===================================================== BUG: KMSAN: uninit-value in line6_midibuf_read+0x76b/0x1050 sound/usb/line6/midibuf.c:185 line6_midibuf_read+0x76b/0x1050 sound/usb/line6/midibuf.c:185 line6_data_received+0x503/0xa80 sound/usb/line6/driver.c:310 __usb_hcd_giveback_urb+0x572/0x840 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x157/0x720 drivers/usb/core/hcd.c:1734 dummy_timer+0xd3f/0x6aa0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x564/0xe40 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x3ab/0x1490 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0xa6/0x3a0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 __preempt_count_add arch/x86/include/asm/preempt.h:79 [inline] rcu_read_lock_sched include/linux/rcupdate.h:928 [inline] pfn_valid include/linux/mmzone.h:2022 [inline] kmsan_virt_addr_valid arch/x86/include/asm/kmsan.h:94 [inline] virt_to_page_or_null+0x9b/0x150 mm/kmsan/shadow.c:75 kmsan_get_metadata+0x13e/0x1c0 mm/kmsan/shadow.c:141 kmsan_get_shadow_origin_ptr+0x4d/0xb0 mm/kmsan/shadow.c:102 get_shadow_origin_ptr mm/kmsan/instrumentation.c:38 [inline] __msan_metadata_ptr_for_load_8+0x24/0x40 mm/kmsan/instrumentation.c:94 ieee80211_rx_h_michael_mic_verify+0x4d/0xf20 ieee80211_rx_handlers+0x3f23/0x10fd0 net/mac80211/rx.c:4192 ieee80211_invoke_rx_handlers net/mac80211/rx.c:4238 [inline] ieee80211_prepare_and_rx_handle+0x5424/0x99f0 net/mac80211/rx.c:5086 ieee80211_rx_for_interface+0x88d/0x990 net/mac80211/rx.c:5171 __ieee80211_rx_handle_packet net/mac80211/rx.c:5327 [inline] ieee80211_rx_list+0x549a/0x6690 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x84/0x3f0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5124 [inline] ieee80211_handle_queued_frames+0x1a8/0x340 net/mac80211/main.c:439 ieee80211_tasklet_handler+0x25/0x30 net/mac80211/main.c:458 tasklet_action_common+0x395/0xd50 kernel/softirq.c:785 tasklet_action+0x2d/0x40 kernel/softirq.c:811 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x83/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:107 [inline] raw_atomic_try_cmpxchg_acquire include/linux/atomic/atomic-arch-fallback.h:2170 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1302 [inline] queued_spin_trylock include/asm-generic/qspinlock.h:97 [inline] do_raw_spin_trylock include/linux/spinlock.h:193 [inline] __raw_spin_trylock include/linux/spinlock_api_smp.h:89 [inline] _raw_spin_trylock+0x65/0xc0 kernel/locking/spinlock.c:138 spin_trylock include/linux/spinlock.h:361 [inline] rmqueue_pcplist+0x82/0x5e0 mm/page_alloc.c:2993 rmqueue+0x55/0x1940 mm/page_alloc.c:3043 get_page_from_freelist+0xe7b/0x1610 mm/page_alloc.c:3443 __alloc_pages_noprof+0x8a7/0xe70 mm/page_alloc.c:4702 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2325 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2488 new_slab mm/slub.c:2541 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3727 __slab_alloc mm/slub.c:3817 [inline] __slab_alloc_node mm/slub.c:3870 [inline] slab_alloc_node mm/slub.c:4029 [inline] kmem_cache_alloc_lru_noprof+0x584/0xb30 mm/slub.c:4060 xas_alloc lib/xarray.c:376 [inline] xas_create+0x1be9/0x2690 lib/xarray.c:678 xas_store+0xc3/0x29e0 lib/xarray.c:788 __xa_insert+0x190/0x6a0 lib/xarray.c:1670 xa_insert include/linux/xarray.h:785 [inline] add_hash_entries+0x56b/0x690 sound/core/control.c:412 __snd_ctl_add_replace+0x9d4/0xe60 sound/core/control.c:499 snd_ctl_add_replace sound/core/control.c:519 [inline] snd_ctl_add+0x89/0x1c0 sound/core/control.c:546 pod_init+0x1b0/0x3a0 sound/usb/line6/pod.c:386 line6_probe+0xf1f/0x1120 sound/usb/line6/driver.c:808 pod_probe+0x79/0x90 sound/usb/line6/pod.c:522 usb_probe_interface+0xd6f/0x1350 drivers/usb/core/driver.c:399 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 bus_for_each_drv+0x403/0x620 drivers/base/bus.c:457 __device_attach+0x3c1/0x650 drivers/base/dd.c:1029 device_initial_probe+0x32/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3dc/0x5c0 drivers/base/bus.c:532 device_add+0x13aa/0x1ba0 drivers/base/core.c:3682 usb_set_configuration+0x31c9/0x38d0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x109/0x2a0 drivers/usb/core/generic.c:254 usb_probe_device+0x3a7/0x690 drivers/usb/core/driver.c:294 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 Uninit was created at: slab_post_alloc_hook mm/slub.c:3998 [inline] slab_alloc_node mm/slub.c:4041 [inline] __do_kmalloc_node mm/slub.c:4161 [inline] __kmalloc_noprof+0x661/0xf30 mm/slub.c:4174 kmalloc_noprof include/linux/slab.h:685 [inline] line6_midibuf_init+0x43/0x180 sound/usb/line6/midibuf.c:51 line6_init_midi+0x3e7/0x670 sound/usb/line6/midi.c:284 line6_init_cap_control+0x54e/0x770 sound/usb/line6/driver.c:709 line6_probe+0xeae/0x1120 sound/usb/line6/driver.c:802 pod_probe+0x79/0x90 sound/usb/line6/pod.c:522 usb_probe_interface+0xd6f/0x1350 drivers/usb/core/driver.c:399 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 bus_for_each_drv+0x403/0x620 drivers/base/bus.c:457 __device_attach+0x3c1/0x650 drivers/base/dd.c:1029 device_initial_probe+0x32/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3dc/0x5c0 drivers/base/bus.c:532 device_add+0x13aa/0x1ba0 drivers/base/core.c:3682 usb_set_configuration+0x31c9/0x38d0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x109/0x2a0 drivers/usb/core/generic.c:254 usb_probe_device+0x3a7/0x690 drivers/usb/core/driver.c:294 really_probe+0x4db/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x2ab/0x5d0 drivers/base/dd.c:799 driver_probe_device+0x72/0x890 drivers/base/dd.c:829 __device_attach_driver+0x568/0x9e0 drivers/base/dd.c:957 bus_for_each_drv+0x403/0x620 drivers/base/bus.c:457 __device_attach+0x3c1/0x650 drivers/base/dd.c:1029 device_initial_probe+0x32/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3dc/0x5c0 drivers/base/bus.c:532 device_add+0x13aa/0x1ba0 drivers/base/core.c:3682 usb_new_device+0x15f4/0x2470 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x4ffb/0x72d0 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3312 worker_thread+0xea7/0x14d0 kernel/workqueue.c:3389 kthread+0x3e2/0x540 kernel/kthread.c:389 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 CPU: 0 UID: 0 PID: 1755 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: usb_hub_wq hub_event =====================================================