=====================================================
BUG: KMSAN: uninit-value in ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227
 ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227
 ath9k_htc_rx_msg+0x6a8/0xa90 drivers/net/wireless/ath/ath9k/htc_hst.c:479
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:675 [inline]
 ath9k_hif_usb_rx_cb+0x16e3/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715
 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754
 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988
 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x850/0xf60 kernel/time/timer.c:2022
 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035
 __do_softirq+0x1b7/0x78f kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0xc2/0x1b0 kernel/softirq.c:650
 irq_exit_rcu+0x12/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x7a/0x90 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:645
 find_stack lib/stackdepot.c:350 [inline]
 __stack_depot_save+0x15d/0x490 lib/stackdepot.c:390
 kmsan_save_stack_with_flags mm/kmsan/core.c:81 [inline]
 kmsan_internal_poison_memory+0x62/0xa0 mm/kmsan/core.c:60
 kmsan_slab_free+0xd1/0x130 mm/kmsan/hooks.c:89
 slab_free_hook mm/slub.c:1751 [inline]
 slab_free_freelist_hook mm/slub.c:1807 [inline]
 slab_free mm/slub.c:3786 [inline]
 __kmem_cache_free+0x5a1/0xeb0 mm/slub.c:3799
 kfree+0x173/0x430 mm/slab_common.c:1015
 raw_ioctl+0x3585/0x5440
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl+0x222/0x400 fs/ioctl.c:856
 __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Uninit was created at:
 slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:716
 slab_alloc_node mm/slub.c:3451 [inline]
 kmem_cache_alloc_node+0x535/0xa30 mm/slub.c:3496
 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:568
 __alloc_skb+0x318/0x740 net/core/skbuff.c:654
 __netdev_alloc_skb+0x11a/0x6f0 net/core/skbuff.c:718
 __dev_alloc_skb include/linux/skbuff.h:3211 [inline]
 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:657 [inline]
 ath9k_hif_usb_rx_cb+0xd0d/0x20c0 drivers/net/wireless/ath/ath9k/hif_usb.c:715
 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754
 dummy_timer+0xd65/0x4c30 drivers/usb/gadget/udc/dummy_hcd.c:1988
 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x850/0xf60 kernel/time/timer.c:2022
 run_timer_softirq+0x26/0x40 kernel/time/timer.c:2035
 __do_softirq+0x1b7/0x78f kernel/softirq.c:571

CPU: 1 PID: 30618 Comm: syz-executor.3 Tainted: G        W          6.4.0-syzkaller-g257152fe29be #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
=====================================================