forked to background, child pid 3048 no interfaces have a carrier [ 63.909024][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.947987][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 88.522218][ T115] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.042523][ T115] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.051786][ T115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.060054][ T115] usb 1-1: Product: syz [ 89.064426][ T115] usb 1-1: Manufacturer: syz [ 89.069133][ T115] usb 1-1: SerialNumber: syz [ 89.113740][ T115] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.722410][ T3470] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.942555][ C1] ===================================================== [ 89.949590][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.956821][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 89.961695][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 89.967088][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.972474][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.977685][ C1] dummy_timer+0x157a/0x51c0 [ 89.982286][ C1] call_timer_fn+0x81/0x540 [ 89.986797][ C1] expire_timers+0x2f5/0x6d0 [ 89.991397][ C1] __run_timers+0x66b/0x9f0 [ 89.995919][ C1] run_timer_softirq+0x71/0xe0 [ 90.000692][ C1] __do_softirq+0x1ee/0x7c5 [ 90.005230][ C1] invoke_softirq+0xa4/0x130 [ 90.009849][ C1] irq_exit_rcu+0x76/0x130 [ 90.014334][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.020011][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.026021][ C1] acpi_idle_enter+0x747/0x820 [ 90.030813][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 90.036050][ C1] cpuidle_enter+0xf4/0x180 [ 90.040570][ C1] do_idle+0x68d/0x840 [ 90.044652][ C1] cpu_startup_entry+0x3c/0x40 [ 90.049436][ C1] start_secondary+0x112/0x120 [ 90.054231][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 90.060161][ C1] [ 90.062474][ C1] Uninit was created at: [ 90.066769][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 90.072683][ C1] __alloc_skb+0x545/0xf90 [ 90.077119][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 90.082184][ C1] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 90.087427][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.092817][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.098045][ C1] dummy_timer+0x157a/0x51c0 [ 90.102677][ C1] call_timer_fn+0x81/0x540 [ 90.107224][ C1] expire_timers+0x2f5/0x6d0 [ 90.111840][ C1] __run_timers+0x66b/0x9f0 [ 90.116359][ C1] run_timer_softirq+0x71/0xe0 [ 90.121134][ C1] __do_softirq+0x1ee/0x7c5 [ 90.125664][ C1] [ 90.127994][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc4-syzkaller #0 [ 90.134731][ T7] usb 1-1: USB disconnect, device number 2 [ 90.136005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.136033][ C1] ===================================================== [ 90.136047][ C1] Disabling lock debugging due to kernel taint [ 90.136062][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 90.136081][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.17.0-rc4-syzkaller #0 [ 90.180806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.190880][ C1] Call Trace: [ 90.194166][ C1] [ 90.197022][ C1] dump_stack_lvl+0x1ff/0x28e [ 90.201805][ C1] dump_stack+0x25/0x28 [ 90.205998][ C1] panic+0x487/0xe1f [ 90.209933][ C1] ? add_taint+0x181/0x210 [ 90.214378][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 90.220484][ C1] kmsan_report+0x2e6/0x2f0 [ 90.225894][ C1] ? __netdev_alloc_skb+0x4b9/0x8c0 [ 90.231136][ C1] ? __msan_warning+0xb8/0x130 [ 90.235939][ C1] ? ath9k_htc_rx_msg+0x26b/0xbb0 [ 90.241006][ C1] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 90.246508][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.252090][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.257495][ C1] ? dummy_timer+0x157a/0x51c0 [ 90.262299][ C1] ? call_timer_fn+0x81/0x540 [ 90.267007][ C1] ? expire_timers+0x2f5/0x6d0 [ 90.271797][ C1] ? __run_timers+0x66b/0x9f0 [ 90.276517][ C1] ? run_timer_softirq+0x71/0xe0 [ 90.281481][ C1] ? __do_softirq+0x1ee/0x7c5 [ 90.286206][ C1] ? invoke_softirq+0xa4/0x130 [ 90.291017][ C1] ? irq_exit_rcu+0x76/0x130 [ 90.295660][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.301524][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.307741][ C1] ? acpi_idle_enter+0x747/0x820 [ 90.312713][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 90.318142][ C1] ? cpuidle_enter+0xf4/0x180 [ 90.322853][ C1] ? do_idle+0x68d/0x840 [ 90.327118][ C1] ? cpu_startup_entry+0x3c/0x40 [ 90.332233][ C1] ? start_secondary+0x112/0x120 [ 90.337235][ C1] ? secondary_startup_64_no_verify+0xc4/0xcb [ 90.343361][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.349233][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.354399][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.359559][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.365421][ C1] ? __alloc_skb+0xae7/0xf90 [ 90.370057][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.375213][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.381071][ C1] __msan_warning+0xb8/0x130 [ 90.385705][ C1] ath9k_htc_rx_msg+0x26b/0xbb0 [ 90.390615][ C1] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 90.395991][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.401846][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 90.407788][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.413214][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.418460][ C1] dummy_timer+0x157a/0x51c0 [ 90.423127][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.429010][ C1] ? dummy_free_streams+0x940/0x940 [ 90.434249][ C1] call_timer_fn+0x81/0x540 [ 90.438796][ C1] expire_timers+0x2f5/0x6d0 [ 90.443422][ C1] ? dummy_free_streams+0x940/0x940 [ 90.448661][ C1] __run_timers+0x66b/0x9f0 [ 90.453208][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.458369][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.464227][ C1] run_timer_softirq+0x71/0xe0 [ 90.469019][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 90.474249][ C1] __do_softirq+0x1ee/0x7c5 [ 90.478811][ C1] invoke_softirq+0xa4/0x130 [ 90.483544][ C1] irq_exit_rcu+0x76/0x130 [ 90.488029][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.493704][ C1] [ 90.496644][ C1] [ 90.499585][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.505629][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 90.511229][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 82 dc fb fa 0f 00 2d b5 61 91 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 52 89 fb 44 8b 65 8c e9 a1 fa [ 90.530885][ C1] RSP: 0018:ffff888102c4fc28 EFLAGS: 00000246 [ 90.536979][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.544966][ C1] RDX: ffff888102c3c100 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.552956][ C1] RBP: ffff888102c4fcc0 R08: ffffffff86ce87c9 R09: ffffffff86ce866b [ 90.560951][ C1] R10: 0000000000000002 R11: ffff888102c3c100 R12: 0000000000000000 [ 90.568941][ C1] R13: ffff888102c3cc40 R14: 0000000000000000 R15: ffff888141337c64 [ 90.576942][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 90.581910][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.586966][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.591949][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 90.597261][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 90.602524][ C1] cpuidle_enter+0xf4/0x180 [ 90.607071][ C1] do_idle+0x68d/0x840 [ 90.611173][ C1] cpu_startup_entry+0x3c/0x40 [ 90.615967][ C1] ? setup_APIC_timer+0x390/0x390 [ 90.621042][ C1] start_secondary+0x112/0x120 [ 90.625838][ C1] secondary_startup_64_no_verify+0xc4/0xcb [ 90.631906][ C1] [ 90.635106][ C1] Kernel Offset: disabled [ 90.639437][ C1] Rebooting in 86400 seconds..