[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.209' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 138.282921][ T777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.813367][ T777] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.822764][ T777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.831077][ T777] usb 1-1: Product: syz [ 138.835501][ T777] usb 1-1: Manufacturer: syz [ 138.840190][ T777] usb 1-1: SerialNumber: syz [ 138.895902][ T777] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.563080][ T2952] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.782932][ C1] ===================================================== [ 139.789887][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.797206][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.12.0-rc6-syzkaller #0 [ 139.805165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.815200][ C1] Call Trace: [ 139.818467][ C1] [ 139.821293][ C1] dump_stack+0x24c/0x2e0 [ 139.825622][ C1] kmsan_report+0xfb/0x1e0 [ 139.830196][ C1] __msan_warning+0x5c/0xa0 [ 139.834684][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 139.839609][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 139.845671][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 139.851128][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.857263][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 139.863058][ C1] ? kmsan_get_metadata+0x116/0x180 [ 139.868239][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.874026][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 139.879904][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 139.885263][ C1] ? kmsan_get_metadata+0x116/0x180 [ 139.890814][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 139.895997][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.901785][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.907920][ C1] dummy_timer+0xda7/0x74f0 [ 139.912410][ C1] ? kmsan_get_metadata+0x116/0x180 [ 139.917592][ C1] ? kmsan_get_metadata+0x116/0x180 [ 139.922775][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 139.928566][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 139.933757][ C1] call_timer_fn+0x7d/0x450 [ 139.938260][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 139.944312][ C1] expire_timers+0x328/0x6c0 [ 139.948890][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 139.954074][ C1] __run_timers+0x624/0x9e0 [ 139.958578][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 139.964717][ C1] ? irqtime_account_irq+0xe3/0x380 [ 139.969715][ T7] usb 1-1: USB disconnect, device number 2 [ 139.969932][ C1] ? kmsan_get_metadata+0x116/0x180 [ 139.969969][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 139.970007][ C1] run_timer_softirq+0x2d/0x50 [ 139.970043][ C1] __do_softirq+0x1b9/0x715 [ 139.995693][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.001529][ C1] __irq_exit_rcu+0x22f/0x280 [ 140.006236][ C1] irq_exit_rcu+0xe/0x10 [ 140.010499][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.016165][ C1] [ 140.019103][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.025121][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.030688][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.050508][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 140.056579][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 140.064533][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.072486][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.080451][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 140.088406][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 140.096378][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 140.101314][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.106597][ C1] cpuidle_enter_state+0x99e/0x1750 [ 140.111790][ C1] cpuidle_enter+0xe3/0x170 [ 140.116281][ C1] do_idle+0x5df/0x790 [ 140.120345][ C1] cpu_startup_entry+0x45/0x50 [ 140.125098][ C1] ? setup_APIC_timer+0x210/0x210 [ 140.130125][ C1] start_secondary+0xe9/0xf0 [ 140.134714][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 140.140625][ C1] [ 140.142963][ C1] Uninit was created at: [ 140.147180][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.152913][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 140.157779][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.163672][ C1] __alloc_skb+0x4dd/0xe90 [ 140.168077][ C1] __netdev_alloc_skb+0x45d/0x810 [ 140.173083][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.178329][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.183749][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.189000][ C1] dummy_timer+0xda7/0x74f0 [ 140.193495][ C1] call_timer_fn+0x7d/0x450 [ 140.197987][ C1] expire_timers+0x328/0x6c0 [ 140.202561][ C1] __run_timers+0x624/0x9e0 [ 140.207049][ C1] run_timer_softirq+0x2d/0x50 [ 140.211799][ C1] __do_softirq+0x1b9/0x715 [ 140.216289][ C1] ===================================================== [ 140.223197][ C1] Disabling lock debugging due to kernel taint [ 140.229336][ C1] ===================================================== [ 140.236242][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.243531][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.252890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.262941][ C1] Call Trace: [ 140.266212][ C1] [ 140.269042][ C1] dump_stack+0x24c/0x2e0 [ 140.273371][ C1] kmsan_report+0xfb/0x1e0 [ 140.277776][ C1] __msan_warning+0x5c/0xa0 [ 140.282273][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 140.287197][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.293248][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.298526][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.304662][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.310476][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.315657][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.321445][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.327325][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.332681][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.337874][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.343078][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.348876][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.355041][ C1] dummy_timer+0xda7/0x74f0 [ 140.359551][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.364801][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.369994][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 140.375614][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.380802][ C1] call_timer_fn+0x7d/0x450 [ 140.385305][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.391186][ C1] expire_timers+0x328/0x6c0 [ 140.395764][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.400947][ C1] __run_timers+0x624/0x9e0 [ 140.405528][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.411679][ C1] ? irqtime_account_irq+0xe3/0x380 [ 140.416864][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.422057][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 140.427271][ C1] run_timer_softirq+0x2d/0x50 [ 140.432149][ C1] __do_softirq+0x1b9/0x715 [ 140.436813][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.442621][ C1] __irq_exit_rcu+0x22f/0x280 [ 140.447380][ C1] irq_exit_rcu+0xe/0x10 [ 140.451618][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.457259][ C1] [ 140.460228][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.466197][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.471733][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.493279][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 140.499521][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 140.507570][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.515587][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.526847][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 140.534855][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 140.542904][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 140.547938][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.553207][ C1] cpuidle_enter_state+0x99e/0x1750 [ 140.558393][ C1] cpuidle_enter+0xe3/0x170 [ 140.562908][ C1] do_idle+0x5df/0x790 [ 140.566969][ C1] cpu_startup_entry+0x45/0x50 [ 140.571720][ C1] ? setup_APIC_timer+0x210/0x210 [ 140.576727][ C1] start_secondary+0xe9/0xf0 [ 140.581386][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 140.587279][ C1] [ 140.589583][ C1] Uninit was created at: [ 140.593817][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 140.599544][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 140.604204][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 140.610082][ C1] __alloc_skb+0x4dd/0xe90 [ 140.614478][ C1] __netdev_alloc_skb+0x45d/0x810 [ 140.619482][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 140.624689][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.630042][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.635219][ C1] dummy_timer+0xda7/0x74f0 [ 140.639827][ C1] call_timer_fn+0x7d/0x450 [ 140.644326][ C1] expire_timers+0x328/0x6c0 [ 140.648913][ C1] __run_timers+0x624/0x9e0 [ 140.653407][ C1] run_timer_softirq+0x2d/0x50 [ 140.658159][ C1] __do_softirq+0x1b9/0x715 [ 140.663086][ C1] ===================================================== [ 140.670183][ C1] ===================================================== [ 140.677113][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.684413][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 140.693763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.703910][ C1] Call Trace: [ 140.707275][ C1] [ 140.710108][ C1] dump_stack+0x24c/0x2e0 [ 140.714465][ C1] kmsan_report+0xfb/0x1e0 [ 140.718886][ C1] __msan_warning+0x5c/0xa0 [ 140.723371][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 140.728296][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 140.734363][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 140.739665][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.745954][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 140.751800][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.758056][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.763885][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 140.769777][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 140.775159][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.780360][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 140.785544][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.791339][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 140.797565][ C1] dummy_timer+0xda7/0x74f0 [ 140.802059][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.807247][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.812445][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 140.818060][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.823257][ C1] call_timer_fn+0x7d/0x450 [ 140.828025][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.833818][ C1] expire_timers+0x328/0x6c0 [ 140.838496][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 140.843706][ C1] __run_timers+0x624/0x9e0 [ 140.848205][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 140.854348][ C1] ? irqtime_account_irq+0xe3/0x380 [ 140.859551][ C1] ? kmsan_get_metadata+0x116/0x180 [ 140.864752][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 140.869939][ C1] run_timer_softirq+0x2d/0x50 [ 140.874702][ C1] __do_softirq+0x1b9/0x715 [ 140.879201][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 140.885070][ C1] __irq_exit_rcu+0x22f/0x280 [ 140.889752][ C1] irq_exit_rcu+0xe/0x10 [ 140.893992][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 140.899612][ C1] [ 140.902524][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 140.908493][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 140.914024][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 140.936839][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 140.943000][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 140.951138][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.959097][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 140.967060][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 140.975014][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 140.982972][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 140.988007][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 140.993283][ C1] cpuidle_enter_state+0x99e/0x1750 [ 140.998469][ C1] cpuidle_enter+0xe3/0x170 [ 141.002954][ C1] do_idle+0x5df/0x790 [ 141.007010][ C1] cpu_startup_entry+0x45/0x50 [ 141.011759][ C1] ? setup_APIC_timer+0x210/0x210 [ 141.016766][ C1] start_secondary+0xe9/0xf0 [ 141.021386][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 141.027354][ C1] [ 141.029712][ C1] Uninit was created at: [ 141.033939][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.039743][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 141.044409][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.050306][ C1] __alloc_skb+0x4dd/0xe90 [ 141.054722][ C1] __netdev_alloc_skb+0x45d/0x810 [ 141.059738][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.064960][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.070319][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.075496][ C1] dummy_timer+0xda7/0x74f0 [ 141.080078][ C1] call_timer_fn+0x7d/0x450 [ 141.084616][ C1] expire_timers+0x328/0x6c0 [ 141.089197][ C1] __run_timers+0x624/0x9e0 [ 141.093694][ C1] run_timer_softirq+0x2d/0x50 [ 141.098558][ C1] __do_softirq+0x1b9/0x715 [ 141.103066][ C1] ===================================================== [ 141.110017][ C1] ===================================================== [ 141.116931][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.124209][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.133558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.143595][ C1] Call Trace: [ 141.146865][ C1] [ 141.149715][ C1] dump_stack+0x24c/0x2e0 [ 141.154034][ C1] kmsan_report+0xfb/0x1e0 [ 141.158436][ C1] __msan_warning+0x5c/0xa0 [ 141.162930][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 141.167863][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.173926][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.179217][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.185367][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.191166][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.196349][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.202151][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.208041][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.213811][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.219015][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.224276][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.230272][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.236446][ C1] dummy_timer+0xda7/0x74f0 [ 141.240958][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.246154][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.251337][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.257040][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.262241][ C1] call_timer_fn+0x7d/0x450 [ 141.266734][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.272524][ C1] expire_timers+0x328/0x6c0 [ 141.277102][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.282342][ C1] __run_timers+0x624/0x9e0 [ 141.286847][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.293077][ C1] ? irqtime_account_irq+0xe3/0x380 [ 141.298273][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.303476][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 141.308677][ C1] run_timer_softirq+0x2d/0x50 [ 141.313430][ C1] __do_softirq+0x1b9/0x715 [ 141.317929][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.323737][ C1] __irq_exit_rcu+0x22f/0x280 [ 141.328478][ C1] irq_exit_rcu+0xe/0x10 [ 141.332721][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.338363][ C1] [ 141.342063][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.348042][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.353580][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.373198][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 141.379258][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 141.387212][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.395189][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.403150][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 141.411107][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 141.419065][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 141.424008][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.429287][ C1] cpuidle_enter_state+0x99e/0x1750 [ 141.434473][ C1] cpuidle_enter+0xe3/0x170 [ 141.439205][ C1] do_idle+0x5df/0x790 [ 141.443281][ C1] cpu_startup_entry+0x45/0x50 [ 141.448048][ C1] ? setup_APIC_timer+0x210/0x210 [ 141.453062][ C1] start_secondary+0xe9/0xf0 [ 141.457642][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 141.463540][ C1] [ 141.465856][ C1] Uninit was created at: [ 141.470067][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.475783][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 141.480456][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.486336][ C1] __alloc_skb+0x4dd/0xe90 [ 141.490735][ C1] __netdev_alloc_skb+0x45d/0x810 [ 141.495745][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.500948][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.506396][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.511683][ C1] dummy_timer+0xda7/0x74f0 [ 141.516183][ C1] call_timer_fn+0x7d/0x450 [ 141.520676][ C1] expire_timers+0x328/0x6c0 [ 141.525262][ C1] __run_timers+0x624/0x9e0 [ 141.529748][ C1] run_timer_softirq+0x2d/0x50 [ 141.534495][ C1] __do_softirq+0x1b9/0x715 [ 141.539013][ C1] ===================================================== [ 141.545954][ C1] ===================================================== [ 141.552868][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.560150][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 141.569516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.579561][ C1] Call Trace: [ 141.582950][ C1] [ 141.585780][ C1] dump_stack+0x24c/0x2e0 [ 141.590098][ C1] kmsan_report+0xfb/0x1e0 [ 141.594499][ C1] __msan_warning+0x5c/0xa0 [ 141.598988][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 141.603909][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 141.610059][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 141.615343][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.621483][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 141.627285][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.632472][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.638258][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 141.644139][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.649494][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.654688][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.659869][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.665657][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.671804][ C1] dummy_timer+0xda7/0x74f0 [ 141.676293][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.681478][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.686662][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 141.692289][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.697480][ C1] call_timer_fn+0x7d/0x450 [ 141.701984][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.707785][ C1] expire_timers+0x328/0x6c0 [ 141.712375][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 141.717560][ C1] __run_timers+0x624/0x9e0 [ 141.722052][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.728204][ C1] ? irqtime_account_irq+0xe3/0x380 [ 141.733403][ C1] ? kmsan_get_metadata+0x116/0x180 [ 141.738588][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 141.743789][ C1] run_timer_softirq+0x2d/0x50 [ 141.748552][ C1] __do_softirq+0x1b9/0x715 [ 141.753042][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 141.758845][ C1] __irq_exit_rcu+0x22f/0x280 [ 141.763614][ C1] irq_exit_rcu+0xe/0x10 [ 141.767847][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 141.773479][ C1] [ 141.776414][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 141.782401][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 141.787933][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 141.807530][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 141.813592][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 141.821553][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.829524][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 141.837539][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 141.845509][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 141.853476][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 141.858416][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 141.863688][ C1] cpuidle_enter_state+0x99e/0x1750 [ 141.868873][ C1] cpuidle_enter+0xe3/0x170 [ 141.873363][ C1] do_idle+0x5df/0x790 [ 141.877441][ C1] cpu_startup_entry+0x45/0x50 [ 141.882189][ C1] ? setup_APIC_timer+0x210/0x210 [ 141.887395][ C1] start_secondary+0xe9/0xf0 [ 141.891981][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 141.897869][ C1] [ 141.900193][ C1] Uninit was created at: [ 141.904412][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 141.910216][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 141.914907][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 141.920801][ C1] __alloc_skb+0x4dd/0xe90 [ 141.925206][ C1] __netdev_alloc_skb+0x45d/0x810 [ 141.930228][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 141.935419][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 141.940778][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 141.945977][ C1] dummy_timer+0xda7/0x74f0 [ 141.950475][ C1] call_timer_fn+0x7d/0x450 [ 141.954971][ C1] expire_timers+0x328/0x6c0 [ 141.959690][ C1] __run_timers+0x624/0x9e0 [ 141.964195][ C1] run_timer_softirq+0x2d/0x50 [ 141.968946][ C1] __do_softirq+0x1b9/0x715 [ 141.973437][ C1] ===================================================== [ 141.984937][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 142.005047][ C1] clocksource: 'acpi_pm' wd_now: a73c94 wd_last: 1fab55 mask: ffffff [ 142.015367][ C1] clocksource: 'tsc' cs_now: 4f9d9058a8 cs_last: 4e49546172 mask: ffffffffffffffff [ 142.027309][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 142.034790][ T8229] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. executing program [ 142.044514][ T8229] sched_clock: Marking unstable (142092017559, -57235325)<-(142038797553, -4013747) [ 142.044782][ T2952] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 142.044782][ T2952] ath9k_htc: Failed to initialize the device [ 142.069919][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 142.104435][ T8234] clocksource: Switched to clocksource acpi_pm [ 142.543069][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.083190][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.092503][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.100829][ T7] usb 1-1: Product: syz [ 143.105366][ T7] usb 1-1: Manufacturer: syz [ 143.110143][ T7] usb 1-1: SerialNumber: syz [ 143.154558][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.743130][ T4674] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.963032][ C0] ===================================================== [ 143.970161][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 143.972892][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 143.983306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.983306][ C0] Call Trace: [ 143.983306][ C0] [ 143.983306][ C0] dump_stack+0x24c/0x2e0 [ 144.008651][ C0] kmsan_report+0xfb/0x1e0 [ 144.013557][ C0] __msan_warning+0x5c/0xa0 [ 144.013557][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 144.023199][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.032932][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.032932][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.032932][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.032932][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.032932][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.032932][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.032932][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.032932][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.032932][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.032932][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.032932][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.032932][ C0] dummy_timer+0xda7/0x74f0 [ 144.032932][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.032932][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.032932][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.032932][ C0] call_timer_fn+0x7d/0x450 [ 144.032932][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.032932][ C0] expire_timers+0x328/0x6c0 [ 144.032932][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.147114][ C0] __run_timers+0x624/0x9e0 [ 144.153861][ T2952] usb 1-1: USB disconnect, device number 3 [ 144.147114][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.147114][ C0] ? irqtime_account_irq+0x5e/0x380 [ 144.147114][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.147114][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.147114][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.185978][ C0] irq_exit_rcu+0xe/0x10 [ 144.185978][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.185978][ C0] [ 144.185978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.185978][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.185978][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.185978][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.185978][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.185978][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.185978][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.185978][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.185978][ C0] R13: ffff8881049d4064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.185978][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.185978][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.185978][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.185978][ C0] cpuidle_enter+0xe3/0x170 [ 144.185978][ C0] do_idle+0x5df/0x790 [ 144.185978][ C0] cpu_startup_entry+0x45/0x50 [ 144.185978][ C0] rest_init+0x1c8/0x1f0 [ 144.185978][ C0] arch_call_rest_init+0x13/0x15 [ 144.185978][ C0] start_kernel+0xa17/0xbd8 [ 144.185978][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.185978][ C0] x86_64_start_kernel+0x86/0x89 [ 144.185978][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.185978][ C0] [ 144.185978][ C0] Uninit was created at: [ 144.185978][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.185978][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.185978][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.185978][ C0] __alloc_skb+0x4dd/0xe90 [ 144.185978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 144.185978][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.185978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.185978][ C0] Call Trace: [ 144.185978][ C0] [ 144.185978][ C0] dump_stack+0x24c/0x2e0 [ 144.185978][ C0] kmsan_report+0xfb/0x1e0 [ 144.185978][ C0] __msan_warning+0x5c/0xa0 [ 144.185978][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.185978][ C0] ? irqtime_account_irq+0x5e/0x380 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.185978][ C0] irq_exit_rcu+0xe/0x10 [ 144.185978][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.185978][ C0] [ 144.185978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.185978][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.185978][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.185978][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.185978][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.185978][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.185978][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.185978][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.185978][ C0] R13: ffff8881049d4064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.185978][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.185978][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.185978][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.185978][ C0] cpuidle_enter+0xe3/0x170 [ 144.185978][ C0] do_idle+0x5df/0x790 [ 144.185978][ C0] cpu_startup_entry+0x45/0x50 [ 144.185978][ C0] rest_init+0x1c8/0x1f0 [ 144.185978][ C0] arch_call_rest_init+0x13/0x15 [ 144.185978][ C0] start_kernel+0xa17/0xbd8 [ 144.185978][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.185978][ C0] x86_64_start_kernel+0x86/0x89 [ 144.185978][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.185978][ C0] [ 144.185978][ C0] Uninit was created at: [ 144.185978][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.185978][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.185978][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.185978][ C0] __alloc_skb+0x4dd/0xe90 [ 144.185978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 144.185978][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.185978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.185978][ C0] Call Trace: [ 144.185978][ C0] [ 144.185978][ C0] dump_stack+0x24c/0x2e0 [ 144.185978][ C0] kmsan_report+0xfb/0x1e0 [ 144.185978][ C0] __msan_warning+0x5c/0xa0 [ 144.185978][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.185978][ C0] ? irqtime_account_irq+0x5e/0x380 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.185978][ C0] irq_exit_rcu+0xe/0x10 [ 144.185978][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.185978][ C0] [ 144.185978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.185978][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.185978][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.185978][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.185978][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.185978][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.185978][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.185978][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.185978][ C0] R13: ffff8881049d4064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.185978][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.185978][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.185978][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.185978][ C0] cpuidle_enter+0xe3/0x170 [ 144.185978][ C0] do_idle+0x5df/0x790 [ 144.185978][ C0] cpu_startup_entry+0x45/0x50 [ 144.185978][ C0] rest_init+0x1c8/0x1f0 [ 144.185978][ C0] arch_call_rest_init+0x13/0x15 [ 144.185978][ C0] start_kernel+0xa17/0xbd8 [ 144.185978][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.185978][ C0] x86_64_start_kernel+0x86/0x89 [ 144.185978][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.185978][ C0] [ 144.185978][ C0] Uninit was created at: [ 144.185978][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.185978][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.185978][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.185978][ C0] __alloc_skb+0x4dd/0xe90 [ 144.185978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 144.185978][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.185978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.185978][ C0] Call Trace: [ 144.185978][ C0] [ 144.185978][ C0] dump_stack+0x24c/0x2e0 [ 144.185978][ C0] kmsan_report+0xfb/0x1e0 [ 144.185978][ C0] __msan_warning+0x5c/0xa0 [ 144.185978][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.185978][ C0] ? irqtime_account_irq+0x5e/0x380 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.185978][ C0] irq_exit_rcu+0xe/0x10 [ 144.185978][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.185978][ C0] [ 144.185978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.185978][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.185978][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.185978][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.185978][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.185978][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.185978][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.185978][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.185978][ C0] R13: ffff8881049d4064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.185978][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.185978][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.185978][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.185978][ C0] cpuidle_enter+0xe3/0x170 [ 144.185978][ C0] do_idle+0x5df/0x790 [ 144.185978][ C0] cpu_startup_entry+0x45/0x50 [ 144.185978][ C0] rest_init+0x1c8/0x1f0 [ 144.185978][ C0] arch_call_rest_init+0x13/0x15 [ 144.185978][ C0] start_kernel+0xa17/0xbd8 [ 144.185978][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.185978][ C0] x86_64_start_kernel+0x86/0x89 [ 144.185978][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.185978][ C0] [ 144.185978][ C0] Uninit was created at: [ 144.185978][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.185978][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.185978][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.185978][ C0] __alloc_skb+0x4dd/0xe90 [ 144.185978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] ===================================================== [ 144.185978][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 144.185978][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 144.185978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.185978][ C0] Call Trace: [ 144.185978][ C0] [ 144.185978][ C0] dump_stack+0x24c/0x2e0 [ 144.185978][ C0] kmsan_report+0xfb/0x1e0 [ 144.185978][ C0] __msan_warning+0x5c/0xa0 [ 144.185978][ C0] ath9k_htc_rx_msg+0x96f/0x1f60 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.185978][ C0] ? irqtime_account_irq+0x5e/0x380 [ 144.185978][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.185978][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.185978][ C0] __irq_exit_rcu+0x22f/0x280 [ 144.185978][ C0] irq_exit_rcu+0xe/0x10 [ 144.185978][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 144.185978][ C0] [ 144.185978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 144.185978][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 144.185978][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 144.185978][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 144.185978][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 144.185978][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.185978][ C0] RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000 [ 144.185978][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 144.185978][ C0] R13: ffff8881049d4064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 144.185978][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 144.185978][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 144.185978][ C0] cpuidle_enter_state+0x99e/0x1750 [ 144.185978][ C0] cpuidle_enter+0xe3/0x170 [ 144.185978][ C0] do_idle+0x5df/0x790 [ 144.185978][ C0] cpu_startup_entry+0x45/0x50 [ 144.185978][ C0] rest_init+0x1c8/0x1f0 [ 144.185978][ C0] arch_call_rest_init+0x13/0x15 [ 144.185978][ C0] start_kernel+0xa17/0xbd8 [ 144.185978][ C0] x86_64_start_reservations+0x2a/0x2c [ 144.185978][ C0] x86_64_start_kernel+0x86/0x89 [ 144.185978][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 144.185978][ C0] [ 144.185978][ C0] Uninit was created at: [ 144.185978][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 144.185978][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 144.185978][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 144.185978][ C0] __alloc_skb+0x4dd/0xe90 [ 144.185978][ C0] __netdev_alloc_skb+0x45d/0x810 [ 144.185978][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 144.185978][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 144.185978][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 144.185978][ C0] dummy_timer+0xda7/0x74f0 [ 144.185978][ C0] call_timer_fn+0x7d/0x450 executing program [ 144.185978][ C0] expire_timers+0x328/0x6c0 [ 144.185978][ C0] __run_timers+0x624/0x9e0 [ 144.185978][ C0] run_timer_softirq+0x2d/0x50 [ 144.185978][ C0] __do_softirq+0x1b9/0x715 [ 144.185978][ C0] ===================================================== [ 146.261973][ T4674] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 146.269259][ T4674] ath9k_htc: Failed to initialize the device [ 146.324064][ T2952] usb 1-1: ath9k_htc: USB layer deinitialized [ 146.703049][ T2952] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.223314][ T2952] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.232750][ T2952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.241310][ T2952] usb 1-1: Product: syz [ 147.245782][ T2952] usb 1-1: Manufacturer: syz [ 147.250521][ T2952] usb 1-1: SerialNumber: syz [ 147.304403][ T2952] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.883213][ T8229] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.092948][ C1] ===================================================== [ 148.099893][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 148.102844][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.102844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.102844][ C1] Call Trace: [ 148.102844][ C1] [ 148.102844][ C1] dump_stack+0x24c/0x2e0 [ 148.102844][ C1] kmsan_report+0xfb/0x1e0 [ 148.102844][ C1] __msan_warning+0x5c/0xa0 [ 148.102844][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.102844][ C1] ? irqtime_account_irq+0x5e/0x380 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.102844][ C1] irq_exit_rcu+0xe/0x10 [ 148.102844][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.102844][ C1] [ 148.102844][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.102844][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.102844][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.102844][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 148.102844][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 148.102844][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.102844][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.102844][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 148.102844][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 148.102844][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.102844][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.102844][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.102844][ C1] cpuidle_enter+0xe3/0x170 [ 148.102844][ C1] do_idle+0x5df/0x790 [ 148.102844][ C1] cpu_startup_entry+0x45/0x50 [ 148.102844][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.102844][ C1] start_secondary+0xe9/0xf0 [ 148.102844][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.102844][ C1] [ 148.102844][ C1] Uninit was created at: [ 148.102844][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.102844][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.102844][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.102844][ C1] __alloc_skb+0x4dd/0xe90 [ 148.102844][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 148.102844][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.102844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.102844][ C1] Call Trace: [ 148.102844][ C1] [ 148.102844][ C1] dump_stack+0x24c/0x2e0 [ 148.102844][ C1] kmsan_report+0xfb/0x1e0 [ 148.102844][ C1] __msan_warning+0x5c/0xa0 [ 148.102844][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.102844][ C1] ? irqtime_account_irq+0x5e/0x380 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.102844][ C1] irq_exit_rcu+0xe/0x10 [ 148.102844][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.102844][ C1] [ 148.102844][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.102844][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.102844][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.102844][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 148.102844][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 148.102844][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.102844][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.102844][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 148.102844][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 148.102844][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.102844][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.102844][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.102844][ C1] cpuidle_enter+0xe3/0x170 [ 148.102844][ C1] do_idle+0x5df/0x790 [ 148.102844][ C1] cpu_startup_entry+0x45/0x50 [ 148.102844][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.102844][ C1] start_secondary+0xe9/0xf0 [ 148.102844][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.102844][ C1] [ 148.102844][ C1] Uninit was created at: [ 148.102844][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.102844][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.102844][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.102844][ C1] __alloc_skb+0x4dd/0xe90 [ 148.102844][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 148.102844][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.102844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.102844][ C1] Call Trace: [ 148.102844][ C1] [ 148.102844][ C1] dump_stack+0x24c/0x2e0 [ 148.102844][ C1] kmsan_report+0xfb/0x1e0 [ 148.102844][ C1] __msan_warning+0x5c/0xa0 [ 148.102844][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.102844][ C1] ? irqtime_account_irq+0x5e/0x380 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.102844][ C1] irq_exit_rcu+0xe/0x10 [ 148.102844][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.102844][ C1] [ 148.102844][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.102844][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.102844][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.102844][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 148.102844][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 148.102844][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.102844][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.102844][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 148.102844][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 148.102844][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.102844][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.102844][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.102844][ C1] cpuidle_enter+0xe3/0x170 [ 148.102844][ C1] do_idle+0x5df/0x790 [ 148.102844][ C1] cpu_startup_entry+0x45/0x50 [ 148.102844][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.102844][ C1] start_secondary+0xe9/0xf0 [ 148.102844][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.102844][ C1] [ 148.102844][ C1] Uninit was created at: [ 148.102844][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.102844][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.102844][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.102844][ C1] __alloc_skb+0x4dd/0xe90 [ 148.102844][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] ===================================================== [ 148.102844][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.102844][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.102844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.102844][ C1] Call Trace: [ 148.102844][ C1] [ 148.102844][ C1] dump_stack+0x24c/0x2e0 [ 148.102844][ C1] kmsan_report+0xfb/0x1e0 [ 148.102844][ C1] __msan_warning+0x5c/0xa0 [ 148.102844][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.102844][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.102844][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.102844][ C1] dummy_timer+0xda7/0x74f0 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] call_timer_fn+0x7d/0x450 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] expire_timers+0x328/0x6c0 [ 148.102844][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.102844][ C1] __run_timers+0x624/0x9e0 [ 148.102844][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.102844][ C1] ? irqtime_account_irq+0x5e/0x380 [ 148.102844][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.102844][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.102844][ C1] run_timer_softirq+0x2d/0x50 [ 148.102844][ C1] __do_softirq+0x1b9/0x715 [ 148.102844][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.102844][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.102844][ C1] irq_exit_rcu+0xe/0x10 [ 148.102844][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.102844][ C1] [ 148.102844][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.102844][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.102844][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5 [ 148.102844][ C1] RSP: 0018:ffff888101bfbc40 EFLAGS: 00000246 [ 148.102844][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f1f40 [ 148.102844][ C1] RDX: ffff888101bf1f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.102844][ C1] RBP: ffff888101bfbcd8 R08: ffffffff869049ae R09: ffff88813fffa000 [ 148.102844][ C1] R10: 0000000000000002 R11: ffff888101bf1f40 R12: 0000000000000000 [ 148.102844][ C1] R13: ffff8881049d4464 R14: 0000000000000000 R15: ffff888101bf29c8 [ 148.102844][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.102844][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.102844][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.102844][ C1] cpuidle_enter+0xe3/0x170 [ 148.102844][ C1] do_idle+0x5df/0x790 [ 148.102844][ C1] cpu_startup_entry+0x45/0x50 [ 148.102844][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.102844][ C1] start_secondary+0xe9/0xf0 [ 148.102844][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.102844][ C1] [ 148.102844][ C1] Uninit was created at: [ 148.102844][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.102844][ C1] kmsan_slab_alloc+0x8e/0xe0