Warning: Permanently added '10.128.0.143' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 93.101910][ T117] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.622186][ T117] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.631501][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.639707][ T117] usb 1-1: Product: syz [ 93.644047][ T117] usb 1-1: Manufacturer: syz [ 93.648703][ T117] usb 1-1: SerialNumber: syz [ 93.693880][ T117] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.322139][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.532014][ C1] ===================================================== [ 94.539085][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xba0 [ 94.546414][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 94.551288][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 94.556598][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.562012][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.567243][ C1] dummy_timer+0x157a/0x51c0 [ 94.571856][ C1] call_timer_fn+0x81/0x540 [ 94.576395][ C1] expire_timers+0x2f5/0x6d0 [ 94.581004][ C1] __run_timers+0x66b/0x9f0 [ 94.585548][ C1] run_timer_softirq+0x71/0xe0 [ 94.590368][ C1] __do_softirq+0x1ee/0x7c5 [ 94.594895][ C1] invoke_softirq+0xa4/0x130 [ 94.599523][ C1] irq_exit_rcu+0x76/0x130 [ 94.603976][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 94.609638][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 94.615639][ C1] acpi_idle_enter+0x747/0x820 [ 94.620435][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 94.625684][ C1] cpuidle_enter+0xf4/0x180 [ 94.630210][ C1] do_idle+0x68d/0x840 [ 94.634301][ C1] cpu_startup_entry+0x3c/0x40 [ 94.639115][ C1] start_secondary+0x112/0x120 [ 94.643894][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 94.649810][ C1] [ 94.652133][ C1] Uninit was created at: [ 94.656412][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 94.662360][ C1] __alloc_skb+0x545/0xf90 [ 94.666857][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 94.671917][ C1] ath9k_hif_usb_rx_cb+0xe4f/0x1d00 [ 94.677136][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.682531][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.687753][ C1] dummy_timer+0x157a/0x51c0 [ 94.692381][ C1] call_timer_fn+0x81/0x540 [ 94.696905][ C1] expire_timers+0x2f5/0x6d0 [ 94.701503][ C1] __run_timers+0x66b/0x9f0 [ 94.706031][ C1] run_timer_softirq+0x71/0xe0 [ 94.710824][ C1] __do_softirq+0x1ee/0x7c5 [ 94.715426][ C1] [ 94.717744][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.16.0-rc5-syzkaller #0 [ 94.725736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.735798][ C1] ===================================================== [ 94.742728][ C1] Disabling lock debugging due to kernel taint [ 94.748872][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 94.755285][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 94.764704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.774766][ C1] Call Trace: [ 94.778059][ C1] [ 94.780901][ C1] dump_stack_lvl+0x1ff/0x28e [ 94.785700][ C1] dump_stack+0x25/0x28 [ 94.789877][ C1] panic+0x487/0xe1f [ 94.793804][ C1] ? add_taint+0x181/0x210 [ 94.798239][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 94.804068][ C1] kmsan_report+0x2e6/0x2f0 [ 94.808617][ C1] ? __msan_warning+0xb8/0x130 [ 94.813415][ C1] ? ath9k_htc_rx_msg+0x26b/0xba0 [ 94.818458][ C1] ? ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 94.823936][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.829513][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.834922][ C1] ? dummy_timer+0x157a/0x51c0 [ 94.839709][ C1] ? call_timer_fn+0x81/0x540 [ 94.844400][ C1] ? expire_timers+0x2f5/0x6d0 [ 94.849176][ C1] ? __run_timers+0x66b/0x9f0 [ 94.853911][ C1] ? run_timer_softirq+0x71/0xe0 [ 94.858901][ C1] ? __do_softirq+0x1ee/0x7c5 [ 94.863599][ C1] ? invoke_softirq+0xa4/0x130 [ 94.868391][ C1] ? irq_exit_rcu+0x76/0x130 [ 94.873006][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 94.878846][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 94.885024][ C1] ? acpi_idle_enter+0x747/0x820 [ 94.889998][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 94.895437][ C1] ? cpuidle_enter+0xf4/0x180 [ 94.900142][ C1] ? do_idle+0x68d/0x840 [ 94.904409][ C1] ? cpu_startup_entry+0x3c/0x40 [ 94.909373][ C1] ? start_secondary+0x112/0x120 [ 94.914329][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 94.920449][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.926321][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.931458][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.936596][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.942524][ C1] ? __alloc_skb+0xae7/0xf90 [ 94.947145][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.952284][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.958119][ C1] __msan_warning+0xb8/0x130 [ 94.962729][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 94.967616][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 94.972943][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.978078][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.983911][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e30/0x1e30 [ 94.989832][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.995249][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 95.000491][ C1] dummy_timer+0x157a/0x51c0 [ 95.005176][ C1] ? dummy_free_streams+0x940/0x940 [ 95.010403][ C1] call_timer_fn+0x81/0x540 [ 95.014928][ C1] expire_timers+0x2f5/0x6d0 [ 95.019543][ C1] ? dummy_free_streams+0x940/0x940 [ 95.024781][ C1] __run_timers+0x66b/0x9f0 [ 95.029350][ C1] ? kmsan_get_metadata+0x33/0x220 [ 95.034508][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 95.040344][ C1] run_timer_softirq+0x71/0xe0 [ 95.045243][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 95.050474][ C1] __do_softirq+0x1ee/0x7c5 [ 95.055023][ C1] invoke_softirq+0xa4/0x130 [ 95.059667][ C1] irq_exit_rcu+0x76/0x130 [ 95.064112][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 95.069870][ C1] [ 95.072798][ C1] [ 95.075730][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 95.081740][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 95.087429][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 e2 95 fc fa 0f 00 2d b5 24 95 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 2a 26 88 fb 44 8b 65 8c e9 a1 fa [ 95.107079][ C1] RSP: 0018:ffff888102c47c28 EFLAGS: 00000246 [ 95.113162][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 95.121142][ C1] RDX: ffff888102c34100 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.129128][ C1] RBP: ffff888102c47cc0 R08: ffffffff86ca7119 R09: ffffffff86ca6fbb [ 95.133285][ T119] cfg80211: failed to load regulatory.db [ 95.137115][ C1] R10: 0000000000000002 R11: ffff888102c34100 R12: 0000000000000000 [ 95.137150][ C1] R13: ffff888102c34c40 R14: 0000000000000000 R15: ffff888102e34064 [ 95.158726][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 95.163735][ C1] ? acpi_idle_enter+0x719/0x820 [ 95.168745][ C1] ? acpi_idle_enter+0x719/0x820 [ 95.173755][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 95.179107][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 95.184387][ C1] cpuidle_enter+0xf4/0x180 [ 95.188957][ C1] do_idle+0x68d/0x840 [ 95.193093][ C1] cpu_startup_entry+0x3c/0x40 [ 95.197925][ C1] ? setup_APIC_timer+0x390/0x390 [ 95.203005][ C1] start_secondary+0x112/0x120 [ 95.207819][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 95.213751][ C1] [ 95.217053][ C1] Kernel Offset: disabled [ 95.221389][ C1] Rebooting in 86400 seconds..