===================================================== BUG: KMSAN: uninit-value in skb_trim+0x1fc/0x290 net/core/skbuff.c:2095 skb_trim+0x1fc/0x290 net/core/skbuff.c:2095 ath9k_htc_rx_msg+0x8b2/0xbc0 drivers/net/wireless/ath/ath9k/htc_hst.c:460 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:654 [inline] ath9k_hif_usb_rx_cb+0x1745/0x1e30 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c9/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e6/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0xe82/0x4fd0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x85/0x550 kernel/time/timer.c:1421 expire_timers+0x2f0/0x6c0 kernel/time/timer.c:1466 __run_timers+0x6dd/0xb00 kernel/time/timer.c:1737 run_timer_softirq+0x75/0xf0 kernel/time/timer.c:1750 __do_softirq+0x206/0x809 kernel/softirq.c:558 invoke_softirq+0xa8/0x130 kernel/softirq.c:432 __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x79/0x130 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 page_has_metadata mm/kmsan/shadow.c:39 [inline] kmsan_get_metadata+0x1a1/0x220 mm/kmsan/shadow.c:142 kmsan_get_shadow_origin_ptr+0x85/0xf0 mm/kmsan/shadow.c:98 get_shadow_origin_ptr mm/kmsan/instrumentation.c:37 [inline] __msan_metadata_ptr_for_load_8+0x20/0x30 mm/kmsan/instrumentation.c:79 arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] arch_local_irq_save arch/x86/include/asm/irqflags.h:106 [inline] call_rcu+0xff/0xcd0 kernel/rcu/tree.c:3075 destroy_inode fs/inode.c:315 [inline] evict+0xce8/0xdd0 fs/inode.c:679 iput_final fs/inode.c:1744 [inline] iput+0xbde/0x1100 fs/inode.c:1770 dentry_unlink_inode+0x7a4/0x7e0 fs/dcache.c:401 __dentry_kill+0x9c8/0xfc0 fs/dcache.c:607 dentry_kill+0x211/0x6d0 dput+0x3f2/0x620 fs/dcache.c:913 __fput+0xd0b/0x10a0 fs/file_table.c:330 ____fput+0x3b/0x50 fs/file_table.c:350 task_work_run+0x157/0x290 kernel/task_work.c:164 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0x31e/0x3b0 kernel/entry/common.c:171 exit_to_user_mode_prepare+0x195/0x240 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x23/0x40 kernel/entry/common.c:296 __do_fast_syscall_32+0xa4/0xf0 arch/x86/entry/common.c:181 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1b/0x20 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Uninit was created at: slab_post_alloc_hook mm/slab.h:754 [inline] slab_alloc_node mm/slub.c:3231 [inline] __kmalloc_node_track_caller+0xdee/0x14e0 mm/slub.c:4962 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x526/0xf50 net/core/skbuff.c:426 __netdev_alloc_skb+0x4db/0x900 net/core/skbuff.c:494 __dev_alloc_skb include/linux/skbuff.h:3107 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:636 [inline] ath9k_hif_usb_rx_cb+0xe89/0x1e30 drivers/net/wireless/ath/ath9k/hif_usb.c:687 __usb_hcd_giveback_urb+0x6c9/0x930 drivers/usb/core/hcd.c:1670 usb_hcd_giveback_urb+0x1e6/0x7c0 drivers/usb/core/hcd.c:1747 dummy_timer+0xe82/0x4fd0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x85/0x550 kernel/time/timer.c:1421 expire_timers+0x2f0/0x6c0 kernel/time/timer.c:1466 __run_timers+0x6dd/0xb00 kernel/time/timer.c:1737 run_timer_softirq+0x75/0xf0 kernel/time/timer.c:1750 __do_softirq+0x206/0x809 kernel/softirq.c:558 CPU: 0 PID: 3499 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 =====================================================