 147.127851][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.133051][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.139102][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.144301][ C0] call_timer_fn+0x7d/0x450 [ 147.148798][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.154602][ C0] expire_timers+0x328/0x6c0 [ 147.159194][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.164392][ C0] __run_timers+0x624/0x9e0 [ 147.168893][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 147.175033][ C0] ? irqtime_account_irq+0xe3/0x380 [ 147.180218][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.185403][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.190601][ C0] run_timer_softirq+0x2d/0x50 [ 147.195375][ C0] __do_softirq+0x1b9/0x715 [ 147.199883][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.205674][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.210338][ C0] irq_exit_rcu+0xe/0x10 [ 147.214570][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.220193][ C0] [ 147.223122][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.229103][ C0] RIP: 0010:finish_lock_switch+0x19a/0x1c0 [ 147.234915][ C0] Code: 40 c3 00 4d 85 e4 0f 85 f3 fe ff ff 48 83 7d c8 00 75 22 48 8b 5d c0 48 89 df e8 e1 3a c3 00 c6 00 00 c6 03 00 fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 8b 7d d4 e8 93 40 c3 00 eb d4 8b [ 147.254623][ C0] RSP: 0018:ffffffff91603c88 EFLAGS: 00000286 [ 147.260677][ C0] RAX: ffff88823fee6840 RBX: ffff88813fc95840 RCX: 000000023fe46840 [ 147.268631][ C0] RDX: ffff88823fe46840 RSI: 0000000000000270 RDI: ffff88813fc95840 [ 147.276720][ C0] RBP: ffffffff91603cb0 R08: ffffea000000000f R09: ffff88813fffa000 [ 147.284684][ C0] R10: 000000006815e9a7 R11: 0000000000000000 R12: 0000000000000000 [ 147.292656][ C0] R13: ffff88813fc95840 R14: 0000000000000000 R15: 0000000000000000 [ 147.300619][ C0] finish_task_switch+0xd8/0x2d0 [ 147.305551][ C0] __schedule+0x54b/0x5c0 [ 147.309919][ C0] schedule_idle+0x60/0xa0 [ 147.314323][ C0] do_idle+0x764/0x790 [ 147.318381][ C0] cpu_startup_entry+0x45/0x50 [ 147.323134][ C0] rest_init+0x1c8/0x1f0 [ 147.327363][ C0] arch_call_rest_init+0x13/0x15 [ 147.332286][ C0] start_kernel+0xa17/0xbd8 [ 147.336808][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.342253][ C0] x86_64_start_kernel+0x86/0x89 [ 147.347178][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.353073][ C0] [ 147.355374][ C0] Uninit was created at: [ 147.359583][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.365289][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.369946][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.375823][ C0] __alloc_skb+0x4dd/0xe90 [ 147.380224][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.385228][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.390412][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.395766][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.400947][ C0] dummy_timer+0xda7/0x74f0 [ 147.405433][ C0] call_timer_fn+0x7d/0x450 [ 147.409921][ C0] expire_timers+0x328/0x6c0 [ 147.414495][ C0] __run_timers+0x624/0x9e0 [ 147.418982][ C0] run_timer_softirq+0x2d/0x50 [ 147.423727][ C0] __do_softirq+0x1b9/0x715 [ 147.428228][ C0] ===================================================== [ 147.435133][ C0] ===================================================== [ 147.442051][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 147.449320][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.458666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.468700][ C0] Call Trace: [ 147.471961][ C0] [ 147.474800][ C0] dump_stack+0x24c/0x2e0 [ 147.479118][ C0] kmsan_report+0xfb/0x1e0 [ 147.483530][ C0] __msan_warning+0x5c/0xa0 [ 147.488035][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 147.493045][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.499102][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.504389][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.510527][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.516334][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.521518][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.527308][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.533189][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.538558][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.543750][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.548933][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.554723][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.560861][ C0] dummy_timer+0xda7/0x74f0 [ 147.565371][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.570567][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.576627][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.581825][ C0] call_timer_fn+0x7d/0x450 [ 147.586356][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.592147][ C0] expire_timers+0x328/0x6c0 [ 147.596733][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.601918][ C0] __run_timers+0x624/0x9e0 [ 147.606412][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 147.612559][ C0] ? irqtime_account_irq+0xe3/0x380 [ 147.617744][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.622927][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.628121][ C0] run_timer_softirq+0x2d/0x50 [ 147.632880][ C0] __do_softirq+0x1b9/0x715 [ 147.637375][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.643174][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.647852][ C0] irq_exit_rcu+0xe/0x10 [ 147.652081][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.657714][ C0] [ 147.660625][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.666590][ C0] RIP: 0010:finish_lock_switch+0x19a/0x1c0 [ 147.672383][ C0] Code: 40 c3 00 4d 85 e4 0f 85 f3 fe ff ff 48 83 7d c8 00 75 22 48 8b 5d c0 48 89 df e8 e1 3a c3 00 c6 00 00 c6 03 00 fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 8b 7d d4 e8 93 40 c3 00 eb d4 8b [ 147.691971][ C0] RSP: 0018:ffffffff91603c88 EFLAGS: 00000286 [ 147.698021][ C0] RAX: ffff88823fee6840 RBX: ffff88813fc95840 RCX: 000000023fe46840 [ 147.705974][ C0] RDX: ffff88823fe46840 RSI: 0000000000000270 RDI: ffff88813fc95840 [ 147.713931][ C0] RBP: ffffffff91603cb0 R08: ffffea000000000f R09: ffff88813fffa000 [ 147.721887][ C0] R10: 000000006815e9a7 R11: 0000000000000000 R12: 0000000000000000 [ 147.729852][ C0] R13: ffff88813fc95840 R14: 0000000000000000 R15: 0000000000000000 [ 147.737812][ C0] finish_task_switch+0xd8/0x2d0 [ 147.742740][ C0] __schedule+0x54b/0x5c0 [ 147.747059][ C0] schedule_idle+0x60/0xa0 [ 147.751470][ C0] do_idle+0x764/0x790 [ 147.755537][ C0] cpu_startup_entry+0x45/0x50 [ 147.760375][ C0] rest_init+0x1c8/0x1f0 [ 147.764604][ C0] arch_call_rest_init+0x13/0x15 [ 147.769525][ C0] start_kernel+0xa17/0xbd8 [ 147.774013][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.779458][ C0] x86_64_start_kernel+0x86/0x89 [ 147.784394][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.790279][ C0] [ 147.792581][ C0] Uninit was created at: [ 147.796803][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.802509][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.807183][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.813062][ C0] __alloc_skb+0x4dd/0xe90 [ 147.817472][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.822490][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.827675][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.833032][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.838214][ C0] dummy_timer+0xda7/0x74f0 [ 147.842699][ C0] call_timer_fn+0x7d/0x450 [ 147.847189][ C0] expire_timers+0x328/0x6c0 [ 147.851768][ C0] __run_timers+0x624/0x9e0 [ 147.856254][ C0] run_timer_softirq+0x2d/0x50 [ 147.861014][ C0] __do_softirq+0x1b9/0x715 [ 147.865501][ C0] ===================================================== [ 147.872408][ C0] ===================================================== [ 147.879312][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 147.886579][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.895952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.905987][ C0] Call Trace: [ 147.909250][ C0] [ 147.912085][ C0] dump_stack+0x24c/0x2e0 [ 147.916402][ C0] kmsan_report+0xfb/0x1e0 [ 147.920806][ C0] __msan_warning+0x5c/0xa0 [ 147.925293][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 147.930232][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.936473][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.941790][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.948151][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.953959][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.959141][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.964931][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.970811][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.976172][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.981355][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.986548][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.992338][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.998475][ C0] dummy_timer+0xda7/0x74f0 [ 148.002982][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.008168][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.014216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.019400][ C0] call_timer_fn+0x7d/0x450 [ 148.023890][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.029687][ C0] expire_timers+0x328/0x6c0 [ 148.034262][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.039445][ C0] __run_timers+0x624/0x9e0 [ 148.043948][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.050096][ C0] ? irqtime_account_irq+0xe3/0x380 [ 148.055282][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.060464][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 148.065646][ C0] run_timer_softirq+0x2d/0x50 [ 148.070395][ C0] __do_softirq+0x1b9/0x715 [ 148.074884][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.080677][ C0] __irq_exit_rcu+0x22f/0x280 [ 148.085358][ C0] irq_exit_rcu+0xe/0x10 [ 148.089584][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.095206][ C0] [ 148.098117][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.104079][ C0] RIP: 0010:finish_lock_switch+0x19a/0x1c0 [ 148.109872][ C0] Code: 40 c3 00 4d 85 e4 0f 85 f3 fe ff ff 48 83 7d c8 00 75 22 48 8b 5d c0 48 89 df e8 e1 3a c3 00 c6 00 00 c6 03 00 fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 8b 7d d4 e8 93 40 c3 00 eb d4 8b [ 148.129461][ C0] RSP: 0018:ffffffff91603c88 EFLAGS: 00000286 [ 148.135521][ C0] RAX: ffff88823fee6840 RBX: ffff88813fc95840 RCX: 000000023fe46840 [ 148.143505][ C0] RDX: ffff88823fe46840 RSI: 0000000000000270 RDI: ffff88813fc95840 [ 148.151466][ C0] RBP: ffffffff91603cb0 R08: ffffea000000000f R09: ffff88813fffa000 [ 148.159419][ C0] R10: 000000006815e9a7 R11: 0000000000000000 R12: 0000000000000000 [ 148.167397][ C0] R13: ffff88813fc95840 R14: 0000000000000000 R15: 0000000000000000 [ 148.175372][ C0] finish_task_switch+0xd8/0x2d0 [ 148.180303][ C0] __schedule+0x54b/0x5c0 [ 148.184622][ C0] schedule_idle+0x60/0xa0 [ 148.189288][ C0] do_idle+0x764/0x790 [ 148.193352][ C0] cpu_startup_entry+0x45/0x50 [ 148.198112][ C0] rest_init+0x1c8/0x1f0 [ 148.202338][ C0] arch_call_rest_init+0x13/0x15 [ 148.207290][ C0] start_kernel+0xa17/0xbd8 [ 148.211787][ C0] x86_64_start_reservations+0x2a/0x2c [ 148.217261][ C0] x86_64_start_kernel+0x86/0x89 [ 148.222189][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 148.228085][ C0] [ 148.230390][ C0] Uninit was created at: [ 148.234603][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.240311][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.244982][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.250896][ C0] __alloc_skb+0x4dd/0xe90 [ 148.256249][ C0] __netdev_alloc_skb+0x45d/0x810 [ 148.261263][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.266455][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.271813][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.277042][ C0] dummy_timer+0xda7/0x74f0 [ 148.281529][ C0] call_timer_fn+0x7d/0x450 [ 148.286017][ C0] expire_timers+0x328/0x6c0 [ 148.290600][ C0] __run_timers+0x624/0x9e0 [ 148.295085][ C0] run_timer_softirq+0x2d/0x50 [ 148.299848][ C0] __do_softirq+0x1b9/0x715 [ 148.304335][ C0] ===================================================== executing program [ 148.320807][ T1984] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 148.328120][ T1984] ath9k_htc: Failed to initialize the device [ 148.335223][ T56] usb 1-1: ath9k_htc: USB layer deinitialized [ 148.732280][ T56] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.272165][ T56] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.281366][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.289690][ T56] usb 1-1: Product: syz [ 149.294119][ T56] usb 1-1: Manufacturer: syz [ 149.298812][ T56] usb 1-1: SerialNumber: syz [ 149.344767][ T56] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.912047][ T50] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.131964][ C1] ===================================================== [ 150.138910][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 150.146290][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.155646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.165681][ C1] Call Trace: [ 150.168969][ C1] [ 150.171828][ C1] dump_stack+0x24c/0x2e0 [ 150.176147][ C1] kmsan_report+0xfb/0x1e0 [ 150.180548][ C1] __msan_warning+0x5c/0xa0 [ 150.185034][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 150.189961][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 150.196147][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 150.201450][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.207587][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 150.213380][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.218560][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.224348][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 150.230224][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 150.235593][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.240799][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 150.245981][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.251770][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.257920][ C1] dummy_timer+0xda7/0x74f0 [ 150.262439][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.267639][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.273708][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.278891][ C1] call_timer_fn+0x7d/0x450 [ 150.283397][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.289202][ C1] expire_timers+0x328/0x6c0 [ 150.293789][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.298980][ C1] __run_timers+0x624/0x9e0 [ 150.303504][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 150.309673][ C1] ? irqtime_account_irq+0xe3/0x380 [ 150.314858][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.320040][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 150.325265][ C1] run_timer_softirq+0x2d/0x50 [ 150.326517][ T1984] usb 1-1: USB disconnect, device number 3 [ 150.330053][ C1] __do_softirq+0x1b9/0x715 [ 150.330093][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.346232][ C1] __irq_exit_rcu+0x22f/0x280 [ 150.351040][ C1] irq_exit_rcu+0xe/0x10 [ 150.355299][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 150.360962][ C1] [ 150.363928][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 150.369975][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 150.375546][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 150.395174][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 150.401268][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 150.409248][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.417231][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 150.425215][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 150.433197][ C1] R13: ffff888104b71c64 R14: 0000000000000000 R15: ffff888101bda9c8 [ 150.441187][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 150.446154][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 150.451456][ C1] cpuidle_enter_state+0x99e/0x1750 [ 150.456645][ C1] cpuidle_enter+0xe3/0x170 [ 150.461144][ C1] do_idle+0x5df/0x790 [ 150.465203][ C1] cpu_startup_entry+0x45/0x50 [ 150.469953][ C1] ? setup_APIC_timer+0x210/0x210 [ 150.474969][ C1] start_secondary+0xe9/0xf0 [ 150.479544][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 150.485427][ C1] [ 150.487731][ C1] Uninit was created at: [ 150.492029][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.497737][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 150.502395][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.508274][ C1] __alloc_skb+0x4dd/0xe90 [ 150.512673][ C1] __netdev_alloc_skb+0x45d/0x810 [ 150.517691][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 150.522873][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 150.528228][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 150.533407][ C1] dummy_timer+0xda7/0x74f0 [ 150.537894][ C1] call_timer_fn+0x7d/0x450 [ 150.542381][ C1] expire_timers+0x328/0x6c0 [ 150.546955][ C1] __run_timers+0x624/0x9e0 [ 150.551444][ C1] run_timer_softirq+0x2d/0x50 [ 150.556191][ C1] __do_softirq+0x1b9/0x715 [ 150.560679][ C1] ===================================================== [ 150.567594][ C1] ===================================================== [ 150.574599][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 150.581874][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.591239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.601272][ C1] Call Trace: [ 150.604532][ C1] [ 150.607357][ C1] dump_stack+0x24c/0x2e0 [ 150.611687][ C1] kmsan_report+0xfb/0x1e0 [ 150.616089][ C1] __msan_warning+0x5c/0xa0 [ 150.620576][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 150.625498][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 150.631573][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 150.636851][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.642989][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 150.648785][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.653990][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.659780][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 150.665660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 150.671019][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.676211][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 150.681403][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.687204][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.693343][ C1] dummy_timer+0xda7/0x74f0 [ 150.697838][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.703023][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.709073][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.714269][ C1] call_timer_fn+0x7d/0x450 [ 150.718772][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.724575][ C1] expire_timers+0x328/0x6c0 [ 150.729152][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.734335][ C1] __run_timers+0x624/0x9e0 [ 150.738842][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 150.744978][ C1] ? irqtime_account_irq+0xe3/0x380 [ 150.750174][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.755366][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 150.760552][ C1] run_timer_softirq+0x2d/0x50 [ 150.765300][ C1] __do_softirq+0x1b9/0x715 [ 150.769799][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.775590][ C1] __irq_exit_rcu+0x22f/0x280 [ 150.780254][ C1] irq_exit_rcu+0xe/0x10 [ 150.784483][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 150.790119][ C1] [ 150.793043][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 150.799012][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 150.804722][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 150.824327][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 150.830380][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 150.838344][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.846297][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 150.854254][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 150.862206][ C1] R13: ffff888104b71c64 R14: 0000000000000000 R15: ffff888101bda9c8 [ 150.870170][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 150.875100][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 150.880370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 150.885557][ C1] cpuidle_enter+0xe3/0x170 [ 150.890056][ C1] do_idle+0x5df/0x790 [ 150.894115][ C1] cpu_startup_entry+0x45/0x50 [ 150.898878][ C1] ? setup_APIC_timer+0x210/0x210 [ 150.903887][ C1] start_secondary+0xe9/0xf0 [ 150.908462][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 150.914345][ C1] [ 150.916648][ C1] Uninit was created at: [ 150.920858][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.926566][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 150.931838][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.937747][ C1] __alloc_skb+0x4dd/0xe90 [ 150.942146][ C1] __netdev_alloc_skb+0x45d/0x810 [ 150.947153][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 150.952337][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 150.957696][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 150.962879][ C1] dummy_timer+0xda7/0x74f0 [ 150.967366][ C1] call_timer_fn+0x7d/0x450 [ 150.971858][ C1] expire_timers+0x328/0x6c0 [ 150.976477][ C1] __run_timers+0x624/0x9e0 [ 150.980984][ C1] run_timer_softirq+0x2d/0x50 [ 150.985733][ C1] __do_softirq+0x1b9/0x715 [ 150.990220][ C1] ===================================================== [ 150.997126][ C1] ===================================================== [ 151.004032][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 151.011312][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.020659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.030697][ C1] Call Trace: [ 151.033978][ C1] [ 151.036814][ C1] dump_stack+0x24c/0x2e0 [ 151.041143][ C1] kmsan_report+0xfb/0x1e0 [ 151.045563][ C1] __msan_warning+0x5c/0xa0 [ 151.050052][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 151.054977][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.061030][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.066326][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.072480][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.078274][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.083456][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.089258][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.095167][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.100524][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.105718][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.110916][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.116723][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.122862][ C1] dummy_timer+0xda7/0x74f0 [ 151.127358][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.132542][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.138594][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.143790][ C1] call_timer_fn+0x7d/0x450 [ 151.148284][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.154082][ C1] expire_timers+0x328/0x6c0 [ 151.158658][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.163841][ C1] __run_timers+0x624/0x9e0 [ 151.168331][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 151.174467][ C1] ? irqtime_account_irq+0xe3/0x380 [ 151.179662][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.184843][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.190040][ C1] run_timer_softirq+0x2d/0x50 [ 151.194800][ C1] __do_softirq+0x1b9/0x715 [ 151.199302][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.205092][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.209768][ C1] irq_exit_rcu+0xe/0x10 [ 151.213996][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.219703][ C1] [ 151.222631][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.228685][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.234219][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 151.253808][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 151.259856][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 151.267819][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.275771][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 151.283759][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 151.291751][ C1] R13: ffff888104b71c64 R14: 0000000000000000 R15: ffff888101bda9c8 [ 151.299714][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.304647][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.309954][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.315143][ C1] cpuidle_enter+0xe3/0x170 [ 151.319637][ C1] do_idle+0x5df/0x790 [ 151.323721][ C1] cpu_startup_entry+0x45/0x50 [ 151.328480][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.333514][ C1] start_secondary+0xe9/0xf0 [ 151.338089][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.344143][ C1] [ 151.346446][ C1] Uninit was created at: [ 151.350658][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.356374][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.361037][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.366923][ C1] __alloc_skb+0x4dd/0xe90 [ 151.371325][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.376341][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.381527][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.386997][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.392180][ C1] dummy_timer+0xda7/0x74f0 [ 151.396681][ C1] call_timer_fn+0x7d/0x450 [ 151.401183][ C1] expire_timers+0x328/0x6c0 [ 151.405758][ C1] __run_timers+0x624/0x9e0 [ 151.410250][ C1] run_timer_softirq+0x2d/0x50 [ 151.414998][ C1] __do_softirq+0x1b9/0x715 [ 151.419494][ C1] ===================================================== [ 151.426407][ C1] ===================================================== [ 151.433313][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 151.440587][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.449935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.459970][ C1] Call Trace: [ 151.463233][ C1] [ 151.466058][ C1] dump_stack+0x24c/0x2e0 [ 151.470374][ C1] kmsan_report+0xfb/0x1e0 [ 151.474776][ C1] __msan_warning+0x5c/0xa0 [ 151.479265][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 151.484190][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.490253][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.495528][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.501666][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.507460][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.512642][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.518431][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.524309][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.529698][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.534882][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.540069][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.545858][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.551997][ C1] dummy_timer+0xda7/0x74f0 [ 151.556493][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.561763][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.567815][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.572999][ C1] call_timer_fn+0x7d/0x450 [ 151.577490][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.583280][ C1] expire_timers+0x328/0x6c0 [ 151.587857][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.593038][ C1] __run_timers+0x624/0x9e0 [ 151.597543][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 151.603681][ C1] ? irqtime_account_irq+0xe3/0x380 [ 151.608866][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.614068][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.619253][ C1] run_timer_softirq+0x2d/0x50 [ 151.624014][ C1] __do_softirq+0x1b9/0x715 [ 151.628518][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.634318][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.639067][ C1] irq_exit_rcu+0xe/0x10 [ 151.643294][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.648923][ C1] [ 151.651856][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.657854][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.663396][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 151.682984][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 151.689032][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 151.696994][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.704948][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 151.712910][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 151.720873][ C1] R13: ffff888104b71c64 R14: 0000000000000000 R15: ffff888101bda9c8 [ 151.728829][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.733758][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.739026][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.744211][ C1] cpuidle_enter+0xe3/0x170 [ 151.748708][ C1] do_idle+0x5df/0x790 [ 151.752764][ C1] cpu_startup_entry+0x45/0x50 [ 151.757515][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.762522][ C1] start_secondary+0xe9/0xf0 [ 151.767098][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.772981][ C1] [ 151.775283][ C1] Uninit was created at: [ 151.779504][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.785211][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.789871][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.795748][ C1] __alloc_skb+0x4dd/0xe90 [ 151.800163][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.805181][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.810379][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.815737][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.820921][ C1] dummy_timer+0xda7/0x74f0 [ 151.825408][ C1] call_timer_fn+0x7d/0x450 [ 151.829898][ C1] expire_timers+0x328/0x6c0 [ 151.834472][ C1] __run_timers+0x624/0x9e0 [ 151.838958][ C1] run_timer_softirq+0x2d/0x50 [ 151.843705][ C1] __do_softirq+0x1b9/0x715 [ 151.848192][ C1] ===================================================== [ 151.855097][ C1] ===================================================== [ 151.862003][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 151.869274][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.878618][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.888653][ C1] Call Trace: [ 151.891915][ C1] [ 151.894740][ C1] dump_stack+0x24c/0x2e0 [ 151.899054][ C1] kmsan_report+0xfb/0x1e0 [ 151.903454][ C1] __msan_warning+0x5c/0xa0 [ 151.907940][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 151.912876][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.918929][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.924201][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.930338][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.936133][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.941314][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.947113][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.952997][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.958355][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.963538][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.968730][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.974523][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.980676][ C1] dummy_timer+0xda7/0x74f0 [ 151.985170][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.990354][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.996402][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 152.001586][ C1] call_timer_fn+0x7d/0x450 [ 152.006075][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.011870][ C1] expire_timers+0x328/0x6c0 [ 152.016477][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 152.021660][ C1] __run_timers+0x624/0x9e0 [ 152.026167][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 152.032306][ C1] ? irqtime_account_irq+0xe3/0x380 [ 152.037492][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.042675][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 152.047886][ C1] run_timer_softirq+0x2d/0x50 [ 152.052636][ C1] __do_softirq+0x1b9/0x715 [ 152.057136][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.062925][ C1] __irq_exit_rcu+0x22f/0x280 [ 152.067590][ C1] irq_exit_rcu+0xe/0x10 [ 152.071821][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 152.077476][ C1] [ 152.080387][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 152.086454][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 152.091999][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 152.111588][ C1] RSP: 0018:ffff888101be3c40 EFLAGS: 00000246 [ 152.117648][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017d9f40 [ 152.125603][ C1] RDX: ffff888101bd9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.133555][ C1] RBP: ffff888101be3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 152.141515][ C1] R10: 0000000000000002 R11: ffff888101bd9f40 R12: 0000000000000000 [ 152.149478][ C1] R13: ffff888104b71c64 R14: 0000000000000000 R15: ffff888101bda9c8 [ 152.157455][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 152.162386][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 152.167666][ C1] cpuidle_enter_state+0x99e/0x1750 [ 152.172853][ C1] cpuidle_enter+0xe3/0x170 [ 152.177339][ C1] do_idle+0x5df/0x790 [ 152.181396][ C1] cpu_startup_entry+0x45/0x50 [ 152.186159][ C1] ? setup_APIC_timer+0x210/0x210 [ 152.191176][ C1] start_secondary+0xe9/0xf0 [ 152.195747][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 152.201628][ C1] [ 152.203941][ C1] Uninit was created at: [ 152.208164][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 152.213873][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 152.218532][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 152.224409][ C1] __alloc_skb+0x4dd/0xe90 [ 152.228812][ C1] __netdev_alloc_skb+0x45d/0x810 [ 152.233834][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 152.239028][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 152.244404][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 152.249584][ C1] dummy_timer+0xda7/0x74f0 [ 152.254071][ C1] call_timer_fn+0x7d/0x450 [ 152.258559][ C1] expire_timers+0x328/0x6c0 [ 152.263133][ C1] __run_timers+0x624/0x9e0 [ 152.267619][ C1] run_timer_softirq+0x2d/0x50 [ 152.272551][ C1] __do_softirq+0x1b9/0x715 [ 152.277037][ C1] ===================================================== executing program [ 152.289229][ T50] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 152.296493][ T50] ath9k_htc: Failed to initialize the device [ 152.306416][ T1984] usb 1-1: ath9k_htc: USB layer deinitialized [ 152.692250][ T1984] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.222212][ T1984] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.231475][ T1984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.239677][ T1984] usb 1-1: Product: syz [ 153.244130][ T1984] usb 1-1: Manufacturer: syz [ 153.248827][ T1984] usb 1-1: SerialNumber: syz [ 153.293598][ T1984] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.882156][ T8236] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.092023][ C0] ===================================================== [ 154.098979][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 154.106292][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.115644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.125682][ C0] Call Trace: [ 154.128950][ C0] [ 154.131831][ C0] dump_stack+0x24c/0x2e0 [ 154.136190][ C0] kmsan_report+0xfb/0x1e0 [ 154.140713][ C0] __msan_warning+0x5c/0xa0 [ 154.145203][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 154.150128][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 154.156183][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 154.161462][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 154.167601][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 154.173433][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.178619][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.184420][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 154.190470][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 154.195852][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.201038][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 154.206272][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.212069][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 154.218214][ C0] dummy_timer+0xda7/0x74f0 [ 154.222712][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.227914][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.233981][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 154.239252][ C0] call_timer_fn+0x7d/0x450 [ 154.243754][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.249576][ C0] expire_timers+0x328/0x6c0 [ 154.254186][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 154.259401][ C0] __run_timers+0x624/0x9e0 [ 154.263913][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 154.270053][ C0] ? irqtime_account_irq+0xe3/0x380 [ 154.275273][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.280458][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 154.285644][ C0] run_timer_softirq+0x2d/0x50 [ 154.290398][ C0] __do_softirq+0x1b9/0x715 [ 154.294891][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.300685][ C0] __irq_exit_rcu+0x22f/0x280 [ 154.305351][ C0] irq_exit_rcu+0xe/0x10 [ 154.309617][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 154.315248][ C0] [ 154.318163][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 154.324138][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 154.329698][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 154.349312][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 154.355364][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 154.363470][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.371427][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 154.379408][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 154.387387][ C0] R13: ffff888104b71864 R14: 0000000000000000 R15: ffffffff91631ac8 [ 154.395433][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 154.400359][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 154.405628][ C0] cpuidle_enter_state+0x99e/0x1750 [ 154.411006][ C0] cpuidle_enter+0xe3/0x170 [ 154.415519][ C0] do_idle+0x5df/0x790 [ 154.419585][ C0] cpu_startup_entry+0x45/0x50 [ 154.424347][ C0] rest_init+0x1c8/0x1f0 [ 154.428575][ C0] arch_call_rest_init+0x13/0x15 [ 154.433530][ C0] start_kernel+0xa17/0xbd8 [ 154.438017][ C0] x86_64_start_reservations+0x2a/0x2c [ 154.443460][ C0] x86_64_start_kernel+0x86/0x89 [ 154.448384][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 154.454267][ C0] [ 154.456569][ C0] Uninit was created at: [ 154.460777][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.466485][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 154.471146][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.477023][ C0] __alloc_skb+0x4dd/0xe90 [ 154.481418][ C0] __netdev_alloc_skb+0x45d/0x810 [ 154.486422][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 154.491605][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 154.496958][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 154.502145][ C0] dummy_timer+0xda7/0x74f0 [ 154.506641][ C0] call_timer_fn+0x7d/0x450 [ 154.511131][ C0] expire_timers+0x328/0x6c0 [ 154.515715][ C0] __run_timers+0x624/0x9e0 [ 154.520199][ C0] run_timer_softirq+0x2d/0x50 [ 154.524948][ C0] __do_softirq+0x1b9/0x715 [ 154.529434][ C0] ===================================================== [ 154.536340][ C0] ===================================================== [ 154.543254][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 154.550525][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.559869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.569917][ C0] Call Trace: [ 154.573186][ C0] [ 154.576033][ C0] dump_stack+0x24c/0x2e0 [ 154.580390][ C0] kmsan_report+0xfb/0x1e0 [ 154.584837][ C0] __msan_warning+0x5c/0xa0 [ 154.589325][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 154.594246][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 154.600293][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 154.605567][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 154.611705][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 154.617504][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.622700][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.628501][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 154.634379][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 154.639736][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.644918][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 154.650103][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.655891][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 154.662042][ C0] dummy_timer+0xda7/0x74f0 [ 154.666550][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.671731][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.677778][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 154.682960][ C0] call_timer_fn+0x7d/0x450 [ 154.687451][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.693276][ C0] expire_timers+0x328/0x6c0 [ 154.697850][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 154.703044][ C0] __run_timers+0x624/0x9e0 [ 154.707538][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 154.713672][ C0] ? irqtime_account_irq+0xe3/0x380 [ 154.718872][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.724068][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 154.729264][ C0] run_timer_softirq+0x2d/0x50 [ 154.734012][ C0] __do_softirq+0x1b9/0x715 [ 154.738513][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.744304][ C0] __irq_exit_rcu+0x22f/0x280 [ 154.748974][ C0] irq_exit_rcu+0xe/0x10 [ 154.753211][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 154.758848][ C0] [ 154.761760][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 154.767738][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 154.773271][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 154.792860][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 154.798920][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 154.806891][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.814842][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 154.822854][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 154.830811][ C0] R13: ffff888104b71864 R14: 0000000000000000 R15: ffffffff91631ac8 [ 154.838774][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 154.843700][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 154.848986][ C0] cpuidle_enter_state+0x99e/0x1750 [ 154.854410][ C0] cpuidle_enter+0xe3/0x170 [ 154.858930][ C0] do_idle+0x5df/0x790 [ 154.863003][ C0] cpu_startup_entry+0x45/0x50 [ 154.867783][ C0] rest_init+0x1c8/0x1f0 [ 154.872017][ C0] arch_call_rest_init+0x13/0x15 [ 154.876946][ C0] start_kernel+0xa17/0xbd8 [ 154.881462][ C0] x86_64_start_reservations+0x2a/0x2c [ 154.886907][ C0] x86_64_start_kernel+0x86/0x89 [ 154.891851][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 154.897793][ C0] [ 154.900104][ C0] Uninit was created at: [ 154.904331][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.910039][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 154.914716][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.920681][ C0] __alloc_skb+0x4dd/0xe90 [ 154.925081][ C0] __netdev_alloc_skb+0x45d/0x810 [ 154.930087][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 154.935270][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 154.940632][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 154.945817][ C0] dummy_timer+0xda7/0x74f0 [ 154.950303][ C0] call_timer_fn+0x7d/0x450 [ 154.954793][ C0] expire_timers+0x328/0x6c0 [ 154.959371][ C0] __run_timers+0x624/0x9e0 [ 154.963858][ C0] run_timer_softirq+0x2d/0x50 [ 154.968608][ C0] __do_softirq+0x1b9/0x715 [ 154.973119][ C0] ===================================================== [ 154.980051][ C0] ===================================================== [ 154.987073][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 154.994347][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.003694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.013729][ C0] Call Trace: [ 155.017001][ C0] [ 155.019827][ C0] dump_stack+0x24c/0x2e0 [ 155.024145][ C0] kmsan_report+0xfb/0x1e0 [ 155.028549][ C0] __msan_warning+0x5c/0xa0 [ 155.033038][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 155.037963][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.044014][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.049304][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.055440][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.061236][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.066506][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.072296][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.078182][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.083541][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.088735][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.093927][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.099717][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.105855][ C0] dummy_timer+0xda7/0x74f0 [ 155.110349][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.115548][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.121600][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.126796][ C0] call_timer_fn+0x7d/0x450 [ 155.131293][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.137084][ C0] expire_timers+0x328/0x6c0 [ 155.141660][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.146842][ C0] __run_timers+0x624/0x9e0 [ 155.151333][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 155.157469][ C0] ? irqtime_account_irq+0xe3/0x380 [ 155.162672][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.167854][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.173041][ C0] run_timer_softirq+0x2d/0x50 [ 155.177792][ C0] __do_softirq+0x1b9/0x715 [ 155.182301][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.188093][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.192762][ C0] irq_exit_rcu+0xe/0x10 [ 155.196998][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.202620][ C0] [ 155.205532][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.211497][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.217037][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 155.236629][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 155.242769][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 155.250728][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.258694][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 155.266648][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 155.274601][ C0] R13: ffff888104b71864 R14: 0000000000000000 R15: ffffffff91631ac8 [ 155.282572][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 155.287526][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 155.292809][ C0] cpuidle_enter_state+0x99e/0x1750 [ 155.297998][ C0] cpuidle_enter+0xe3/0x170 [ 155.302484][ C0] do_idle+0x5df/0x790 [ 155.306548][ C0] cpu_startup_entry+0x45/0x50 [ 155.311343][ C0] rest_init+0x1c8/0x1f0 [ 155.316091][ C0] arch_call_rest_init+0x13/0x15 [ 155.321017][ C0] start_kernel+0xa17/0xbd8 [ 155.325520][ C0] x86_64_start_reservations+0x2a/0x2c [ 155.331001][ C0] x86_64_start_kernel+0x86/0x89 [ 155.335937][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 155.341869][ C0] [ 155.344202][ C0] Uninit was created at: [ 155.348413][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.354232][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.358907][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.364794][ C0] __alloc_skb+0x4dd/0xe90 [ 155.369239][ C0] __netdev_alloc_skb+0x45d/0x810 [ 155.374276][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 155.379472][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.384951][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.390180][ C0] dummy_timer+0xda7/0x74f0 [ 155.394782][ C0] call_timer_fn+0x7d/0x450 [ 155.399275][ C0] expire_timers+0x328/0x6c0 [ 155.403877][ C0] __run_timers+0x624/0x9e0 [ 155.408363][ C0] run_timer_softirq+0x2d/0x50 [ 155.413108][ C0] __do_softirq+0x1b9/0x715 [ 155.417594][ C0] ===================================================== [ 155.424519][ C0] ===================================================== [ 155.431479][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 155.438748][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.448101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.458135][ C0] Call Trace: [ 155.461397][ C0] [ 155.464220][ C0] dump_stack+0x24c/0x2e0 [ 155.468540][ C0] kmsan_report+0xfb/0x1e0 [ 155.472940][ C0] __msan_warning+0x5c/0xa0 [ 155.477425][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 155.482358][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.488411][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.493698][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.499833][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.505641][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.510825][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.516617][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.522509][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.527876][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.533072][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.538361][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.544150][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.550300][ C0] dummy_timer+0xda7/0x74f0 [ 155.554801][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.559986][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.566035][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.571217][ C0] call_timer_fn+0x7d/0x450 [ 155.575709][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.581500][ C0] expire_timers+0x328/0x6c0 [ 155.586074][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.591260][ C0] __run_timers+0x624/0x9e0 [ 155.595756][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 155.601896][ C0] ? irqtime_account_irq+0xe3/0x380 [ 155.607087][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.612267][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.617453][ C0] run_timer_softirq+0x2d/0x50 [ 155.622242][ C0] __do_softirq+0x1b9/0x715 [ 155.626734][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.632557][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.637221][ C0] irq_exit_rcu+0xe/0x10 [ 155.641448][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.647074][ C0] [ 155.649986][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.655951][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.661496][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 155.681103][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 155.687153][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 155.695105][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.703064][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 155.711034][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 155.718984][ C0] R13: ffff888104b71864 R14: 0000000000000000 R15: ffffffff91631ac8 [ 155.726952][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 155.731881][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 155.737148][ C0] cpuidle_enter_state+0x99e/0x1750 [ 155.742341][ C0] cpuidle_enter+0xe3/0x170 [ 155.746829][ C0] do_idle+0x5df/0x790 [ 155.750885][ C0] cpu_startup_entry+0x45/0x50 [ 155.755810][ C0] rest_init+0x1c8/0x1f0 [ 155.760037][ C0] arch_call_rest_init+0x13/0x15 [ 155.765058][ C0] start_kernel+0xa17/0xbd8 [ 155.769550][ C0] x86_64_start_reservations+0x2a/0x2c [ 155.775006][ C0] x86_64_start_kernel+0x86/0x89 [ 155.779930][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 155.785823][ C0] [ 155.788134][ C0] Uninit was created at: [ 155.792345][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.798053][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.802711][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.808589][ C0] __alloc_skb+0x4dd/0xe90 [ 155.812986][ C0] __netdev_alloc_skb+0x45d/0x810 [ 155.818004][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 155.823187][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.828557][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.833748][ C0] dummy_timer+0xda7/0x74f0 [ 155.838263][ C0] call_timer_fn+0x7d/0x450 [ 155.842753][ C0] expire_timers+0x328/0x6c0 [ 155.847331][ C0] __run_timers+0x624/0x9e0 [ 155.851834][ C0] run_timer_softirq+0x2d/0x50 [ 155.856599][ C0] __do_softirq+0x1b9/0x715 [ 155.861098][ C0] ===================================================== [ 155.868005][ C0] ===================================================== [ 155.874912][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 155.882198][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.891555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.901587][ C0] Call Trace: [ 155.904848][ C0] [ 155.907675][ C0] dump_stack+0x24c/0x2e0 [ 155.912004][ C0] kmsan_report+0xfb/0x1e0 [ 155.916416][ C0] __msan_warning+0x5c/0xa0 [ 155.920902][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 155.925825][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.931878][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.937152][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.943297][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.949104][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.954300][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.960088][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.965977][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.971337][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.976519][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.981702][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.987505][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.993656][ C0] dummy_timer+0xda7/0x74f0 [ 155.998149][ C0] ? kmsan_get_metadata+0x116/0x180 [ 156.003333][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.009392][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 156.014577][ C0] call_timer_fn+0x7d/0x450 [ 156.019068][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.024871][ C0] expire_timers+0x328/0x6c0 [ 156.029449][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 156.034648][ C0] __run_timers+0x624/0x9e0 [ 156.039148][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 156.045285][ C0] ? irqtime_account_irq+0xe3/0x380 [ 156.050471][ C0] ? kmsan_get_metadata+0x116/0x180 [ 156.055650][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 156.060843][ C0] run_timer_softirq+0x2d/0x50 [ 156.065603][ C0] __do_softirq+0x1b9/0x715 [ 156.070105][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.075896][ C0] __irq_exit_rcu+0x22f/0x280 [ 156.080559][ C0] irq_exit_rcu+0xe/0x10 [ 156.084785][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 156.090410][ C0] [ 156.093319][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 156.099285][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 156.104817][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 156.124416][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 156.130476][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 156.138433][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000