[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.74' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 143.437239][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.987210][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.996420][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.004832][ T7] usb 1-1: Product: syz [ 144.009302][ T7] usb 1-1: Manufacturer: syz [ 144.014092][ T7] usb 1-1: SerialNumber: syz [ 144.088396][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.786904][ T1983] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.016803][ C0] ===================================================== [ 145.023751][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 145.031064][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0 [ 145.039027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.049078][ C0] Call Trace: [ 145.052370][ C0] [ 145.055201][ C0] dump_stack+0x24c/0x2e0 [ 145.059583][ C0] kmsan_report+0xfb/0x1e0 [ 145.064046][ C0] __msan_warning+0x5c/0xa0 [ 145.068677][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 145.073611][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.079801][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.085598][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.091749][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.097613][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.102856][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.108651][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.114550][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.120026][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.125249][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.130439][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.136374][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.142945][ C0] dummy_timer+0xda7/0x74f0 [ 145.147452][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.152667][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.158742][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.163937][ C0] call_timer_fn+0x7d/0x450 [ 145.168441][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.174294][ C0] expire_timers+0x328/0x6c0 [ 145.178928][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.184119][ C0] __run_timers+0x624/0x9e0 [ 145.189067][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 145.195217][ C0] ? irqtime_account_irq+0xe3/0x380 [ 145.200417][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.205643][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 145.207701][ T18] usb 1-1: USB disconnect, device number 2 executing program [ 145.210870][ C0] run_timer_softirq+0x2d/0x50 [ 145.210909][ C0] __do_softirq+0x1b9/0x715 [ 145.226059][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.231858][ C0] __irq_exit_rcu+0x22f/0x280 [ 145.236638][ C0] irq_exit_rcu+0xe/0x10 [ 145.240925][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 145.246605][ C0] [ 145.249558][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.255566][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 145.261167][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 145.280791][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 145.286930][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 145.294915][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.302902][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 145.310894][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 145.318884][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 145.326878][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 145.331877][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.337207][ C0] cpuidle_enter_state+0x99e/0x1750 [ 145.342439][ C0] cpuidle_enter+0xe3/0x170 [ 145.346964][ C0] do_idle+0x5df/0x790 [ 145.351065][ C0] cpu_startup_entry+0x45/0x50 [ 145.356033][ C0] rest_init+0x1c8/0x1f0 [ 145.360469][ C0] arch_call_rest_init+0x13/0x15 [ 145.365433][ C0] start_kernel+0xa17/0xbd8 [ 145.369965][ C0] x86_64_start_reservations+0x2a/0x2c [ 145.375453][ C0] x86_64_start_kernel+0x86/0x89 [ 145.380415][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 145.386339][ C0] [ 145.388681][ C0] Uninit was created at: [ 145.392932][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.398767][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.403462][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.409382][ C0] __alloc_skb+0x4dd/0xe90 [ 145.413814][ C0] __netdev_alloc_skb+0x45d/0x810 [ 145.418827][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.424022][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.429410][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.434618][ C0] dummy_timer+0xda7/0x74f0 [ 145.439172][ C0] call_timer_fn+0x7d/0x450 [ 145.443669][ C0] expire_timers+0x328/0x6c0 [ 145.448710][ C0] __run_timers+0x624/0x9e0 [ 145.453231][ C0] run_timer_softirq+0x2d/0x50 [ 145.458094][ C0] __do_softirq+0x1b9/0x715 [ 145.462609][ C0] ===================================================== [ 145.470259][ C0] Disabling lock debugging due to kernel taint [ 145.476450][ C0] ===================================================== [ 145.483563][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 145.490853][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.500209][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.510284][ C0] Call Trace: [ 145.513584][ C0] [ 145.516421][ C0] dump_stack+0x24c/0x2e0 [ 145.520756][ C0] kmsan_report+0xfb/0x1e0 [ 145.525204][ C0] __msan_warning+0x5c/0xa0 [ 145.529727][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 145.534660][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.540843][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.546185][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.552345][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.558246][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.563436][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.569237][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.575127][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.580514][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.586119][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.591328][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.597128][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.603285][ C0] dummy_timer+0xda7/0x74f0 [ 145.607815][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.613005][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.619060][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.624500][ C0] call_timer_fn+0x7d/0x450 [ 145.629018][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.634815][ C0] expire_timers+0x328/0x6c0 [ 145.639428][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 145.644619][ C0] __run_timers+0x624/0x9e0 [ 145.649124][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 145.655310][ C0] ? irqtime_account_irq+0xe3/0x380 [ 145.660502][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.665804][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 145.671010][ C0] run_timer_softirq+0x2d/0x50 [ 145.675877][ C0] __do_softirq+0x1b9/0x715 [ 145.680519][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.686339][ C0] __irq_exit_rcu+0x22f/0x280 [ 145.691013][ C0] irq_exit_rcu+0xe/0x10 [ 145.695247][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 145.700887][ C0] [ 145.703824][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.709895][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 145.715553][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 145.735159][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 145.741262][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 145.749350][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.757328][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 145.765287][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 145.773301][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 145.781294][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 145.786272][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.791549][ C0] cpuidle_enter_state+0x99e/0x1750 [ 145.796750][ C0] cpuidle_enter+0xe3/0x170 [ 145.801253][ C0] do_idle+0x5df/0x790 [ 145.805346][ C0] cpu_startup_entry+0x45/0x50 [ 145.810108][ C0] rest_init+0x1c8/0x1f0 [ 145.814347][ C0] arch_call_rest_init+0x13/0x15 [ 145.819300][ C0] start_kernel+0xa17/0xbd8 [ 145.823797][ C0] x86_64_start_reservations+0x2a/0x2c [ 145.829260][ C0] x86_64_start_kernel+0x86/0x89 [ 145.834199][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 145.840149][ C0] [ 145.842478][ C0] Uninit was created at: [ 145.846925][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.852644][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.857402][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.863287][ C0] __alloc_skb+0x4dd/0xe90 [ 145.867691][ C0] __netdev_alloc_skb+0x45d/0x810 [ 145.872854][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.878106][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.883557][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.888796][ C0] dummy_timer+0xda7/0x74f0 [ 145.893298][ C0] call_timer_fn+0x7d/0x450 [ 145.897815][ C0] expire_timers+0x328/0x6c0 [ 145.902423][ C0] __run_timers+0x624/0x9e0 [ 145.906922][ C0] run_timer_softirq+0x2d/0x50 [ 145.911686][ C0] __do_softirq+0x1b9/0x715 [ 145.916295][ C0] ===================================================== [ 145.923207][ C0] ===================================================== [ 145.930296][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 145.937748][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.947106][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.957147][ C0] Call Trace: [ 145.960429][ C0] [ 145.963295][ C0] dump_stack+0x24c/0x2e0 [ 145.967621][ C0] kmsan_report+0xfb/0x1e0 [ 145.972032][ C0] __msan_warning+0x5c/0xa0 [ 145.976561][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 145.981505][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.987595][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.992877][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.999023][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.004836][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.010026][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.015823][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.021885][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.027297][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.032532][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.037738][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.044071][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.050215][ C0] dummy_timer+0xda7/0x74f0 [ 146.054734][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.059926][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.065987][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.071188][ C0] call_timer_fn+0x7d/0x450 [ 146.075697][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.081528][ C0] expire_timers+0x328/0x6c0 [ 146.086178][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.091405][ C0] __run_timers+0x624/0x9e0 [ 146.096001][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.102160][ C0] ? irqtime_account_irq+0xe3/0x380 [ 146.107370][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.112594][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 146.117783][ C0] run_timer_softirq+0x2d/0x50 [ 146.122539][ C0] __do_softirq+0x1b9/0x715 [ 146.127063][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.132879][ C0] __irq_exit_rcu+0x22f/0x280 [ 146.137563][ C0] irq_exit_rcu+0xe/0x10 [ 146.141797][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.147424][ C0] [ 146.150526][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.156502][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.162081][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 146.181706][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 146.187799][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 146.195797][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.203803][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 146.211853][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 146.219925][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 146.227905][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 146.232900][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.238178][ C0] cpuidle_enter_state+0x99e/0x1750 [ 146.243379][ C0] cpuidle_enter+0xe3/0x170 [ 146.247982][ C0] do_idle+0x5df/0x790 [ 146.252053][ C0] cpu_startup_entry+0x45/0x50 [ 146.256819][ C0] rest_init+0x1c8/0x1f0 [ 146.261068][ C0] arch_call_rest_init+0x13/0x15 [ 146.266026][ C0] start_kernel+0xa17/0xbd8 [ 146.270547][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.276013][ C0] x86_64_start_kernel+0x86/0x89 [ 146.280972][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.286889][ C0] [ 146.289208][ C0] Uninit was created at: [ 146.293459][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.300290][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.305012][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.310905][ C0] __alloc_skb+0x4dd/0xe90 [ 146.315317][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.320333][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.325538][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.330916][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.336127][ C0] dummy_timer+0xda7/0x74f0 [ 146.340629][ C0] call_timer_fn+0x7d/0x450 [ 146.345127][ C0] expire_timers+0x328/0x6c0 [ 146.349713][ C0] __run_timers+0x624/0x9e0 [ 146.354229][ C0] run_timer_softirq+0x2d/0x50 [ 146.359003][ C0] __do_softirq+0x1b9/0x715 [ 146.363554][ C0] ===================================================== [ 146.370474][ C0] ===================================================== [ 146.377408][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.384694][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.394082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.404184][ C0] Call Trace: [ 146.407592][ C0] [ 146.410426][ C0] dump_stack+0x24c/0x2e0 [ 146.414767][ C0] kmsan_report+0xfb/0x1e0 [ 146.419192][ C0] __msan_warning+0x5c/0xa0 [ 146.423711][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 146.428689][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.434920][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.440264][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.446457][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.452318][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.457664][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.463481][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.469377][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.474752][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.479946][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.485679][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.491482][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.497650][ C0] dummy_timer+0xda7/0x74f0 [ 146.502157][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.507511][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.513585][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.518804][ C0] call_timer_fn+0x7d/0x450 [ 146.523322][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.529127][ C0] expire_timers+0x328/0x6c0 [ 146.533738][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.538947][ C0] __run_timers+0x624/0x9e0 [ 146.543462][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.549705][ C0] ? irqtime_account_irq+0xe3/0x380 [ 146.554951][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.560145][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 146.565341][ C0] run_timer_softirq+0x2d/0x50 [ 146.570104][ C0] __do_softirq+0x1b9/0x715 [ 146.574612][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.580442][ C0] __irq_exit_rcu+0x22f/0x280 [ 146.585149][ C0] irq_exit_rcu+0xe/0x10 [ 146.589450][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.595204][ C0] [ 146.598130][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.604123][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.609692][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 146.629465][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 146.635547][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 146.643508][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.651474][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 146.659471][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 146.667449][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 146.675427][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 146.680374][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 146.685654][ C0] cpuidle_enter_state+0x99e/0x1750 [ 146.690872][ C0] cpuidle_enter+0xe3/0x170 [ 146.695371][ C0] do_idle+0x5df/0x790 [ 146.699442][ C0] cpu_startup_entry+0x45/0x50 [ 146.704209][ C0] rest_init+0x1c8/0x1f0 [ 146.708442][ C0] arch_call_rest_init+0x13/0x15 [ 146.713393][ C0] start_kernel+0xa17/0xbd8 [ 146.717917][ C0] x86_64_start_reservations+0x2a/0x2c [ 146.723375][ C0] x86_64_start_kernel+0x86/0x89 [ 146.728343][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 146.734240][ C0] [ 146.736549][ C0] Uninit was created at: [ 146.740784][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.746508][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.751220][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.757130][ C0] __alloc_skb+0x4dd/0xe90 [ 146.761556][ C0] __netdev_alloc_skb+0x45d/0x810 [ 146.766577][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 146.771777][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.777171][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.782363][ C0] dummy_timer+0xda7/0x74f0 [ 146.786908][ C0] call_timer_fn+0x7d/0x450 [ 146.791404][ C0] expire_timers+0x328/0x6c0 [ 146.796003][ C0] __run_timers+0x624/0x9e0 [ 146.800496][ C0] run_timer_softirq+0x2d/0x50 [ 146.805250][ C0] __do_softirq+0x1b9/0x715 [ 146.809745][ C0] ===================================================== [ 146.816674][ C0] ===================================================== [ 146.823611][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.830960][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.840372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.850528][ C0] Call Trace: [ 146.853931][ C0] [ 146.856773][ C0] dump_stack+0x24c/0x2e0 [ 146.861124][ C0] kmsan_report+0xfb/0x1e0 [ 146.865535][ C0] __msan_warning+0x5c/0xa0 [ 146.870029][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 146.874963][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.881171][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.886485][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.892657][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.898463][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.903657][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.909491][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.915429][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.920838][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.926044][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.931261][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.937060][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.943231][ C0] dummy_timer+0xda7/0x74f0 [ 146.947752][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.953044][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.959139][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.964508][ C0] call_timer_fn+0x7d/0x450 [ 146.969028][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.974914][ C0] expire_timers+0x328/0x6c0 [ 146.979538][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 146.984761][ C0] __run_timers+0x624/0x9e0 [ 146.989268][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.995412][ C0] ? irqtime_account_irq+0xe3/0x380 [ 147.000754][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.005975][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.011302][ C0] run_timer_softirq+0x2d/0x50 [ 147.016111][ C0] __do_softirq+0x1b9/0x715 [ 147.020645][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.026539][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.031264][ C0] irq_exit_rcu+0xe/0x10 [ 147.035542][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.041177][ C0] [ 147.044125][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.050107][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.055843][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 147.075578][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.081661][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.089641][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.097605][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 147.105574][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.113552][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.121520][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.126469][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.131782][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.136994][ C0] cpuidle_enter+0xe3/0x170 [ 147.141509][ C0] do_idle+0x5df/0x790 [ 147.145598][ C0] cpu_startup_entry+0x45/0x50 [ 147.150384][ C0] rest_init+0x1c8/0x1f0 [ 147.154629][ C0] arch_call_rest_init+0x13/0x15 [ 147.159563][ C0] start_kernel+0xa17/0xbd8 [ 147.164267][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.169759][ C0] x86_64_start_kernel+0x86/0x89 [ 147.174691][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.180595][ C0] [ 147.182903][ C0] Uninit was created at: [ 147.187120][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.192848][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.197537][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.203461][ C0] __alloc_skb+0x4dd/0xe90 [ 147.207896][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.212915][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.218132][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.223526][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.228736][ C0] dummy_timer+0xda7/0x74f0 [ 147.233229][ C0] call_timer_fn+0x7d/0x450 [ 147.237723][ C0] expire_timers+0x328/0x6c0 [ 147.242308][ C0] __run_timers+0x624/0x9e0 [ 147.246828][ C0] run_timer_softirq+0x2d/0x50 [ 147.251589][ C0] __do_softirq+0x1b9/0x715 [ 147.256109][ C0] ===================================================== [ 147.269024][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 147.281334][ C0] clocksource: 'acpi_pm' wd_now: 1e4c67 wd_last: 8ce237 mask: ffffff [ 147.291724][ C0] clocksource: 'tsc' cs_now: 5215c33720 cs_last: 50a8c80cff mask: ffffffffffffffff [ 147.303278][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 147.312076][ T7] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 147.321895][ T7] sched_clock: Marking unstable (147765879731, -453413202)<-(147311550941, 519664) [ 147.322466][ T1983] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 147.342669][ T1983] ath9k_htc: Failed to initialize the device [ 147.351172][ T18] usb 1-1: ath9k_htc: USB layer deinitialized [ 147.369638][ T8235] clocksource: Switched to clocksource acpi_pm [ 147.736946][ T18] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.267410][ T18] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.276796][ T18] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.285507][ T18] usb 1-1: Product: syz [ 148.290103][ T18] usb 1-1: Manufacturer: syz [ 148.294833][ T18] usb 1-1: SerialNumber: syz [ 148.348682][ T18] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.927079][ T2062] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 149.146786][ C1] ===================================================== [ 149.153846][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 149.156664][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.156664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.156664][ C1] Call Trace: [ 149.156664][ C1] [ 149.156664][ C1] dump_stack+0x24c/0x2e0 [ 149.156664][ C1] kmsan_report+0xfb/0x1e0 [ 149.156664][ C1] __msan_warning+0x5c/0xa0 [ 149.156664][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 149.156664][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.156664][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 149.156664][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.156664][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 149.156664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.156664][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.156664][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 149.156664][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.156664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.156664][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.156664][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.156664][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.156664][ C1] dummy_timer+0xda7/0x74f0 [ 149.156664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.156664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.156664][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.156664][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.156664][ C1] call_timer_fn+0x7d/0x450 [ 149.156664][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.156664][ C1] expire_timers+0x328/0x6c0 [ 149.156664][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.156664][ C1] __run_timers+0x624/0x9e0 [ 149.156664][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.156664][ C1] ? irqtime_account_irq+0x5e/0x380 [ 149.332535][ T7] usb 1-1: USB disconnect, device number 3 [ 149.330570][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.330570][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 149.330570][ C1] run_timer_softirq+0x2d/0x50 [ 149.330570][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] __irq_exit_rcu+0x22f/0x280 [ 149.359370][ C1] irq_exit_rcu+0xe/0x10 [ 149.359370][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 149.359370][ C1] [ 149.359370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.359370][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 149.359370][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 149.359370][ C1] RSP: 0018:ffff888102423c40 EFLAGS: 00000246 [ 149.359370][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000102019f40 [ 149.359370][ C1] RDX: ffff888102419f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359370][ C1] RBP: ffff888102423cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 149.359370][ C1] R10: 0000000000000002 R11: ffff888102419f40 R12: 0000000000000000 [ 149.359370][ C1] R13: ffff888106e02064 R14: 0000000000000000 R15: ffff88810241a9c8 [ 149.359370][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 149.359370][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 149.359370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 149.359370][ C1] cpuidle_enter+0xe3/0x170 [ 149.359370][ C1] do_idle+0x5df/0x790 [ 149.359370][ C1] cpu_startup_entry+0x45/0x50 [ 149.359370][ C1] ? setup_APIC_timer+0x210/0x210 [ 149.359370][ C1] start_secondary+0xe9/0xf0 [ 149.359370][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 149.359370][ C1] [ 149.359370][ C1] Uninit was created at: [ 149.359370][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.359370][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.359370][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.359370][ C1] __alloc_skb+0x4dd/0xe90 [ 149.359370][ C1] __netdev_alloc_skb+0x45d/0x810 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 149.359370][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.359370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.359370][ C1] Call Trace: [ 149.359370][ C1] [ 149.359370][ C1] dump_stack+0x24c/0x2e0 [ 149.359370][ C1] kmsan_report+0xfb/0x1e0 [ 149.359370][ C1] __msan_warning+0x5c/0xa0 [ 149.359370][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.359370][ C1] ? irqtime_account_irq+0x5e/0x380 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] __irq_exit_rcu+0x22f/0x280 [ 149.359370][ C1] irq_exit_rcu+0xe/0x10 [ 149.359370][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 149.359370][ C1] [ 149.359370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.359370][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 149.359370][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 149.359370][ C1] RSP: 0018:ffff888102423c40 EFLAGS: 00000246 [ 149.359370][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000102019f40 [ 149.359370][ C1] RDX: ffff888102419f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359370][ C1] RBP: ffff888102423cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 149.359370][ C1] R10: 0000000000000002 R11: ffff888102419f40 R12: 0000000000000000 [ 149.359370][ C1] R13: ffff888106e02064 R14: 0000000000000000 R15: ffff88810241a9c8 [ 149.359370][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 149.359370][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 149.359370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 149.359370][ C1] cpuidle_enter+0xe3/0x170 [ 149.359370][ C1] do_idle+0x5df/0x790 [ 149.359370][ C1] cpu_startup_entry+0x45/0x50 [ 149.359370][ C1] ? setup_APIC_timer+0x210/0x210 [ 149.359370][ C1] start_secondary+0xe9/0xf0 [ 149.359370][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 149.359370][ C1] [ 149.359370][ C1] Uninit was created at: [ 149.359370][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.359370][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.359370][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.359370][ C1] __alloc_skb+0x4dd/0xe90 [ 149.359370][ C1] __netdev_alloc_skb+0x45d/0x810 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 149.359370][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.359370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.359370][ C1] Call Trace: [ 149.359370][ C1] [ 149.359370][ C1] dump_stack+0x24c/0x2e0 [ 149.359370][ C1] kmsan_report+0xfb/0x1e0 [ 149.359370][ C1] __msan_warning+0x5c/0xa0 [ 149.359370][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.359370][ C1] ? irqtime_account_irq+0x5e/0x380 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] __irq_exit_rcu+0x22f/0x280 [ 149.359370][ C1] irq_exit_rcu+0xe/0x10 [ 149.359370][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 149.359370][ C1] [ 149.359370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.359370][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 149.359370][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 149.359370][ C1] RSP: 0018:ffff888102423c40 EFLAGS: 00000246 [ 149.359370][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000102019f40 [ 149.359370][ C1] RDX: ffff888102419f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359370][ C1] RBP: ffff888102423cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 149.359370][ C1] R10: 0000000000000002 R11: ffff888102419f40 R12: 0000000000000000 [ 149.359370][ C1] R13: ffff888106e02064 R14: 0000000000000000 R15: ffff88810241a9c8 [ 149.359370][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 149.359370][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 149.359370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 149.359370][ C1] cpuidle_enter+0xe3/0x170 [ 149.359370][ C1] do_idle+0x5df/0x790 [ 149.359370][ C1] cpu_startup_entry+0x45/0x50 [ 149.359370][ C1] ? setup_APIC_timer+0x210/0x210 [ 149.359370][ C1] start_secondary+0xe9/0xf0 [ 149.359370][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 149.359370][ C1] [ 149.359370][ C1] Uninit was created at: [ 149.359370][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.359370][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.359370][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.359370][ C1] __alloc_skb+0x4dd/0xe90 [ 149.359370][ C1] __netdev_alloc_skb+0x45d/0x810 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 149.359370][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.359370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.359370][ C1] Call Trace: [ 149.359370][ C1] [ 149.359370][ C1] dump_stack+0x24c/0x2e0 [ 149.359370][ C1] kmsan_report+0xfb/0x1e0 [ 149.359370][ C1] __msan_warning+0x5c/0xa0 [ 149.359370][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.359370][ C1] ? irqtime_account_irq+0x5e/0x380 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] __irq_exit_rcu+0x22f/0x280 [ 149.359370][ C1] irq_exit_rcu+0xe/0x10 [ 149.359370][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 149.359370][ C1] [ 149.359370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.359370][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 149.359370][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 149.359370][ C1] RSP: 0018:ffff888102423c40 EFLAGS: 00000246 [ 149.359370][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000102019f40 [ 149.359370][ C1] RDX: ffff888102419f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359370][ C1] RBP: ffff888102423cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 149.359370][ C1] R10: 0000000000000002 R11: ffff888102419f40 R12: 0000000000000000 [ 149.359370][ C1] R13: ffff888106e02064 R14: 0000000000000000 R15: ffff88810241a9c8 [ 149.359370][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 149.359370][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 149.359370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 149.359370][ C1] cpuidle_enter+0xe3/0x170 [ 149.359370][ C1] do_idle+0x5df/0x790 [ 149.359370][ C1] cpu_startup_entry+0x45/0x50 [ 149.359370][ C1] ? setup_APIC_timer+0x210/0x210 [ 149.359370][ C1] start_secondary+0xe9/0xf0 [ 149.359370][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 149.359370][ C1] [ 149.359370][ C1] Uninit was created at: [ 149.359370][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.359370][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.359370][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.359370][ C1] __alloc_skb+0x4dd/0xe90 [ 149.359370][ C1] __netdev_alloc_skb+0x45d/0x810 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] ===================================================== [ 149.359370][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 149.359370][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.359370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.359370][ C1] Call Trace: [ 149.359370][ C1] [ 149.359370][ C1] dump_stack+0x24c/0x2e0 [ 149.359370][ C1] kmsan_report+0xfb/0x1e0 [ 149.359370][ C1] __msan_warning+0x5c/0xa0 [ 149.359370][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 149.359370][ C1] ? irqtime_account_irq+0x5e/0x380 [ 149.359370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.359370][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.359370][ C1] __irq_exit_rcu+0x22f/0x280 [ 149.359370][ C1] irq_exit_rcu+0xe/0x10 [ 149.359370][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 149.359370][ C1] [ 149.359370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.359370][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 149.359370][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 149.359370][ C1] RSP: 0018:ffff888102423c40 EFLAGS: 00000246 [ 149.359370][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000102019f40 [ 149.359370][ C1] RDX: ffff888102419f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.359370][ C1] RBP: ffff888102423cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 149.359370][ C1] R10: 0000000000000002 R11: ffff888102419f40 R12: 0000000000000000 [ 149.359370][ C1] R13: ffff888106e02064 R14: 0000000000000000 R15: ffff88810241a9c8 [ 149.359370][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 149.359370][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 149.359370][ C1] cpuidle_enter_state+0x99e/0x1750 [ 149.359370][ C1] cpuidle_enter+0xe3/0x170 [ 149.359370][ C1] do_idle+0x5df/0x790 [ 149.359370][ C1] cpu_startup_entry+0x45/0x50 [ 149.359370][ C1] ? setup_APIC_timer+0x210/0x210 [ 149.359370][ C1] start_secondary+0xe9/0xf0 [ 149.359370][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 149.359370][ C1] [ 149.359370][ C1] Uninit was created at: [ 149.359370][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.359370][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.359370][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.359370][ C1] __alloc_skb+0x4dd/0xe90 [ 149.359370][ C1] __netdev_alloc_skb+0x45d/0x810 [ 149.359370][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 149.359370][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 149.359370][ C1] usb_hcd_giveback_urb+0x1cb/0x730 executing program [ 149.359370][ C1] dummy_timer+0xda7/0x74f0 [ 149.359370][ C1] call_timer_fn+0x7d/0x450 [ 149.359370][ C1] expire_timers+0x328/0x6c0 [ 149.359370][ C1] __run_timers+0x624/0x9e0 [ 149.359370][ C1] run_timer_softirq+0x2d/0x50 [ 149.359370][ C1] __do_softirq+0x1b9/0x715 [ 149.359370][ C1] ===================================================== [ 151.342542][ T2062] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 151.349885][ T2062] ath9k_htc: Failed to initialize the device [ 151.374816][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 151.766794][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.287660][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.297237][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.305377][ T7] usb 1-1: Product: syz [ 152.310002][ T7] usb 1-1: Manufacturer: syz [ 152.314835][ T7] usb 1-1: SerialNumber: syz [ 152.358721][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.926992][ T1983] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.156787][ C0] ===================================================== [ 153.163749][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 153.166668][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.166668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.166668][ C0] Call Trace: [ 153.166668][ C0] [ 153.166668][ C0] dump_stack+0x24c/0x2e0 [ 153.166668][ C0] kmsan_report+0xfb/0x1e0 [ 153.166668][ C0] __msan_warning+0x5c/0xa0 [ 153.166668][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.166668][ C0] ? irqtime_account_irq+0x5e/0x380 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] __irq_exit_rcu+0x22f/0x280 [ 153.166668][ C0] irq_exit_rcu+0xe/0x10 [ 153.166668][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 153.166668][ C0] [ 153.166668][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 153.166668][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 153.166668][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 153.166668][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 153.166668][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 153.166668][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.166668][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 153.166668][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 153.166668][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 153.166668][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 153.166668][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 153.166668][ C0] cpuidle_enter_state+0x99e/0x1750 [ 153.166668][ C0] cpuidle_enter+0xe3/0x170 [ 153.166668][ C0] do_idle+0x5df/0x790 [ 153.166668][ C0] cpu_startup_entry+0x45/0x50 [ 153.166668][ C0] rest_init+0x1c8/0x1f0 [ 153.166668][ C0] arch_call_rest_init+0x13/0x15 [ 153.166668][ C0] start_kernel+0xa17/0xbd8 [ 153.166668][ C0] x86_64_start_reservations+0x2a/0x2c [ 153.166668][ C0] x86_64_start_kernel+0x86/0x89 [ 153.166668][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 153.166668][ C0] [ 153.166668][ C0] Uninit was created at: [ 153.166668][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.166668][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.166668][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.166668][ C0] __alloc_skb+0x4dd/0xe90 [ 153.166668][ C0] __netdev_alloc_skb+0x45d/0x810 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 153.166668][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.166668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.166668][ C0] Call Trace: [ 153.166668][ C0] [ 153.166668][ C0] dump_stack+0x24c/0x2e0 [ 153.166668][ C0] kmsan_report+0xfb/0x1e0 [ 153.166668][ C0] __msan_warning+0x5c/0xa0 [ 153.166668][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.166668][ C0] ? irqtime_account_irq+0x5e/0x380 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] __irq_exit_rcu+0x22f/0x280 [ 153.166668][ C0] irq_exit_rcu+0xe/0x10 [ 153.166668][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 153.166668][ C0] [ 153.166668][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 153.166668][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 153.166668][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 153.166668][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 153.166668][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 153.166668][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.166668][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 153.166668][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 153.166668][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 153.166668][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 153.166668][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 153.166668][ C0] cpuidle_enter_state+0x99e/0x1750 [ 153.166668][ C0] cpuidle_enter+0xe3/0x170 [ 153.166668][ C0] do_idle+0x5df/0x790 [ 153.166668][ C0] cpu_startup_entry+0x45/0x50 [ 153.166668][ C0] rest_init+0x1c8/0x1f0 [ 153.166668][ C0] arch_call_rest_init+0x13/0x15 [ 153.166668][ C0] start_kernel+0xa17/0xbd8 [ 153.166668][ C0] x86_64_start_reservations+0x2a/0x2c [ 153.166668][ C0] x86_64_start_kernel+0x86/0x89 [ 153.166668][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 153.166668][ C0] [ 153.166668][ C0] Uninit was created at: [ 153.166668][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.166668][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.166668][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.166668][ C0] __alloc_skb+0x4dd/0xe90 [ 153.166668][ C0] __netdev_alloc_skb+0x45d/0x810 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 153.166668][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.166668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.166668][ C0] Call Trace: [ 153.166668][ C0] [ 153.166668][ C0] dump_stack+0x24c/0x2e0 [ 153.166668][ C0] kmsan_report+0xfb/0x1e0 [ 153.166668][ C0] __msan_warning+0x5c/0xa0 [ 153.166668][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.166668][ C0] ? irqtime_account_irq+0x5e/0x380 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] __irq_exit_rcu+0x22f/0x280 [ 153.166668][ C0] irq_exit_rcu+0xe/0x10 [ 153.166668][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 153.166668][ C0] [ 153.166668][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 153.166668][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 153.166668][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 153.166668][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 153.166668][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 153.166668][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.166668][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 153.166668][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 153.166668][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 153.166668][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 153.166668][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 153.166668][ C0] cpuidle_enter_state+0x99e/0x1750 [ 153.166668][ C0] cpuidle_enter+0xe3/0x170 [ 153.166668][ C0] do_idle+0x5df/0x790 [ 153.166668][ C0] cpu_startup_entry+0x45/0x50 [ 153.166668][ C0] rest_init+0x1c8/0x1f0 [ 153.166668][ C0] arch_call_rest_init+0x13/0x15 [ 153.166668][ C0] start_kernel+0xa17/0xbd8 [ 153.166668][ C0] x86_64_start_reservations+0x2a/0x2c [ 153.166668][ C0] x86_64_start_kernel+0x86/0x89 [ 153.166668][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 153.166668][ C0] [ 153.166668][ C0] Uninit was created at: [ 153.166668][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.166668][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.166668][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.166668][ C0] __alloc_skb+0x4dd/0xe90 [ 153.166668][ C0] __netdev_alloc_skb+0x45d/0x810 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 153.166668][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.166668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.166668][ C0] Call Trace: [ 153.166668][ C0] [ 153.166668][ C0] dump_stack+0x24c/0x2e0 [ 153.166668][ C0] kmsan_report+0xfb/0x1e0 [ 153.166668][ C0] __msan_warning+0x5c/0xa0 [ 153.166668][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.166668][ C0] ? irqtime_account_irq+0x5e/0x380 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] __irq_exit_rcu+0x22f/0x280 [ 153.166668][ C0] irq_exit_rcu+0xe/0x10 [ 153.166668][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 153.166668][ C0] [ 153.166668][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 153.166668][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 153.166668][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 153.166668][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 153.166668][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 153.166668][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.166668][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 153.166668][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 153.166668][ C0] R13: ffff888106e01c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 153.166668][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 153.166668][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 153.166668][ C0] cpuidle_enter_state+0x99e/0x1750 [ 153.166668][ C0] cpuidle_enter+0xe3/0x170 [ 153.166668][ C0] do_idle+0x5df/0x790 [ 153.166668][ C0] cpu_startup_entry+0x45/0x50 [ 153.166668][ C0] rest_init+0x1c8/0x1f0 [ 153.166668][ C0] arch_call_rest_init+0x13/0x15 [ 153.166668][ C0] start_kernel+0xa17/0xbd8 [ 153.166668][ C0] x86_64_start_reservations+0x2a/0x2c [ 153.166668][ C0] x86_64_start_kernel+0x86/0x89 [ 153.166668][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 153.166668][ C0] [ 153.166668][ C0] Uninit was created at: [ 153.166668][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.166668][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.166668][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.166668][ C0] __alloc_skb+0x4dd/0xe90 [ 153.166668][ C0] __netdev_alloc_skb+0x45d/0x810 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 153.166668][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 153.166668][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 153.166668][ C0] dummy_timer+0xda7/0x74f0 [ 153.166668][ C0] call_timer_fn+0x7d/0x450 [ 153.166668][ C0] expire_timers+0x328/0x6c0 [ 153.166668][ C0] __run_timers+0x624/0x9e0 [ 153.166668][ C0] run_timer_softirq+0x2d/0x50 [ 153.166668][ C0] __do_softirq+0x1b9/0x715 [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] ===================================================== [ 153.166668][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 153.166668][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.166668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.166668][ C0] Call Trace: [ 153.166668][ C0] [ 153.166668][ C0] dump_stack+0x24c/0x2e0 [ 153.166668][ C0] kmsan_report+0xfb/0x1e0 [ 153.166668][ C0] __msan_warning+0x5c/0xa0 [ 153.166668][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 153.166668][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 153.166668][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 153.166668][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.166668][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 153.166668][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.166668][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.166668][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0