[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 145.194368][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.734663][ T58] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.744172][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.752785][ T58] usb 1-1: Product: syz [ 145.757360][ T58] usb 1-1: Manufacturer: syz [ 145.762228][ T58] usb 1-1: SerialNumber: syz [ 145.815743][ T58] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.494267][ T18] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.713996][ C1] ===================================================== [ 146.721423][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.728821][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.12.0-rc6-syzkaller #0 [ 146.736805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.746946][ C1] Call Trace: [ 146.750331][ C1] [ 146.753178][ C1] dump_stack+0x24c/0x2e0 [ 146.757513][ C1] kmsan_report+0xfb/0x1e0 [ 146.762019][ C1] __msan_warning+0x5c/0xa0 [ 146.766736][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 146.771794][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 146.778478][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 146.785741][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.792152][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 146.797992][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.803449][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.809451][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 146.815678][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 146.821270][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.826546][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 146.832032][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.838131][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.844580][ C1] dummy_timer+0xda7/0x74f0 [ 146.849214][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.855322][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.861154][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.867223][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.872457][ C1] call_timer_fn+0x7d/0x450 [ 146.877288][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.883334][ C1] expire_timers+0x328/0x6c0 [ 146.887966][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 146.893410][ C1] __run_timers+0x624/0x9e0 [ 146.897922][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.904220][ C1] ? irqtime_account_irq+0xe3/0x380 [ 146.909692][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.914919][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 146.920135][ C1] run_timer_softirq+0x2d/0x50 [ 146.925174][ C1] __do_softirq+0x1b9/0x715 [ 146.929738][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.935680][ C1] __irq_exit_rcu+0x22f/0x280 [ 146.940463][ C1] irq_exit_rcu+0xe/0x10 [ 146.944766][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 146.950418][ C1] [ 146.953380][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 146.959693][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 146.965285][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 146.985631][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 146.991839][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 146.999864][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.007935][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 147.016024][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 147.024017][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 147.032113][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 147.037060][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.042366][ C1] cpuidle_enter_state+0x99e/0x1750 [ 147.047687][ C1] cpuidle_enter+0xe3/0x170 [ 147.052208][ C1] do_idle+0x5df/0x790 [ 147.056298][ C1] cpu_startup_entry+0x45/0x50 [ 147.061084][ C1] ? setup_APIC_timer+0x210/0x210 [ 147.066235][ C1] start_secondary+0xe9/0xf0 [ 147.070854][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 147.076829][ C1] [ 147.079296][ C1] Uninit was created at: [ 147.083529][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.089265][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 147.093957][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.099937][ C1] __alloc_skb+0x4dd/0xe90 [ 147.104438][ C1] __netdev_alloc_skb+0x45d/0x810 [ 147.109468][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.114693][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.120190][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.125859][ C1] dummy_timer+0xda7/0x74f0 [ 147.130454][ C1] call_timer_fn+0x7d/0x450 [ 147.135129][ C1] expire_timers+0x328/0x6c0 [ 147.139819][ C1] __run_timers+0x624/0x9e0 [ 147.144448][ C1] run_timer_softirq+0x2d/0x50 [ 147.149228][ C1] __do_softirq+0x1b9/0x715 [ 147.153805][ C1] ===================================================== [ 147.160822][ C1] Disabling lock debugging due to kernel taint [ 147.167083][ C1] ===================================================== [ 147.174310][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 147.181782][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.191334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.201443][ C1] Call Trace: [ 147.204720][ C1] [ 147.207566][ C1] dump_stack+0x24c/0x2e0 [ 147.211921][ C1] kmsan_report+0xfb/0x1e0 [ 147.216460][ C1] __msan_warning+0x5c/0xa0 [ 147.221053][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 147.226213][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.232499][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.237825][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.244168][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.250037][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.255342][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.261297][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.267416][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.272820][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.278265][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.283507][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.289326][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.297026][ C1] dummy_timer+0xda7/0x74f0 [ 147.301742][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.308090][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.313566][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.319776][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 147.325006][ C1] call_timer_fn+0x7d/0x450 [ 147.329526][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.335402][ C1] expire_timers+0x328/0x6c0 [ 147.340100][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 147.345571][ C1] __run_timers+0x624/0x9e0 [ 147.350182][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 147.356431][ C1] ? irqtime_account_irq+0xe3/0x380 [ 147.361668][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.366897][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 147.372106][ C1] run_timer_softirq+0x2d/0x50 [ 147.376930][ C1] __do_softirq+0x1b9/0x715 [ 147.381715][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.387810][ C1] __irq_exit_rcu+0x22f/0x280 [ 147.392497][ C1] irq_exit_rcu+0xe/0x10 [ 147.396784][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.402795][ C1] [ 147.405749][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.412299][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.418077][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 147.438258][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 147.444497][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 147.453038][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.461256][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 147.469330][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 147.477433][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 147.485463][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 147.490638][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.496082][ C1] cpuidle_enter_state+0x99e/0x1750 [ 147.501303][ C1] cpuidle_enter+0xe3/0x170 [ 147.505889][ C1] do_idle+0x5df/0x790 [ 147.510007][ C1] cpu_startup_entry+0x45/0x50 [ 147.514786][ C1] ? setup_APIC_timer+0x210/0x210 [ 147.519826][ C1] start_secondary+0xe9/0xf0 [ 147.524429][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 147.530429][ C1] [ 147.532746][ C1] Uninit was created at: [ 147.537078][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.542827][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 147.547557][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.553826][ C1] __alloc_skb+0x4dd/0xe90 [ 147.558413][ C1] __netdev_alloc_skb+0x45d/0x810 [ 147.563444][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 147.568768][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.574159][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.579452][ C1] dummy_timer+0xda7/0x74f0 [ 147.583977][ C1] call_timer_fn+0x7d/0x450 [ 147.589005][ C1] expire_timers+0x328/0x6c0 [ 147.593625][ C1] __run_timers+0x624/0x9e0 [ 147.598189][ C1] run_timer_softirq+0x2d/0x50 [ 147.603131][ C1] __do_softirq+0x1b9/0x715 [ 147.607809][ C1] ===================================================== [ 147.615034][ C1] ===================================================== [ 147.622422][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.629823][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.639306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.649837][ C1] Call Trace: [ 147.653212][ C1] [ 147.657877][ C1] dump_stack+0x24c/0x2e0 [ 147.662641][ C1] kmsan_report+0xfb/0x1e0 [ 147.668101][ C1] __msan_warning+0x5c/0xa0 [ 147.673167][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 147.678975][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 147.685744][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 147.691663][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.697941][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 147.703878][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.709347][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.715855][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 147.722572][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 147.728370][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.733637][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 147.739251][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.745326][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.751545][ C1] dummy_timer+0xda7/0x74f0 [ 147.756071][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.762526][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.769345][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.776039][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 147.782129][ C1] call_timer_fn+0x7d/0x450 [ 147.786923][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.793170][ C1] expire_timers+0x328/0x6c0 [ 147.798175][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 147.803426][ C1] __run_timers+0x624/0x9e0 [ 147.808049][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 147.814212][ C1] ? irqtime_account_irq+0xe3/0x380 [ 147.819435][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.824768][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 147.830403][ C1] run_timer_softirq+0x2d/0x50 [ 147.835187][ C1] __do_softirq+0x1b9/0x715 [ 147.839810][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.845739][ C1] __irq_exit_rcu+0x22f/0x280 [ 147.850529][ C1] irq_exit_rcu+0xe/0x10 [ 147.854881][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 147.860870][ C1] [ 147.863963][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.870276][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 147.875966][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 147.896073][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 147.902165][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 147.910322][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.919055][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 147.927815][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 147.940882][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 147.949386][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 147.954751][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 147.960785][ C1] cpuidle_enter_state+0x99e/0x1750 [ 147.966024][ C1] cpuidle_enter+0xe3/0x170 [ 147.970637][ C1] do_idle+0x5df/0x790 [ 147.974777][ C1] cpu_startup_entry+0x45/0x50 [ 147.979735][ C1] ? setup_APIC_timer+0x210/0x210 [ 147.984791][ C1] start_secondary+0xe9/0xf0 [ 147.989444][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 147.995440][ C1] [ 147.997758][ C1] Uninit was created at: [ 148.001979][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.008567][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.013265][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.019158][ C1] __alloc_skb+0x4dd/0xe90 [ 148.023756][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.029088][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.034420][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.039826][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.045031][ C1] dummy_timer+0xda7/0x74f0 [ 148.050167][ C1] call_timer_fn+0x7d/0x450 [ 148.054847][ C1] expire_timers+0x328/0x6c0 [ 148.059442][ C1] __run_timers+0x624/0x9e0 [ 148.063951][ C1] run_timer_softirq+0x2d/0x50 [ 148.069096][ C1] __do_softirq+0x1b9/0x715 [ 148.073937][ C1] ===================================================== [ 148.080976][ C1] ===================================================== [ 148.087992][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.095397][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.105746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.115917][ C1] Call Trace: [ 148.119237][ C1] [ 148.122258][ C1] dump_stack+0x24c/0x2e0 [ 148.126809][ C1] kmsan_report+0xfb/0x1e0 [ 148.131359][ C1] __msan_warning+0x5c/0xa0 [ 148.136145][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 148.141484][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.147778][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.153608][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.160156][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.166424][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.171713][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.178072][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.184604][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.190427][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.195751][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.201077][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.207397][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.213865][ C1] dummy_timer+0xda7/0x74f0 [ 148.218402][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.224329][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.230213][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.236623][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.241828][ C1] call_timer_fn+0x7d/0x450 [ 148.246388][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.252326][ C1] expire_timers+0x328/0x6c0 [ 148.256970][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.262175][ C1] __run_timers+0x624/0x9e0 [ 148.266789][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.273127][ C1] ? irqtime_account_irq+0xe3/0x380 [ 148.278458][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.283665][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.288907][ C1] run_timer_softirq+0x2d/0x50 [ 148.294029][ C1] __do_softirq+0x1b9/0x715 [ 148.298652][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.304498][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.309348][ C1] irq_exit_rcu+0xe/0x10 [ 148.313639][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.319329][ C1] [ 148.322267][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.328339][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.333887][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 148.353768][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 148.359864][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 148.368035][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.376030][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 148.384096][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 148.392381][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 148.401258][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.406284][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.411820][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.417050][ C1] cpuidle_enter+0xe3/0x170 [ 148.421576][ C1] do_idle+0x5df/0x790 [ 148.426278][ C1] cpu_startup_entry+0x45/0x50 [ 148.431266][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.436410][ C1] start_secondary+0xe9/0xf0 [ 148.441136][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.447071][ C1] [ 148.449711][ C1] Uninit was created at: [ 148.454101][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.460759][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.465682][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.471872][ C1] __alloc_skb+0x4dd/0xe90 [ 148.476339][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.481739][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.487179][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.492594][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.497874][ C1] dummy_timer+0xda7/0x74f0 [ 148.502441][ C1] call_timer_fn+0x7d/0x450 [ 148.507131][ C1] expire_timers+0x328/0x6c0 [ 148.511725][ C1] __run_timers+0x624/0x9e0 [ 148.516350][ C1] run_timer_softirq+0x2d/0x50 [ 148.521833][ C1] __do_softirq+0x1b9/0x715 [ 148.526532][ C1] ===================================================== [ 148.533485][ C1] ===================================================== [ 148.540433][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 148.548724][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.558324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.568683][ C1] Call Trace: [ 148.571994][ C1] [ 148.574836][ C1] dump_stack+0x24c/0x2e0 [ 148.579198][ C1] kmsan_report+0xfb/0x1e0 [ 148.583711][ C1] __msan_warning+0x5c/0xa0 [ 148.588255][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 148.593213][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.599312][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 148.604775][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.611039][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 148.616870][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.622185][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.628367][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 148.634822][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.640911][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.646365][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.651680][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.657524][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.663806][ C1] dummy_timer+0xda7/0x74f0 [ 148.668365][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.674402][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.679758][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.686090][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.691323][ C1] call_timer_fn+0x7d/0x450 [ 148.696312][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.702189][ C1] expire_timers+0x328/0x6c0 [ 148.706818][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 148.712029][ C1] __run_timers+0x624/0x9e0 [ 148.716568][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.722817][ C1] ? irqtime_account_irq+0xe3/0x380 [ 148.729162][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.734399][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 148.739616][ C1] run_timer_softirq+0x2d/0x50 [ 148.744458][ C1] __do_softirq+0x1b9/0x715 [ 148.749299][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.755659][ C1] __irq_exit_rcu+0x22f/0x280 [ 148.760706][ C1] irq_exit_rcu+0xe/0x10 [ 148.765397][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 148.771147][ C1] [ 148.774227][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.780330][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 148.786034][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 148.806480][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 148.812761][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 148.822317][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.830305][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 148.838371][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 148.846441][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 148.854444][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 148.859715][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 148.865038][ C1] cpuidle_enter_state+0x99e/0x1750 [ 148.870939][ C1] cpuidle_enter+0xe3/0x170 [ 148.875560][ C1] do_idle+0x5df/0x790 [ 148.879992][ C1] cpu_startup_entry+0x45/0x50 [ 148.884885][ C1] ? setup_APIC_timer+0x210/0x210 [ 148.889920][ C1] start_secondary+0xe9/0xf0 [ 148.894700][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 148.900615][ C1] [ 148.903064][ C1] Uninit was created at: [ 148.907376][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.913193][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.917906][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.923840][ C1] __alloc_skb+0x4dd/0xe90 [ 148.928372][ C1] __netdev_alloc_skb+0x45d/0x810 [ 148.933547][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 148.938780][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 148.944303][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 148.949819][ C1] dummy_timer+0xda7/0x74f0 [ 148.954419][ C1] call_timer_fn+0x7d/0x450 [ 148.959063][ C1] expire_timers+0x328/0x6c0 [ 148.964357][ C1] __run_timers+0x624/0x9e0 [ 148.968885][ C1] run_timer_softirq+0x2d/0x50 [ 148.973665][ C1] __do_softirq+0x1b9/0x715 [ 148.978700][ C1] ===================================================== [ 148.986006][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 148.998603][ C1] clocksource: 'acpi_pm' wd_now: 5e6b25 wd_last: c702ce mask: ffffff [ 149.008977][ C1] clocksource: 'tsc' cs_now: 53310ed3b1 cs_last: 51b508e0a7 mask: ffffffffffffffff executing program [ 149.020533][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 149.044453][ T58] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 149.054462][ T58] sched_clock: Marking unstable (149410895899, -366211461)<-(149050694819, -6249701) [ 149.054684][ T18] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 149.078945][ T18] ath9k_htc: Failed to initialize the device [ 149.093705][ T4694] usb 1-1: USB disconnect, device number 2 [ 149.117664][ T8246] clocksource: Switched to clocksource acpi_pm [ 149.124712][ T4694] usb 1-1: ath9k_htc: USB layer deinitialized [ 149.504134][ T4694] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.044336][ T4694] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.054282][ T4694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.062607][ T4694] usb 1-1: Product: syz [ 150.067431][ T4694] usb 1-1: Manufacturer: syz [ 150.072159][ T4694] usb 1-1: SerialNumber: syz [ 150.115901][ T4694] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.704200][ T18] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.913988][ C1] ===================================================== [ 150.921356][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 150.923885][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.923885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.923885][ C1] Call Trace: [ 150.923885][ C1] [ 150.923885][ C1] dump_stack+0x24c/0x2e0 [ 150.923885][ C1] kmsan_report+0xfb/0x1e0 [ 150.923885][ C1] __msan_warning+0x5c/0xa0 [ 150.923885][ C1] ath9k_htc_rx_msg+0x28c/0x1f60 [ 150.923885][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 150.923885][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 150.923885][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.923885][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 150.923885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.923885][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.923885][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 150.923885][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 150.923885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.923885][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 150.923885][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.923885][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.923885][ C1] dummy_timer+0xda7/0x74f0 [ 150.923885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.923885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.923885][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.923885][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.923885][ C1] call_timer_fn+0x7d/0x450 [ 150.923885][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.923885][ C1] expire_timers+0x328/0x6c0 [ 150.923885][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 150.923885][ C1] __run_timers+0x624/0x9e0 [ 150.923885][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 150.923885][ C1] ? irqtime_account_irq+0x5e/0x380 [ 150.923885][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.110165][ T7] usb 1-1: USB disconnect, device number 3 [ 151.108752][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.108752][ C1] run_timer_softirq+0x2d/0x50 [ 151.108752][ C1] __do_softirq+0x1b9/0x715 [ 151.108752][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.108752][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.123865][ C1] irq_exit_rcu+0xe/0x10 [ 151.123865][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.123865][ C1] [ 151.123865][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.123865][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.123865][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 151.123865][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 151.123865][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 151.123865][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.123865][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 151.123865][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 151.123865][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 151.123865][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.123865][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.243702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.243702][ C1] cpuidle_enter+0xe3/0x170 [ 151.243702][ C1] do_idle+0x5df/0x790 [ 151.243702][ C1] cpu_startup_entry+0x45/0x50 [ 151.243702][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.243702][ C1] start_secondary+0xe9/0xf0 [ 151.243702][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.243702][ C1] [ 151.243702][ C1] Uninit was created at: [ 151.243702][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.243702][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.243702][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.243702][ C1] __alloc_skb+0x4dd/0xe90 [ 151.243702][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 151.243702][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.243702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.243702][ C1] Call Trace: [ 151.243702][ C1] [ 151.243702][ C1] dump_stack+0x24c/0x2e0 [ 151.243702][ C1] kmsan_report+0xfb/0x1e0 [ 151.243702][ C1] __msan_warning+0x5c/0xa0 [ 151.243702][ C1] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.243702][ C1] ? irqtime_account_irq+0x5e/0x380 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.243702][ C1] irq_exit_rcu+0xe/0x10 [ 151.243702][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.243702][ C1] [ 151.243702][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.243702][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.243702][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 151.243702][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 151.243702][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 151.243702][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.243702][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 151.243702][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 151.243702][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 151.243702][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.243702][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.243702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.243702][ C1] cpuidle_enter+0xe3/0x170 [ 151.243702][ C1] do_idle+0x5df/0x790 [ 151.243702][ C1] cpu_startup_entry+0x45/0x50 [ 151.243702][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.243702][ C1] start_secondary+0xe9/0xf0 [ 151.243702][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.243702][ C1] [ 151.243702][ C1] Uninit was created at: [ 151.243702][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.243702][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.243702][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.243702][ C1] __alloc_skb+0x4dd/0xe90 [ 151.243702][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 151.243702][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.243702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.243702][ C1] Call Trace: [ 151.243702][ C1] [ 151.243702][ C1] dump_stack+0x24c/0x2e0 [ 151.243702][ C1] kmsan_report+0xfb/0x1e0 [ 151.243702][ C1] __msan_warning+0x5c/0xa0 [ 151.243702][ C1] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.243702][ C1] ? irqtime_account_irq+0x5e/0x380 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.243702][ C1] irq_exit_rcu+0xe/0x10 [ 151.243702][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.243702][ C1] [ 151.243702][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.243702][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.243702][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 151.243702][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 151.243702][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 151.243702][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.243702][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 151.243702][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 151.243702][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 151.243702][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.243702][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.243702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.243702][ C1] cpuidle_enter+0xe3/0x170 [ 151.243702][ C1] do_idle+0x5df/0x790 [ 151.243702][ C1] cpu_startup_entry+0x45/0x50 [ 151.243702][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.243702][ C1] start_secondary+0xe9/0xf0 [ 151.243702][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.243702][ C1] [ 151.243702][ C1] Uninit was created at: [ 151.243702][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.243702][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.243702][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.243702][ C1] __alloc_skb+0x4dd/0xe90 [ 151.243702][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 151.243702][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.243702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.243702][ C1] Call Trace: [ 151.243702][ C1] [ 151.243702][ C1] dump_stack+0x24c/0x2e0 [ 151.243702][ C1] kmsan_report+0xfb/0x1e0 [ 151.243702][ C1] __msan_warning+0x5c/0xa0 [ 151.243702][ C1] ath9k_htc_rx_msg+0x80c/0x1f60 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.243702][ C1] ? irqtime_account_irq+0x5e/0x380 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.243702][ C1] irq_exit_rcu+0xe/0x10 [ 151.243702][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.243702][ C1] [ 151.243702][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.243702][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.243702][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 151.243702][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 151.243702][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 151.243702][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.243702][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 151.243702][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 151.243702][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 151.243702][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.243702][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.243702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.243702][ C1] cpuidle_enter+0xe3/0x170 [ 151.243702][ C1] do_idle+0x5df/0x790 [ 151.243702][ C1] cpu_startup_entry+0x45/0x50 [ 151.243702][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.243702][ C1] start_secondary+0xe9/0xf0 [ 151.243702][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.243702][ C1] [ 151.243702][ C1] Uninit was created at: [ 151.243702][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.243702][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.243702][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.243702][ C1] __alloc_skb+0x4dd/0xe90 [ 151.243702][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] ===================================================== [ 151.243702][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 [ 151.243702][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.243702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.243702][ C1] Call Trace: [ 151.243702][ C1] [ 151.243702][ C1] dump_stack+0x24c/0x2e0 [ 151.243702][ C1] kmsan_report+0xfb/0x1e0 [ 151.243702][ C1] __msan_warning+0x5c/0xa0 [ 151.243702][ C1] ath9k_htc_rx_msg+0x96f/0x1f60 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.243702][ C1] ? irqtime_account_irq+0x5e/0x380 [ 151.243702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.243702][ C1] ? migrate_timer_list+0x5f0/0x5f0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.243702][ C1] __irq_exit_rcu+0x22f/0x280 [ 151.243702][ C1] irq_exit_rcu+0xe/0x10 [ 151.243702][ C1] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 151.243702][ C1] [ 151.243702][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 151.243702][ C1] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 151.243702][ C1] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 151.243702][ C1] RSP: 0018:ffff888102407c40 EFLAGS: 00000246 [ 151.243702][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000001017f9f40 [ 151.243702][ C1] RDX: ffff888101bf9f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.243702][ C1] RBP: ffff888102407cd8 R08: ffffffff86904dce R09: ffff88813fffa000 [ 151.243702][ C1] R10: 0000000000000002 R11: ffff888101bf9f40 R12: 0000000000000000 [ 151.243702][ C1] R13: ffff88810613c464 R14: 0000000000000000 R15: ffff888101bfa9c8 [ 151.243702][ C1] ? acpi_idle_enter+0x5ee/0x760 [ 151.243702][ C1] ? acpi_idle_lpi_enter+0x160/0x160 [ 151.243702][ C1] cpuidle_enter_state+0x99e/0x1750 [ 151.243702][ C1] cpuidle_enter+0xe3/0x170 [ 151.243702][ C1] do_idle+0x5df/0x790 [ 151.243702][ C1] cpu_startup_entry+0x45/0x50 [ 151.243702][ C1] ? setup_APIC_timer+0x210/0x210 [ 151.243702][ C1] start_secondary+0xe9/0xf0 [ 151.243702][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 151.243702][ C1] [ 151.243702][ C1] Uninit was created at: [ 151.243702][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.243702][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.243702][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.243702][ C1] __alloc_skb+0x4dd/0xe90 [ 151.243702][ C1] __netdev_alloc_skb+0x45d/0x810 [ 151.243702][ C1] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 151.243702][ C1] __usb_hcd_giveback_urb+0x6ff/0x930 [ 151.243702][ C1] usb_hcd_giveback_urb+0x1cb/0x730 [ 151.243702][ C1] dummy_timer+0xda7/0x74f0 [ 151.243702][ C1] call_timer_fn+0x7d/0x450 [ 151.243702][ C1] expire_timers+0x328/0x6c0 [ 151.243702][ C1] __run_timers+0x624/0x9e0 [ 151.243702][ C1] run_timer_softirq+0x2d/0x50 [ 151.243702][ C1] __do_softirq+0x1b9/0x715 [ 151.243702][ C1] ===================================================== [ 153.180734][ T18] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 153.188510][ T18] ath9k_htc: Failed to initialize the device [ 153.197379][ T7] usb 1-1: ath9k_htc: USB layer deinitialized executing program [ 153.634008][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.184434][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.194069][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.203224][ T7] usb 1-1: Product: syz [ 154.208253][ T7] usb 1-1: Manufacturer: syz [ 154.213176][ T7] usb 1-1: SerialNumber: syz [ 154.256138][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.864350][ T1982] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 155.084046][ C0] ===================================================== [ 155.091256][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 [ 155.093898][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.093898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.093898][ C0] Call Trace: [ 155.093898][ C0] [ 155.093898][ C0] dump_stack+0x24c/0x2e0 [ 155.093898][ C0] kmsan_report+0xfb/0x1e0 [ 155.093898][ C0] __msan_warning+0x5c/0xa0 [ 155.093898][ C0] ath9k_htc_rx_msg+0x28c/0x1f60 [ 155.093898][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.093898][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.093898][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.093898][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.093898][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.093898][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.093898][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.093898][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.093898][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.093898][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.093898][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.093898][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.093898][ C0] dummy_timer+0xda7/0x74f0 [ 155.093898][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.093898][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.093898][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.093898][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.093898][ C0] call_timer_fn+0x7d/0x450 [ 155.093898][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.093898][ C0] expire_timers+0x328/0x6c0 [ 155.093898][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.093898][ C0] __run_timers+0x624/0x9e0 [ 155.093898][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.270159][ T18] usb 1-1: USB disconnect, device number 4 [ 155.268167][ C0] ? irqtime_account_irq+0x5e/0x380 [ 155.268167][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.268167][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.268167][ C0] run_timer_softirq+0x2d/0x50 [ 155.274388][ C0] __do_softirq+0x1b9/0x715 [ 155.274394][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.274394][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.274394][ C0] irq_exit_rcu+0xe/0x10 [ 155.283875][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.283875][ C0] [ 155.283875][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.283875][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.338919][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 155.338919][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 155.338919][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 155.338919][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.338919][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 155.338919][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 155.394216][ C0] R13: ffff88810613c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 155.394216][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 155.394216][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 155.394216][ C0] cpuidle_enter_state+0x99e/0x1750 [ 155.394216][ C0] cpuidle_enter+0xe3/0x170 [ 155.394216][ C0] do_idle+0x5df/0x790 [ 155.394216][ C0] cpu_startup_entry+0x45/0x50 [ 155.394216][ C0] rest_init+0x1c8/0x1f0 [ 155.394216][ C0] arch_call_rest_init+0x13/0x15 [ 155.394216][ C0] start_kernel+0xa17/0xbd8 [ 155.394216][ C0] x86_64_start_reservations+0x2a/0x2c [ 155.394216][ C0] x86_64_start_kernel+0x86/0x89 [ 155.394216][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 155.394216][ C0] [ 155.394216][ C0] Uninit was created at: [ 155.394216][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.394216][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.394216][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.394216][ C0] __alloc_skb+0x4dd/0xe90 [ 155.394216][ C0] __netdev_alloc_skb+0x45d/0x810 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 [ 155.394216][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.394216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.394216][ C0] Call Trace: [ 155.394216][ C0] [ 155.394216][ C0] dump_stack+0x24c/0x2e0 [ 155.394216][ C0] kmsan_report+0xfb/0x1e0 [ 155.394216][ C0] __msan_warning+0x5c/0xa0 [ 155.394216][ C0] ath9k_htc_rx_msg+0x4c0/0x1f60 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.394216][ C0] ? irqtime_account_irq+0x5e/0x380 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.394216][ C0] irq_exit_rcu+0xe/0x10 [ 155.394216][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.394216][ C0] [ 155.394216][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.394216][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.394216][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 155.394216][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 155.394216][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 155.394216][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.394216][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 155.394216][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 155.394216][ C0] R13: ffff88810613c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 155.394216][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 155.394216][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 155.394216][ C0] cpuidle_enter_state+0x99e/0x1750 [ 155.394216][ C0] cpuidle_enter+0xe3/0x170 [ 155.394216][ C0] do_idle+0x5df/0x790 [ 155.394216][ C0] cpu_startup_entry+0x45/0x50 [ 155.394216][ C0] rest_init+0x1c8/0x1f0 [ 155.394216][ C0] arch_call_rest_init+0x13/0x15 [ 155.394216][ C0] start_kernel+0xa17/0xbd8 [ 155.394216][ C0] x86_64_start_reservations+0x2a/0x2c [ 155.394216][ C0] x86_64_start_kernel+0x86/0x89 [ 155.394216][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 155.394216][ C0] [ 155.394216][ C0] Uninit was created at: [ 155.394216][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.394216][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.394216][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.394216][ C0] __alloc_skb+0x4dd/0xe90 [ 155.394216][ C0] __netdev_alloc_skb+0x45d/0x810 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 [ 155.394216][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.394216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.394216][ C0] Call Trace: [ 155.394216][ C0] [ 155.394216][ C0] dump_stack+0x24c/0x2e0 [ 155.394216][ C0] kmsan_report+0xfb/0x1e0 [ 155.394216][ C0] __msan_warning+0x5c/0xa0 [ 155.394216][ C0] ath9k_htc_rx_msg+0x7b8/0x1f60 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.394216][ C0] ? irqtime_account_irq+0x5e/0x380 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.394216][ C0] irq_exit_rcu+0xe/0x10 [ 155.394216][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.394216][ C0] [ 155.394216][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.394216][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.394216][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5 [ 155.394216][ C0] RSP: 0018:ffffffff91603b70 EFLAGS: 00000246 [ 155.394216][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040 [ 155.394216][ C0] RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.394216][ C0] RBP: ffffffff91603c08 R08: ffffffff86904dce R09: ffff88813fffa000 [ 155.394216][ C0] R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000 [ 155.394216][ C0] R13: ffff88810613c064 R14: 0000000000000000 R15: ffffffff91631ac8 [ 155.394216][ C0] ? acpi_idle_enter+0x5ee/0x760 [ 155.394216][ C0] ? acpi_idle_lpi_enter+0x160/0x160 [ 155.394216][ C0] cpuidle_enter_state+0x99e/0x1750 [ 155.394216][ C0] cpuidle_enter+0xe3/0x170 [ 155.394216][ C0] do_idle+0x5df/0x790 [ 155.394216][ C0] cpu_startup_entry+0x45/0x50 [ 155.394216][ C0] rest_init+0x1c8/0x1f0 [ 155.394216][ C0] arch_call_rest_init+0x13/0x15 [ 155.394216][ C0] start_kernel+0xa17/0xbd8 [ 155.394216][ C0] x86_64_start_reservations+0x2a/0x2c [ 155.394216][ C0] x86_64_start_kernel+0x86/0x89 [ 155.394216][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 155.394216][ C0] [ 155.394216][ C0] Uninit was created at: [ 155.394216][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.394216][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.394216][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.394216][ C0] __alloc_skb+0x4dd/0xe90 [ 155.394216][ C0] __netdev_alloc_skb+0x45d/0x810 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0xe58/0x1d20 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] ===================================================== [ 155.394216][ C0] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 [ 155.394216][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.394216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.394216][ C0] Call Trace: [ 155.394216][ C0] [ 155.394216][ C0] dump_stack+0x24c/0x2e0 [ 155.394216][ C0] kmsan_report+0xfb/0x1e0 [ 155.394216][ C0] __msan_warning+0x5c/0xa0 [ 155.394216][ C0] ath9k_htc_rx_msg+0x80c/0x1f60 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 155.394216][ C0] ath9k_hif_usb_rx_cb+0x184e/0x1d20 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] ? _raw_spin_unlock_irqrestore+0x37/0x80 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? ath9k_hif_usb_alloc_urbs+0x1ed0/0x1ed0 [ 155.394216][ C0] __usb_hcd_giveback_urb+0x6ff/0x930 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] usb_hcd_giveback_urb+0x1cb/0x730 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.394216][ C0] dummy_timer+0xda7/0x74f0 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] call_timer_fn+0x7d/0x450 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] expire_timers+0x328/0x6c0 [ 155.394216][ C0] ? dummy_free_streams+0x5b0/0x5b0 [ 155.394216][ C0] __run_timers+0x624/0x9e0 [ 155.394216][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.394216][ C0] ? irqtime_account_irq+0x5e/0x380 [ 155.394216][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.394216][ C0] ? migrate_timer_list+0x5f0/0x5f0 [ 155.394216][ C0] run_timer_softirq+0x2d/0x50 [ 155.394216][ C0] __do_softirq+0x1b9/0x715 [ 155.394216][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.394216][ C0] __irq_exit_rcu+0x22f/0x280 [ 155.394216][ C0] irq_exit_rcu+0xe/0x10 [ 155.394216][ C0] sysvec_apic_timer_interrupt+0xc6/0xf0 [ 155.394216][ C0] [ 155.394216][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 155.394216][ C0] RIP: 0010:acpi_idle_enter+0x61d/0x760 [ 155.394216][ C0] Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 fc e5 2b fb 0f 00 2d 7f 36 6e 09 fb f4 e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 cf d6 ae fb e9 e5