forked to background, child pid 3048 no interfaces have a carrier [ 63.378668][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.422028][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 88.023136][ T122] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.543328][ T122] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.552596][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.560858][ T122] usb 1-1: Product: syz [ 88.565192][ T122] usb 1-1: Manufacturer: syz [ 88.569851][ T122] usb 1-1: SerialNumber: syz [ 88.614783][ T122] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.223320][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.443714][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 89.449592][ C0] ===================================================== [ 89.456606][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.463831][ C0] ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.468707][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 89.474018][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.479423][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.484645][ C0] dummy_timer+0x157a/0x51c0 [ 89.489255][ C0] call_timer_fn+0x81/0x540 [ 89.493769][ C0] expire_timers+0x2f5/0x6d0 [ 89.498368][ C0] __run_timers+0x66b/0x9f0 [ 89.502970][ C0] run_timer_softirq+0x71/0xe0 [ 89.507764][ C0] __do_softirq+0x1ee/0x7c5 [ 89.512294][ C0] invoke_softirq+0xa4/0x130 [ 89.516917][ C0] irq_exit_rcu+0x76/0x130 [ 89.521353][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 89.527014][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 89.533026][ C0] acpi_idle_enter+0x747/0x820 [ 89.537818][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 89.543065][ C0] cpuidle_enter+0xf4/0x180 [ 89.547598][ C0] do_idle+0x68d/0x840 [ 89.551673][ C0] cpu_startup_entry+0x3c/0x40 [ 89.556466][ C0] rest_init+0x278/0x2e0 [ 89.560754][ C0] arch_call_rest_init+0x13/0x15 [ 89.565748][ C0] start_kernel+0xa96/0xc49 [ 89.570284][ C0] x86_64_start_reservations+0x2a/0x2c [ 89.575764][ C0] x86_64_start_kernel+0xf5/0xfa [ 89.580721][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 89.586638][ C0] [ 89.588951][ C0] Uninit was created at: [ 89.593233][ C0] __kmalloc_node_track_caller+0xe0c/0x1510 [ 89.599164][ C0] __alloc_skb+0x545/0xf90 [ 89.603603][ C0] __netdev_alloc_skb+0x4b9/0x8c0 [ 89.608647][ C0] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 89.613882][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.619294][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.624601][ C0] dummy_timer+0x157a/0x51c0 [ 89.629221][ C0] call_timer_fn+0x81/0x540 [ 89.633748][ C0] expire_timers+0x2f5/0x6d0 [ 89.638386][ C0] __run_timers+0x66b/0x9f0 [ 89.642945][ C0] run_timer_softirq+0x71/0xe0 [ 89.647743][ C0] __do_softirq+0x1ee/0x7c5 [ 89.652287][ C0] [ 89.654603][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc4-syzkaller #0 [ 89.662592][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.672666][ C0] ===================================================== [ 89.679593][ C0] Disabling lock debugging due to kernel taint [ 89.685753][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 89.692169][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.17.0-rc4-syzkaller #0 [ 89.701557][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.711627][ C0] Call Trace: [ 89.714903][ C0] [ 89.717750][ C0] dump_stack_lvl+0x1ff/0x28e [ 89.722467][ C0] dump_stack+0x25/0x28 [ 89.726649][ C0] panic+0x487/0xe1f [ 89.730568][ C0] ? add_taint+0x181/0x210 [ 89.735015][ C0] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 89.740871][ C0] kmsan_report+0x2e6/0x2f0 [ 89.745434][ C0] ? dev_printk_emit+0x1dd/0x21f [ 89.750430][ C0] ? __msan_warning+0xb8/0x130 [ 89.755221][ C0] ? ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.760288][ C0] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 89.765776][ C0] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.771345][ C0] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.776757][ C0] ? dummy_timer+0x157a/0x51c0 [ 89.781559][ C0] ? call_timer_fn+0x81/0x540 [ 89.786282][ C0] ? expire_timers+0x2f5/0x6d0 [ 89.791090][ C0] ? __run_timers+0x66b/0x9f0 [ 89.795781][ C0] ? run_timer_softirq+0x71/0xe0 [ 89.800733][ C0] ? __do_softirq+0x1ee/0x7c5 [ 89.805433][ C0] ? invoke_softirq+0xa4/0x130 [ 89.810222][ C0] ? irq_exit_rcu+0x76/0x130 [ 89.814850][ C0] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 89.820688][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 89.826877][ C0] ? acpi_idle_enter+0x747/0x820 [ 89.831833][ C0] ? cpuidle_enter_state+0x9a8/0x1840 [ 89.837233][ C0] ? cpuidle_enter+0xf4/0x180 [ 89.841971][ C0] ? do_idle+0x68d/0x840 [ 89.846224][ C0] ? cpu_startup_entry+0x3c/0x40 [ 89.851174][ C0] ? rest_init+0x278/0x2e0 [ 89.855604][ C0] ? arch_call_rest_init+0x13/0x15 [ 89.860736][ C0] ? start_kernel+0xa96/0xc49 [ 89.865436][ C0] ? x86_64_start_reservations+0x2a/0x2c [ 89.871104][ C0] ? x86_64_start_kernel+0xf5/0xfa [ 89.876260][ C0] ? secondary_startup_64_no_verify+0xc4/0xcb [ 89.882376][ C0] ? __dev_printk+0x3be/0x440 [ 89.887101][ C0] ? _dev_err+0x1ea/0x22f [ 89.891451][ C0] ? kmsan_get_metadata+0x33/0x220 [ 89.896594][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 89.902464][ C0] __msan_warning+0xb8/0x130 [ 89.907095][ C0] ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.911997][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 89.917333][ C0] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 89.923273][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.928698][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.933923][ C0] dummy_timer+0x157a/0x51c0 [ 89.938583][ C0] ? dummy_free_streams+0x940/0x940 [ 89.943802][ C0] call_timer_fn+0x81/0x540 [ 89.948325][ C0] expire_timers+0x2f5/0x6d0 [ 89.952936][ C0] ? dummy_free_streams+0x940/0x940 [ 89.958183][ C0] __run_timers+0x66b/0x9f0 [ 89.962727][ C0] ? kmsan_get_metadata+0x33/0x220 [ 89.967889][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 89.973726][ C0] run_timer_softirq+0x71/0xe0 [ 89.978507][ C0] ? migrate_timer_list+0x4f0/0x4f0 [ 89.983722][ C0] __do_softirq+0x1ee/0x7c5 [ 89.988268][ C0] invoke_softirq+0xa4/0x130 [ 89.992911][ C0] irq_exit_rcu+0x76/0x130 [ 89.997387][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.003060][ C0] [ 90.005995][ C0] [ 90.008920][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.014931][ C0] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 90.020517][ C0] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 82 dc fb fa 0f 00 2d b5 61 91 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 52 89 fb 44 8b 65 8c e9 a1 fa [ 90.040155][ C0] RSP: 0018:ffffffff91203b48 EFLAGS: 00000246 [ 90.046237][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.054228][ C0] RDX: ffffffff912310c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.062217][ C0] RBP: ffffffff91203be0 R08: ffffffff86ce87c9 R09: ffffffff86ce866b [ 90.070197][ C0] R10: 0000000000000002 R11: ffffffff912310c0 R12: 0000000000000000 [ 90.078171][ C0] R13: ffffffff91231c00 R14: 0000000000000000 R15: ffff888102de1c64 [ 90.086156][ C0] ? acpi_idle_enter+0x5bb/0x820 [ 90.091107][ C0] ? acpi_idle_enter+0x719/0x820 [ 90.096064][ C0] ? acpi_idle_enter+0x719/0x820 [ 90.101052][ C0] ? acpi_idle_lpi_enter+0x170/0x170 [ 90.106349][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 90.111603][ C0] cpuidle_enter+0xf4/0x180 [ 90.116132][ C0] do_idle+0x68d/0x840 [ 90.120217][ C0] cpu_startup_entry+0x3c/0x40 [ 90.124995][ C0] rest_init+0x278/0x2e0 [ 90.129256][ C0] arch_call_rest_init+0x13/0x15 [ 90.134230][ C0] start_kernel+0xa96/0xc49 [ 90.138758][ C0] x86_64_start_reservations+0x2a/0x2c [ 90.144236][ C0] x86_64_start_kernel+0xf5/0xfa [ 90.149192][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 90.155114][ C0] [ 90.158306][ C0] Kernel Offset: disabled [ 90.162628][ C0] Rebooting in 86400 seconds..