forked to background, child pid 3057 no interfaces have a carrier [ 65.983585][ T3058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.005677][ T3058] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.164' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 88.501870][ T117] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.032271][ T117] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.041469][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.049628][ T117] usb 1-1: Product: syz [ 89.054028][ T117] usb 1-1: Manufacturer: syz [ 89.058715][ T117] usb 1-1: SerialNumber: syz [ 89.103610][ T117] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.722099][ T3480] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.941879][ C1] ===================================================== [ 89.948902][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xba0 [ 89.956115][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 89.960990][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 89.966306][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 89.971699][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 89.976935][ C1] dummy_timer+0x157a/0x51c0 [ 89.981541][ C1] call_timer_fn+0x81/0x540 [ 89.986053][ C1] expire_timers+0x2f5/0x6d0 [ 89.990648][ C1] __run_timers+0x66b/0x9f0 [ 89.995168][ C1] run_timer_softirq+0x71/0xe0 [ 89.999953][ C1] __do_softirq+0x1ee/0x7c5 [ 90.004480][ C1] invoke_softirq+0xa4/0x130 [ 90.009085][ C1] irq_exit_rcu+0x76/0x130 [ 90.013521][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.019178][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.025176][ C1] acpi_idle_enter+0x747/0x820 [ 90.029959][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 90.035176][ C1] cpuidle_enter+0xf4/0x180 [ 90.039710][ C1] do_idle+0x68d/0x840 [ 90.043798][ C1] cpu_startup_entry+0x3c/0x40 [ 90.048582][ C1] start_secondary+0x112/0x120 [ 90.053356][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 90.059269][ C1] [ 90.061583][ C1] Uninit was created at: [ 90.065858][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 90.071779][ C1] __alloc_skb+0x545/0xf90 [ 90.076222][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 90.081261][ C1] ath9k_hif_usb_rx_cb+0xe4f/0x1d00 [ 90.086469][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.091860][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.097094][ C1] dummy_timer+0x157a/0x51c0 [ 90.101702][ C1] call_timer_fn+0x81/0x540 [ 90.106224][ C1] expire_timers+0x2f5/0x6d0 [ 90.110907][ C1] __run_timers+0x66b/0x9f0 [ 90.115428][ C1] run_timer_softirq+0x71/0xe0 [ 90.120212][ C1] __do_softirq+0x1ee/0x7c5 [ 90.124728][ C1] [ 90.127039][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.16.0-rc5-syzkaller #0 [ 90.135026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.145079][ C1] ===================================================== [ 90.152007][ C1] Disabling lock debugging due to kernel taint [ 90.158145][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 90.164549][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 90.173928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.183984][ C1] Call Trace: [ 90.187258][ C1] [ 90.190097][ C1] dump_stack_lvl+0x1ff/0x28e [ 90.194801][ C1] dump_stack+0x25/0x28 [ 90.198972][ C1] panic+0x487/0xe1f [ 90.202884][ C1] ? add_taint+0x181/0x210 [ 90.207308][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 90.213131][ C1] kmsan_report+0x2e6/0x2f0 [ 90.217664][ C1] ? __msan_warning+0xb8/0x130 [ 90.222444][ C1] ? ath9k_htc_rx_msg+0x26b/0xba0 [ 90.227483][ C1] ? ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 90.232956][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.238528][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.243918][ C1] ? dummy_timer+0x157a/0x51c0 [ 90.248698][ C1] ? call_timer_fn+0x81/0x540 [ 90.253380][ C1] ? expire_timers+0x2f5/0x6d0 [ 90.258157][ C1] ? __run_timers+0x66b/0x9f0 [ 90.262860][ C1] ? run_timer_softirq+0x71/0xe0 [ 90.267820][ C1] ? __do_softirq+0x1ee/0x7c5 [ 90.272527][ C1] ? invoke_softirq+0xa4/0x130 [ 90.277306][ C1] ? irq_exit_rcu+0x76/0x130 [ 90.281918][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.287749][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.293923][ C1] ? acpi_idle_enter+0x747/0x820 [ 90.298882][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 90.304277][ C1] ? cpuidle_enter+0xf4/0x180 [ 90.308973][ C1] ? do_idle+0x68d/0x840 [ 90.313232][ C1] ? cpu_startup_entry+0x3c/0x40 [ 90.318191][ C1] ? start_secondary+0x112/0x120 [ 90.323143][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 90.329238][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.335075][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.340203][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.345337][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.351197][ C1] ? __alloc_skb+0xae7/0xf90 [ 90.355811][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.360946][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.366787][ C1] __msan_warning+0xb8/0x130 [ 90.371399][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 90.376272][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 90.381593][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.386731][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.392559][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e30/0x1e30 [ 90.398475][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 90.403901][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 90.409132][ C1] dummy_timer+0x157a/0x51c0 [ 90.413795][ C1] ? dummy_free_streams+0x940/0x940 [ 90.419016][ C1] call_timer_fn+0x81/0x540 [ 90.423536][ C1] expire_timers+0x2f5/0x6d0 [ 90.428137][ C1] ? dummy_free_streams+0x940/0x940 [ 90.433368][ C1] __run_timers+0x66b/0x9f0 [ 90.437921][ C1] ? kmsan_get_metadata+0x33/0x220 [ 90.443073][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 90.448904][ C1] run_timer_softirq+0x71/0xe0 [ 90.453691][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 90.458916][ C1] __do_softirq+0x1ee/0x7c5 [ 90.463451][ C1] invoke_softirq+0xa4/0x130 [ 90.468075][ C1] irq_exit_rcu+0x76/0x130 [ 90.472518][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 90.478461][ C1] [ 90.481400][ C1] [ 90.484327][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 90.490329][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 90.495904][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 e2 95 fc fa 0f 00 2d b5 24 95 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 26 88 fb 44 8b 65 8c e9 a1 fa [ 90.515529][ C1] RSP: 0018:ffff888102c3fc28 EFLAGS: 00000246 [ 90.521599][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.529577][ C1] RDX: ffff888102c2c100 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.537550][ C1] RBP: ffff888102c3fcc0 R08: ffffffff86ca7119 R09: ffffffff86ca6fbb [ 90.545534][ C1] R10: 0000000000000002 R11: ffff888102c2c100 R12: 0000000000000000 [ 90.553518][ C1] R13: ffff888102c2cc40 R14: 0000000000000000 R15: ffff888102e30064 [ 90.561519][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 90.566495][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.571725][ C1] ? acpi_idle_enter+0x719/0x820 [ 90.576708][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 90.582040][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 90.587289][ C1] cpuidle_enter+0xf4/0x180 [ 90.591827][ C1] do_idle+0x68d/0x840 [ 90.595952][ C1] cpu_startup_entry+0x3c/0x40 [ 90.600742][ C1] ? setup_APIC_timer+0x390/0x390 [ 90.605786][ C1] start_secondary+0x112/0x120 [ 90.610570][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 90.616494][ C1] [ 90.619816][ C1] Kernel Offset: disabled [ 90.624137][ C1] Rebooting in 86400 seconds..