forked to background, child pid 3048 no interfaces have a carrier [ 64.426432][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.439170][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 88.252168][ T3139] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.782514][ T3139] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.791659][ T3139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.799985][ T3139] usb 1-1: Product: syz [ 88.804312][ T3139] usb 1-1: Manufacturer: syz [ 88.808971][ T3139] usb 1-1: SerialNumber: syz [ 88.853821][ T3139] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.472302][ T114] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.692601][ C1] ===================================================== [ 89.699658][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.706881][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.711753][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 89.717190][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.722584][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.727796][ C1] dummy_timer+0x157a/0x51c0 [ 89.732404][ C1] call_timer_fn+0x81/0x540 [ 89.736918][ C1] expire_timers+0x2f5/0x6d0 [ 89.741532][ C1] __run_timers+0x66b/0x9f0 [ 89.746044][ C1] run_timer_softirq+0x71/0xe0 [ 89.750839][ C1] __do_softirq+0x1ee/0x7c5 [ 89.755378][ C1] invoke_softirq+0xa4/0x130 [ 89.759996][ C1] irq_exit_rcu+0x76/0x130 [ 89.764439][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 89.770087][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 89.776104][ C1] acpi_idle_enter+0x747/0x820 [ 89.780888][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 89.786109][ C1] cpuidle_enter+0xf4/0x180 [ 89.790627][ C1] do_idle+0x68d/0x840 [ 89.794700][ C1] cpu_startup_entry+0x3c/0x40 [ 89.799471][ C1] start_secondary+0x112/0x120 [ 89.804248][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 89.810159][ C1] [ 89.812473][ C1] Uninit was created at: [ 89.816751][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 89.822662][ C1] __alloc_skb+0x545/0xf90 [ 89.827112][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 89.832153][ C1] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 89.837378][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.842765][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.848101][ C1] dummy_timer+0x157a/0x51c0 [ 89.852714][ C1] call_timer_fn+0x81/0x540 [ 89.857256][ C1] expire_timers+0x2f5/0x6d0 [ 89.861854][ C1] __run_timers+0x66b/0x9f0 [ 89.866380][ C1] run_timer_softirq+0x71/0xe0 [ 89.871152][ C1] __do_softirq+0x1ee/0x7c5 [ 89.875677][ C1] [ 89.878010][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc4-syzkaller #0 [ 89.879364][ T7] usb 1-1: USB disconnect, device number 2 [ 89.886020][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.886045][ C1] ===================================================== [ 89.886063][ C1] Disabling lock debugging due to kernel taint [ 89.886077][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 89.886095][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.17.0-rc4-syzkaller #0 [ 89.886141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.886164][ C1] Call Trace: [ 89.886178][ C1] [ 89.886195][ C1] dump_stack_lvl+0x1ff/0x28e [ 89.886266][ C1] dump_stack+0x25/0x28 [ 89.955903][ C1] panic+0x487/0xe1f [ 89.959846][ C1] ? add_taint+0x181/0x210 [ 89.964283][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 89.970112][ C1] kmsan_report+0x2e6/0x2f0 [ 89.974641][ C1] ? __netdev_alloc_skb+0x4b9/0x8c0 [ 89.979890][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 89.985726][ C1] ? __msan_warning+0xb8/0x130 [ 89.990512][ C1] ? ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.995558][ C1] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 90.001044][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.006611][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.012000][ C1] ? dummy_timer+0x157a/0x51c0 [ 90.016782][ C1] ? call_timer_fn+0x81/0x540 [ 90.021473][ C1] ? expire_timers+0x2f5/0x6d0 [ 90.026250][ C1] ? __run_timers+0x66b/0x9f0 [ 90.030939][ C1] ? run_timer_softirq+0x71/0xe0 [ 90.035899][ C1] ? __do_softirq+0x1ee/0x7c5 [ 90.040600][ C1] ? invoke_softirq+0xa4/0x130 [ 90.045391][ C1] ? irq_exit_rcu+0x76/0x130 [ 90.050001][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.055825][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.062008][ C1] ? acpi_idle_enter+0x747/0x820 [ 90.066957][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 90.072353][ C1] ? cpuidle_enter+0xf4/0x180 [ 90.077047][ C1] ? do_idle+0x68d/0x840 [ 90.081302][ C1] ? cpu_startup_entry+0x3c/0x40 [ 90.086253][ C1] ? start_secondary+0x112/0x120 [ 90.091208][ C1] ? secondary_startup_64_no_verify+0xc4/0xcb [ 90.097299][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.103139][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.108283][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.113421][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.119273][ C1] ? __alloc_skb+0xae7/0xf90 [ 90.123893][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.129047][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.134906][ C1] __msan_warning+0xb8/0x130 [ 90.139518][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 90.144403][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 90.149740][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.155577][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 90.161522][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.166928][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.172174][ C1] dummy_timer+0x157a/0x51c0 [ 90.176835][ C1] ? dummy_free_streams+0x940/0x940 [ 90.182074][ C1] call_timer_fn+0x81/0x540 [ 90.186600][ C1] expire_timers+0x2f5/0x6d0 [ 90.191208][ C1] ? dummy_free_streams+0x940/0x940 [ 90.196431][ C1] __run_timers+0x66b/0x9f0 [ 90.200959][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.206099][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.211944][ C1] run_timer_softirq+0x71/0xe0 [ 90.216750][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 90.221982][ C1] __do_softirq+0x1ee/0x7c5 [ 90.226518][ C1] invoke_softirq+0xa4/0x130 [ 90.231136][ C1] irq_exit_rcu+0x76/0x130 [ 90.235592][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.241246][ C1] [ 90.244190][ C1] [ 90.247130][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.253138][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 90.258700][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 82 dc fb fa 0f 00 2d b5 61 91 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 52 89 fb 44 8b 65 8c e9 a1 fa [ 90.278327][ C1] RSP: 0018:ffff888102c4fc28 EFLAGS: 00000246 [ 90.284408][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.292380][ C1] RDX: ffff888102c3c100 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.300373][ C1] RBP: ffff888102c4fcc0 R08: ffffffff86ce87c9 R09: ffffffff86ce866b [ 90.308374][ C1] R10: 0000000000000002 R11: ffff888102c3c100 R12: 0000000000000000 [ 90.316352][ C1] R13: ffff888102c3cc40 R14: 0000000000000000 R15: ffff888141333c64 [ 90.324336][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 90.329291][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.334264][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.339233][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 90.344530][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 90.349774][ C1] cpuidle_enter+0xf4/0x180 [ 90.354313][ C1] do_idle+0x68d/0x840 [ 90.358404][ C1] cpu_startup_entry+0x3c/0x40 [ 90.363185][ C1] ? setup_APIC_timer+0x390/0x390 [ 90.368236][ C1] start_secondary+0x112/0x120 [ 90.373044][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 90.378975][ C1] [ 90.382219][ C1] Kernel Offset: disabled [ 90.386549][ C1] Rebooting in 86400 seconds..