forked to background, child pid 3057 no interfaces have a carrier [ 66.719098][ T3058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.740974][ T3058] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 93.152203][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.672354][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.681607][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.689825][ T27] usb 1-1: Product: syz [ 93.694214][ T27] usb 1-1: Manufacturer: syz [ 93.699016][ T27] usb 1-1: SerialNumber: syz [ 93.743821][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.352441][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.562250][ C1] ===================================================== [ 94.569307][ C1] BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xba0 [ 94.576539][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 94.581422][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 94.586721][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.592139][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.597415][ C1] dummy_timer+0x157a/0x51c0 [ 94.602038][ C1] call_timer_fn+0x81/0x540 [ 94.606566][ C1] expire_timers+0x2f5/0x6d0 [ 94.611166][ C1] __run_timers+0x66b/0x9f0 [ 94.615786][ C1] run_timer_softirq+0x71/0xe0 [ 94.620585][ C1] __do_softirq+0x1ee/0x7c5 [ 94.625104][ C1] invoke_softirq+0xa4/0x130 [ 94.629717][ C1] irq_exit_rcu+0x76/0x130 [ 94.634156][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 94.639811][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 94.645813][ C1] acpi_idle_enter+0x747/0x820 [ 94.650606][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 94.655844][ C1] cpuidle_enter+0xf4/0x180 [ 94.660361][ C1] do_idle+0x68d/0x840 [ 94.664451][ C1] cpu_startup_entry+0x3c/0x40 [ 94.669263][ C1] start_secondary+0x112/0x120 [ 94.674329][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 94.680246][ C1] [ 94.682570][ C1] Uninit was created at: [ 94.687112][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 94.693035][ C1] __alloc_skb+0x545/0xf90 [ 94.697465][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 94.702508][ C1] ath9k_hif_usb_rx_cb+0xe4f/0x1d00 [ 94.707725][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.713130][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.718394][ C1] dummy_timer+0x157a/0x51c0 [ 94.723007][ C1] call_timer_fn+0x81/0x540 [ 94.727527][ C1] expire_timers+0x2f5/0x6d0 [ 94.732133][ C1] __run_timers+0x66b/0x9f0 [ 94.736710][ C1] run_timer_softirq+0x71/0xe0 [ 94.741533][ C1] __do_softirq+0x1ee/0x7c5 [ 94.746057][ C1] [ 94.748470][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.16.0-rc5-syzkaller #0 [ 94.756463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.766546][ C1] ===================================================== [ 94.774086][ C1] Disabling lock debugging due to kernel taint [ 94.780232][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 94.786648][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 94.796086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.806338][ C1] Call Trace: [ 94.809633][ C1] [ 94.812502][ C1] dump_stack_lvl+0x1ff/0x28e [ 94.817232][ C1] dump_stack+0x25/0x28 [ 94.821408][ C1] panic+0x487/0xe1f [ 94.825371][ C1] ? add_taint+0x181/0x210 [ 94.829801][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 94.835641][ C1] kmsan_report+0x2e6/0x2f0 [ 94.840175][ C1] ? __msan_warning+0xb8/0x130 [ 94.844958][ C1] ? ath9k_htc_rx_msg+0x26b/0xba0 [ 94.850009][ C1] ? ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 94.855479][ C1] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 94.861048][ C1] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 94.866449][ C1] ? dummy_timer+0x157a/0x51c0 [ 94.871334][ C1] ? call_timer_fn+0x81/0x540 [ 94.876058][ C1] ? expire_timers+0x2f5/0x6d0 [ 94.880834][ C1] ? __run_timers+0x66b/0x9f0 [ 94.885537][ C1] ? run_timer_softirq+0x71/0xe0 [ 94.890509][ C1] ? __do_softirq+0x1ee/0x7c5 [ 94.895207][ C1] ? invoke_softirq+0xa4/0x130 [ 94.900088][ C1] ? irq_exit_rcu+0x76/0x130 [ 94.904787][ C1] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 94.910628][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 94.916814][ C1] ? acpi_idle_enter+0x747/0x820 [ 94.921797][ C1] ? cpuidle_enter_state+0x9a8/0x1840 [ 94.927207][ C1] ? cpuidle_enter+0xf4/0x180 [ 94.931913][ C1] ? do_idle+0x68d/0x840 [ 94.936210][ C1] ? cpu_startup_entry+0x3c/0x40 [ 94.941310][ C1] ? start_secondary+0x112/0x120 [ 94.946273][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 94.952387][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.958227][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.963450][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.968591][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.974429][ C1] ? __alloc_skb+0xae7/0xf90 [ 94.979037][ C1] ? kmsan_get_metadata+0x33/0x220 [ 94.984169][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 94.990005][ C1] __msan_warning+0xb8/0x130 [ 94.994619][ C1] ath9k_htc_rx_msg+0x26b/0xba0 [ 94.999512][ C1] ath9k_hif_usb_rx_cb+0x16dd/0x1d00 [ 95.004854][ C1] ? kmsan_get_metadata+0x33/0x220 [ 95.010000][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 95.015852][ C1] ? ath9k_hif_usb_alloc_urbs+0x1e30/0x1e30 [ 95.021791][ C1] __usb_hcd_giveback_urb+0x6c6/0x930 [ 95.027197][ C1] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 95.032429][ C1] dummy_timer+0x157a/0x51c0 [ 95.037092][ C1] ? dummy_free_streams+0x940/0x940 [ 95.042317][ C1] call_timer_fn+0x81/0x540 [ 95.046842][ C1] expire_timers+0x2f5/0x6d0 [ 95.051448][ C1] ? dummy_free_streams+0x940/0x940 [ 95.056676][ C1] __run_timers+0x66b/0x9f0 [ 95.061222][ C1] ? kmsan_get_metadata+0x33/0x220 [ 95.066358][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 95.072204][ C1] run_timer_softirq+0x71/0xe0 [ 95.077143][ C1] ? migrate_timer_list+0x4f0/0x4f0 [ 95.082382][ C1] __do_softirq+0x1ee/0x7c5 [ 95.086935][ C1] invoke_softirq+0xa4/0x130 [ 95.091581][ C1] irq_exit_rcu+0x76/0x130 [ 95.096043][ C1] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 95.101718][ C1] [ 95.104646][ C1] [ 95.107581][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 95.113586][ C1] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 95.119211][ C1] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 22 53 fe fa 0f 00 2d f5 e0 96 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 ea dd 89 fb 44 8b 65 8c e9 a1 fa [ 95.133527][ T117] cfg80211: failed to load regulatory.db [ 95.138866][ C1] RSP: 0018:ffff888102c4fc28 EFLAGS: 00000246 [ 95.138912][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 95.158581][ C1] RDX: ffff888102c3c100 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.166769][ C1] RBP: ffff888102c4fcc0 R08: ffffffff86c8b3d9 R09: ffffffff86c8b27b [ 95.174870][ C1] R10: 0000000000000002 R11: ffff888102c3c100 R12: 0000000000000000 [ 95.182879][ C1] R13: ffff888102c3cc40 R14: 0000000000000000 R15: ffff888102e50464 [ 95.190894][ C1] ? acpi_idle_enter+0x5bb/0x820 [ 95.195914][ C1] ? acpi_idle_enter+0x719/0x820 [ 95.201039][ C1] ? acpi_idle_enter+0x719/0x820 [ 95.206053][ C1] ? acpi_idle_lpi_enter+0x170/0x170 [ 95.211421][ C1] cpuidle_enter_state+0x9a8/0x1840 [ 95.216677][ C1] cpuidle_enter+0xf4/0x180 [ 95.221246][ C1] do_idle+0x68d/0x840 [ 95.225371][ C1] cpu_startup_entry+0x3c/0x40 [ 95.230164][ C1] ? setup_APIC_timer+0x390/0x390 [ 95.235215][ C1] start_secondary+0x112/0x120 [ 95.240085][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 95.246020][ C1] [ 95.249433][ C1] Kernel Offset: disabled [ 95.253768][ C1] Rebooting in 86400 seconds..