===================================================== BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x544/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:417 ath9k_htc_rx_msg+0x544/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:417 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:653 [inline] ath9k_hif_usb_rx_cb+0x196a/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 invoke_softirq+0x8f/0x100 kernel/softirq.c:445 __irq_exit_rcu kernel/softirq.c:650 [inline] irq_exit_rcu+0x5a/0x110 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 valid_section include/linux/mmzone.h:1451 [inline] pfn_valid include/linux/mmzone.h:1540 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:50 [inline] virt_to_page_or_null mm/kmsan/shadow.c:76 [inline] kmsan_get_metadata+0x13d/0x230 mm/kmsan/shadow.c:139 kmsan_get_shadow_origin_ptr+0x34/0xa0 mm/kmsan/shadow.c:98 get_shadow_origin_ptr mm/kmsan/instrumentation.c:35 [inline] __msan_metadata_ptr_for_load_8+0x20/0x30 mm/kmsan/instrumentation.c:77 last_frame arch/x86/kernel/unwind_frame.c:82 [inline] is_last_frame arch/x86/kernel/unwind_frame.c:87 [inline] is_last_task_frame+0x44/0x450 arch/x86/kernel/unwind_frame.c:156 unwind_next_frame+0x5a/0x360 arch/x86/kernel/unwind_frame.c:276 arch_stack_walk+0x1b9/0x280 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xb2/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:80 [inline] kmsan_internal_chain_origin+0xac/0x120 mm/kmsan/core.c:253 __msan_chain_origin+0xbd/0x140 mm/kmsan/instrumentation.c:229 __skb_dst_copy include/net/dst.h:281 [inline] skb_dst_copy include/net/dst.h:289 [inline] __copy_skb_header+0x41a/0x8c0 net/core/skbuff.c:1011 __skb_clone+0x57/0x650 net/core/skbuff.c:1062 skb_clone+0x356/0x550 net/core/skbuff.c:1522 __tcp_transmit_skb+0x493/0x4860 net/ipv4/tcp_output.c:1264 tcp_transmit_skb net/ipv4/tcp_output.c:1420 [inline] tcp_write_xmit+0x3ce6/0x88d0 net/ipv4/tcp_output.c:2691 __tcp_push_pending_frames+0xbe/0x370 net/ipv4/tcp_output.c:2875 tcp_push+0x74c/0x7a0 net/ipv4/tcp.c:726 tcp_sendmsg_locked+0x55a0/0x5f60 net/ipv4/tcp.c:1421 tcp_sendmsg+0x45/0x80 net/ipv4/tcp.c:1449 inet_sendmsg+0x101/0x180 net/ipv4/af_inet.c:819 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] sock_write_iter+0x47f/0x5c0 net/socket.c:1108 call_write_iter include/linux/fs.h:2058 [inline] new_sync_write fs/read_write.c:504 [inline] vfs_write+0xcf0/0x1810 fs/read_write.c:591 ksys_write+0x21b/0x4e0 fs/read_write.c:644 __do_sys_write fs/read_write.c:656 [inline] __se_sys_write fs/read_write.c:653 [inline] __x64_sys_write+0x8f/0xd0 fs/read_write.c:653 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook mm/slab.h:755 [inline] slab_alloc_node mm/slub.c:3258 [inline] __kmalloc_node_track_caller+0x86c/0x1230 mm/slub.c:4994 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x34a/0xd70 net/core/skbuff.c:426 __netdev_alloc_skb+0x126/0x780 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:3264 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:635 [inline] ath9k_hif_usb_rx_cb+0xe7b/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 CPU: 1 PID: 9743 Comm: syz-fuzzer Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 =====================================================