syzbot

 sign-in | mailing list | source | docs
🐞 Open [1645]
≡ Subsystems
🐞 Fixed [6009]
🐞 Invalid [14804]
⬇ Missing Backports [135]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KMSAN: uninit-value in gtco_probe

Status: auto-obsoleted due to no activity on 2022/09/18 19:51
Subsystems: input usb
[Documentation on labels]
Reported-by: syzbot+bb54195a43a54b1e5e5e@syzkaller.appspotmail.com
First crash: 1999d, last: 1447d
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
Reminder: 67 active syzbot reports in usb subsystem 1 (1) 2019/10/04 03:38
Reminder: 52 active syzbot reports in usb subsystem 4 (4) 2019/09/19 19:01
Reminder: 52 active syzbot reports in usb subsystem 1 (1) 2019/08/22 03:28
KMSAN: uninit-value in gtco_probe 0 (2) 2019/08/12 18:21
▶ ▼ Last patch testing requests (3)
Created Duration User Patch Repo Result
2022/09/18 17:29 19m retest repro https://github.com/google/kmsan.git master OK log
2022/09/18 15:29 19m retest repro https://github.com/google/kmsan.git master OK log
2021/05/09 22:21 20m alaaemadhossney.ae@gmail.com https://github.com/google/kmsan.git master OK

Sample crash report:
usb 1-1: config 0 has no interface number 0
usb 1-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47
usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 1-1: config 0 descriptor??
gtco 1-1:0.219: Collection level already at zero
==================================================================
BUG: KMSAN: uninit-value in parse_hid_report_descriptor drivers/input/tablet/gtco.c:297 [inline]
BUG: KMSAN: uninit-value in gtco_probe+0x18c7/0x3520 drivers/input/tablet/gtco.c:938
CPU: 1 PID: 3356 Comm: kworker/1:2 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x162/0x2d0 mm/kmsan/kmsan_report.c:109
 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:294
 parse_hid_report_descriptor drivers/input/tablet/gtco.c:297 [inline]
 gtco_probe+0x18c7/0x3520 drivers/input/tablet/gtco.c:938
 usb_probe_interface+0xd19/0x1310 drivers/usb/core/driver.c:361
 really_probe+0x1373/0x1dc0 drivers/base/dd.c:552
 driver_probe_device+0x1ba/0x510 drivers/base/dd.c:709
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:816
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x489/0x750 drivers/base/dd.c:882
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:929
 bus_probe_device+0x131/0x390 drivers/base/bus.c:514
 device_add+0x25b5/0x2df0 drivers/base/core.c:2165
 usb_set_configuration+0x309f/0x3710 drivers/usb/core/message.c:2027
 generic_probe+0xe7/0x280 drivers/usb/core/generic.c:210
 usb_probe_device+0x146/0x200 drivers/usb/core/driver.c:266
 really_probe+0x1373/0x1dc0 drivers/base/dd.c:552
 driver_probe_device+0x1ba/0x510 drivers/base/dd.c:709
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:816
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x489/0x750 drivers/base/dd.c:882
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:929
 bus_probe_device+0x131/0x390 drivers/base/bus.c:514
 device_add+0x25b5/0x2df0 drivers/base/core.c:2165
 usb_new_device+0x23e5/0x2fb0 drivers/usb/core/hub.c:2536
 hub_port_connect drivers/usb/core/hub.c:5098 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5213 [inline]
 port_event drivers/usb/core/hub.c:5359 [inline]
 hub_event+0x581d/0x72f0 drivers/usb/core/hub.c:5441
 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:174 [inline]
 kmsan_internal_chain_origin+0xcc/0x150 mm/kmsan/kmsan.c:332
 __msan_chain_origin+0x6b/0xe0 mm/kmsan/kmsan_instr.c:190
 parse_hid_report_descriptor drivers/input/tablet/gtco.c:298 [inline]
 gtco_probe+0x1a7c/0x3520 drivers/input/tablet/gtco.c:938
 usb_probe_interface+0xd19/0x1310 drivers/usb/core/driver.c:361
 really_probe+0x1373/0x1dc0 drivers/base/dd.c:552
 driver_probe_device+0x1ba/0x510 drivers/base/dd.c:709
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:816
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x489/0x750 drivers/base/dd.c:882
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:929
 bus_probe_device+0x131/0x390 drivers/base/bus.c:514
 device_add+0x25b5/0x2df0 drivers/base/core.c:2165
 usb_set_configuration+0x309f/0x3710 drivers/usb/core/message.c:2027
 generic_probe+0xe7/0x280 drivers/usb/core/generic.c:210
 usb_probe_device+0x146/0x200 drivers/usb/core/driver.c:266
 really_probe+0x1373/0x1dc0 drivers/base/dd.c:552
 driver_probe_device+0x1ba/0x510 drivers/base/dd.c:709
 __device_attach_driver+0x5b8/0x790 drivers/base/dd.c:816
 bus_for_each_drv+0x28e/0x3b0 drivers/base/bus.c:454
 __device_attach+0x489/0x750 drivers/base/dd.c:882
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:929
 bus_probe_device+0x131/0x390 drivers/base/bus.c:514
 device_add+0x25b5/0x2df0 drivers/base/core.c:2165
 usb_new_device+0x23e5/0x2fb0 drivers/usb/core/hub.c:2536
 hub_port_connect drivers/usb/core/hub.c:5098 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5213 [inline]
 port_event drivers/usb/core/hub.c:5359 [inline]
 hub_event+0x581d/0x72f0 drivers/usb/core/hub.c:5441
 process_one_work+0x1572/0x1ef0 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Local variable description: ----globalval.i@gtco_probe
Variable was created at:
 parse_hid_report_descriptor drivers/input/tablet/gtco.c:221 [inline]
 gtco_probe+0xcd6/0x3520 drivers/input/tablet/gtco.c:938
 usb_probe_interface+0xd19/0x1310 drivers/usb/core/driver.c:361
==================================================================

Crashes (136):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/09/14 10:28 https://github.com/google/kmsan.git master cebbfdbcf2b7 32d59357 .config console log report syz C ci-upstream-kmsan-gce
2019/08/12 18:20 https://github.com/google/kmsan.git master 61ccdad1fcdf acb51638 .config console log report syz C ci-upstream-kmsan-gce
2021/02/10 14:58 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in gtco_probe
2021/02/09 13:26 https://github.com/google/kmsan.git master 73d62e81b476 2bd9619f .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in gtco_probe
2021/02/06 02:42 https://github.com/google/kmsan.git master 73d62e81b476 23a562df .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in gtco_probe
2021/02/04 00:04 https://github.com/google/kmsan.git master 73d62e81b476 624dad51 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in gtco_probe
2021/01/19 09:24 https://github.com/google/kmsan.git master 73d62e81b476 63631df1 .config console log report info ci-upstream-kmsan-gce KMSAN: uninit-value in gtco_probe
2021/02/11 00:35 https://github.com/google/kmsan.git master 73d62e81b476 a52ee10a .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in gtco_probe
2021/02/06 06:24 https://github.com/google/kmsan.git master 73d62e81b476 23a562df .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in gtco_probe
2021/02/04 04:51 https://github.com/google/kmsan.git master 73d62e81b476 624dad51 .config console log report info ci-upstream-kmsan-gce-386 KMSAN: uninit-value in gtco_probe
2021/01/12 11:18 https://github.com/google/kmsan.git master 73d62e81b476 2c1f2513 .config console log report info ci-upstream-kmsan-gce
2020/12/14 09:46 https://github.com/google/kmsan.git master 73d62e81b476 b22a7ec3 .config console log report info ci-upstream-kmsan-gce
2020/12/11 00:45 https://github.com/google/kmsan.git master 73d62e81b476 f900b48c .config console log report info ci-upstream-kmsan-gce
2020/12/09 09:38 https://github.com/google/kmsan.git master 73d62e81b476 40cc414d .config console log report info ci-upstream-kmsan-gce
2020/12/08 11:01 https://github.com/google/kmsan.git master 73d62e81b476 51a9082e .config console log report info ci-upstream-kmsan-gce
2020/12/02 07:26 https://github.com/google/kmsan.git master 73d62e81b476 c42a35e9 .config console log report info ci-upstream-kmsan-gce
2020/12/02 02:57 https://github.com/google/kmsan.git master 73d62e81b476 07bfe8a5 .config console log report info ci-upstream-kmsan-gce
2020/12/01 04:42 https://github.com/google/kmsan.git master 73d62e81b476 b3a34598 .config console log report info ci-upstream-kmsan-gce
2020/11/26 10:02 https://github.com/google/kmsan.git master 73d62e81b476 2f1cec62 .config console log report info ci-upstream-kmsan-gce
2020/09/12 19:12 https://github.com/google/kmsan.git master 3b3ea6028136 ce441f06 .config console log report ci-upstream-kmsan-gce
2020/09/03 01:34 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce
2020/08/31 11:18 https://github.com/google/kmsan.git master 3b3ea6028136 d5a3ae1f .config console log report ci-upstream-kmsan-gce
2020/08/28 08:02 https://github.com/google/kmsan.git master ce8056d1f79e 816e0689 .config console log report ci-upstream-kmsan-gce
2020/08/26 19:37 https://github.com/google/kmsan.git master ce8056d1f79e 318430cb .config console log report ci-upstream-kmsan-gce
2020/08/24 08:07 https://github.com/google/kmsan.git master ce8056d1f79e cef5ae68 .config console log report ci-upstream-kmsan-gce
2020/08/22 02:42 https://github.com/google/kmsan.git master ce8056d1f79e 6436ce4b .config console log report ci-upstream-kmsan-gce
2020/08/13 14:29 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce
2020/08/13 09:53 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce
2020/08/13 07:18 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce
2020/08/12 21:44 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce
2019/08/09 01:07 https://github.com/google/kmsan.git master 61ccdad1fcdf ede31a9b .config console log report ci-upstream-kmsan-gce
2020/12/15 06:41 https://github.com/google/kmsan.git master 73d62e81b476 97183ed7 .config console log report info ci-upstream-kmsan-gce-386
2020/12/14 07:02 https://github.com/google/kmsan.git master 73d62e81b476 b22a7ec3 .config console log report info ci-upstream-kmsan-gce-386
2020/12/06 05:47 https://github.com/google/kmsan.git master 73d62e81b476 50503117 .config console log report info ci-upstream-kmsan-gce-386
2020/11/27 13:01 https://github.com/google/kmsan.git master 73d62e81b476 5018c946 .config console log report info ci-upstream-kmsan-gce-386
2020/09/13 01:08 https://github.com/google/kmsan.git master 3b3ea6028136 ce441f06 .config console log report ci-upstream-kmsan-gce-386
2020/09/11 18:45 https://github.com/google/kmsan.git master 3b3ea6028136 adfb8b4e .config console log report ci-upstream-kmsan-gce-386
2020/09/08 20:11 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/08 01:17 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/06 23:19 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/05 21:54 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/04 18:45 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/04 12:38 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/09/02 11:42 https://github.com/google/kmsan.git master 3b3ea6028136 abf9ba4f .config console log report ci-upstream-kmsan-gce-386
2020/08/23 21:41 https://github.com/google/kmsan.git master ce8056d1f79e cef5ae68 .config console log report ci-upstream-kmsan-gce-386
2020/08/23 16:57 https://github.com/google/kmsan.git master ce8056d1f79e cef5ae68 .config console log report ci-upstream-kmsan-gce-386
2020/08/15 06:58 https://github.com/google/kmsan.git master ce8056d1f79e 424dd8e7 .config console log report ci-upstream-kmsan-gce-386
2020/08/14 02:29 https://github.com/google/kmsan.git master ce8056d1f79e 54ce1ed6 .config console log report ci-upstream-kmsan-gce-386
2020/08/13 17:15 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce-386
2020/08/13 13:29 https://github.com/google/kmsan.git master ce8056d1f79e bc15f7db .config console log report ci-upstream-kmsan-gce-386
2020/08/10 09:51 https://github.com/google/kmsan.git master ce8056d1f79e 70301872 .config console log report ci-upstream-kmsan-gce-386
2020/08/09 12:20 https://github.com/google/kmsan.git master ce8056d1f79e f721e4a0 .config console log report ci-upstream-kmsan-gce-386
* Struck through repros no longer work on HEAD.