forked to background, child pid 3048 no interfaces have a carrier [ 63.550980][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.567193][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 85.411916][ T1559] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.932260][ T1559] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.941425][ T1559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.949613][ T1559] usb 1-1: Product: syz [ 85.953919][ T1559] usb 1-1: Manufacturer: syz [ 85.958569][ T1559] usb 1-1: SerialNumber: syz [ 86.013500][ T1559] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.632207][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.841990][ C1] ===================================================== [ 86.849031][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 [ 86.856262][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 86.861143][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 86.866467][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 86.871882][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 86.877102][ C1] dummy_timer+0x157a/0x51c0 [ 86.881716][ C1] call_timer_fn+0x81/0x540 [ 86.886252][ C1] expire_timers+0x2f5/0x6d0 [ 86.890860][ C1] __run_timers+0x66b/0x9f0 [ 86.895477][ C1] run_timer_softirq+0x71/0xe0 [ 86.900270][ C1] __do_softirq+0x1ee/0x7c5 [ 86.904801][ C1] invoke_softirq+0xa4/0x130 [ 86.909422][ C1] irq_exit_rcu+0x76/0x130 [ 86.913872][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 86.919521][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 86.925523][ C1] acpi_idle_enter+0x747/0x820 [ 86.930297][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 86.935537][ C1] cpuidle_enter+0xf4/0x180 [ 86.940057][ C1] do_idle+0x68d/0x840 [ 86.944132][ C1] cpu_startup_entry+0x3c/0x40 [ 86.948910][ C1] start_secondary+0x112/0x120 [ 86.953712][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 86.959629][ C1] [ 86.961947][ C1] Uninit was created at: [ 86.966224][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 86.972133][ C1] __alloc_skb+0x545/0xf90 [ 86.976586][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 86.981629][ C1] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 86.986859][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 86.992252][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 86.997468][ C1] dummy_timer+0x157a/0x51c0 [ 87.002076][ C1] call_timer_fn+0x81/0x540 [ 87.006593][ C1] expire_timers+0x2f5/0x6d0 [ 87.011192][ C1] __run_timers+0x66b/0x9f0 [ 87.015704][ C1] run_timer_softirq+0x71/0xe0 [ 87.020480][ C1] __do_softirq+0x1ee/0x7c5 [ 87.025005][ C1] [ 87.027320][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc4-syzkaller #0 [ 87.035311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.045385][ C1] ===================================================== [ 87.052330][ C1] Disabling lock debugging due to kernel taint [ 87.058488][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 87.064929][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.17.0-rc4-syzkaller #0 [ 87.074325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.084404][ C1] Call Trace: [ 87.087691][ C1] [ 87.090542][ C1] dump_stack_lvl+0x1ff/0x28e [ 87.095301][ C1] dump_stack+0x25/0x28 [ 87.099479][ C1] panic+0x487/0xe1f [ 87.103404][ C1] ? add_taint+0x181/0x210 [ 87.107838][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 87.113669][ C1] kmsan_report+0x2e6/0x2f0 [ 87.118211][ C1] ? __msan_warning+0xb8/0x130 [ 87.122996][ C1] ? ath9k_htc_rx_msg+0x26b/0xbb0 [ 87.128045][ C1] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 87.133549][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 87.139118][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 87.144602][ C1] ? dummy_timer+0x157a/0x51c0 [ 87.149409][ C1] ? call_timer_fn+0x81/0x540 [ 87.154099][ C1] ? expire_timers+0x2f5/0x6d0 [ 87.158877][ C1] ? __run_timers+0x66b/0x9f0 [ 87.163565][ C1] ? run_timer_softirq+0x71/0xe0 [ 87.168516][ C1] ? __do_softirq+0x1ee/0x7c5 [ 87.173214][ C1] ? invoke_softirq+0xa4/0x130 [ 87.178096][ C1] ? irq_exit_rcu+0x76/0x130 [ 87.182747][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 87.188597][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 87.194784][ C1] ? acpi_idle_enter+0x747/0x820 [ 87.199731][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 87.205145][ C1] ? cpuidle_enter+0xf4/0x180 [ 87.209860][ C1] ? do_idle+0x68d/0x840 [ 87.214115][ C1] ? cpu_startup_entry+0x3c/0x40 [ 87.219085][ C1] ? start_secondary+0x112/0x120 [ 87.224042][ C1] ? secondary_startup_64_no_verify+0xc4/0xcb [ 87.230133][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 87.235977][ C1] ? kmsan_get_metadata+0x33/0x220 [ 87.241140][ C1] ? kmsan_get_metadata+0x33/0x220 [ 87.246280][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 87.252129][ C1] ? __alloc_skb+0xae7/0xf90 [ 87.256742][ C1] ? kmsan_get_metadata+0x33/0x220 [ 87.261877][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 87.267713][ C1] __msan_warning+0xb8/0x130 [ 87.272322][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 87.277209][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 87.282539][ C1] ? kmsan_get_metadata+0x33/0x220 [ 87.287676][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 87.293513][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 87.299435][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 87.304846][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 87.310076][ C1] dummy_timer+0x157a/0x51c0 [ 87.314743][ C1] ? dummy_free_streams+0x940/0x940 [ 87.319962][ C1] call_timer_fn+0x81/0x540 [ 87.324490][ C1] expire_timers+0x2f5/0x6d0 [ 87.329098][ C1] ? dummy_free_streams+0x940/0x940 [ 87.334341][ C1] __run_timers+0x66b/0x9f0 [ 87.338866][ C1] ? kmsan_get_metadata+0x33/0x220 [ 87.344006][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 87.349848][ C1] run_timer_softirq+0x71/0xe0 [ 87.354625][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 87.359841][ C1] __do_softirq+0x1ee/0x7c5 [ 87.364377][ C1] invoke_softirq+0xa4/0x130 [ 87.368992][ C1] irq_exit_rcu+0x76/0x130 [ 87.373429][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 87.379086][ C1] [ 87.382011][ C1] [ 87.384934][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 87.390937][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 87.396495][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 82 dc fb fa 0f 00 2d b5 61 91 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 52 89 fb 44 8b 65 8c e9 a1 fa [ 87.416117][ C1] RSP: 0018:ffff888102c4fc28 EFLAGS: 00000246 [ 87.422190][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.430178][ C1] RDX: ffff888102c3c100 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.438156][ C1] RBP: ffff888102c4fcc0 R08: ffffffff86ce87c9 R09: ffffffff86ce866b [ 87.446133][ C1] R10: 0000000000000002 R11: ffff888102c3c100 R12: 0000000000000000 [ 87.454106][ C1] R13: ffff888102c3cc40 R14: 0000000000000000 R15: ffff888141343c64 [ 87.462175][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 87.467124][ C1] ? acpi_idle_enter+0x719/0x820 [ 87.472083][ C1] ? acpi_idle_enter+0x719/0x820 [ 87.477063][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 87.482483][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 87.487751][ C1] cpuidle_enter+0xf4/0x180 [ 87.492313][ C1] do_idle+0x68d/0x840 [ 87.496409][ C1] cpu_startup_entry+0x3c/0x40 [ 87.501193][ C1] ? setup_APIC_timer+0x390/0x390 [ 87.506252][ C1] start_secondary+0x112/0x120 [ 87.511045][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 87.516979][ C1] [ 87.520377][ C1] Kernel Offset: disabled [ 87.524700][ C1] Rebooting in 86400 seconds..