KMSAN: uninit-value in ath9k_hw_init

Status: auto-obsoleted due to no activity on 2024/03/25 17:03
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+df61b36319e045c00a08@syzkaller.appspotmail.com
First crash: 1248d, last: 960d
▶ ▼ Discussions (13)
Title Replies (including bot) Last reply
[PATCH 0/3] wifi: ath9k: deal with uninit memory 13 (13) 2023/04/28 16:52
Re: [PATCH v2] wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx 1 (1) 2023/04/25 07:54
Re: [PATCH v2] wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx 1 (1) 2023/04/25 05:45
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/15 19:45
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/15 14:12
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/13 21:05
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/13 18:04
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/13 17:35
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/13 15:46
Re: [syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 1 (2) 2023/03/13 11:22
1 (2) 2023/03/12 20:41
[PATCH 0/2] feat: checkpatch: prohibit Buglink: and warn about missing Link: 37 (37) 2023/03/07 11:36
[syzbot] [wireless?] KMSAN: uninit-value in ath9k_hw_init 0 (1) 2023/03/06 07:22
▶ ▼ Last patch testing requests (14)
Created Duration User Patch Repo Result
2024/02/24 17:26 27m retest repro upstream OK log
2023/12/16 16:21 40m retest repro upstream report log
2023/10/07 14:12 18m retest repro upstream report log
2023/07/29 13:39 17m retest repro upstream report log
2023/05/20 13:22 17m retest repro https://github.com/google/kmsan.git master report log
2023/05/20 13:10 16m retest repro https://github.com/google/kmsan.git master report log
2023/03/15 19:35 0m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master error
2023/03/15 13:47 24m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master OK log
2023/03/13 20:47 17m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master report log
2023/03/13 17:41 22m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master error
2023/03/13 17:05 27m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master error
2023/03/13 14:36 16m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master report log
2023/03/13 11:03 16m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master report log
2023/03/12 20:21 16m pchelkin@ispras.ru patch https://github.com/google/kmsan.git master report log

Sample crash report:
ath9k_htc 6-1:1.0: ath9k_htc: HTC initialized with 33 credits
=====================================================
BUG: KMSAN: uninit-value in ath9k_hw_read_revisions drivers/net/wireless/ath/ath9k/hw.c:289 [inline]
BUG: KMSAN: uninit-value in __ath9k_hw_init drivers/net/wireless/ath/ath9k/hw.c:572 [inline]
BUG: KMSAN: uninit-value in ath9k_hw_init+0x11e0/0x2d60 drivers/net/wireless/ath/ath9k/hw.c:700
 ath9k_hw_read_revisions drivers/net/wireless/ath/ath9k/hw.c:289 [inline]
 __ath9k_hw_init drivers/net/wireless/ath/ath9k/hw.c:572 [inline]
 ath9k_hw_init+0x11e0/0x2d60 drivers/net/wireless/ath/ath9k/hw.c:700
 ath9k_init_priv drivers/net/wireless/ath/ath9k/htc_drv_init.c:662 [inline]
 ath9k_init_device drivers/net/wireless/ath/ath9k/htc_drv_init.c:839 [inline]
 ath9k_htc_probe_device+0xf48/0x3b60 drivers/net/wireless/ath/ath9k/htc_drv_init.c:963
 ath9k_htc_hw_init+0x4f/0x100 drivers/net/wireless/ath/ath9k/htc_hst.c:521
 ath9k_hif_usb_firmware_cb+0x2eb/0x800 drivers/net/wireless/ath/ath9k/hif_usb.c:1243
 request_firmware_work_func+0x130/0x240 drivers/base/firmware_loader/main.c:1107
 process_one_work+0xb0d/0x1410 kernel/workqueue.c:2289
 worker_thread+0x107b/0x1d60 kernel/workqueue.c:2436
 kthread+0x31f/0x430 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

Local variable val created at:
 ath9k_regread+0x62/0x1b0 drivers/net/wireless/ath/ath9k/htc_drv_init.c:239
 ath9k_hw_read_revisions drivers/net/wireless/ath/ath9k/hw.c:287 [inline]
 __ath9k_hw_init drivers/net/wireless/ath/ath9k/hw.c:572 [inline]
 ath9k_hw_init+0x5be/0x2d60 drivers/net/wireless/ath/ath9k/hw.c:700

CPU: 0 PID: 115 Comm: kworker/0:2 Not tainted 6.2.0-syzkaller-81157-g944070199c5e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Workqueue: events request_firmware_work_func
=====================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/03 20:21 https://github.com/google/kmsan.git master 944070199c5e f8902b57 .config strace log report syz C ci-upstream-kmsan-gce KMSAN: uninit-value in ath9k_hw_init
2023/03/11 13:10 https://github.com/google/kmsan.git master e61893130d87 5205ef30 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ath9k_hw_init
2023/03/03 18:44 https://github.com/google/kmsan.git master 944070199c5e f8902b57 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in ath9k_hw_init
* Struck through repros no longer work on HEAD.