===================================================== BUG: KMSAN: uninit-value in ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_htc_rx_msg+0x5a7/0xac0 drivers/net/wireless/ath/ath9k/htc_hst.c:479 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:653 [inline] ath9k_hif_usb_rx_cb+0x18fd/0x1ee0 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd4d/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x861/0xf90 kernel/time/timer.c:2022 run_timer_softirq+0x68/0xe0 kernel/time/timer.c:2035 __do_softirq+0x1c9/0x7c5 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0xe5/0x220 kernel/softirq.c:650 irq_exit_rcu+0x12/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:649 kmsan_metadata_is_contiguous+0x123/0x1e0 mm/kmsan/core.c:454 kmsan_get_shadow_origin_ptr+0x2a/0xa0 mm/kmsan/shadow.c:96 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:92 last_frame arch/x86/kernel/unwind_frame.c:82 [inline] is_last_frame arch/x86/kernel/unwind_frame.c:87 [inline] is_last_task_frame+0x44/0x450 arch/x86/kernel/unwind_frame.c:156 unwind_next_frame+0x5e/0x360 arch/x86/kernel/unwind_frame.c:276 arch_stack_walk+0x1bd/0x290 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xb6/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:75 [inline] kmsan_internal_poison_memory+0x49/0x90 mm/kmsan/core.c:60 kmsan_slab_free+0xd1/0x130 mm/kmsan/hooks.c:89 slab_free_hook mm/slub.c:1751 [inline] slab_free_freelist_hook mm/slub.c:1807 [inline] slab_free mm/slub.c:3787 [inline] kmem_cache_free_bulk+0x1380/0x1ea0 mm/slub.c:3905 kfree_bulk include/linux/slab.h:496 [inline] kfree_rcu_work+0x340/0xc20 kernel/rcu/tree.c:3073 process_one_work+0xb0d/0x1410 kernel/workqueue.c:2289 worker_thread+0x107b/0x1d60 kernel/workqueue.c:2436 kthread+0x31f/0x430 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Uninit was created at: slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:766 slab_alloc_node mm/slub.c:3452 [inline] __kmem_cache_alloc_node+0x518/0x920 mm/slub.c:3491 __do_kmalloc_node mm/slab_common.c:967 [inline] __kmalloc_node_track_caller+0x118/0x3c0 mm/slab_common.c:988 kmalloc_reserve net/core/skbuff.c:492 [inline] __alloc_skb+0x3b8/0x900 net/core/skbuff.c:565 __netdev_alloc_skb+0x12f/0x7e0 net/core/skbuff.c:630 __dev_alloc_skb include/linux/skbuff.h:3165 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:635 [inline] ath9k_hif_usb_rx_cb+0xda6/0x1ee0 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd4d/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x861/0xf90 kernel/time/timer.c:2022 run_timer_softirq+0x68/0xe0 kernel/time/timer.c:2035 __do_softirq+0x1c9/0x7c5 kernel/softirq.c:571 CPU: 1 PID: 12648 Comm: kworker/1:0 Not tainted 6.2.0-syzkaller-81157-g944070199c5e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Workqueue: events kfree_rcu_work =====================================================