===================================================== BUG: KMSAN: uninit-value in ath9k_htc_rx_msg+0x879/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:460 ath9k_htc_rx_msg+0x879/0x980 drivers/net/wireless/ath/ath9k/htc_hst.c:460 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:653 [inline] ath9k_hif_usb_rx_cb+0x196a/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 invoke_softirq+0x8f/0x100 kernel/softirq.c:445 __irq_exit_rcu kernel/softirq.c:650 [inline] irq_exit_rcu+0x5a/0x110 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 __nr_to_section include/linux/mmzone.h:1403 [inline] __pfn_to_section include/linux/mmzone.h:1488 [inline] pfn_valid include/linux/mmzone.h:1539 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:50 [inline] virt_to_page_or_null mm/kmsan/shadow.c:76 [inline] kmsan_get_metadata+0x112/0x230 mm/kmsan/shadow.c:139 kmsan_get_shadow_origin_ptr+0x34/0xa0 mm/kmsan/shadow.c:98 get_shadow_origin_ptr mm/kmsan/instrumentation.c:35 [inline] __msan_metadata_ptr_for_load_4+0x20/0x30 mm/kmsan/instrumentation.c:76 stack_trace_consume_entry+0x35/0x1e0 kernel/stacktrace.c:86 arch_stack_walk+0x195/0x280 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0xb2/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:80 [inline] kmsan_internal_poison_memory+0x45/0x90 mm/kmsan/core.c:65 kmsan_slab_alloc+0xd9/0x150 mm/kmsan/hooks.c:67 slab_post_alloc_hook mm/slab.h:755 [inline] slab_alloc_node mm/slub.c:3258 [inline] kmem_cache_alloc_node+0x711/0xf20 mm/slub.c:3308 alloc_vmap_area+0x1ce/0x3aa0 mm/vmalloc.c:1576 __get_vm_area_node+0x228/0x560 mm/vmalloc.c:2469 __vmalloc_node_range+0x4a4/0x2700 mm/vmalloc.c:3141 __vmalloc_node mm/vmalloc.c:3246 [inline] vzalloc+0x8c/0xa0 mm/vmalloc.c:3319 alloc_counters+0x87/0x8c0 net/ipv6/netfilter/ip6_tables.c:817 copy_entries_to_user net/ipv4/netfilter/ip_tables.c:823 [inline] get_entries net/ipv4/netfilter/ip_tables.c:1024 [inline] do_ipt_get_ctl+0xf02/0x2110 net/ipv4/netfilter/ip_tables.c:1663 nf_getsockopt+0x41d/0x480 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x1bfe/0x2190 net/ipv4/ip_sockglue.c:1786 tcp_getsockopt+0xc4/0x100 net/ipv4/tcp.c:4277 sock_common_getsockopt+0x99/0xd0 net/core/sock.c:3555 __sys_getsockopt+0x5ea/0xb00 net/socket.c:2298 __do_sys_getsockopt net/socket.c:2313 [inline] __se_sys_getsockopt net/socket.c:2310 [inline] __x64_sys_getsockopt+0xe1/0x160 net/socket.c:2310 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook mm/slab.h:755 [inline] slab_alloc_node mm/slub.c:3258 [inline] __kmalloc_node_track_caller+0x86c/0x1230 mm/slub.c:4994 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x34a/0xd70 net/core/skbuff.c:426 __netdev_alloc_skb+0x126/0x780 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:3264 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:635 [inline] ath9k_hif_usb_rx_cb+0xe7b/0x1f10 drivers/net/wireless/ath/ath9k/hif_usb.c:686 __usb_hcd_giveback_urb+0x522/0x740 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x150/0x620 drivers/usb/core/hcd.c:1747 dummy_timer+0xd3f/0x4f20 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x43/0x480 kernel/time/timer.c:1474 expire_timers+0x272/0x610 kernel/time/timer.c:1519 __run_timers+0x5bc/0x8c0 kernel/time/timer.c:1790 run_timer_softirq+0x64/0xe0 kernel/time/timer.c:1803 __do_softirq+0x1cc/0x7fb kernel/softirq.c:571 CPU: 0 PID: 3537 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 =====================================================