===================================================== BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x544/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:417 ath9k_htc_rx_msg+0x544/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:417 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:653 [inline] ath9k_hif_usb_rx_cb+0x196a/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 invoke_softirq+0x8f/0x100 kernel/softirq.c:445 __irq_exit_rcu kernel/softirq.c:650 [inline] irq_exit_rcu+0x5a/0x110 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 kmsan_get_metadata+0x0/0x230 mm/kmsan/shadow.c:92 get_shadow_origin_ptr mm/kmsan/instrumentation.c:35 [inline] __msan_metadata_ptr_for_load_4+0x20/0x30 mm/kmsan/instrumentation.c:76 unwind_done arch/x86/include/asm/unwind.h:50 [inline] arch_stack_walk+0x1c7/0x280 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xb2/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:80 [inline] kmsan_internal_poison_memory+0x45/0x90 mm/kmsan/core.c:65 kmsan_slab_free+0xcd/0x130 mm/kmsan/hooks.c:88 slab_free_hook mm/slub.c:1739 [inline] slab_free_freelist_hook+0x1b8/0x650 mm/slub.c:1795 slab_free mm/slub.c:3551 [inline] kfree+0x207/0x9c0 mm/slub.c:4599 __vunmap+0x12c7/0x1410 mm/vmalloc.c:2689 __vfree mm/vmalloc.c:2729 [inline] vfree+0xda/0x120 mm/vmalloc.c:2760 copy_entries_to_user net/ipv4/netfilter/ip_tables.c:868 [inline] get_entries net/ipv4/netfilter/ip_tables.c:1024 [inline] do_ipt_get_ctl+0x1612/0x2110 net/ipv4/netfilter/ip_tables.c:1663 nf_getsockopt+0x41d/0x480 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x1bfe/0x2190 net/ipv4/ip_sockglue.c:1786 tcp_getsockopt+0xc4/0x100 net/ipv4/tcp.c:4277 sock_common_getsockopt+0x99/0xd0 net/core/sock.c:3555 __sys_getsockopt+0x5ea/0xb00 net/socket.c:2298 __do_sys_getsockopt net/socket.c:2313 [inline] __se_sys_getsockopt net/socket.c:2310 [inline] __x64_sys_getsockopt+0xe1/0x160 net/socket.c:2310 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook mm/slab.h:755 [inline] slab_alloc_node mm/slub.c:3258 [inline] __kmalloc_node_track_caller+0x86c/0x1230 mm/slub.c:4994 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x34a/0xd70 net/core/skbuff.c:426 __netdev_alloc_skb+0x126/0x780 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:3264 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:635 [inline] ath9k_hif_usb_rx_cb+0xe7b/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 CPU: 1 PID: 3515 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 =====================================================