===================================================== BUG: KMSAN: uninit-value in ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_htc_rx_msg+0x6a8/0xa90 drivers/net/wireless/ath/ath9k/htc_hst.c:479 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:675 [inline] ath9k_hif_usb_rx_cb+0x16e3/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x850/0xf60 kernel/time/timer.c:2022 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035 __do_softirq+0x1b7/0x78f kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0xc2/0x1b0 kernel/softirq.c:650 irq_exit_rcu+0x12/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x7a/0x90 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:645 smap_save mm/kmsan/instrumentation.c:92 [inline] get_shadow_origin_ptr mm/kmsan/instrumentation.c:33 [inline] __msan_metadata_ptr_for_load_8+0x11/0x40 mm/kmsan/instrumentation.c:92 last_frame arch/x86/kernel/unwind_frame.c:82 [inline] is_last_frame arch/x86/kernel/unwind_frame.c:87 [inline] is_last_task_frame+0x5d/0x450 arch/x86/kernel/unwind_frame.c:156 unwind_next_frame+0x5e/0x360 arch/x86/kernel/unwind_frame.c:276 arch_stack_walk+0x19e/0x250 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0xe0 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:76 [inline] kmsan_internal_poison_memory+0x49/0xa0 mm/kmsan/core.c:60 kmsan_slab_free+0xd1/0x130 mm/kmsan/hooks.c:89 slab_free_hook mm/slub.c:1751 [inline] slab_free_freelist_hook mm/slub.c:1807 [inline] slab_free mm/slub.c:3786 [inline] kmem_cache_free+0x663/0x1280 mm/slub.c:3808 __merge_or_add_vmap_area mm/vmalloc.c:1189 [inline] merge_or_add_vmap_area mm/vmalloc.c:1208 [inline] free_vmap_area_noflush+0x117d/0x14c0 mm/vmalloc.c:1833 free_unmap_vmap_area mm/vmalloc.c:1854 [inline] remove_vm_area+0x1a8/0x2b0 mm/vmalloc.c:2661 vfree+0xc5/0x8c0 mm/vmalloc.c:2780 xt_compat_flush_offsets+0xd1/0x160 net/netfilter/x_tables.c:691 get_info net/ipv6/netfilter/ip6_tables.c:988 [inline] do_ip6t_get_ctl+0x196d/0x20b0 net/ipv6/netfilter/ip6_tables.c:1660 nf_getsockopt+0x421/0x480 net/netfilter/nf_sockopt.c:116 ipv6_getsockopt+0x333/0x4d0 net/ipv6/ipv6_sockglue.c:1500 tcp_getsockopt+0x159/0x190 net/ipv4/tcp.c:4412 sock_common_getsockopt+0x9d/0xd0 net/core/sock.c:3636 __sys_getsockopt+0x571/0xac0 net/socket.c:2317 __do_compat_sys_socketcall net/compat.c:494 [inline] __se_compat_sys_socketcall+0x3fe/0x1a10 net/compat.c:423 __ia32_compat_sys_socketcall+0x6b/0xa0 net/compat.c:423 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 Uninit was created at: slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:716 slab_alloc_node mm/slub.c:3451 [inline] kmem_cache_alloc_node+0x535/0xa30 mm/slub.c:3496 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:568 __alloc_skb+0x318/0x740 net/core/skbuff.c:654 __netdev_alloc_skb+0x11a/0x6f0 net/core/skbuff.c:718 __dev_alloc_skb include/linux/skbuff.h:3201 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:657 [inline] ath9k_hif_usb_rx_cb+0xd0d/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x850/0xf60 kernel/time/timer.c:2022 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035 __do_softirq+0x1b7/0x78f kernel/softirq.c:571 CPU: 0 PID: 4988 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 =====================================================