forked to background, child pid 3048 no interfaces have a carrier [ 69.640439][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.655172][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 95.143277][ T5] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. executing program [ 96.691886][ T1021] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.212390][ T1021] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.221578][ T1021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.229917][ T1021] usb 1-1: Product: syz [ 97.234267][ T1021] usb 1-1: Manufacturer: syz [ 97.238988][ T1021] usb 1-1: SerialNumber: syz [ 97.293549][ T1021] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 97.912401][ T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.121903][ C0] ===================================================== [ 98.128944][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 [ 98.136614][ C0] ath9k_htc_rx_msg+0x26b/0xbb0 [ 98.141606][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 98.146948][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 98.152347][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 98.157565][ C0] dummy_timer+0x157a/0x51c0 [ 98.162194][ C0] call_timer_fn+0x81/0x540 [ 98.166715][ C0] expire_timers+0x2f5/0x6d0 [ 98.171344][ C0] __run_timers+0x66b/0x9f0 [ 98.175877][ C0] run_timer_softirq+0x71/0xe0 [ 98.180656][ C0] __do_softirq+0x1ee/0x7c5 [ 98.185206][ C0] invoke_softirq+0xa4/0x130 [ 98.189818][ C0] irq_exit_rcu+0x76/0x130 [ 98.194256][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 98.199911][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 98.205916][ C0] acpi_idle_enter+0x747/0x820 [ 98.210692][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 98.215918][ C0] cpuidle_enter+0xf4/0x180 [ 98.220454][ C0] do_idle+0x68d/0x840 [ 98.224547][ C0] cpu_startup_entry+0x3c/0x40 [ 98.229322][ C0] rest_init+0x278/0x2e0 [ 98.233580][ C0] arch_call_rest_init+0x13/0x15 [ 98.238576][ C0] start_kernel+0xa96/0xc49 [ 98.243106][ C0] x86_64_start_reservations+0x2a/0x2c [ 98.248587][ C0] x86_64_start_kernel+0xf5/0xfa [ 98.253551][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 98.259467][ C0] [ 98.261782][ C0] Uninit was created at: [ 98.266074][ C0] __kmalloc_node_track_caller+0xde3/0x14f0 [ 98.271982][ C0] __alloc_skb+0x545/0xf90 [ 98.276424][ C0] __netdev_alloc_skb+0x4b9/0x8c0 [ 98.281473][ C0] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 98.286711][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 98.292106][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 98.297325][ C0] dummy_timer+0x157a/0x51c0 [ 98.301936][ C0] call_timer_fn+0x81/0x540 [ 98.306471][ C0] expire_timers+0x2f5/0x6d0 [ 98.311071][ C0] __run_timers+0x66b/0x9f0 [ 98.315587][ C0] run_timer_softirq+0x71/0xe0 [ 98.320375][ C0] __do_softirq+0x1ee/0x7c5 [ 98.324899][ C0] [ 98.327302][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-syzkaller #0 [ 98.334958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.345018][ C0] ===================================================== [ 98.351938][ C0] Disabling lock debugging due to kernel taint [ 98.358078][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 98.364487][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.17.0-syzkaller #0 [ 98.373552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.383632][ C0] Call Trace: [ 98.386920][ C0] [ 98.389776][ C0] dump_stack_lvl+0x1ff/0x28e [ 98.394487][ C0] dump_stack+0x25/0x28 [ 98.398667][ C0] panic+0x487/0xe1f [ 98.402586][ C0] ? add_taint+0x181/0x210 [ 98.407022][ C0] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 98.412854][ C0] kmsan_report+0x2e6/0x2f0 [ 98.417422][ C0] ? __msan_warning+0xb8/0x130 [ 98.422212][ C0] ? ath9k_htc_rx_msg+0x26b/0xbb0 [ 98.427268][ C0] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 98.432767][ C0] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 98.438338][ C0] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 98.443733][ C0] ? dummy_timer+0x157a/0x51c0 [ 98.448518][ C0] ? call_timer_fn+0x81/0x540 [ 98.453209][ C0] ? expire_timers+0x2f5/0x6d0 [ 98.457990][ C0] ? __run_timers+0x66b/0x9f0 [ 98.462689][ C0] ? run_timer_softirq+0x71/0xe0 [ 98.467664][ C0] ? __do_softirq+0x1ee/0x7c5 [ 98.472379][ C0] ? invoke_softirq+0xa4/0x130 [ 98.477169][ C0] ? irq_exit_rcu+0x76/0x130 [ 98.481781][ C0] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 98.487630][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 98.493844][ C0] ? acpi_idle_enter+0x747/0x820 [ 98.498926][ C0] ? cpuidle_enter_state+0x9a8/0x1840 [ 98.504331][ C0] ? cpuidle_enter+0xf4/0x180 [ 98.509058][ C0] ? do_idle+0x68d/0x840 [ 98.513342][ C0] ? cpu_startup_entry+0x3c/0x40 [ 98.518301][ C0] ? rest_init+0x278/0x2e0 [ 98.522735][ C0] ? arch_call_rest_init+0x13/0x15 [ 98.527876][ C0] ? start_kernel+0xa96/0xc49 [ 98.532608][ C0] ? x86_64_start_reservations+0x2a/0x2c [ 98.538291][ C0] ? x86_64_start_kernel+0xf5/0xfa [ 98.543448][ C0] ? secondary_startup_64_no_verify+0xc4/0xcb [ 98.549561][ C0] ? kmsan_get_metadata+0x33/0x220 [ 98.554718][ C0] ? kmsan_get_metadata+0x33/0x220 [ 98.559883][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.565875][ C0] ? __alloc_skb+0xae7/0xf90 [ 98.570501][ C0] ? kmsan_get_metadata+0x33/0x220 [ 98.575651][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.581497][ C0] __msan_warning+0xb8/0x130 [ 98.586117][ C0] ath9k_htc_rx_msg+0x26b/0xbb0 [ 98.591015][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 98.596352][ C0] ? kmsan_get_metadata+0x33/0x220 [ 98.601494][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.607331][ C0] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 98.613260][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 98.618671][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 98.623913][ C0] dummy_timer+0x157a/0x51c0 [ 98.628590][ C0] ? dummy_free_streams+0x940/0x940 [ 98.633829][ C0] call_timer_fn+0x81/0x540 [ 98.638400][ C0] expire_timers+0x2f5/0x6d0 [ 98.643037][ C0] ? dummy_free_streams+0x940/0x940 [ 98.648290][ C0] __run_timers+0x66b/0x9f0 [ 98.652822][ C0] ? kmsan_get_metadata+0x33/0x220 [ 98.657967][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.663822][ C0] run_timer_softirq+0x71/0xe0 [ 98.668608][ C0] ? migrate_timer_list+0x4f0/0x4f0 [ 98.673922][ C0] __do_softirq+0x1ee/0x7c5 [ 98.678470][ C0] invoke_softirq+0xa4/0x130 [ 98.683106][ C0] irq_exit_rcu+0x76/0x130 [ 98.687579][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 98.693234][ C0] [ 98.696163][ C0] [ 98.699096][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 98.705119][ C0] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 98.710685][ C0] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 52 4d ff fa 0f 00 2d b5 5c 95 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 ba 76 8c fb 44 8b 65 8c e9 a1 fa [ 98.730329][ C0] RSP: 0018:ffffffff91203b48 EFLAGS: 00000246 [ 98.736416][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 98.744392][ C0] RDX: ffffffff912310c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.752380][ C0] RBP: ffffffff91203be0 R08: ffffffff86ca8dc9 R09: ffffffff86ca8c6b [ 98.760464][ C0] R10: 0000000000000002 R11: ffffffff912310c0 R12: 0000000000000000 [ 98.768455][ C0] R13: ffffffff91231c00 R14: 0000000000000000 R15: ffff888142851864 [ 98.776453][ C0] ? acpi_idle_enter+0x5bb/0x820 [ 98.781410][ C0] ? acpi_idle_enter+0x719/0x820 [ 98.786383][ C0] ? acpi_idle_enter+0x719/0x820 [ 98.791339][ C0] ? acpi_idle_lpi_enter+0x170/0x170 [ 98.796646][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 98.801895][ C0] cpuidle_enter+0xf4/0x180 [ 98.806429][ C0] do_idle+0x68d/0x840 [ 98.810516][ C0] cpu_startup_entry+0x3c/0x40 [ 98.815296][ C0] rest_init+0x278/0x2e0 [ 98.819558][ C0] arch_call_rest_init+0x13/0x15 [ 98.824516][ C0] start_kernel+0xa96/0xc49 [ 98.829046][ C0] x86_64_start_reservations+0x2a/0x2c [ 98.834528][ C0] x86_64_start_kernel+0xf5/0xfa [ 98.839484][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 98.845406][ C0] [ 98.848501][ C0] Kernel Offset: disabled [ 98.852824][ C0] Rebooting in 86400 seconds..