===================================================== BUG: KMSAN: uninit-value in hci_cmd_status_evt+0x3bc0/0x7850 net/bluetooth/hci_event.c:3762 hci_cmd_status_evt+0x3bc0/0x7850 net/bluetooth/hci_event.c:3762 hci_event_packet+0xdf8/0x23e0 net/bluetooth/hci_event.c:6393 hci_rx_work+0x6a0/0xd00 net/bluetooth/hci_core.c:5084 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445 kthread+0x721/0x850 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 Uninit was stored to memory at: hci_cmd_status_evt+0x3b70/0x7850 net/bluetooth/hci_event.c:3759 hci_event_packet+0xdf8/0x23e0 net/bluetooth/hci_event.c:6393 hci_rx_work+0x6a0/0xd00 net/bluetooth/hci_core.c:5084 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445 kthread+0x721/0x850 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 Uninit was created at: slab_post_alloc_hook mm/slab.h:524 [inline] slab_alloc_node mm/slub.c:3251 [inline] __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4974 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x545/0xf90 net/core/skbuff.c:426 alloc_skb include/linux/skbuff.h:1126 [inline] bt_skb_alloc include/net/bluetooth/bluetooth.h:413 [inline] vhci_get_user drivers/bluetooth/hci_vhci.c:287 [inline] vhci_write+0x187/0x8f0 drivers/bluetooth/hci_vhci.c:407 call_write_iter include/linux/fs.h:2162 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0x1318/0x2030 fs/read_write.c:590 ksys_write+0x28b/0x510 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0xdb/0x120 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae CPU: 0 PID: 3515 Comm: kworker/u5:3 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: hci2 hci_rx_work =====================================================