===================================================== BUG: KMSAN: uninit-value in ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_wmi_ctrl_rx+0x2fd/0x530 drivers/net/wireless/ath/ath9k/wmi.c:227 ath9k_htc_rx_msg+0x6a8/0xa90 drivers/net/wireless/ath/ath9k/htc_hst.c:479 ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:659 [inline] ath9k_hif_usb_rx_cb+0x1732/0x2130 drivers/net/wireless/ath/ath9k/hif_usb.c:699 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd4d/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x861/0xf90 kernel/time/timer.c:2022 run_timer_softirq+0x68/0xe0 kernel/time/timer.c:2035 __do_softirq+0x1c9/0x7c5 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0xe5/0x220 kernel/softirq.c:650 irq_exit_rcu+0x12/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:645 __nr_to_section include/linux/mmzone.h:1851 [inline] __pfn_to_section include/linux/mmzone.h:1959 [inline] pfn_valid include/linux/mmzone.h:2010 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:82 [inline] virt_to_page_or_null mm/kmsan/shadow.c:75 [inline] kmsan_get_metadata+0x191/0x2c0 mm/kmsan/shadow.c:143 kmsan_get_shadow_origin_ptr+0x4d/0xa0 mm/kmsan/shadow.c:102 get_shadow_origin_ptr mm/kmsan/instrumentation.c:36 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:92 stack_trace_consume_entry+0xf2/0x1e0 kernel/stacktrace.c:93 arch_stack_walk+0x199/0x290 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0xb6/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:76 [inline] kmsan_internal_poison_memory+0x49/0xa0 mm/kmsan/core.c:60 kmsan_slab_alloc+0xdd/0x150 mm/kmsan/hooks.c:68 slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:774 slab_alloc_node mm/slub.c:3452 [inline] kmem_cache_alloc_node+0x543/0xab0 mm/slub.c:3497 alloc_vmap_area+0x1e3/0x3e80 mm/vmalloc.c:1600 __get_vm_area_node+0x22a/0x570 mm/vmalloc.c:2495 __vmalloc_node_range+0x4da/0x2780 mm/vmalloc.c:3141 __vmalloc_node mm/vmalloc.c:3246 [inline] vmalloc+0x90/0xa0 mm/vmalloc.c:3279 xt_compat_init_offsets+0x14b/0x310 net/netfilter/x_tables.c:733 compat_table_info+0x9f/0x11a0 net/ipv6/netfilter/ip6_tables.c:952 compat_get_entries net/ipv6/netfilter/ip6_tables.c:1605 [inline] do_ip6t_get_ctl+0xba4/0x20e0 net/ipv6/netfilter/ip6_tables.c:1668 nf_getsockopt+0x421/0x480 net/netfilter/nf_sockopt.c:116 ipv6_getsockopt+0x353/0x510 net/ipv6/ipv6_sockglue.c:1499 tcp_getsockopt+0x166/0x1b0 net/ipv4/tcp.c:4409 sock_common_getsockopt+0x9d/0xd0 net/core/sock.c:3641 __sys_getsockopt+0x584/0xb00 net/socket.c:2315 __do_compat_sys_socketcall net/compat.c:493 [inline] __se_compat_sys_socketcall+0x433/0x1af0 net/compat.c:422 __ia32_compat_sys_socketcall+0x6b/0xa0 net/compat.c:422 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0xa2/0x100 arch/x86/entry/common.c:178 do_fast_syscall_32+0x37/0x80 arch/x86/entry/common.c:203 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:246 entry_SYSENTER_compat_after_hwframe+0x70/0x82 Uninit was created at: slab_post_alloc_hook+0x12d/0xb60 mm/slab.h:774 slab_alloc_node mm/slub.c:3452 [inline] kmem_cache_alloc_node+0x543/0xab0 mm/slub.c:3497 kmalloc_reserve+0x148/0x470 net/core/skbuff.c:520 __alloc_skb+0x3a7/0x850 net/core/skbuff.c:606 __netdev_alloc_skb+0x12f/0x7e0 net/core/skbuff.c:670 __dev_alloc_skb include/linux/skbuff.h:3190 [inline] ath9k_hif_usb_rx_stream drivers/net/wireless/ath/ath9k/hif_usb.c:641 [inline] ath9k_hif_usb_rx_cb+0xdd2/0x2130 drivers/net/wireless/ath/ath9k/hif_usb.c:699 __usb_hcd_giveback_urb+0x521/0x750 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x158/0x680 drivers/usb/core/hcd.c:1754 dummy_timer+0xd4d/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:1988 call_timer_fn+0x45/0x4e0 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x861/0xf90 kernel/time/timer.c:2022 run_timer_softirq+0x68/0xe0 kernel/time/timer.c:2035 __do_softirq+0x1c9/0x7c5 kernel/softirq.c:571 CPU: 0 PID: 5056 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller-g90ea0df61c98 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 =====================================================