[ OK ] Reached target Timers. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started System Logging Service. [ *** ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 42s)[ *** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 42s)[*** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 42s)[** ] A start job is running for OpenBSD …Shell server (1min 27s / 2min 56s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 138.642321][ T2954] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.172677][ T2954] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.181844][ T2954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.190168][ T2954] usb 1-1: Product: syz [ 139.194589][ T2954] usb 1-1: Manufacturer: syz [ 139.199274][ T2954] usb 1-1: SerialNumber: syz [ 139.243949][ T2954] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.912396][ T56] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.132266][ C1] ===================================================== [ 140.139485][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 140.147052][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.12.0-rc6-syzkaller #0 [ 140.155624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.165660][ C1] Call Trace: [ 140.168936][ C1] [ 140.171762][ C1] dump_stack+0x24c/0x2e0 [ 140.176194][ C1] kmsan_report+0xfb/0x1e0 [ 140.180714][ C1] __msan_warning+0x5c/0xa0 [ 140.185559][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 140.190551][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.196874][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.202933][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.209188][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.215023][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.220222][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.226127][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.232043][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.237507][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.242707][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.247904][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.253830][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.259998][ C1] dummy_timer+0xda7/0x74f0 [ 140.264504][ C1] ? ttwu_stat+0x1f/0x630 [ 140.268839][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.275077][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.280387][ C1] call_timer_fn+0x7d/0x450 [ 140.285339][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.291827][ C1] expire_timers+0x328/0x6c0 [ 140.296457][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.301876][ C1] __run_timers+0x624/0x9e0 [ 140.306851][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.313431][ C1] ? irqtime_account_irq+0xe3/0x380 [ 140.318646][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.319024][ T4698] usb 1-1: USB disconnect, device number 2 [ 140.323885][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 140.323922][ C1] run_timer_softirq+0x2d/0x50 [ 140.323955][ C1] __do_softirq+0x1b9/0x715 [ 140.323988][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.324021][ C1] __irq_exit_rcu+0x22f/0x280 [ 140.324056][ C1] irq_exit_rcu+0xe/0x10 [ 140.324091][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.365465][ C1] [ 140.368596][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.374619][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.380198][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.400101][ C1] RSP: 0018:ffff888101bffc40 EFLAGS: 00000246 [ 140.406188][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 140.414157][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.422127][ C1] RBP: ffff888101bffcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.430287][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 140.438277][ C1] R13: ffff888102692064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 140.446259][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 140.451238][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.456535][ C1] cpuidle_enter_state+0x99e/0x1750 [ 140.461840][ C1] cpuidle_enter+0xe3/0x170 [ 140.466349][ C1] do_idle+0x5df/0x790 [ 140.470425][ C1] cpu_startup_entry+0x45/0x50 [ 140.475192][ C1] ? setup_APIC_timer+0x210/0x210 [ 140.480216][ C1] start_secondary+0xe9/0xf0 [ 140.484802][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 140.490808][ C1] [ 140.493120][ C1] Uninit was created at: [ 140.497343][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.503086][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 140.507761][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.513656][ C1] __alloc_skb+0x4dd/0xe90 [ 140.518069][ C1] __netdev_alloc_skb+0x45d/0x810 [ 140.523096][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.528297][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.533671][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.538866][ C1] dummy_timer+0xda7/0x74f0 [ 140.543367][ C1] call_timer_fn+0x7d/0x450 [ 140.547872][ C1] expire_timers+0x328/0x6c0 [ 140.552476][ C1] __run_timers+0x624/0x9e0 [ 140.556979][ C1] run_timer_softirq+0x2d/0x50 [ 140.561773][ C1] __do_softirq+0x1b9/0x715 [ 140.566286][ C1] ===================================================== [ 140.573219][ C1] Disabling lock debugging due to kernel taint [ 140.579442][ C1] ===================================================== [ 140.586359][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.593652][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.603106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.613547][ C1] Call Trace: [ 140.616825][ C1] [ 140.619677][ C1] dump_stack+0x24c/0x2e0 [ 140.624118][ C1] kmsan_report+0xfb/0x1e0 [ 140.628658][ C1] __msan_warning+0x5c/0xa0 [ 140.633169][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.638114][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.644197][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.649596][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.657781][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.663650][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.668867][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.674797][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.680716][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.686113][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.691328][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.696529][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.702342][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.708504][ C1] dummy_timer+0xda7/0x74f0 [ 140.713023][ C1] ? ttwu_stat+0x1f/0x630 [ 140.717371][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.723456][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.728676][ C1] call_timer_fn+0x7d/0x450 [ 140.733209][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.739020][ C1] expire_timers+0x328/0x6c0 [ 140.743622][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.748834][ C1] __run_timers+0x624/0x9e0 [ 140.753350][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.759770][ C1] ? irqtime_account_irq+0xe3/0x380 [ 140.764975][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.770174][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 140.775376][ C1] run_timer_softirq+0x2d/0x50 [ 140.780145][ C1] __do_softirq+0x1b9/0x715 [ 140.784665][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.790478][ C1] __irq_exit_rcu+0x22f/0x280 [ 140.795178][ C1] irq_exit_rcu+0xe/0x10 [ 140.799442][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.805095][ C1] [ 140.808022][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.814016][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.819587][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.839372][ C1] RSP: 0018:ffff888101bffc40 EFLAGS: 00000246 [ 140.845437][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 140.853405][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.861373][ C1] RBP: ffff888101bffcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.869342][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 140.877310][ C1] R13: ffff888102692064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 140.885279][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 140.891102][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.896391][ C1] cpuidle_enter_state+0x99e/0x1750 [ 140.901598][ C1] cpuidle_enter+0xe3/0x170 [ 140.906105][ C1] do_idle+0x5df/0x790 [ 140.910179][ C1] cpu_startup_entry+0x45/0x50 [ 140.914948][ C1] ? setup_APIC_timer+0x210/0x210 [ 140.919969][ C1] start_secondary+0xe9/0xf0 [ 140.924819][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 140.930720][ C1] [ 140.933032][ C1] Uninit was created at: [ 140.937948][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.943676][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 140.948350][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.954245][ C1] __alloc_skb+0x4dd/0xe90 [ 140.958834][ C1] __netdev_alloc_skb+0x45d/0x810 [ 140.963874][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.969079][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.974452][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.979650][ C1] dummy_timer+0xda7/0x74f0 [ 140.984168][ C1] call_timer_fn+0x7d/0x450 [ 140.988673][ C1] expire_timers+0x328/0x6c0 [ 140.993278][ C1] __run_timers+0x624/0x9e0 [ 140.997782][ C1] run_timer_softirq+0x2d/0x50 [ 141.002546][ C1] __do_softirq+0x1b9/0x715 [ 141.007061][ C1] ===================================================== [ 141.013984][ C1] ===================================================== [ 141.020904][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.028638][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.038049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.048387][ C1] Call Trace: [ 141.051663][ C1] [ 141.054509][ C1] dump_stack+0x24c/0x2e0 [ 141.058850][ C1] kmsan_report+0xfb/0x1e0 [ 141.063292][ C1] __msan_warning+0x5c/0xa0 [ 141.067795][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 141.072745][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.078827][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.084122][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.090275][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.096089][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.101288][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.107106][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.113007][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.118386][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.123587][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.128786][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.134685][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.140842][ C1] dummy_timer+0xda7/0x74f0 [ 141.145357][ C1] ? ttwu_stat+0x1f/0x630 [ 141.152389][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.158458][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.163658][ C1] call_timer_fn+0x7d/0x450 [ 141.168166][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.173976][ C1] expire_timers+0x328/0x6c0 [ 141.178572][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.183786][ C1] __run_timers+0x624/0x9e0 [ 141.188298][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.194453][ C1] ? irqtime_account_irq+0xe3/0x380 [ 141.199673][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.204877][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 141.210079][ C1] run_timer_softirq+0x2d/0x50 [ 141.214851][ C1] __do_softirq+0x1b9/0x715 [ 141.219361][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.225171][ C1] __irq_exit_rcu+0x22f/0x280 [ 141.229860][ C1] irq_exit_rcu+0xe/0x10 [ 141.234105][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.239747][ C1] [ 141.242684][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.248666][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.254222][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.274182][ C1] RSP: 0018:ffff888101bffc40 EFLAGS: 00000246 [ 141.280348][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 141.288316][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.296285][ C1] RBP: ffff888101bffcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.304253][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 141.312223][ C1] R13: ffff888102692064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 141.320193][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 141.325145][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.330434][ C1] cpuidle_enter_state+0x99e/0x1750 [ 141.335634][ C1] cpuidle_enter+0xe3/0x170 [ 141.340138][ C1] do_idle+0x5df/0x790 [ 141.344218][ C1] cpu_startup_entry+0x45/0x50 [ 141.348985][ C1] ? setup_APIC_timer+0x210/0x210 [ 141.354009][ C1] start_secondary+0xe9/0xf0 [ 141.358596][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 141.364496][ C1] [ 141.366806][ C1] Uninit was created at: [ 141.371027][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.376756][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 141.381436][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.387348][ C1] __alloc_skb+0x4dd/0xe90 [ 141.391773][ C1] __netdev_alloc_skb+0x45d/0x810 [ 141.396806][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.402018][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.407414][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.412617][ C1] dummy_timer+0xda7/0x74f0 [ 141.417120][ C1] call_timer_fn+0x7d/0x450 [ 141.421627][ C1] expire_timers+0x328/0x6c0 [ 141.426217][ C1] __run_timers+0x624/0x9e0 [ 141.430722][ C1] run_timer_softirq+0x2d/0x50 [ 141.435486][ C1] __do_softirq+0x1b9/0x715 [ 141.439988][ C1] ===================================================== [ 141.446925][ C1] ===================================================== [ 141.453853][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.461236][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.470599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.480654][ C1] Call Trace: [ 141.483927][ C1] [ 141.486763][ C1] dump_stack+0x24c/0x2e0 [ 141.491099][ C1] kmsan_report+0xfb/0x1e0 [ 141.495516][ C1] __msan_warning+0x5c/0xa0 [ 141.500040][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.505507][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.511577][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.516878][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.523031][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.528850][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.534045][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.539857][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.545755][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.551132][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.556328][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.561529][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.567355][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.574292][ C1] dummy_timer+0xda7/0x74f0 [ 141.578806][ C1] ? ttwu_stat+0x1f/0x630 [ 141.583143][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.589209][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.594407][ C1] call_timer_fn+0x7d/0x450 [ 141.598915][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.604721][ C1] expire_timers+0x328/0x6c0 [ 141.609316][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.614756][ C1] __run_timers+0x624/0x9e0 [ 141.619294][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.625459][ C1] ? irqtime_account_irq+0xe3/0x380 [ 141.630681][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.635918][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 141.641134][ C1] run_timer_softirq+0x2d/0x50 [ 141.645907][ C1] __do_softirq+0x1b9/0x715 [ 141.650426][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.656234][ C1] __irq_exit_rcu+0x22f/0x280 [ 141.661374][ C1] irq_exit_rcu+0xe/0x10 [ 141.665620][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.671262][ C1] [ 141.674203][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.680184][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.685738][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.705346][ C1] RSP: 0018:ffff888101bffc40 EFLAGS: 00000246 [ 141.711410][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 141.719375][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.727341][ C1] RBP: ffff888101bffcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.735309][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 141.743449][ C1] R13: ffff888102692064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 141.751418][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 141.756369][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.761655][ C1] cpuidle_enter_state+0x99e/0x1750 [ 141.766858][ C1] cpuidle_enter+0xe3/0x170 [ 141.771360][ C1] do_idle+0x5df/0x790 [ 141.775437][ C1] cpu_startup_entry+0x45/0x50 [ 141.780248][ C1] ? setup_APIC_timer+0x210/0x210 [ 141.785281][ C1] start_secondary+0xe9/0xf0 [ 141.790062][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 141.795980][ C1] [ 141.798300][ C1] Uninit was created at: [ 141.802525][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.808261][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 141.812936][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.818832][ C1] __alloc_skb+0x4dd/0xe90 [ 141.823242][ C1] __netdev_alloc_skb+0x45d/0x810 [ 141.828264][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.833464][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.838836][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.844033][ C1] dummy_timer+0xda7/0x74f0 [ 141.848558][ C1] call_timer_fn+0x7d/0x450 [ 141.853070][ C1] expire_timers+0x328/0x6c0 [ 141.857748][ C1] __run_timers+0x624/0x9e0 [ 141.862258][ C1] run_timer_softirq+0x2d/0x50 [ 141.867021][ C1] __do_softirq+0x1b9/0x715 [ 141.871524][ C1] ===================================================== [ 141.878441][ C1] ===================================================== [ 141.885357][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.892647][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.902015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.912065][ C1] Call Trace: [ 141.915342][ C1] [ 141.918176][ C1] dump_stack+0x24c/0x2e0 [ 141.922511][ C1] kmsan_report+0xfb/0x1e0 [ 141.926928][ C1] __msan_warning+0x5c/0xa0 [ 141.931427][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.936367][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.942436][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.947732][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.953910][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.959723][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.964921][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.970728][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.976624][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.982000][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.987196][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.992403][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.998216][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.004370][ C1] dummy_timer+0xda7/0x74f0 [ 142.008883][ C1] ? ttwu_stat+0x1f/0x630 [ 142.013220][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.019290][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 142.024490][ C1] call_timer_fn+0x7d/0x450 [ 142.028997][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.034805][ C1] expire_timers+0x328/0x6c0 [ 142.039402][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 142.044601][ C1] __run_timers+0x624/0x9e0 [ 142.049112][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.055267][ C1] ? irqtime_account_irq+0xe3/0x380 [ 142.060563][ C1] ? kmsan_get_metadata+0x116/0x180 [ 142.065762][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 142.070962][ C1] run_timer_softirq+0x2d/0x50 [ 142.075742][ C1] __do_softirq+0x1b9/0x715 [ 142.080248][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.086055][ C1] __irq_exit_rcu+0x22f/0x280 [ 142.090825][ C1] irq_exit_rcu+0xe/0x10 [ 142.095068][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 142.100710][ C1] [ 142.103633][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.109618][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 142.115166][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.134782][ C1] RSP: 0018:ffff888101bffc40 EFLAGS: 00000246 [ 142.140849][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 142.148824][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.156793][ C1] RBP: ffff888101bffcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.164849][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 142.172816][ C1] R13: ffff888102692064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 142.180790][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 142.185749][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.191035][ C1] cpuidle_enter_state+0x99e/0x1750 [ 142.196240][ C1] cpuidle_enter+0xe3/0x170 [ 142.200742][ C1] do_idle+0x5df/0x790 [ 142.204818][ C1] cpu_startup_entry+0x45/0x50 [ 142.209587][ C1] ? setup_APIC_timer+0x210/0x210 [ 142.214620][ C1] start_secondary+0xe9/0xf0 [ 142.219207][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 142.225205][ C1] [ 142.227514][ C1] Uninit was created at: [ 142.231737][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.237464][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 142.242140][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.248036][ C1] __alloc_skb+0x4dd/0xe90 [ 142.252449][ C1] __netdev_alloc_skb+0x45d/0x810 [ 142.257471][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 142.262673][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.268135][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.273333][ C1] dummy_timer+0xda7/0x74f0 [ 142.277837][ C1] call_timer_fn+0x7d/0x450 [ 142.282343][ C1] expire_timers+0x328/0x6c0 [ 142.286936][ C1] __run_timers+0x624/0x9e0 [ 142.291451][ C1] run_timer_softirq+0x2d/0x50 [ 142.296216][ C1] __do_softirq+0x1b9/0x715 [ 142.300720][ C1] ===================================================== [ 142.326357][ T56] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 142.334773][ T56] ath9k_htc: Failed to initialize the device executing program [ 142.343292][ T4698] usb 1-1: ath9k_htc: USB layer deinitialized [ 142.792392][ T4698] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.322444][ T4698] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.331645][ T4698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.339830][ T4698] usb 1-1: Product: syz [ 143.344275][ T4698] usb 1-1: Manufacturer: syz [ 143.348907][ T4698] usb 1-1: SerialNumber: syz [ 143.393954][ T4698] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.002571][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.222281][ C0] ===================================================== [ 144.229397][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 144.236732][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.246098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.256275][ C0] Call Trace: [ 144.259547][ C0] [ 144.262376][ C0] dump_stack+0x24c/0x2e0 [ 144.267341][ C0] kmsan_report+0xfb/0x1e0 [ 144.272000][ C0] __msan_warning+0x5c/0xa0 [ 144.276510][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 144.281530][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.287673][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.293777][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.300600][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.308480][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.314422][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.321410][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.327963][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.333347][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.338536][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.343720][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.349526][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.355667][ C0] dummy_timer+0xda7/0x74f0 [ 144.360175][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.365372][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.370559][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.376178][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.381382][ C0] call_timer_fn+0x7d/0x450 [ 144.385901][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.391728][ C0] expire_timers+0x328/0x6c0 [ 144.397103][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.402303][ C0] __run_timers+0x624/0x9e0 [ 144.406834][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.413082][ C0] ? irqtime_account_irq+0xe3/0x380 [ 144.418267][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.423454][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.429250][ C0] run_timer_softirq+0x2d/0x50 [ 144.436622][ C0] __do_softirq+0x1b9/0x715 [ 144.445015][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.452052][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.459629][ C0] irq_exit_rcu+0xe/0x10 [ 144.464060][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.469786][ C0] [ 144.473399][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.479670][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.486177][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.507662][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.514828][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.523499][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.533499][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.542140][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.550214][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.558175][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.563107][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.568390][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.573652][ C0] cpuidle_enter+0xe3/0x170 [ 144.578204][ C0] do_idle+0x5df/0x790 [ 144.582272][ C0] cpu_startup_entry+0x45/0x50 [ 144.587030][ C0] rest_init+0x1c8/0x1f0 [ 144.591361][ C0] arch_call_rest_init+0x13/0x15 [ 144.596293][ C0] start_kernel+0xa17/0xbd8 [ 144.600791][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.606301][ C0] x86_64_start_kernel+0x86/0x89 [ 144.611348][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.617337][ C0] [ 144.619644][ C0] Uninit was created at: [ 144.623861][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.629577][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.634248][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.640127][ C0] __alloc_skb+0x4dd/0xe90 [ 144.644525][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.649622][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.654807][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.660164][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.665366][ C0] dummy_timer+0xda7/0x74f0 [ 144.669954][ C0] call_timer_fn+0x7d/0x450 [ 144.674466][ C0] expire_timers+0x328/0x6c0 [ 144.679045][ C0] __run_timers+0x624/0x9e0 [ 144.683553][ C0] run_timer_softirq+0x2d/0x50 [ 144.688302][ C0] __do_softirq+0x1b9/0x715 [ 144.692813][ C0] ===================================================== [ 144.699735][ C0] ===================================================== [ 144.706642][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 144.713917][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.723289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.734280][ C0] Call Trace: [ 144.737541][ C0] [ 144.740384][ C0] dump_stack+0x24c/0x2e0 [ 144.744701][ C0] kmsan_report+0xfb/0x1e0 [ 144.749101][ C0] __msan_warning+0x5c/0xa0 [ 144.754544][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 144.759477][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.765537][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.770877][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.777034][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.782868][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.788053][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.794888][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.800780][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.806159][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.811384][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.816589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.822383][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.828523][ C0] dummy_timer+0xda7/0x74f0 [ 144.833014][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.838200][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.843385][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.848999][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.854179][ C0] call_timer_fn+0x7d/0x450 [ 144.858667][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.864460][ C0] expire_timers+0x328/0x6c0 [ 144.869036][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.874241][ C0] __run_timers+0x624/0x9e0 [ 144.878735][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.885017][ C0] ? irqtime_account_irq+0xe3/0x380 [ 144.890234][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.895428][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.900624][ C0] run_timer_softirq+0x2d/0x50 [ 144.905378][ C0] __do_softirq+0x1b9/0x715 [ 144.909888][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.915696][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.920362][ C0] irq_exit_rcu+0xe/0x10 [ 144.924587][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.930211][ C0] [ 144.933122][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.939089][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.944623][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.964220][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.970272][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.978227][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.986183][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.994242][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 145.002197][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 145.010163][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 145.015105][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.020383][ C0] cpuidle_enter_state+0x99e/0x1750 [ 145.025599][ C0] cpuidle_enter+0xe3/0x170 [ 145.030119][ C0] do_idle+0x5df/0x790 [ 145.034178][ C0] cpu_startup_entry+0x45/0x50 [ 145.038931][ C0] rest_init+0x1c8/0x1f0 [ 145.043168][ C0] arch_call_rest_init+0x13/0x15 [ 145.048094][ C0] start_kernel+0xa17/0xbd8 [ 145.052610][ C0] x86_64_start_reservations+0x2a/0x2c [ 145.058075][ C0] x86_64_start_kernel+0x86/0x89 [ 145.062998][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 145.069054][ C0] [ 145.071370][ C0] Uninit was created at: [ 145.075585][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.081406][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.086067][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.091946][ C0] __alloc_skb+0x4dd/0xe90 [ 145.096366][ C0] __netdev_alloc_skb+0x45d/0x810 [ 145.101397][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.106583][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.112900][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.118107][ C0] dummy_timer+0xda7/0x74f0 [ 145.122616][ C0] call_timer_fn+0x7d/0x450 [ 145.127216][ C0] expire_timers+0x328/0x6c0 [ 145.132851][ C0] __run_timers+0x624/0x9e0 [ 145.137365][ C0] run_timer_softirq+0x2d/0x50 [ 145.142113][ C0] __do_softirq+0x1b9/0x715 [ 145.146620][ C0] ===================================================== [ 145.153620][ C0] ===================================================== [ 145.160538][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 145.167828][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.178098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.189704][ C0] Call Trace: [ 145.193327][ C0] [ 145.196266][ C0] dump_stack+0x24c/0x2e0 [ 145.201463][ C0] kmsan_report+0xfb/0x1e0 [ 145.206900][ C0] __msan_warning+0x5c/0xa0 [ 145.211624][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 145.217672][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.224307][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.229708][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.236312][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.242492][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.248358][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.255471][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.261513][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.267358][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.273057][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.279922][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.287262][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.294345][ C0] dummy_timer+0xda7/0x74f0 [ 145.298855][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.304048][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.309255][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.315663][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.321980][ C0] call_timer_fn+0x7d/0x450 [ 145.327216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.333594][ C0] expire_timers+0x328/0x6c0 [ 145.339421][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.345597][ C0] __run_timers+0x624/0x9e0 [ 145.351748][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 145.358350][ C0] ? irqtime_account_irq+0xe3/0x380 [ 145.363964][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.370306][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 145.376394][ C0] run_timer_softirq+0x2d/0x50 [ 145.381326][ C0] __do_softirq+0x1b9/0x715 [ 145.386179][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.396139][ C0] __irq_exit_rcu+0x22f/0x280 [ 145.403649][ C0] irq_exit_rcu+0xe/0x10 [ 145.408782][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 145.415880][ C0] [ 145.419032][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.426680][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 145.433759][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 145.455956][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 145.462024][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 145.470791][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.478758][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 145.486726][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 145.495634][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 145.503665][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 145.508876][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.514168][ C0] cpuidle_enter_state+0x99e/0x1750 [ 145.519414][ C0] cpuidle_enter+0xe3/0x170 [ 145.523921][ C0] do_idle+0x5df/0x790 [ 145.527994][ C0] cpu_startup_entry+0x45/0x50 [ 145.532754][ C0] rest_init+0x1c8/0x1f0 [ 145.536989][ C0] arch_call_rest_init+0x13/0x15 [ 145.541937][ C0] start_kernel+0xa17/0xbd8 [ 145.546432][ C0] x86_64_start_reservations+0x2a/0x2c [ 145.551884][ C0] x86_64_start_kernel+0x86/0x89 [ 145.556814][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 145.562705][ C0] [ 145.565035][ C0] Uninit was created at: [ 145.569245][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.574963][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.579808][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.585698][ C0] __alloc_skb+0x4dd/0xe90 [ 145.590118][ C0] __netdev_alloc_skb+0x45d/0x810 [ 145.595139][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.602864][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.608337][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.613591][ C0] dummy_timer+0xda7/0x74f0 [ 145.618185][ C0] call_timer_fn+0x7d/0x450 [ 145.622977][ C0] expire_timers+0x328/0x6c0 [ 145.627613][ C0] __run_timers+0x624/0x9e0 [ 145.632119][ C0] run_timer_softirq+0x2d/0x50 [ 145.636942][ C0] __do_softirq+0x1b9/0x715 [ 145.641542][ C0] ===================================================== [ 145.648669][ C0] ===================================================== [ 145.656075][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 145.663666][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.673349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.683504][ C0] Call Trace: [ 145.686782][ C0] [ 145.689696][ C0] dump_stack+0x24c/0x2e0 [ 145.694169][ C0] kmsan_report+0xfb/0x1e0 [ 145.698590][ C0] __msan_warning+0x5c/0xa0 [ 145.703091][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 145.708020][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.714898][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.720197][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.726349][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.732151][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.737350][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.743139][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.749021][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.754384][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.759569][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.764835][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.770744][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.776904][ C0] dummy_timer+0xda7/0x74f0 [ 145.781410][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.786663][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.791950][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.797641][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.802839][ C0] call_timer_fn+0x7d/0x450 [ 145.807341][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.813132][ C0] expire_timers+0x328/0x6c0 [ 145.817799][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.822985][ C0] __run_timers+0x624/0x9e0 [ 145.827477][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 145.833615][ C0] ? irqtime_account_irq+0xe3/0x380 [ 145.838805][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.843988][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 145.849173][ C0] run_timer_softirq+0x2d/0x50 [ 145.853923][ C0] __do_softirq+0x1b9/0x715 [ 145.858429][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.864220][ C0] __irq_exit_rcu+0x22f/0x280 [ 145.868899][ C0] irq_exit_rcu+0xe/0x10 [ 145.873145][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 145.878768][ C0] [ 145.881769][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.887737][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 145.893292][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 145.912887][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 145.918938][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 145.926891][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.934848][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 145.942805][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 145.950775][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 145.958732][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 145.963661][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.968931][ C0] cpuidle_enter_state+0x99e/0x1750 [ 145.974119][ C0] cpuidle_enter+0xe3/0x170 [ 145.978611][ C0] do_idle+0x5df/0x790 [ 145.982668][ C0] cpu_startup_entry+0x45/0x50 [ 145.987420][ C0] rest_init+0x1c8/0x1f0 [ 145.991673][ C0] arch_call_rest_init+0x13/0x15 [ 145.996597][ C0] start_kernel+0xa17/0xbd8 [ 146.001113][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.006556][ C0] x86_64_start_kernel+0x86/0x89 [ 146.011540][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.018140][ C0] [ 146.020639][ C0] Uninit was created at: [ 146.025615][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.031775][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.036922][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.043095][ C0] __alloc_skb+0x4dd/0xe90 [ 146.049951][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.055488][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.060974][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.067071][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.072536][ C0] dummy_timer+0xda7/0x74f0 [ 146.077430][ C0] call_timer_fn+0x7d/0x450 [ 146.082829][ C0] expire_timers+0x328/0x6c0 [ 146.087850][ C0] __run_timers+0x624/0x9e0 [ 146.093034][ C0] run_timer_softirq+0x2d/0x50 [ 146.098868][ C0] __do_softirq+0x1b9/0x715 [ 146.103575][ C0] ===================================================== [ 146.110902][ C0] ===================================================== [ 146.118648][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.126339][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.137776][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.148644][ C0] Call Trace: [ 146.152412][ C0] [ 146.155270][ C0] dump_stack+0x24c/0x2e0 [ 146.159859][ C0] kmsan_report+0xfb/0x1e0 [ 146.164475][ C0] __msan_warning+0x5c/0xa0 [ 146.169075][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.174430][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.181568][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.187857][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.194416][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.200438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.206620][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.213058][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.220626][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.226633][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.232169][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.238249][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.245845][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.253672][ C0] dummy_timer+0xda7/0x74f0 [ 146.258381][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.264034][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.269412][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.275373][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.280758][ C0] call_timer_fn+0x7d/0x450 [ 146.286310][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.293079][ C0] expire_timers+0x328/0x6c0 [ 146.297947][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.303147][ C0] __run_timers+0x624/0x9e0 [ 146.307646][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.313787][ C0] ? irqtime_account_irq+0xe3/0x380 [ 146.319092][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.324277][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 146.329462][ C0] run_timer_softirq+0x2d/0x50 [ 146.334213][ C0] __do_softirq+0x1b9/0x715 [ 146.338704][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.344501][ C0] __irq_exit_rcu+0x22f/0x280 [ 146.349184][ C0] irq_exit_rcu+0xe/0x10 [ 146.353501][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.359137][ C0] [ 146.362055][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.368036][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.373589][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.394364][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 146.400423][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 146.408383][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.416340][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.424307][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 146.432263][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 146.440222][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 146.445154][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.450444][ C0] cpuidle_enter_state+0x99e/0x1750 [ 146.455636][ C0] cpuidle_enter+0xe3/0x170 [ 146.460122][ C0] do_idle+0x5df/0x790 [ 146.464191][ C0] cpu_startup_entry+0x45/0x50 [ 146.468942][ C0] rest_init+0x1c8/0x1f0 [ 146.473249][ C0] arch_call_rest_init+0x13/0x15 [ 146.478349][ C0] start_kernel+0xa17/0xbd8 [ 146.482963][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.488432][ C0] x86_64_start_kernel+0x86/0x89 [ 146.493377][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.499538][ C0] [ 146.502396][ C0] Uninit was created at: [ 146.507032][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.513006][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.517984][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.524609][ C0] __alloc_skb+0x4dd/0xe90 [ 146.529631][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.535436][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.540885][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.546349][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.551772][ C0] dummy_timer+0xda7/0x74f0 [ 146.556510][ C0] call_timer_fn+0x7d/0x450 [ 146.561531][ C0] expire_timers+0x328/0x6c0 [ 146.566565][ C0] __run_timers+0x624/0x9e0 [ 146.571754][ C0] run_timer_softirq+0x2d/0x50 [ 146.577379][ C0] __do_softirq+0x1b9/0x715 [ 146.582201][ C0] ===================================================== [ 146.591117][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 146.604922][ C0] clocksource: 'acpi_pm' wd_now: 624735 wd_last: d4df9f mask: ffffff [ 146.616217][ C0] clocksource: 'tsc' cs_now: 5206acb29a cs_last: 50a3c9a58e mask: ffffffffffffffff [ 146.627832][ C0] tsc: Marking TSC unstable due to clocksource watchdog executing program [ 146.635930][ T4698] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 146.645598][ T4698] sched_clock: Marking unstable (146703832475, -67910391)<-(146638564493, -2640705) [ 146.645922][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 146.666469][ T7] ath9k_htc: Failed to initialize the device [ 146.674399][ T5] usb 1-1: USB disconnect, device number 3 [ 146.695813][ T8255] clocksource: Switched to clocksource acpi_pm [ 146.733248][ T5] usb 1-1: ath9k_htc: USB layer deinitialized [ 147.122272][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.642453][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.651611][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.660015][ T5] usb 1-1: Product: syz [ 147.664440][ T5] usb 1-1: Manufacturer: syz [ 147.669236][ T5] usb 1-1: SerialNumber: syz [ 147.713658][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.282659][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.512371][ C0] ===================================================== [ 148.519460][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 148.522207][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.522207][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.522207][ C0] Call Trace: [ 148.522207][ C0] [ 148.522207][ C0] dump_stack+0x24c/0x2e0 [ 148.552770][ C0] kmsan_report+0xfb/0x1e0 [ 148.552770][ C0] __msan_warning+0x5c/0xa0 [ 148.552770][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 148.552770][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.552770][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.552770][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.552770][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.592413][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.592413][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.592413][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.592413][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.592413][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.592413][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.592413][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.592413][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.633360][ C0] dummy_timer+0xda7/0x74f0 [ 148.633360][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.633360][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.633360][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.633360][ C0] call_timer_fn+0x7d/0x450 [ 148.633360][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.633360][ C0] expire_timers+0x328/0x6c0 [ 148.633360][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.633360][ C0] __run_timers+0x624/0x9e0 [ 148.633360][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.633360][ C0] ? irqtime_account_irq+0x5e/0x380 [ 148.633360][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.633360][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 148.705386][ C0] run_timer_softirq+0x2d/0x50 [ 148.707051][ T56] usb 1-1: USB disconnect, device number 4 [ 148.705386][ C0] __do_softirq+0x1b9/0x715 [ 148.705386][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.722245][ C0] __irq_exit_rcu+0x22f/0x280 [ 148.722245][ C0] irq_exit_rcu+0xe/0x10 [ 148.735460][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.741318][ C0] [ 148.741318][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.747193][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 executing program [ 148.747193][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.747193][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 148.747193][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 148.747193][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.747193][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.807589][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 148.807589][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 148.807589][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 148.807589][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.807589][ C0] cpuidle_enter_state+0x99e/0x1750 [ 148.807589][ C0] cpuidle_enter+0xe3/0x170 [ 148.807589][ C0] do_idle+0x5df/0x790 [ 148.807589][ C0] cpu_startup_entry+0x45/0x50 [ 148.807589][ C0] rest_init+0x1c8/0x1f0 [ 148.807589][ C0] arch_call_rest_init+0x13/0x15 [ 148.807589][ C0] start_kernel+0xa17/0xbd8 [ 148.807589][ C0] x86_64_start_reservations+0x2a/0x2c [ 148.807589][ C0] x86_64_start_kernel+0x86/0x89 [ 148.807589][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 148.807589][ C0] [ 148.807589][ C0] Uninit was created at: [ 148.807589][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.807589][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.807589][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.807589][ C0] __alloc_skb+0x4dd/0xe90 [ 148.807589][ C0] __netdev_alloc_skb+0x45d/0x810 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 148.807589][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.807589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.807589][ C0] Call Trace: [ 148.807589][ C0] [ 148.807589][ C0] dump_stack+0x24c/0x2e0 [ 148.807589][ C0] kmsan_report+0xfb/0x1e0 [ 148.807589][ C0] __msan_warning+0x5c/0xa0 [ 148.807589][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.807589][ C0] ? irqtime_account_irq+0x5e/0x380 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] __irq_exit_rcu+0x22f/0x280 [ 148.807589][ C0] irq_exit_rcu+0xe/0x10 [ 148.807589][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.807589][ C0] [ 148.807589][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.807589][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.807589][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.807589][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 148.807589][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 148.807589][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.807589][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.807589][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 148.807589][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 148.807589][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 148.807589][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.807589][ C0] cpuidle_enter_state+0x99e/0x1750 [ 148.807589][ C0] cpuidle_enter+0xe3/0x170 [ 148.807589][ C0] do_idle+0x5df/0x790 [ 148.807589][ C0] cpu_startup_entry+0x45/0x50 [ 148.807589][ C0] rest_init+0x1c8/0x1f0 [ 148.807589][ C0] arch_call_rest_init+0x13/0x15 [ 148.807589][ C0] start_kernel+0xa17/0xbd8 [ 148.807589][ C0] x86_64_start_reservations+0x2a/0x2c [ 148.807589][ C0] x86_64_start_kernel+0x86/0x89 [ 148.807589][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 148.807589][ C0] [ 148.807589][ C0] Uninit was created at: [ 148.807589][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.807589][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.807589][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.807589][ C0] __alloc_skb+0x4dd/0xe90 [ 148.807589][ C0] __netdev_alloc_skb+0x45d/0x810 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 148.807589][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.807589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.807589][ C0] Call Trace: [ 148.807589][ C0] [ 148.807589][ C0] dump_stack+0x24c/0x2e0 [ 148.807589][ C0] kmsan_report+0xfb/0x1e0 [ 148.807589][ C0] __msan_warning+0x5c/0xa0 [ 148.807589][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.807589][ C0] ? irqtime_account_irq+0x5e/0x380 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] __irq_exit_rcu+0x22f/0x280 [ 148.807589][ C0] irq_exit_rcu+0xe/0x10 [ 148.807589][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.807589][ C0] [ 148.807589][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.807589][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.807589][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.807589][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 148.807589][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 148.807589][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.807589][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.807589][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 148.807589][ C0] R13: ffff888102691c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 148.807589][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 148.807589][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.807589][ C0] cpuidle_enter_state+0x99e/0x1750 [ 148.807589][ C0] cpuidle_enter+0xe3/0x170 [ 148.807589][ C0] do_idle+0x5df/0x790 [ 148.807589][ C0] cpu_startup_entry+0x45/0x50 [ 148.807589][ C0] rest_init+0x1c8/0x1f0 [ 148.807589][ C0] arch_call_rest_init+0x13/0x15 [ 148.807589][ C0] start_kernel+0xa17/0xbd8 [ 148.807589][ C0] x86_64_start_reservations+0x2a/0x2c [ 148.807589][ C0] x86_64_start_kernel+0x86/0x89 [ 148.807589][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 148.807589][ C0] [ 148.807589][ C0] Uninit was created at: [ 148.807589][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.807589][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.807589][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.807589][ C0] __alloc_skb+0x4dd/0xe90 [ 148.807589][ C0] __netdev_alloc_skb+0x45d/0x810 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] ===================================================== [ 148.807589][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.807589][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.807589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.807589][ C0] Call Trace: [ 148.807589][ C0] [ 148.807589][ C0] dump_stack+0x24c/0x2e0 [ 148.807589][ C0] kmsan_report+0xfb/0x1e0 [ 148.807589][ C0] __msan_warning+0x5c/0xa0 [ 148.807589][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.807589][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.807589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.807589][ C0] dummy_timer+0xda7/0x74f0 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] call_timer_fn+0x7d/0x450 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] expire_timers+0x328/0x6c0 [ 148.807589][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 148.807589][ C0] __run_timers+0x624/0x9e0 [ 148.807589][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.807589][ C0] ? irqtime_account_irq+0x5e/0x380 [ 148.807589][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.807589][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 148.807589][ C0] run_timer_softirq+0x2d/0x50 [ 148.807589][ C0] __do_softirq+0x1b9/0x715 [ 148.807589][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.807589][ C0] __irq_exit_rcu+0x22f/0x280 [ 148.807589][ C0] irq_exit_rcu+0xe/0x10 [ 148.807589][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.807589][ C0] [ 148.807589][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.807589][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760