[*** ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 44s)[** ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 44s)[* ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 44s)[** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 44s)[*** ] A start job is running for OpenBSD …Shell server (1min 26s / 2min 44s)[ *** ] A start job is running for OpenBSD …Shell server (1min 26s / 2min 44s)[ *** ] A start job is running for OpenBSD …Shell server (1min 27s / 2min 44s)[ ***] A start job is running for OpenBSD …Shell server (1min 28s / 2min 44s)[ **] A start job is running for OpenBSD …Shell server (1min 29s / 2min 58s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.107' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 141.565876][ T2064] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.105976][ T2064] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.117033][ T2064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.126138][ T2064] usb 1-1: Product: syz [ 142.130973][ T2064] usb 1-1: Manufacturer: syz [ 142.136044][ T2064] usb 1-1: SerialNumber: syz [ 142.177300][ T2064] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.855970][ T4691] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.075721][ C1] ===================================================== [ 143.083178][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 143.091253][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.12.0-rc6-syzkaller #0 [ 143.101376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.113867][ C1] Call Trace: [ 143.118446][ C1] [ 143.122168][ C1] dump_stack+0x24c/0x2e0 [ 143.126967][ C1] kmsan_report+0xfb/0x1e0 [ 143.132139][ C1] __msan_warning+0x5c/0xa0 [ 143.137618][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 143.143545][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.154764][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.161198][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.168865][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.176504][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.182277][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.189487][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.197185][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.204106][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.210992][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.217210][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.225655][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.233558][ C1] dummy_timer+0xda7/0x74f0 [ 143.240446][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.247927][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.255780][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 143.262069][ T1985] usb 1-1: USB disconnect, device number 2 [ 143.264709][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 143.264760][ C1] call_timer_fn+0x7d/0x450 [ 143.287366][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.295350][ C1] expire_timers+0x328/0x6c0 [ 143.301125][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 143.307426][ C1] __run_timers+0x624/0x9e0 [ 143.312411][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.320495][ C1] ? irqtime_account_irq+0xe3/0x380 [ 143.327394][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.333661][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 143.339788][ C1] run_timer_softirq+0x2d/0x50 [ 143.345683][ C1] __do_softirq+0x1b9/0x715 [ 143.351058][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.357523][ C1] __irq_exit_rcu+0x22f/0x280 [ 143.363015][ C1] irq_exit_rcu+0xe/0x10 [ 143.369710][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.377878][ C1] [ 143.381420][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.388774][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.395597][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.419668][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 143.427162][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 143.437940][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.448051][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.459210][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 143.469296][ C1] R13: ffff888103c7a064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 143.483961][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 143.490434][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 143.497703][ C1] cpuidle_enter_state+0x99e/0x1750 [ 143.503923][ C1] cpuidle_enter+0xe3/0x170 [ 143.509715][ C1] do_idle+0x5df/0x790 [ 143.514374][ C1] cpu_startup_entry+0x45/0x50 [ 143.520419][ C1] ? setup_APIC_timer+0x210/0x210 [ 143.526732][ C1] start_secondary+0xe9/0xf0 [ 143.532335][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 143.540043][ C1] [ 143.543201][ C1] Uninit was created at: [ 143.548098][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 143.555727][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 143.562253][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 143.569563][ C1] __alloc_skb+0x4dd/0xe90 [ 143.575537][ C1] __netdev_alloc_skb+0x45d/0x810 [ 143.581236][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 143.587639][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.593503][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.599081][ C1] dummy_timer+0xda7/0x74f0 [ 143.604602][ C1] call_timer_fn+0x7d/0x450 [ 143.610044][ C1] expire_timers+0x328/0x6c0 [ 143.614973][ C1] __run_timers+0x624/0x9e0 [ 143.620947][ C1] run_timer_softirq+0x2d/0x50 [ 143.626255][ C1] __do_softirq+0x1b9/0x715 [ 143.632043][ C1] ===================================================== [ 143.640373][ C1] Disabling lock debugging due to kernel taint [ 143.647741][ C1] ===================================================== [ 143.655563][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 143.664098][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.674357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.687553][ C1] Call Trace: [ 143.690928][ C1] [ 143.694004][ C1] dump_stack+0x24c/0x2e0 [ 143.698612][ C1] kmsan_report+0xfb/0x1e0 [ 143.704281][ C1] __msan_warning+0x5c/0xa0 [ 143.708884][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 143.714215][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 143.721788][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 143.727966][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.734434][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 143.740688][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.746351][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.752939][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 143.759848][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 143.766317][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.772828][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 143.778899][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.785703][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 143.793157][ C1] dummy_timer+0xda7/0x74f0 [ 143.798469][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.804075][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.809507][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 143.815364][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 143.820704][ C1] call_timer_fn+0x7d/0x450 [ 143.825400][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.832003][ C1] expire_timers+0x328/0x6c0 [ 143.836970][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 143.843343][ C1] __run_timers+0x624/0x9e0 [ 143.848501][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 143.854999][ C1] ? irqtime_account_irq+0xe3/0x380 [ 143.860570][ C1] ? kmsan_get_metadata+0x116/0x180 [ 143.866526][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 143.872163][ C1] run_timer_softirq+0x2d/0x50 [ 143.877628][ C1] __do_softirq+0x1b9/0x715 [ 143.882132][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 143.888419][ C1] __irq_exit_rcu+0x22f/0x280 [ 143.893765][ C1] irq_exit_rcu+0xe/0x10 [ 143.899341][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 143.905851][ C1] [ 143.909096][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 143.916760][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 143.923554][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 143.945959][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 143.953453][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 143.962569][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.971291][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 143.980124][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 143.988675][ C1] R13: ffff888103c7a064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 143.997611][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 144.003682][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.009702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 144.015652][ C1] cpuidle_enter+0xe3/0x170 [ 144.020556][ C1] do_idle+0x5df/0x790 [ 144.024920][ C1] cpu_startup_entry+0x45/0x50 [ 144.029902][ C1] ? setup_APIC_timer+0x210/0x210 [ 144.035502][ C1] start_secondary+0xe9/0xf0 [ 144.040146][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 144.046459][ C1] [ 144.048876][ C1] Uninit was created at: [ 144.053493][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.059459][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 144.064736][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.071138][ C1] __alloc_skb+0x4dd/0xe90 [ 144.076127][ C1] __netdev_alloc_skb+0x45d/0x810 [ 144.081901][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.087540][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.093198][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.099631][ C1] dummy_timer+0xda7/0x74f0 [ 144.105013][ C1] call_timer_fn+0x7d/0x450 [ 144.110509][ C1] expire_timers+0x328/0x6c0 [ 144.115694][ C1] __run_timers+0x624/0x9e0 [ 144.120954][ C1] run_timer_softirq+0x2d/0x50 [ 144.126285][ C1] __do_softirq+0x1b9/0x715 [ 144.132223][ C1] ===================================================== [ 144.141432][ C1] ===================================================== [ 144.148700][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 144.156849][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.166944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.178008][ C1] Call Trace: [ 144.181460][ C1] [ 144.184521][ C1] dump_stack+0x24c/0x2e0 [ 144.189172][ C1] kmsan_report+0xfb/0x1e0 [ 144.193602][ C1] __msan_warning+0x5c/0xa0 [ 144.198978][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 144.204574][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.211589][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.218425][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.225399][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.231727][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.237557][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.243804][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.249893][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.255435][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.260913][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.267118][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.273763][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.280284][ C1] dummy_timer+0xda7/0x74f0 [ 144.284985][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.292863][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.299393][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.305609][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 144.311203][ C1] call_timer_fn+0x7d/0x450 [ 144.316231][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.322842][ C1] expire_timers+0x328/0x6c0 [ 144.328685][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 144.334153][ C1] __run_timers+0x624/0x9e0 [ 144.339263][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.346298][ C1] ? irqtime_account_irq+0xe3/0x380 [ 144.351780][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.357104][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 144.363908][ C1] run_timer_softirq+0x2d/0x50 [ 144.368870][ C1] __do_softirq+0x1b9/0x715 [ 144.373466][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.380163][ C1] __irq_exit_rcu+0x22f/0x280 [ 144.384934][ C1] irq_exit_rcu+0xe/0x10 [ 144.389379][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.395027][ C1] [ 144.397955][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.404890][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.410731][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.431763][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 144.438147][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 144.446640][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.455181][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.464504][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 144.475427][ C1] R13: ffff888103c7a064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 144.484853][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 144.491300][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.496984][ C1] cpuidle_enter_state+0x99e/0x1750 [ 144.503187][ C1] cpuidle_enter+0xe3/0x170 [ 144.509381][ C1] do_idle+0x5df/0x790 [ 144.515084][ C1] cpu_startup_entry+0x45/0x50 [ 144.521734][ C1] ? setup_APIC_timer+0x210/0x210 [ 144.527892][ C1] start_secondary+0xe9/0xf0 [ 144.533631][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 144.541215][ C1] [ 144.544789][ C1] Uninit was created at: [ 144.550016][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.557418][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 144.562884][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.569338][ C1] __alloc_skb+0x4dd/0xe90 [ 144.574461][ C1] __netdev_alloc_skb+0x45d/0x810 [ 144.580596][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.586256][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.591922][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.597567][ C1] dummy_timer+0xda7/0x74f0 [ 144.602665][ C1] call_timer_fn+0x7d/0x450 [ 144.607398][ C1] expire_timers+0x328/0x6c0 [ 144.611986][ C1] __run_timers+0x624/0x9e0 [ 144.617734][ C1] run_timer_softirq+0x2d/0x50 [ 144.623996][ C1] __do_softirq+0x1b9/0x715 [ 144.629192][ C1] ===================================================== [ 144.637277][ C1] ===================================================== [ 144.645014][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 144.653151][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.664169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.675620][ C1] Call Trace: [ 144.679370][ C1] [ 144.683005][ C1] dump_stack+0x24c/0x2e0 [ 144.687967][ C1] kmsan_report+0xfb/0x1e0 [ 144.692691][ C1] __msan_warning+0x5c/0xa0 [ 144.698209][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 144.704556][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.711709][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.717373][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.724056][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.730358][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.735566][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.741689][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.747821][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.753595][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.759022][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.764795][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.770871][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.777198][ C1] dummy_timer+0xda7/0x74f0 [ 144.783969][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.789796][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.797279][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.805138][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 144.811694][ C1] call_timer_fn+0x7d/0x450 [ 144.817655][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.823998][ C1] expire_timers+0x328/0x6c0 [ 144.828941][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 144.834978][ C1] __run_timers+0x624/0x9e0 [ 144.839796][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.847943][ C1] ? irqtime_account_irq+0xe3/0x380 [ 144.854180][ C1] ? kmsan_get_metadata+0x116/0x180 [ 144.860792][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 144.867948][ C1] run_timer_softirq+0x2d/0x50 [ 144.873556][ C1] __do_softirq+0x1b9/0x715 [ 144.878511][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.885223][ C1] __irq_exit_rcu+0x22f/0x280 [ 144.890488][ C1] irq_exit_rcu+0xe/0x10 [ 144.895599][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.903269][ C1] [ 144.906649][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.913968][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.921669][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.945726][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 144.953538][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 144.963199][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.973193][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.983370][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 144.993495][ C1] R13: ffff888103c7a064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 145.004086][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 145.009328][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.015348][ C1] cpuidle_enter_state+0x99e/0x1750 [ 145.020591][ C1] cpuidle_enter+0xe3/0x170 [ 145.025821][ C1] do_idle+0x5df/0x790 [ 145.030197][ C1] cpu_startup_entry+0x45/0x50 [ 145.035473][ C1] ? setup_APIC_timer+0x210/0x210 [ 145.041582][ C1] start_secondary+0xe9/0xf0 [ 145.046680][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 145.052684][ C1] [ 145.055519][ C1] Uninit was created at: [ 145.060159][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.066880][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 145.072181][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.079559][ C1] __alloc_skb+0x4dd/0xe90 [ 145.084476][ C1] __netdev_alloc_skb+0x45d/0x810 [ 145.090147][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.096239][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.103399][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.109179][ C1] dummy_timer+0xda7/0x74f0 [ 145.115773][ C1] call_timer_fn+0x7d/0x450 [ 145.121780][ C1] expire_timers+0x328/0x6c0 [ 145.128379][ C1] __run_timers+0x624/0x9e0 [ 145.133534][ C1] run_timer_softirq+0x2d/0x50 [ 145.138779][ C1] __do_softirq+0x1b9/0x715 [ 145.143774][ C1] ===================================================== [ 145.151995][ C1] ===================================================== [ 145.160654][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 145.169492][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.179997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.190734][ C1] Call Trace: [ 145.194976][ C1] [ 145.198522][ C1] dump_stack+0x24c/0x2e0 [ 145.204828][ C1] kmsan_report+0xfb/0x1e0 [ 145.210743][ C1] __msan_warning+0x5c/0xa0 [ 145.217710][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 145.224259][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 145.232973][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 145.239572][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.246035][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 145.251949][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.257486][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.263863][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 145.270564][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.276122][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.281923][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.287711][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.294035][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 145.301211][ C1] dummy_timer+0xda7/0x74f0 [ 145.306200][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.311866][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.317543][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.323617][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 145.329877][ C1] call_timer_fn+0x7d/0x450 [ 145.335319][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.341545][ C1] expire_timers+0x328/0x6c0 [ 145.347107][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 145.352608][ C1] __run_timers+0x624/0x9e0 [ 145.357261][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 145.363620][ C1] ? irqtime_account_irq+0xe3/0x380 [ 145.368830][ C1] ? kmsan_get_metadata+0x116/0x180 [ 145.374661][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 145.380264][ C1] run_timer_softirq+0x2d/0x50 [ 145.385537][ C1] __do_softirq+0x1b9/0x715 [ 145.390422][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.396927][ C1] __irq_exit_rcu+0x22f/0x280 [ 145.402113][ C1] irq_exit_rcu+0xe/0x10 [ 145.406792][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 145.412730][ C1] [ 145.416767][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 145.423997][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 145.430284][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 145.455207][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 145.461771][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 145.474174][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.482715][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 145.491149][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 145.500132][ C1] R13: ffff888103c7a064 R14: 0000000000000000 R15: ffff888101bf29c8 [ 145.508988][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 145.514494][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 145.520792][ C1] cpuidle_enter_state+0x99e/0x1750 [ 145.528051][ C1] cpuidle_enter+0xe3/0x170 [ 145.533368][ C1] do_idle+0x5df/0x790 [ 145.538148][ C1] cpu_startup_entry+0x45/0x50 [ 145.543241][ C1] ? setup_APIC_timer+0x210/0x210 [ 145.548711][ C1] start_secondary+0xe9/0xf0 [ 145.553533][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 145.560047][ C1] [ 145.562392][ C1] Uninit was created at: [ 145.566944][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.573297][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 145.579202][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.586251][ C1] __alloc_skb+0x4dd/0xe90 [ 145.591296][ C1] __netdev_alloc_skb+0x45d/0x810 [ 145.597078][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 145.602466][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 145.608161][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 145.613947][ C1] dummy_timer+0xda7/0x74f0 [ 145.619110][ C1] call_timer_fn+0x7d/0x450 [ 145.625028][ C1] expire_timers+0x328/0x6c0 [ 145.631067][ C1] __run_timers+0x624/0x9e0 [ 145.637158][ C1] run_timer_softirq+0x2d/0x50 [ 145.642456][ C1] __do_softirq+0x1b9/0x715 [ 145.647147][ C1] ===================================================== [ 145.659808][ T4691] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 145.665869][ C0] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 145.667294][ T4691] ath9k_htc: Failed to initialize the device [ 145.679821][ C0] clocksource: 'acpi_pm' wd_now: b1fd37 wd_last: 213dc8 mask: ffffff [ 145.697376][ C0] clocksource: 'tsc' cs_now: 51ddf071e8 cs_last: 5072aa22b2 mask: ffffffffffffffff [ 145.709628][ C0] tsc: Marking TSC unstable due to clocksource watchdog [ 145.724594][ T7] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. executing program [ 145.734623][ T7] sched_clock: Marking unstable (145789047440, -64465076)<-(145730664591, -6077381) [ 145.734582][ T1985] usb 1-1: ath9k_htc: USB layer deinitialized [ 145.833504][ T8220] clocksource: Switched to clocksource acpi_pm [ 146.175847][ T1985] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.756175][ T1985] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.766575][ T1985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.775087][ T1985] usb 1-1: Product: syz [ 146.780988][ T1985] usb 1-1: Manufacturer: syz [ 146.786693][ T1985] usb 1-1: SerialNumber: syz [ 146.828001][ T1985] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.416075][ T8221] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.625756][ C0] ===================================================== [ 147.634888][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 147.635643][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.635643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.635643][ C0] Call Trace: [ 147.635643][ C0] [ 147.635643][ C0] dump_stack+0x24c/0x2e0 [ 147.635643][ C0] kmsan_report+0xfb/0x1e0 [ 147.635643][ C0] __msan_warning+0x5c/0xa0 [ 147.635643][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 147.635643][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.635643][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.635643][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.635643][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.635643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.635643][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.635643][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.635643][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.635643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.635643][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.635643][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.635643][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.635643][ C0] dummy_timer+0xda7/0x74f0 [ 147.635643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.635643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.635643][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.635643][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.635643][ C0] call_timer_fn+0x7d/0x450 [ 147.635643][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.820697][ T4691] usb 1-1: USB disconnect, device number 3 [ 147.819447][ C0] expire_timers+0x328/0x6c0 [ 147.819447][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.835647][ C0] __run_timers+0x624/0x9e0 [ 147.835647][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.835647][ C0] ? irqtime_account_irq+0x5e/0x380 [ 147.835647][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.835647][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.835647][ C0] run_timer_softirq+0x2d/0x50 [ 147.835647][ C0] __do_softirq+0x1b9/0x715 [ 147.835647][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.835647][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.889230][ C0] irq_exit_rcu+0xe/0x10 [ 147.889230][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.889230][ C0] [ 147.889230][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.889230][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.889230][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 147.889230][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.889230][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.889230][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.889230][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 147.889230][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.889230][ C0] R13: ffff888103c79c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.889230][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.889230][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.889230][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.889230][ C0] cpuidle_enter+0xe3/0x170 [ 147.889230][ C0] do_idle+0x5df/0x790 [ 147.889230][ C0] cpu_startup_entry+0x45/0x50 [ 147.889230][ C0] rest_init+0x1c8/0x1f0 [ 147.889230][ C0] arch_call_rest_init+0x13/0x15 [ 147.889230][ C0] start_kernel+0xa17/0xbd8 [ 147.889230][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.889230][ C0] x86_64_start_kernel+0x86/0x89 [ 147.889230][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.889230][ C0] [ 147.889230][ C0] Uninit was created at: [ 147.889230][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.889230][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.889230][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.889230][ C0] __alloc_skb+0x4dd/0xe90 [ 147.889230][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 147.889230][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.889230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.889230][ C0] Call Trace: [ 147.889230][ C0] [ 147.889230][ C0] dump_stack+0x24c/0x2e0 [ 147.889230][ C0] kmsan_report+0xfb/0x1e0 [ 147.889230][ C0] __msan_warning+0x5c/0xa0 [ 147.889230][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.889230][ C0] ? irqtime_account_irq+0x5e/0x380 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.889230][ C0] irq_exit_rcu+0xe/0x10 [ 147.889230][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.889230][ C0] [ 147.889230][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.889230][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.889230][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 147.889230][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.889230][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.889230][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.889230][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 147.889230][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.889230][ C0] R13: ffff888103c79c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.889230][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.889230][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.889230][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.889230][ C0] cpuidle_enter+0xe3/0x170 [ 147.889230][ C0] do_idle+0x5df/0x790 [ 147.889230][ C0] cpu_startup_entry+0x45/0x50 [ 147.889230][ C0] rest_init+0x1c8/0x1f0 [ 147.889230][ C0] arch_call_rest_init+0x13/0x15 [ 147.889230][ C0] start_kernel+0xa17/0xbd8 [ 147.889230][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.889230][ C0] x86_64_start_kernel+0x86/0x89 [ 147.889230][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.889230][ C0] [ 147.889230][ C0] Uninit was created at: [ 147.889230][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.889230][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.889230][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.889230][ C0] __alloc_skb+0x4dd/0xe90 [ 147.889230][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.889230][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.889230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.889230][ C0] Call Trace: [ 147.889230][ C0] [ 147.889230][ C0] dump_stack+0x24c/0x2e0 [ 147.889230][ C0] kmsan_report+0xfb/0x1e0 [ 147.889230][ C0] __msan_warning+0x5c/0xa0 [ 147.889230][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.889230][ C0] ? irqtime_account_irq+0x5e/0x380 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.889230][ C0] irq_exit_rcu+0xe/0x10 [ 147.889230][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.889230][ C0] [ 147.889230][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.889230][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.889230][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 147.889230][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.889230][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.889230][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.889230][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 147.889230][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.889230][ C0] R13: ffff888103c79c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.889230][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.889230][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.889230][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.889230][ C0] cpuidle_enter+0xe3/0x170 [ 147.889230][ C0] do_idle+0x5df/0x790 [ 147.889230][ C0] cpu_startup_entry+0x45/0x50 [ 147.889230][ C0] rest_init+0x1c8/0x1f0 [ 147.889230][ C0] arch_call_rest_init+0x13/0x15 [ 147.889230][ C0] start_kernel+0xa17/0xbd8 [ 147.889230][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.889230][ C0] x86_64_start_kernel+0x86/0x89 [ 147.889230][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.889230][ C0] [ 147.889230][ C0] Uninit was created at: [ 147.889230][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.889230][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.889230][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.889230][ C0] __alloc_skb+0x4dd/0xe90 [ 147.889230][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 147.889230][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.889230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.889230][ C0] Call Trace: [ 147.889230][ C0] [ 147.889230][ C0] dump_stack+0x24c/0x2e0 [ 147.889230][ C0] kmsan_report+0xfb/0x1e0 [ 147.889230][ C0] __msan_warning+0x5c/0xa0 [ 147.889230][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.889230][ C0] ? irqtime_account_irq+0x5e/0x380 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.889230][ C0] irq_exit_rcu+0xe/0x10 [ 147.889230][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.889230][ C0] [ 147.889230][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.889230][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.889230][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 147.889230][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.889230][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.889230][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.889230][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 147.889230][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.889230][ C0] R13: ffff888103c79c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.889230][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.889230][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.889230][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.889230][ C0] cpuidle_enter+0xe3/0x170 [ 147.889230][ C0] do_idle+0x5df/0x790 [ 147.889230][ C0] cpu_startup_entry+0x45/0x50 [ 147.889230][ C0] rest_init+0x1c8/0x1f0 [ 147.889230][ C0] arch_call_rest_init+0x13/0x15 [ 147.889230][ C0] start_kernel+0xa17/0xbd8 [ 147.889230][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.889230][ C0] x86_64_start_kernel+0x86/0x89 [ 147.889230][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.889230][ C0] [ 147.889230][ C0] Uninit was created at: [ 147.889230][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.889230][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.889230][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.889230][ C0] __alloc_skb+0x4dd/0xe90 [ 147.889230][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] ===================================================== [ 147.889230][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 147.889230][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.889230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.889230][ C0] Call Trace: [ 147.889230][ C0] [ 147.889230][ C0] dump_stack+0x24c/0x2e0 [ 147.889230][ C0] kmsan_report+0xfb/0x1e0 [ 147.889230][ C0] __msan_warning+0x5c/0xa0 [ 147.889230][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.889230][ C0] ? irqtime_account_irq+0x5e/0x380 [ 147.889230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.889230][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.889230][ C0] __irq_exit_rcu+0x22f/0x280 [ 147.889230][ C0] irq_exit_rcu+0xe/0x10 [ 147.889230][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.889230][ C0] [ 147.889230][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.889230][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.889230][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 147.889230][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 147.889230][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 147.889230][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.889230][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 147.889230][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 147.889230][ C0] R13: ffff888103c79c64 R14: 0000000000000000 R15: ffffffff91631ac8 [ 147.889230][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 147.889230][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.889230][ C0] cpuidle_enter_state+0x99e/0x1750 [ 147.889230][ C0] cpuidle_enter+0xe3/0x170 [ 147.889230][ C0] do_idle+0x5df/0x790 [ 147.889230][ C0] cpu_startup_entry+0x45/0x50 [ 147.889230][ C0] rest_init+0x1c8/0x1f0 [ 147.889230][ C0] arch_call_rest_init+0x13/0x15 [ 147.889230][ C0] start_kernel+0xa17/0xbd8 [ 147.889230][ C0] x86_64_start_reservations+0x2a/0x2c [ 147.889230][ C0] x86_64_start_kernel+0x86/0x89 [ 147.889230][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 147.889230][ C0] [ 147.889230][ C0] Uninit was created at: [ 147.889230][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.889230][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.889230][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.889230][ C0] __alloc_skb+0x4dd/0xe90 [ 147.889230][ C0] __netdev_alloc_skb+0x45d/0x810 [ 147.889230][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.889230][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.889230][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.889230][ C0] dummy_timer+0xda7/0x74f0 executing program [ 147.889230][ C0] call_timer_fn+0x7d/0x450 [ 147.889230][ C0] expire_timers+0x328/0x6c0 [ 147.889230][ C0] __run_timers+0x624/0x9e0 [ 147.889230][ C0] run_timer_softirq+0x2d/0x50 [ 147.889230][ C0] __do_softirq+0x1b9/0x715 [ 147.889230][ C0] =====================================================