===================================================== BUG: KMSAN: uninit-value in skb_trim+0x13a/0x190 net/core/skbuff.c:2673 skb_trim+0x13a/0x190 net/core/skbuff.c:2673 ath9k_hif_usb_reg_in_cb+0x582/0x970 drivers/net/wireless/ath/ath9k/hif_usb.c:758 __usb_hcd_giveback_urb+0x572/0x840 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x157/0x720 drivers/usb/core/hcd.c:1734 dummy_timer+0xd3f/0x6aa0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x564/0xe40 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x3ab/0x1490 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0xa6/0x3a0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x7e/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:94 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x33/0x60 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] rmqueue_bulk mm/page_alloc.c:2281 [inline] __rmqueue_pcplist+0x6c80/0x7650 mm/page_alloc.c:2957 rmqueue_pcplist+0x17e/0x5e0 mm/page_alloc.c:2999 rmqueue+0x55/0x1940 mm/page_alloc.c:3036 get_page_from_freelist+0xe7b/0x1610 mm/page_alloc.c:3436 __alloc_pages_noprof+0x8a7/0xe70 mm/page_alloc.c:4695 alloc_pages_mpol_noprof+0x299/0x990 mm/mempolicy.c:2263 alloc_pages_noprof+0x1bf/0x1e0 mm/mempolicy.c:2343 get_free_pages_noprof+0x34/0xc0 mm/page_alloc.c:4742 _pgd_alloc arch/x86/mm/pgtable.c:423 [inline] pgd_alloc+0x3f/0x5b0 arch/x86/mm/pgtable.c:439 mm_alloc_pgd kernel/fork.c:794 [inline] mm_init+0x4c7/0xc00 kernel/fork.c:1293 dup_mm kernel/fork.c:1669 [inline] copy_mm+0x1f3/0x3a60 kernel/fork.c:1721 copy_process+0x26f7/0x5c10 kernel/fork.c:2387 kernel_clone+0x401/0x1040 kernel/fork.c:2800 __do_sys_clone kernel/fork.c:2943 [inline] __se_sys_clone kernel/fork.c:2927 [inline] __x64_sys_clone+0x25c/0x360 kernel/fork.c:2927 x64_sys_call+0x3b29/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:57 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4718 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2321 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2484 new_slab mm/slub.c:2537 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3723 __slab_alloc mm/slub.c:3813 [inline] __slab_alloc_node mm/slub.c:3866 [inline] slab_alloc_node mm/slub.c:4025 [inline] kmem_cache_alloc_node_noprof+0x5fd/0xb80 mm/slub.c:4080 __alloc_skb+0x1e9/0x7b0 net/core/skbuff.c:664 alloc_skb include/linux/skbuff.h:1320 [inline] ath9k_hif_usb_alloc_reg_in_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:991 [inline] ath9k_hif_usb_alloc_urbs+0x131f/0x1bd0 drivers/net/wireless/ath/ath9k/hif_usb.c:1050 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1136 [inline] ath9k_hif_usb_firmware_cb+0x183/0x7e0 drivers/net/wireless/ath/ath9k/hif_usb.c:1269 request_firmware_work_func+0x128/0x220 drivers/base/firmware_loader/main.c:1167 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3312 worker_thread+0xea5/0x1520 kernel/workqueue.c:3390 kthread+0x3dd/0x540 kernel/kthread.c:389 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 CPU: 1 UID: 0 PID: 5567 Comm: syz-executor Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 =====================================================