===================================================== BUG: KMSAN: uninit-value in ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_htc_rx_msg+0x6a8/0xa90 drivers/net/wireless/ath/ath9k/htc_hst.c:479 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:675 [inline] ath9k_hif_usb_rx_cb+0x16e3/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x850/0xf60 kernel/time/timer.c:2022 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035 __do_softirq+0x1b7/0x78f kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0xc2/0x1b0 kernel/softirq.c:650 irq_exit_rcu+0x12/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x7a/0x90 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:645 __nr_to_section include/linux/mmzone.h:1837 [inline] __pfn_to_section include/linux/mmzone.h:1945 [inline] pfn_valid include/linux/mmzone.h:1996 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:82 [inline] virt_to_page_or_null mm/kmsan/shadow.c:75 [inline] kmsan_get_metadata+0x1a5/0x2c0 mm/kmsan/shadow.c:143 kmsan_get_shadow_origin_ptr+0x4d/0xa0 mm/kmsan/shadow.c:102 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:92 arch_local_save_flags arch/x86/include/asm/irqflags.h:67 [inline] arch_local_irq_save arch/x86/include/asm/irqflags.h:103 [inline] put_cpu_partial+0x59/0x290 mm/slub.c:2684 __slab_free+0x610/0x860 mm/slub.c:3652 do_slab_free mm/slub.c:3730 [inline] slab_free mm/slub.c:3787 [inline] kmem_cache_free_bulk+0x1ca7/0x1ea0 mm/slub.c:3904 mt_free_bulk lib/maple_tree.c:169 [inline] mas_destroy+0x5e6e/0x64a0 lib/maple_tree.c:5836 mas_store_prealloc+0x328/0x4d0 lib/maple_tree.c:5766 vma_iter_store mm/internal.h:1070 [inline] vma_expand+0x6fc/0x7e0 mm/mmap.c:710 mmap_region+0x2018/0x4080 mm/mmap.c:2620 do_mmap+0xe41/0x1880 mm/mmap.c:1394 vm_mmap_pgoff+0x223/0x4e0 mm/util.c:543 ksys_mmap_pgoff+0x62b/0x770 mm/mmap.c:1440 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:93 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline] __x64_sys_mmap+0x16d/0x200 arch/x86/kernel/sys_x86_64.c:86 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:716 slab_alloc_node mm/slub.c:3451 [inline] kmem_cache_alloc_node+0x535/0xa30 mm/slub.c:3496 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:568 __alloc_skb+0x318/0x740 net/core/skbuff.c:654 __netdev_alloc_skb+0x11a/0x6f0 net/core/skbuff.c:718 __dev_alloc_skb include/linux/skbuff.h:3201 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:657 [inline] ath9k_hif_usb_rx_cb+0xd0d/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x850/0xf60 kernel/time/timer.c:2022 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035 __do_softirq+0x1b7/0x78f kernel/softirq.c:571 CPU: 0 PID: 18604 Comm: syz-executor.1 Not tainted 6.4.0-rc1-syzkaller-g46e8b6e7cfeb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 =====================================================