=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:412
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x28c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:412
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:418
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x4c0/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:418
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:426
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x7b8/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:426
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:429
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x80c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:429
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:440
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x96f/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:440
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x28c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:412
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x28c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:412
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x4c0/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:418
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x4c0/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:418
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x7b8/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:426
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x7b8/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:426
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x80c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:429
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x80c/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:429
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================
=====================================================
BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x96f/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:440
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B             5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x24c/0x2e0 lib/dump_stack.c:120
 kmsan_report+0xfb/0x1e0 mm/kmsan/kmsan_report.c:118
 __msan_warning+0x5c/0xa0 mm/kmsan/kmsan_instr.c:197
 ath9k_htc_rx_msg+0x96f/0x1f60 drivers/net/wireless/ath/ath9k/htc_hst.c:440
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:647 [inline]
 ath9k_hif_usb_rx_cb+0x184e/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0x22f/0x280 kernel/softirq.c:422
 irq_exit_rcu+0xe/0x10 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0xc6/0xf0 arch/x86/kernel/apic/apic.c:1100
 
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:517 [inline]
RIP: 0010:acpi_idle_enter+0x61d/0x760 drivers/acpi/processor_idle.c:654
Code: f7 d3 44 21 e3 48 85 db 0f 84 ec 00 00 00 4d 85 e4 0f 85 f4 00 00 00 e9 0c 00 00 00 e8 1c ea 2b fb 0f 00 2d 9f 3a 6e 09 fb f4  e9 e0 00 00 00 84 c0 8b 7d b8 0f 45 7d 98 e8 ef da ae fb e9 e5
RSP: 0018:ffffffff91603b70 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000023ead6040
RDX: ffffffff91631040 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff91603c08 R08: ffffffff869049ae R09: ffff88813fffa000
R10: 0000000000000002 R11: ffffffff91631040 R12: 0000000000000000
R13: ffff8881054b8064 R14: 0000000000000000 R15: ffffffff91631ac8
 cpuidle_enter_state+0x99e/0x1750 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0xe3/0x170 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x5df/0x790 kernel/sched/idle.c:300
 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:397
 rest_init+0x1c8/0x1f0 init/main.c:722
 arch_call_rest_init+0x13/0x15
 start_kernel+0xa17/0xbd8 init/main.c:1067
 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:525
 x86_64_start_kernel+0x86/0x89 arch/x86/kernel/head64.c:506
 secondary_startup_64_no_verify+0xb0/0xbb
Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:121 [inline]
 kmsan_internal_poison_shadow+0x5c/0xf0 mm/kmsan/kmsan.c:104
 kmsan_slab_alloc+0x8e/0xe0 mm/kmsan/kmsan_hooks.c:76
 slab_alloc_node mm/slub.c:2922 [inline]
 __kmalloc_node_track_caller+0xa4f/0x1470 mm/slub.c:4609
 kmalloc_reserve net/core/skbuff.c:353 [inline]
 __alloc_skb+0x4dd/0xe90 net/core/skbuff.c:424
 __netdev_alloc_skb+0x45d/0x810 net/core/skbuff.c:491
 __dev_alloc_skb include/linux/skbuff.h:2871 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:629 [inline]
 ath9k_hif_usb_rx_cb+0xe58/0x1d20 drivers/net/wireless/ath/ath9k/hif_usb.c:680
 __usb_hcd_giveback_urb+0x6ff/0x930 drivers/usb/core/hcd.c:1656
 usb_hcd_giveback_urb+0x1cb/0x730 drivers/usb/core/hcd.c:1726
 dummy_timer+0xda7/0x74f0 drivers/usb/gadget/udc/dummy_hcd.c:1971
 call_timer_fn+0x7d/0x450 kernel/time/timer.c:1431
 expire_timers+0x328/0x6c0 kernel/time/timer.c:1476
 __run_timers+0x624/0x9e0 kernel/time/timer.c:1745
 run_timer_softirq+0x2d/0x50 kernel/time/timer.c:1758
 __do_softirq+0x1b9/0x715 kernel/softirq.c:345
=====================================================