[ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [* ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 43s)[** ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 43s)[*** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 43s)[ *** ] A start job is running for OpenBSD …Shell server (1min 26s / 2min 43s)[ *** ] A start job is running for OpenBSD …Shell server (1min 26s / 2min 43s)[ ***] A start job is running for OpenBSD …Shell server (1min 27s / 2min 43s)[ **] A start job is running for OpenBSD …Shell server (1min 28s / 2min 57s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 137.932056][ T1982] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.302267][ T1982] usb 1-1: config index 0 descriptor too short (expected 65222, got 72) [ 138.472399][ T1982] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.481546][ T1982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.489764][ T1982] usb 1-1: Product: syz [ 138.494163][ T1982] usb 1-1: Manufacturer: syz [ 138.498803][ T1982] usb 1-1: SerialNumber: syz [ 138.563538][ T1982] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.302145][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.521996][ C0] ===================================================== [ 139.529005][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.536299][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0 [ 139.544267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.554307][ C0] Call Trace: [ 139.557571][ C0] [ 139.560396][ C0] dump_stack+0x24c/0x2e0 [ 139.564734][ C0] kmsan_report+0xfb/0x1e0 [ 139.569144][ C0] __msan_warning+0x5c/0xa0 [ 139.573643][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.578575][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 139.584630][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 139.589905][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.596043][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 139.601846][ C0] ? kmsan_get_metadata+0x116/0x180 [ 139.607028][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.612815][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 139.618698][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 139.624056][ C0] ? kmsan_get_metadata+0x116/0x180 [ 139.629257][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 139.634479][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.640273][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.646411][ C0] dummy_timer+0xda7/0x74f0 [ 139.650909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 139.656092][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 139.662144][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 139.667326][ C0] call_timer_fn+0x7d/0x450 [ 139.671833][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.677659][ C0] expire_timers+0x328/0x6c0 [ 139.682238][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 139.687421][ C0] __run_timers+0x624/0x9e0 [ 139.691915][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 139.698076][ C0] ? irqtime_account_irq+0xe3/0x380 [ 139.703271][ C0] ? kmsan_get_metadata+0x116/0x180 [ 139.707902][ T3454] usb 1-1: USB disconnect, device number 2 [ 139.708482][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 139.708522][ C0] run_timer_softirq+0x2d/0x50 [ 139.724255][ C0] __do_softirq+0x1b9/0x715 [ 139.728796][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.734630][ C0] __irq_exit_rcu+0x22f/0x280 [ 139.739340][ C0] irq_exit_rcu+0xe/0x10 [ 139.743607][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 139.749284][ C0] [ 139.752227][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 139.758238][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 139.763810][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 139.783436][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 139.789527][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 139.797518][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.805509][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 139.813503][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 139.821483][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 139.829445][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 139.834382][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 139.839651][ C0] cpuidle_enter_state+0x99e/0x1750 [ 139.844889][ C0] cpuidle_enter+0xe3/0x170 [ 139.849431][ C0] do_idle+0x5df/0x790 [ 139.853497][ C0] cpu_startup_entry+0x45/0x50 [ 139.858255][ C0] rest_init+0x1c8/0x1f0 [ 139.862484][ C0] arch_call_rest_init+0x13/0x15 [ 139.867417][ C0] start_kernel+0xa17/0xbd8 [ 139.871908][ C0] x86_64_start_reservations+0x2a/0x2c [ 139.877404][ C0] x86_64_start_kernel+0x86/0x89 [ 139.882381][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 139.888291][ C0] [ 139.890595][ C0] Uninit was created at: [ 139.894809][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 139.900562][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 139.905228][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 139.911109][ C0] __alloc_skb+0x4dd/0xe90 [ 139.915508][ C0] __netdev_alloc_skb+0x45d/0x810 [ 139.920531][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 139.925723][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 139.931081][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 139.936263][ C0] dummy_timer+0xda7/0x74f0 [ 139.940766][ C0] call_timer_fn+0x7d/0x450 [ 139.945256][ C0] expire_timers+0x328/0x6c0 [ 139.949846][ C0] __run_timers+0x624/0x9e0 [ 139.954332][ C0] run_timer_softirq+0x2d/0x50 [ 139.959080][ C0] __do_softirq+0x1b9/0x715 [ 139.963567][ C0] ===================================================== [ 139.970473][ C0] Disabling lock debugging due to kernel taint [ 139.976599][ C0] ===================================================== [ 139.983506][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 139.990779][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.000127][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.010161][ C0] Call Trace: [ 140.013429][ C0] [ 140.016259][ C0] dump_stack+0x24c/0x2e0 [ 140.020580][ C0] kmsan_report+0xfb/0x1e0 [ 140.024983][ C0] __msan_warning+0x5c/0xa0 [ 140.029470][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.034397][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.040452][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.045742][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.051884][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.057698][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.062897][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.068687][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.074566][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.079926][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.085111][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.090311][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.096100][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.102239][ C0] dummy_timer+0xda7/0x74f0 [ 140.106749][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.111933][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.117983][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.123165][ C0] call_timer_fn+0x7d/0x450 [ 140.127658][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.133448][ C0] expire_timers+0x328/0x6c0 [ 140.138026][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.143209][ C0] __run_timers+0x624/0x9e0 [ 140.147699][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.153836][ C0] ? irqtime_account_irq+0xe3/0x380 [ 140.159019][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.164199][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 140.169382][ C0] run_timer_softirq+0x2d/0x50 [ 140.174132][ C0] __do_softirq+0x1b9/0x715 [ 140.178636][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.184427][ C0] __irq_exit_rcu+0x22f/0x280 [ 140.189090][ C0] irq_exit_rcu+0xe/0x10 [ 140.193317][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.198939][ C0] [ 140.201857][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.207836][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.213369][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.232959][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 140.239008][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 140.246968][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.254922][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.262874][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 140.270829][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 140.278784][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 140.283725][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.289014][ C0] cpuidle_enter_state+0x99e/0x1750 [ 140.294200][ C0] cpuidle_enter+0xe3/0x170 [ 140.298686][ C0] do_idle+0x5df/0x790 [ 140.302760][ C0] cpu_startup_entry+0x45/0x50 [ 140.307511][ C0] rest_init+0x1c8/0x1f0 [ 140.311750][ C0] arch_call_rest_init+0x13/0x15 [ 140.316673][ C0] start_kernel+0xa17/0xbd8 [ 140.321162][ C0] x86_64_start_reservations+0x2a/0x2c [ 140.326604][ C0] x86_64_start_kernel+0x86/0x89 [ 140.331526][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 140.337406][ C0] [ 140.339713][ C0] Uninit was created at: [ 140.343927][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.349634][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 140.354316][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.360193][ C0] __alloc_skb+0x4dd/0xe90 [ 140.364592][ C0] __netdev_alloc_skb+0x45d/0x810 [ 140.369599][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.374781][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.380153][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.385332][ C0] dummy_timer+0xda7/0x74f0 [ 140.389834][ C0] call_timer_fn+0x7d/0x450 [ 140.394340][ C0] expire_timers+0x328/0x6c0 [ 140.398931][ C0] __run_timers+0x624/0x9e0 [ 140.403420][ C0] run_timer_softirq+0x2d/0x50 [ 140.408167][ C0] __do_softirq+0x1b9/0x715 [ 140.412669][ C0] ===================================================== [ 140.419579][ C0] ===================================================== [ 140.426486][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.433772][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.443136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.453172][ C0] Call Trace: [ 140.456436][ C0] [ 140.459279][ C0] dump_stack+0x24c/0x2e0 [ 140.463601][ C0] kmsan_report+0xfb/0x1e0 [ 140.468004][ C0] __msan_warning+0x5c/0xa0 [ 140.472491][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.477431][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.483484][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.488777][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.494930][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.500724][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.505903][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.511708][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.517589][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.522948][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.528153][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.533336][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.539130][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.545290][ C0] dummy_timer+0xda7/0x74f0 [ 140.549791][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.554976][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 140.561057][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.566248][ C0] call_timer_fn+0x7d/0x450 [ 140.570755][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.576552][ C0] expire_timers+0x328/0x6c0 [ 140.581153][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 140.586353][ C0] __run_timers+0x624/0x9e0 [ 140.590859][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.597007][ C0] ? irqtime_account_irq+0xe3/0x380 [ 140.602201][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.607391][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 140.612679][ C0] run_timer_softirq+0x2d/0x50 [ 140.617438][ C0] __do_softirq+0x1b9/0x715 [ 140.621967][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.627761][ C0] __irq_exit_rcu+0x22f/0x280 [ 140.632445][ C0] irq_exit_rcu+0xe/0x10 [ 140.636685][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.642364][ C0] [ 140.645328][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.651297][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.656871][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.676469][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 140.682560][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 140.690518][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.698484][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.706441][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 140.714399][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 140.722366][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 140.727314][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.732583][ C0] cpuidle_enter_state+0x99e/0x1750 [ 140.737771][ C0] cpuidle_enter+0xe3/0x170 [ 140.742279][ C0] do_idle+0x5df/0x790 [ 140.746361][ C0] cpu_startup_entry+0x45/0x50 [ 140.751130][ C0] rest_init+0x1c8/0x1f0 [ 140.755359][ C0] arch_call_rest_init+0x13/0x15 [ 140.760323][ C0] start_kernel+0xa17/0xbd8 [ 140.764816][ C0] x86_64_start_reservations+0x2a/0x2c [ 140.770279][ C0] x86_64_start_kernel+0x86/0x89 [ 140.775218][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 140.781105][ C0] [ 140.783411][ C0] Uninit was created at: [ 140.787626][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.793336][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 140.798006][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.803886][ C0] __alloc_skb+0x4dd/0xe90 [ 140.808286][ C0] __netdev_alloc_skb+0x45d/0x810 [ 140.813303][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.818511][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.823883][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.829067][ C0] dummy_timer+0xda7/0x74f0 [ 140.833556][ C0] call_timer_fn+0x7d/0x450 [ 140.838062][ C0] expire_timers+0x328/0x6c0 [ 140.842651][ C0] __run_timers+0x624/0x9e0 [ 140.847140][ C0] run_timer_softirq+0x2d/0x50 [ 140.851891][ C0] __do_softirq+0x1b9/0x715 [ 140.856393][ C0] ===================================================== [ 140.863304][ C0] ===================================================== [ 140.870210][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 140.877482][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.886849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.896889][ C0] Call Trace: [ 140.900154][ C0] [ 140.902995][ C0] dump_stack+0x24c/0x2e0 [ 140.907315][ C0] kmsan_report+0xfb/0x1e0 [ 140.911717][ C0] __msan_warning+0x5c/0xa0 [ 140.916201][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 140.921202][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.927277][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.932632][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.938784][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.944592][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.949821][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.955619][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.961511][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.966873][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.972057][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.977260][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.983059][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.989199][ C0] dummy_timer+0xda7/0x74f0 [ 140.993695][ C0] ? kmsan_get_metadata+0x116/0x180 [ 140.998879][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.004930][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.010131][ C0] call_timer_fn+0x7d/0x450 [ 141.014624][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.020416][ C0] expire_timers+0x328/0x6c0 [ 141.025009][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.030193][ C0] __run_timers+0x624/0x9e0 [ 141.034683][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.040827][ C0] ? irqtime_account_irq+0xe3/0x380 [ 141.046012][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.051192][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.056375][ C0] run_timer_softirq+0x2d/0x50 [ 141.061125][ C0] __do_softirq+0x1b9/0x715 [ 141.065616][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.071419][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.076081][ C0] irq_exit_rcu+0xe/0x10 [ 141.080306][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.085926][ C0] [ 141.088840][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.094807][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.100356][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.119963][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.126012][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.133969][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.141934][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.149895][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.157857][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.165829][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.170769][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.176069][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.181268][ C0] cpuidle_enter+0xe3/0x170 [ 141.185771][ C0] do_idle+0x5df/0x790 [ 141.189896][ C0] cpu_startup_entry+0x45/0x50 [ 141.194700][ C0] rest_init+0x1c8/0x1f0 [ 141.198942][ C0] arch_call_rest_init+0x13/0x15 [ 141.203929][ C0] start_kernel+0xa17/0xbd8 [ 141.208435][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.213915][ C0] x86_64_start_kernel+0x86/0x89 [ 141.218848][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.224742][ C0] [ 141.227072][ C0] Uninit was created at: [ 141.231303][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.237014][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.241698][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.247578][ C0] __alloc_skb+0x4dd/0xe90 [ 141.251978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.256985][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.262170][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.267529][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.272710][ C0] dummy_timer+0xda7/0x74f0 [ 141.277196][ C0] call_timer_fn+0x7d/0x450 [ 141.281705][ C0] expire_timers+0x328/0x6c0 [ 141.286278][ C0] __run_timers+0x624/0x9e0 [ 141.290767][ C0] run_timer_softirq+0x2d/0x50 [ 141.295514][ C0] __do_softirq+0x1b9/0x715 [ 141.299999][ C0] ===================================================== [ 141.306908][ C0] ===================================================== [ 141.313819][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.321106][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.330453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.340489][ C0] Call Trace: [ 141.343753][ C0] [ 141.346597][ C0] dump_stack+0x24c/0x2e0 [ 141.350917][ C0] kmsan_report+0xfb/0x1e0 [ 141.355324][ C0] __msan_warning+0x5c/0xa0 [ 141.359865][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.364808][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.370861][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.376136][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.382272][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.388112][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.393294][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.399099][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.405419][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.410779][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.415960][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.421142][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.426932][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.433070][ C0] dummy_timer+0xda7/0x74f0 [ 141.437567][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.442750][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.448820][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.454003][ C0] call_timer_fn+0x7d/0x450 [ 141.458492][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.464283][ C0] expire_timers+0x328/0x6c0 [ 141.468862][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.474043][ C0] __run_timers+0x624/0x9e0 [ 141.478532][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.484670][ C0] ? irqtime_account_irq+0xe3/0x380 [ 141.489872][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.495052][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.500244][ C0] run_timer_softirq+0x2d/0x50 [ 141.504992][ C0] __do_softirq+0x1b9/0x715 [ 141.509484][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.515277][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.519943][ C0] irq_exit_rcu+0xe/0x10 [ 141.524190][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.529813][ C0] [ 141.532724][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.538694][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.544228][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.563820][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 141.569871][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 141.577823][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.585777][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.593731][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 141.601687][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 141.609643][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 141.614572][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.619860][ C0] cpuidle_enter_state+0x99e/0x1750 [ 141.625044][ C0] cpuidle_enter+0xe3/0x170 [ 141.629533][ C0] do_idle+0x5df/0x790 [ 141.633592][ C0] cpu_startup_entry+0x45/0x50 [ 141.638343][ C0] rest_init+0x1c8/0x1f0 [ 141.642569][ C0] arch_call_rest_init+0x13/0x15 [ 141.647495][ C0] start_kernel+0xa17/0xbd8 [ 141.651985][ C0] x86_64_start_reservations+0x2a/0x2c [ 141.657432][ C0] x86_64_start_kernel+0x86/0x89 [ 141.662385][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 141.668269][ C0] [ 141.670571][ C0] Uninit was created at: [ 141.674784][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.680494][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 141.685152][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.691047][ C0] __alloc_skb+0x4dd/0xe90 [ 141.695452][ C0] __netdev_alloc_skb+0x45d/0x810 [ 141.700476][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.705665][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.711027][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.716314][ C0] dummy_timer+0xda7/0x74f0 [ 141.720816][ C0] call_timer_fn+0x7d/0x450 [ 141.725310][ C0] expire_timers+0x328/0x6c0 [ 141.729951][ C0] __run_timers+0x624/0x9e0 [ 141.734459][ C0] run_timer_softirq+0x2d/0x50 [ 141.739209][ C0] __do_softirq+0x1b9/0x715 [ 141.743704][ C0] ===================================================== [ 141.750663][ C0] ===================================================== [ 141.757575][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.764859][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.774259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.784347][ C0] Call Trace: [ 141.787620][ C0] [ 141.790447][ C0] dump_stack+0x24c/0x2e0 [ 141.794768][ C0] kmsan_report+0xfb/0x1e0 [ 141.799175][ C0] __msan_warning+0x5c/0xa0 [ 141.803833][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 141.808757][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.814808][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.820086][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.826238][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.832039][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.837222][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.843060][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.848941][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.854301][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.859485][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.864668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.870463][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.876623][ C0] dummy_timer+0xda7/0x74f0 [ 141.881121][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.886305][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 141.892356][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.897543][ C0] call_timer_fn+0x7d/0x450 [ 141.902032][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.907841][ C0] expire_timers+0x328/0x6c0 [ 141.912427][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 141.917629][ C0] __run_timers+0x624/0x9e0 [ 141.922131][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.928282][ C0] ? irqtime_account_irq+0xe3/0x380 [ 141.933488][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.938678][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 141.943870][ C0] run_timer_softirq+0x2d/0x50 [ 141.948626][ C0] __do_softirq+0x1b9/0x715 [ 141.953120][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.958914][ C0] __irq_exit_rcu+0x22f/0x280 [ 141.963580][ C0] irq_exit_rcu+0xe/0x10 [ 141.967811][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.973442][ C0] [ 141.976363][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.982335][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.987874][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.007473][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 142.013539][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 142.021497][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.029455][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.037428][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.045382][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.053355][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.058309][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.063578][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.068765][ C0] cpuidle_enter+0xe3/0x170 [ 142.073255][ C0] do_idle+0x5df/0x790 [ 142.077318][ C0] cpu_startup_entry+0x45/0x50 [ 142.082069][ C0] rest_init+0x1c8/0x1f0 [ 142.086297][ C0] arch_call_rest_init+0x13/0x15 [ 142.091222][ C0] start_kernel+0xa17/0xbd8 [ 142.095726][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.101185][ C0] x86_64_start_kernel+0x86/0x89 [ 142.106106][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 142.111989][ C0] [ 142.114310][ C0] Uninit was created at: [ 142.118546][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.124258][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 142.128917][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.134814][ C0] __alloc_skb+0x4dd/0xe90 [ 142.139213][ C0] __netdev_alloc_skb+0x45d/0x810 [ 142.144237][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 142.149426][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.154781][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.159965][ C0] dummy_timer+0xda7/0x74f0 [ 142.164452][ C0] call_timer_fn+0x7d/0x450 [ 142.168941][ C0] expire_timers+0x328/0x6c0 [ 142.173513][ C0] __run_timers+0x624/0x9e0 [ 142.178007][ C0] run_timer_softirq+0x2d/0x50 [ 142.182771][ C0] __do_softirq+0x1b9/0x715 [ 142.187276][ C0] ===================================================== [ 142.194202][ C0] ===================================================== [ 142.201119][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 142.208419][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 142.217772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.227825][ C0] Call Trace: [ 142.231091][ C0] [ 142.233918][ C0] dump_stack+0x24c/0x2e0 [ 142.238241][ C0] kmsan_report+0xfb/0x1e0 [ 142.242641][ C0] __msan_warning+0x5c/0xa0 [ 142.247127][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 142.252063][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.258116][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 142.263405][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.269541][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 142.275338][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.280531][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.286321][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 142.292205][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.297568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.302748][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.307946][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.313736][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.319875][ C0] dummy_timer+0xda7/0x74f0 [ 142.324391][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.329573][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.335623][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.340831][ C0] call_timer_fn+0x7d/0x450 [ 142.345321][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.351111][ C0] expire_timers+0x328/0x6c0 [ 142.355695][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.360894][ C0] __run_timers+0x624/0x9e0 [ 142.365383][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.371529][ C0] ? irqtime_account_irq+0xe3/0x380 [ 142.376712][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.381898][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 142.387083][ C0] run_timer_softirq+0x2d/0x50 [ 142.391834][ C0] __do_softirq+0x1b9/0x715 [ 142.396349][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.402139][ C0] __irq_exit_rcu+0x22f/0x280 [ 142.406803][ C0] irq_exit_rcu+0xe/0x10 [ 142.411030][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 142.416651][ C0] [ 142.419563][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.425529][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 142.431081][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.450672][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 142.456740][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 142.464694][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.472648][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.480601][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.488571][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.496526][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.501458][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.506729][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.511936][ C0] cpuidle_enter+0xe3/0x170 [ 142.516422][ C0] do_idle+0x5df/0x790 [ 142.520479][ C0] cpu_startup_entry+0x45/0x50 [ 142.525245][ C0] rest_init+0x1c8/0x1f0 [ 142.529472][ C0] arch_call_rest_init+0x13/0x15 [ 142.534394][ C0] start_kernel+0xa17/0xbd8 [ 142.538883][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.544325][ C0] x86_64_start_kernel+0x86/0x89 [ 142.549247][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 142.555131][ C0] [ 142.557436][ C0] Uninit was created at: [ 142.561649][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.567370][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 142.572044][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.577940][ C0] __alloc_skb+0x4dd/0xe90 [ 142.582346][ C0] __netdev_alloc_skb+0x45d/0x810 [ 142.587354][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 142.592543][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.597903][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.603086][ C0] dummy_timer+0xda7/0x74f0 [ 142.607593][ C0] call_timer_fn+0x7d/0x450 [ 142.612082][ C0] expire_timers+0x328/0x6c0 [ 142.616655][ C0] __run_timers+0x624/0x9e0 [ 142.621303][ C0] run_timer_softirq+0x2d/0x50 [ 142.626126][ C0] __do_softirq+0x1b9/0x715 [ 142.630623][ C0] ===================================================== [ 142.637542][ C0] ===================================================== [ 142.644459][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 142.651790][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 142.661150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.671190][ C0] Call Trace: [ 142.674457][ C0] [ 142.677318][ C0] dump_stack+0x24c/0x2e0 [ 142.681641][ C0] kmsan_report+0xfb/0x1e0 [ 142.686045][ C0] __msan_warning+0x5c/0xa0 [ 142.690531][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 142.695455][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.701526][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 142.706809][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.712960][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 142.718762][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.723953][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.729751][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 142.735702][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 142.741073][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.746271][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 142.751469][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.757286][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.763439][ C0] dummy_timer+0xda7/0x74f0 [ 142.767943][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.773133][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.779193][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.784415][ C0] call_timer_fn+0x7d/0x450 [ 142.788919][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.794716][ C0] expire_timers+0x328/0x6c0 [ 142.799301][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 142.804542][ C0] __run_timers+0x624/0x9e0 [ 142.809081][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.815221][ C0] ? irqtime_account_irq+0xe3/0x380 [ 142.820408][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.825590][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 142.830772][ C0] run_timer_softirq+0x2d/0x50 [ 142.835524][ C0] __do_softirq+0x1b9/0x715 [ 142.840015][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.845808][ C0] __irq_exit_rcu+0x22f/0x280 [ 142.850470][ C0] irq_exit_rcu+0xe/0x10 [ 142.854698][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 142.860371][ C0] [ 142.863287][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 142.869277][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 142.874810][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 142.894403][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 142.900480][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 142.908433][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.916386][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 142.924353][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 142.932307][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 142.940266][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 142.945197][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 142.950465][ C0] cpuidle_enter_state+0x99e/0x1750 [ 142.955706][ C0] cpuidle_enter+0xe3/0x170 [ 142.960216][ C0] do_idle+0x5df/0x790 [ 142.964303][ C0] cpu_startup_entry+0x45/0x50 [ 142.969085][ C0] rest_init+0x1c8/0x1f0 [ 142.973327][ C0] arch_call_rest_init+0x13/0x15 [ 142.978258][ C0] start_kernel+0xa17/0xbd8 [ 142.982756][ C0] x86_64_start_reservations+0x2a/0x2c [ 142.988205][ C0] x86_64_start_kernel+0x86/0x89 [ 142.993131][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 142.999016][ C0] [ 143.001323][ C0] Uninit was created at: [ 143.005552][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.011261][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.015923][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.021804][ C0] __alloc_skb+0x4dd/0xe90 [ 143.026219][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.031226][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.036413][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.041786][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.046970][ C0] dummy_timer+0xda7/0x74f0 [ 143.051474][ C0] call_timer_fn+0x7d/0x450 [ 143.055964][ C0] expire_timers+0x328/0x6c0 [ 143.060539][ C0] __run_timers+0x624/0x9e0 [ 143.065041][ C0] run_timer_softirq+0x2d/0x50 [ 143.069801][ C0] __do_softirq+0x1b9/0x715 [ 143.074287][ C0] ===================================================== [ 143.082415][ C0] ===================================================== [ 143.089322][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 143.096594][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.105957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.116014][ C0] Call Trace: [ 143.119279][ C0] [ 143.122106][ C0] dump_stack+0x24c/0x2e0 [ 143.126426][ C0] kmsan_report+0xfb/0x1e0 [ 143.130839][ C0] __msan_warning+0x5c/0xa0 [ 143.135325][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 143.140253][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.146309][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.151585][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.157720][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.163518][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.168716][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.174594][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.180501][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.185860][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.191041][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.196223][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.202015][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.208154][ C0] dummy_timer+0xda7/0x74f0 [ 143.212651][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.217835][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 143.223904][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.229090][ C0] call_timer_fn+0x7d/0x450 [ 143.233580][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.239370][ C0] expire_timers+0x328/0x6c0 [ 143.243947][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.249130][ C0] __run_timers+0x624/0x9e0 [ 143.253621][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.259758][ C0] ? irqtime_account_irq+0xe3/0x380 [ 143.264947][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.270131][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 143.275315][ C0] run_timer_softirq+0x2d/0x50 [ 143.280064][ C0] __do_softirq+0x1b9/0x715 [ 143.284557][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.290350][ C0] __irq_exit_rcu+0x22f/0x280 [ 143.295017][ C0] irq_exit_rcu+0xe/0x10 [ 143.299242][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.304863][ C0] [ 143.307776][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.313767][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.319369][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.338968][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 143.345134][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 143.353099][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.361065][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.369197][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 143.377167][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 143.385132][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 143.390073][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 143.395406][ C0] cpuidle_enter_state+0x99e/0x1750 [ 143.400613][ C0] cpuidle_enter+0xe3/0x170 [ 143.405102][ C0] do_idle+0x5df/0x790 [ 143.409163][ C0] cpu_startup_entry+0x45/0x50 [ 143.413915][ C0] rest_init+0x1c8/0x1f0 [ 143.418141][ C0] arch_call_rest_init+0x13/0x15 [ 143.423065][ C0] start_kernel+0xa17/0xbd8 [ 143.427575][ C0] x86_64_start_reservations+0x2a/0x2c [ 143.433027][ C0] x86_64_start_kernel+0x86/0x89 [ 143.437971][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 143.443853][ C0] [ 143.446156][ C0] Uninit was created at: [ 143.450368][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.456083][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.460746][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.466629][ C0] __alloc_skb+0x4dd/0xe90 [ 143.471080][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.476087][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.481272][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.486629][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.491812][ C0] dummy_timer+0xda7/0x74f0 [ 143.496322][ C0] call_timer_fn+0x7d/0x450 [ 143.500811][ C0] expire_timers+0x328/0x6c0 [ 143.505411][ C0] __run_timers+0x624/0x9e0 [ 143.509936][ C0] run_timer_softirq+0x2d/0x50 [ 143.514698][ C0] __do_softirq+0x1b9/0x715 [ 143.519212][ C0] ===================================================== [ 143.526129][ C0] ===================================================== [ 143.533038][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 143.540317][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.549694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.559738][ C0] Call Trace: [ 143.563055][ C0] [ 143.565890][ C0] dump_stack+0x24c/0x2e0 [ 143.570214][ C0] kmsan_report+0xfb/0x1e0 [ 143.574620][ C0] __msan_warning+0x5c/0xa0 [ 143.579225][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 143.584165][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.590222][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.595504][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.601646][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.607451][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.612659][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.618459][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.624374][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.629740][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.634926][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.640108][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.645898][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.652040][ C0] dummy_timer+0xda7/0x74f0 [ 143.656554][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.661738][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 143.667787][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.672970][ C0] call_timer_fn+0x7d/0x450 [ 143.677477][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.683267][ C0] expire_timers+0x328/0x6c0 [ 143.687847][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 143.693031][ C0] __run_timers+0x624/0x9e0 [ 143.697524][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.703663][ C0] ? irqtime_account_irq+0xe3/0x380 [ 143.708846][ C0] ? kmsan_get_metadata+0x116/0x180 [ 143.714027][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 143.719231][ C0] run_timer_softirq+0x2d/0x50 [ 143.723981][ C0] __do_softirq+0x1b9/0x715 [ 143.728491][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.734289][ C0] __irq_exit_rcu+0x22f/0x280 [ 143.738968][ C0] irq_exit_rcu+0xe/0x10 [ 143.743295][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.748995][ C0] [ 143.752040][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.758071][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.764140][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.783747][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 143.789817][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 143.797770][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.805724][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.813680][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 143.821637][ C0] R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 143.829621][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 143.834576][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 143.839860][ C0] cpuidle_enter_state+0x99e/0x1750 [ 143.845073][ C0] cpuidle_enter+0xe3/0x170 [ 143.849560][ C0] do_idle+0x5df/0x790 [ 143.853643][ C0] cpu_startup_entry+0x45/0x50 [ 143.858392][ C0] rest_init+0x1c8/0x1f0 [ 143.862618][ C0] arch_call_rest_init+0x13/0x15 [ 143.867545][ C0] start_kernel+0xa17/0xbd8 [ 143.872053][ C0] x86_64_start_reservations+0x2a/0x2c [ 143.877505][ C0] x86_64_start_kernel+0x86/0x89 [ 143.882424][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 143.888305][ C0] [ 143.890609][ C0] Uninit was created at: [ 143.894825][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.900558][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 143.905218][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.911098][ C0] __alloc_skb+0x4dd/0xe90 [ 143.915518][ C0] __netdev_alloc_skb+0x45d/0x810 [ 143.920527][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.925722][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.931079][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.936259][ C0] dummy_timer+0xda7/0x74f0 [ 143.940754][ C0] call_timer_fn+0x7d/0x450 [ 143.945242][ C0] expire_timers+0x328/0x6c0 [ 143.949818][ C0] __run_timers+0x624/0x9e0 [ 143.954306][ C0] run_timer_softirq+0x2d/0x50 [ 143.959057][ C0] __do_softirq+0x1b9/0x715 [ 143.963545][ C0] ===================================================== [ 143.982070][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 143.985013][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 143.994346][ C1] clocksource: 'acpi_pm' wd_now: bb8406 wd_last: c6d15e mask: ffffff [ 143.994441][ C1] clocksource: 'tsc' cs_now: 5095c63f04 cs_last: 4e2fa78052 mask: ffffffffffffffff [ 143.994551][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 144.001547][ T7] ath9k_htc: Failed to initialize the device executing program [ 144.012146][ T4696] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 144.045640][ T4696] sched_clock: Marking unstable (144070327685, -58189321)<-(144015611000, -3470465) [ 144.062332][ T3454] usb 1-1: ath9k_htc: USB layer deinitialized [ 144.256860][ T8252] clocksource: Switched to clocksource acpi_pm [ 144.522066][ T3454] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.892489][ T3454] usb 1-1: config index 0 descriptor too short (expected 65222, got 72) [ 145.052481][ T3454] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.061696][ T3454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.070001][ T3454] usb 1-1: Product: syz [ 145.074503][ T3454] usb 1-1: Manufacturer: syz [ 145.079209][ T3454] usb 1-1: SerialNumber: syz [ 145.123704][ T3454] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.702158][ T4696] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.922116][ C1] ===================================================== [ 145.929055][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 145.931933][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.931933][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.931933][ C1] Call Trace: [ 145.931933][ C1] [ 145.931933][ C1] dump_stack+0x24c/0x2e0 [ 145.931933][ C1] kmsan_report+0xfb/0x1e0 [ 145.931933][ C1] __msan_warning+0x5c/0xa0 [ 145.931933][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 145.931933][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.931933][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.931933][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.931933][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.931933][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.931933][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.931933][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.931933][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.931933][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.931933][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.931933][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.931933][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.931933][ C1] dummy_timer+0xda7/0x74f0 [ 145.931933][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.931933][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.931933][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.931933][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 145.931933][ C1] call_timer_fn+0x7d/0x450 [ 145.931933][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.931933][ C1] expire_timers+0x328/0x6c0 [ 145.931933][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 145.931933][ C1] __run_timers+0x624/0x9e0 [ 145.931933][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 145.931933][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.107018][ T7] usb 1-1: USB disconnect, device number 3 [ 146.105796][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.105796][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.105796][ C1] run_timer_softirq+0x2d/0x50 [ 146.105796][ C1] __do_softirq+0x1b9/0x715 [ 146.129274][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.129274][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.129274][ C1] irq_exit_rcu+0xe/0x10 [ 146.129274][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.129274][ C1] [ 146.129274][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.129274][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.129274][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.129274][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.129274][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.129274][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.129274][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.129274][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.221660][ C1] ? irqtime_account_irq+0x5e/0x380 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.221660][ C1] irq_exit_rcu+0xe/0x10 [ 146.221660][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.221660][ C1] [ 146.221660][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.221660][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.221660][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 146.221660][ C1] RSP: 0018:ffff888101bf3c40 EFLAGS: 00000246 [ 146.221660][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017e9f40 [ 146.221660][ C1] RDX: ffff888101be9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.221660][ C1] RBP: ffff888101bf3cd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 146.221660][ C1] R10: 0000000000000002 R11: ffff888101be9f40 R12: 0000000000000000 [ 146.221660][ C1] R13: ffff8881054b8464 R14: 0000000000000000 R15: ffff888101bea9c8 [ 146.221660][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 146.221660][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.221660][ C1] cpuidle_enter_state+0x99e/0x1750 [ 146.221660][ C1] cpuidle_enter+0xe3/0x170 [ 146.221660][ C1] do_idle+0x5df/0x790 [ 146.221660][ C1] cpu_startup_entry+0x45/0x50 [ 146.221660][ C1] ? setup_APIC_timer+0x210/0x210 [ 146.221660][ C1] start_secondary+0xe9/0xf0 [ 146.221660][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 146.221660][ C1] [ 146.221660][ C1] Uninit was created at: [ 146.221660][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.221660][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.221660][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.221660][ C1] __alloc_skb+0x4dd/0xe90 [ 146.221660][ C1] __netdev_alloc_skb+0x45d/0x810 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0 [ 146.221660][ C1] call_timer_fn+0x7d/0x450 [ 146.221660][ C1] expire_timers+0x328/0x6c0 [ 146.221660][ C1] __run_timers+0x624/0x9e0 [ 146.221660][ C1] run_timer_softirq+0x2d/0x50 [ 146.221660][ C1] __do_softirq+0x1b9/0x715 [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] ===================================================== [ 146.221660][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.221660][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.221660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.221660][ C1] Call Trace: [ 146.221660][ C1] [ 146.221660][ C1] dump_stack+0x24c/0x2e0 [ 146.221660][ C1] kmsan_report+0xfb/0x1e0 [ 146.221660][ C1] __msan_warning+0x5c/0xa0 [ 146.221660][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.221660][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.221660][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.221660][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.221660][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.221660][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.221660][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.221660][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.221660][ C1] dummy_timer+0xda7/0x74f0