===================================================== BUG: KMSAN: uninit-value in skb_trim+0x1fc/0x290 net/core/skbuff.c:2095 skb_trim+0x1fc/0x290 net/core/skbuff.c:2095 ath9k_htc_rx_msg+0x8b2/0xbc0 drivers/net/wireless/ath/ath9k/htc_hst.c:460 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:654 [inline] ath9k_hif_usb_rx_cb+0x1745/0x1e30 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c9/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e6/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0xe82/0x4fd0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x85/0x550 kernel/time/timer.c:1421 expire_timers+0x2f0/0x6c0 kernel/time/timer.c:1466 __run_timers+0x6dd/0xb00 kernel/time/timer.c:1737 run_timer_softirq+0x75/0xf0 kernel/time/timer.c:1750 __do_softirq+0x206/0x809 kernel/softirq.c:558 invoke_softirq+0xa8/0x130 kernel/softirq.c:432 __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x79/0x130 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 smap_restore arch/x86/include/asm/smap.h:67 [inline] get_shadow_origin_ptr mm/kmsan/instrumentation.c:38 [inline] __msan_metadata_ptr_for_load_8+0x27/0x30 mm/kmsan/instrumentation.c:79 memcg_slab_free_hook+0xdb/0xa20 mm/slab.h:563 do_slab_free mm/slub.c:3457 [inline] slab_free mm/slub.c:3525 [inline] kfree+0x3b7/0xa70 mm/slub.c:4567 kvfree+0x95/0xa0 mm/util.c:622 __vunmap+0x1302/0x1590 mm/vmalloc.c:2688 __vfree mm/vmalloc.c:2731 [inline] vfree+0x12f/0x170 mm/vmalloc.c:2762 copy_entries_to_user net/ipv4/netfilter/ip_tables.c:868 [inline] get_entries net/ipv4/netfilter/ip_tables.c:1024 [inline] do_ipt_get_ctl+0x1819/0x2370 net/ipv4/netfilter/ip_tables.c:1663 nf_getsockopt+0x57b/0x5e0 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x2269/0x2980 net/ipv4/ip_sockglue.c:1786 tcp_getsockopt+0x1e2/0x230 net/ipv4/tcp.c:4295 sock_common_getsockopt+0x13e/0x180 net/core/sock.c:3478 __sys_getsockopt+0x6a8/0xc80 net/socket.c:2224 __do_sys_getsockopt net/socket.c:2239 [inline] __se_sys_getsockopt net/socket.c:2236 [inline] __x64_sys_getsockopt+0x158/0x1c0 net/socket.c:2236 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:754 [inline] slab_alloc_node mm/slub.c:3231 [inline] __kmalloc_node_track_caller+0xdee/0x14e0 mm/slub.c:4962 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x526/0xf50 net/core/skbuff.c:426 __netdev_alloc_skb+0x4db/0x900 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:3107 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:636 [inline] ath9k_hif_usb_rx_cb+0xe89/0x1e30 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c9/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e6/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0xe82/0x4fd0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x85/0x550 kernel/time/timer.c:1421 expire_timers+0x2f0/0x6c0 kernel/time/timer.c:1466 __run_timers+0x6dd/0xb00 kernel/time/timer.c:1737 run_timer_softirq+0x75/0xf0 kernel/time/timer.c:1750 __do_softirq+0x206/0x809 kernel/softirq.c:558 CPU: 1 PID: 3516 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================