usb 1-1: ath9k_htc: over RX MAX_PKT_NUM ===================================================== BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x26b/0xbb0 drivers/net/wireless/ath/ath9k/htc_hst.c:412 ath9k_htc_rx_msg+0x26b/0xbb0 drivers/net/wireless/ath/ath9k/htc_hst.c:412 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:654 [inline] ath9k_hif_usb_rx_cb+0x1721/0x1df0 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c6/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e2/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0x157a/0x51c0 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0x81/0x540 kernel/time/timer.c:1421 expire_timers+0x2f5/0x6d0 kernel/time/timer.c:1466 __run_timers+0x66b/0x9f0 kernel/time/timer.c:1734 run_timer_softirq+0x71/0xe0 kernel/time/timer.c:1747 __do_softirq+0x1ee/0x7c5 kernel/softirq.c:558 invoke_softirq+0xa4/0x130 kernel/softirq.c:432 __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x76/0x130 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0xa2/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline] acpi_safe_halt drivers/acpi/processor_idle.c:110 [inline] acpi_idle_do_entry drivers/acpi/processor_idle.c:551 [inline] acpi_idle_enter+0x747/0x820 drivers/acpi/processor_idle.c:687 cpuidle_enter_state+0x9a8/0x1840 drivers/cpuidle/cpuidle.c:237 cpuidle_enter+0xf4/0x180 drivers/cpuidle/cpuidle.c:351 call_cpuidle kernel/sched/idle.c:158 [inline] cpuidle_idle_call kernel/sched/idle.c:239 [inline] do_idle+0x68d/0x840 kernel/sched/idle.c:306 cpu_startup_entry+0x3c/0x40 kernel/sched/idle.c:403 rest_init+0x278/0x2e0 init/main.c:726 arch_call_rest_init+0x13/0x15 init/main.c:884 start_kernel+0xa96/0xc49 init/main.c:1141 x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:546 x86_64_start_kernel+0xf5/0xfa arch/x86/kernel/head64.c:527 secondary_startup_64_no_verify+0xc4/0xcb Uninit was created at: slab_post_alloc_hook mm/slab.h:737 [inline] slab_alloc_node mm/slub.c:3247 [inline] __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4975 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x545/0xf90 net/core/skbuff.c:426 __netdev_alloc_skb+0x4b9/0x8c0 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:2955 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:636 [inline] ath9k_hif_usb_rx_cb+0xead/0x1df0 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c6/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e2/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0x157a/0x51c0 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0x81/0x540 kernel/time/timer.c:1421 expire_timers+0x2f5/0x6d0 kernel/time/timer.c:1466 __run_timers+0x66b/0x9f0 kernel/time/timer.c:1734 run_timer_softirq+0x71/0xe0 kernel/time/timer.c:1747 __do_softirq+0x1ee/0x7c5 kernel/softirq.c:558 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================