===================================================== BUG: KMSAN: uninit-value in skb_trim+0x13a/0x190 net/core/skbuff.c:2673 skb_trim+0x13a/0x190 net/core/skbuff.c:2673 ath9k_hif_usb_reg_in_cb+0x582/0x970 drivers/net/wireless/ath/ath9k/hif_usb.c:758 __usb_hcd_giveback_urb+0x572/0x840 drivers/usb/core/hcd.c:1650 usb_hcd_giveback_urb+0x157/0x720 drivers/usb/core/hcd.c:1734 dummy_timer+0xd3f/0x6aa0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x564/0xe40 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x3ab/0x1490 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0xa6/0x3a0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x40/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 smap_save arch/x86/include/asm/smap.h:51 [inline] __msan_poison_alloca+0x88/0x1b0 mm/kmsan/instrumentation.c:270 arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] arch_local_irq_save arch/x86/include/asm/irqflags.h:123 [inline] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] _raw_spin_lock_irqsave+0x35/0xc0 kernel/locking/spinlock.c:162 skb_dequeue+0x3d/0x2a0 net/core/skbuff.c:3854 ieee80211_handle_queued_frames+0x54/0x340 net/mac80211/main.c:432 ieee80211_tasklet_handler+0x25/0x30 net/mac80211/main.c:458 tasklet_action_common+0x395/0xd50 kernel/softirq.c:785 tasklet_action+0x2d/0x40 kernel/softirq.c:811 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x68/0x120 kernel/softirq.c:637 irq_exit_rcu+0x12/0x20 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x83/0x90 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 unwind_done+0x38/0x80 arch/x86/include/asm/unwind.h:50 unwind_next_frame+0x35/0x470 arch/x86/kernel/unwind_frame.c:269 arch_stack_walk+0x1ec/0x2d0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xaa/0xe0 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:73 [inline] kmsan_internal_poison_memory+0x49/0x90 mm/kmsan/core.c:57 kmsan_free_page+0xdd/0x160 mm/kmsan/shadow.c:210 free_pages_prepare mm/page_alloc.c:1047 [inline] free_unref_folios+0x319/0x2820 mm/page_alloc.c:2667 folios_put_refs+0xbea/0xc70 mm/swap.c:1039 free_pages_and_swap_cache+0xa01/0xa30 mm/swap_state.c:335 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:366 [inline] tlb_flush_mmu+0x7b4/0xd20 mm/mmu_gather.c:373 tlb_finish_mmu+0x101/0x260 mm/mmu_gather.c:465 unmap_region+0x2c9/0x390 mm/mmap.c:2441 do_vmi_align_munmap+0x128f/0x1c40 mm/mmap.c:2754 do_vmi_munmap+0x45d/0x4f0 mm/mmap.c:2830 __vm_munmap+0x210/0x540 mm/mmap.c:3109 __do_sys_munmap mm/mmap.c:3126 [inline] __se_sys_munmap mm/mmap.c:3123 [inline] __ia32_sys_munmap+0x78/0xc0 mm/mmap.c:3123 ia32_sys_call+0x92d/0x40d0 arch/x86/include/generated/asm/syscalls_32.h:92 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb0/0x110 arch/x86/entry/common.c:386 do_fast_syscall_32+0x38/0x80 arch/x86/entry/common.c:411 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/common.c:449 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was created at: __alloc_pages_noprof+0x9d6/0xe70 mm/page_alloc.c:4725 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] alloc_slab_page mm/slub.c:2325 [inline] allocate_slab+0x203/0x1220 mm/slub.c:2488 new_slab mm/slub.c:2541 [inline] ___slab_alloc+0x12ef/0x35e0 mm/slub.c:3727 __slab_alloc mm/slub.c:3817 [inline] __slab_alloc_node mm/slub.c:3870 [inline] slab_alloc_node mm/slub.c:4029 [inline] kmem_cache_alloc_node_noprof+0x5fd/0xb80 mm/slub.c:4084 __alloc_skb+0x1e9/0x7b0 net/core/skbuff.c:664 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6526 sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2815 unix_dgram_sendmsg+0xa0a/0x2cf0 net/unix/af_unix.c:2030 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0x125/0x1d0 net/socket.c:2212 x64_sys_call+0x3373/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 28389 Comm: syz.1.10723 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 =====================================================