syzbot


KMSAN: uninit-value in synaptics_detect

Status: fixed on 2018/11/12 21:25
Subsystems: input
[Documentation on labels]
Reported-by: syzbot+13cb3b01d0784e4ffc3f@syzkaller.appspotmail.com
Fix commit: f39f8688888a Input: synaptics - avoid using uninitialized variable when probing
First crash: 2064d, last: 1990d
Discussions (4)
Title Replies (including bot) Last reply
[PATCH 4.19 000/110] 4.19.6-stable review 142 (142) 2018/12/14 17:42
[PATCH 4.14 000/100] 4.14.85-stable review 116 (116) 2018/12/03 11:38
[PATCH] Input: synaptics - avoid using uninitialized variable when probing 3 (3) 2018/10/19 05:46
KMSAN: uninit-value in synaptics_detect 0 (1) 2018/09/20 21:04

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
psmouse serio2: Failed to reset mouse on : -5
misc userio: Buffer overflowed, userio client isn't keeping up
==================================================================
BUG: KMSAN: uninit-value in synaptics_detect+0x1fa/0x2a0 drivers/input/mouse/synaptics.c:112
CPU: 1 PID: 41 Comm: kworker/1:2 Not tainted 4.19.0-rc1+ #42
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_long serio_handle_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x14b/0x190 lib/dump_stack.c:113
 kmsan_report+0x183/0x2b0 mm/kmsan/kmsan.c:956
 __msan_warning+0x70/0xc0 mm/kmsan/kmsan_instr.c:645
 synaptics_detect+0x1fa/0x2a0 drivers/input/mouse/synaptics.c:112
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1011 [inline]
 psmouse_extensions+0x10fd/0x3820 drivers/input/mouse/psmouse-base.c:1106
 psmouse_switch_protocol+0x184/0xd90 drivers/input/mouse/psmouse-base.c:1544
 psmouse_connect+0x1387/0x2290 drivers/input/mouse/psmouse-base.c:1634
 serio_connect_driver drivers/input/serio/serio.c:59 [inline]
 serio_driver_probe+0xe3/0x150 drivers/input/serio/serio.c:790
 really_probe+0x19ae/0x2040 drivers/base/dd.c:500
 driver_probe_device+0x1b4/0x4f0 drivers/base/dd.c:662
 __device_attach_driver+0x632/0x750 drivers/base/dd.c:758
 bus_for_each_drv+0x27e/0x390 drivers/base/bus.c:461
 __device_attach+0x381/0x5e0 drivers/base/dd.c:815
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:862
 bus_probe_device+0x137/0x390 drivers/base/bus.c:521
 device_add+0x2687/0x2c70 drivers/base/core.c:1927
 serio_add_port drivers/input/serio/serio.c:554 [inline]
 serio_handle_event+0x1d90/0x2700 drivers/input/serio/serio.c:222
 process_one_work+0x1605/0x1f40 kernel/workqueue.c:2153
 worker_thread+0x11a2/0x2590 kernel/workqueue.c:2296
 kthread+0x465/0x4a0 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:416

Local variable description: ----param@synaptics_detect
Variable was created at:
 synaptics_detect+0x50/0x2a0 drivers/input/mouse/synaptics.c:100
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1011 [inline]
 psmouse_extensions+0x10fd/0x3820 drivers/input/mouse/psmouse-base.c:1106
==================================================================

Crashes (137):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/09/08 15:37 https://github.com/google/kmsan.git master 42a037ca8d9d 6b5120a4 .config console log report syz C ci-upstream-kmsan-gce
2018/09/03 14:26 https://github.com/google/kmsan.git master 28f0ca98eadf a4718693 .config console log report syz ci-upstream-kmsan-gce
2018/11/12 14:36 https://github.com/google/kmsan.git master 56c832411f89 7b5f8621 .config console log report ci-upstream-kmsan-gce
2018/11/12 13:28 https://github.com/google/kmsan.git master 56c832411f89 7b5f8621 .config console log report ci-upstream-kmsan-gce
2018/11/12 11:12 https://github.com/google/kmsan.git master 56c832411f89 7b5f8621 .config console log report ci-upstream-kmsan-gce
2018/11/12 09:11 https://github.com/google/kmsan.git master 746f11553795 7b5f8621 .config console log report ci-upstream-kmsan-gce
2018/11/11 13:32 https://github.com/google/kmsan.git master 746f11553795 f3c4e618 .config console log report ci-upstream-kmsan-gce
2018/11/10 03:39 https://github.com/google/kmsan.git master 746f11553795 f9815aaf .config console log report ci-upstream-kmsan-gce
2018/11/09 06:24 https://github.com/google/kmsan.git master c9658ff8d68d 8fd01d3a .config console log report ci-upstream-kmsan-gce
2018/11/09 00:01 https://github.com/google/kmsan.git master 6fbdd09ed73e e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/08 09:18 https://github.com/google/kmsan.git master 7438a3b20295 e85d2a61 .config console log report ci-upstream-kmsan-gce
2018/11/07 11:18 https://github.com/google/kmsan.git master 7438a3b20295 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/06 18:11 https://github.com/google/kmsan.git master 7438a3b20295 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/05 00:24 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/04 13:05 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/03 13:34 https://github.com/google/kmsan.git master 88b95ef4c780 8bd6bd63 .config console log report ci-upstream-kmsan-gce
2018/11/02 04:54 https://github.com/google/kmsan.git master 88b95ef4c780 1f38e9ae .config console log report ci-upstream-kmsan-gce
2018/11/01 04:55 https://github.com/google/kmsan.git master 88b95ef4c780 1f38e9ae .config console log report ci-upstream-kmsan-gce
2018/10/31 21:37 https://github.com/google/kmsan.git master d37ea67ead41 89781090 .config console log report ci-upstream-kmsan-gce
2018/10/31 17:26 https://github.com/google/kmsan.git master d37ea67ead41 89781090 .config console log report ci-upstream-kmsan-gce
2018/10/31 05:19 https://github.com/google/kmsan.git master 0f538cda0a8b 4ccf7bb4 .config console log report ci-upstream-kmsan-gce
2018/10/30 05:11 https://github.com/google/kmsan.git master 7e5816e23e06 2f1090da .config console log report ci-upstream-kmsan-gce
2018/10/29 04:04 https://github.com/google/kmsan.git master 4bb25354f0b0 9ca2afa1 .config console log report ci-upstream-kmsan-gce
2018/10/28 11:05 https://github.com/google/kmsan.git master 4bb25354f0b0 6f9b225a .config console log report ci-upstream-kmsan-gce
2018/10/28 05:31 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config console log report ci-upstream-kmsan-gce
2018/10/27 17:51 https://github.com/google/kmsan.git master 4bb25354f0b0 8efba39a .config console log report ci-upstream-kmsan-gce
2018/10/26 11:17 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/25 21:52 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/25 10:45 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/24 03:55 https://github.com/google/kmsan.git master 4bb25354f0b0 a8292de9 .config console log report ci-upstream-kmsan-gce
2018/10/23 08:46 https://github.com/google/kmsan.git master 4bb25354f0b0 ecb386fe .config console log report ci-upstream-kmsan-gce
2018/10/22 17:14 https://github.com/google/kmsan.git master 4bb25354f0b0 ecb386fe .config console log report ci-upstream-kmsan-gce
2018/10/21 13:02 https://github.com/google/kmsan.git master 4bb25354f0b0 ecb386fe .config console log report ci-upstream-kmsan-gce
2018/10/20 15:05 https://github.com/google/kmsan.git master 4bb25354f0b0 ecb386fe .config console log report ci-upstream-kmsan-gce
2018/10/20 06:34 https://github.com/google/kmsan.git master 4bb25354f0b0 ecb386fe .config console log report ci-upstream-kmsan-gce
2018/10/19 18:05 https://github.com/google/kmsan.git master 4bb25354f0b0 9aba67b5 .config console log report ci-upstream-kmsan-gce
2018/10/18 22:18 https://github.com/google/kmsan.git master 4bb25354f0b0 9aba67b5 .config console log report ci-upstream-kmsan-gce
2018/10/18 22:08 https://github.com/google/kmsan.git master 4bb25354f0b0 9aba67b5 .config console log report ci-upstream-kmsan-gce
2018/10/17 09:12 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/17 09:10 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/16 21:15 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/16 19:29 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/16 17:05 https://github.com/google/kmsan.git master 22ec98c3e38f 1ba7fd7e .config console log report ci-upstream-kmsan-gce
2018/10/16 03:16 https://github.com/google/kmsan.git master 22ec98c3e38f 8cd30605 .config console log report ci-upstream-kmsan-gce
2018/10/16 01:24 https://github.com/google/kmsan.git master 22ec98c3e38f 8cd30605 .config console log report ci-upstream-kmsan-gce
2018/10/13 22:37 https://github.com/google/kmsan.git master 22ec98c3e38f caf12900 .config console log report ci-upstream-kmsan-gce
2018/10/13 19:30 https://github.com/google/kmsan.git master 22ec98c3e38f caf12900 .config console log report ci-upstream-kmsan-gce
2018/10/13 16:32 https://github.com/google/kmsan.git master 22ec98c3e38f caf12900 .config console log report ci-upstream-kmsan-gce
2018/08/30 23:50 https://github.com/google/kmsan.git master 25114c64b719 938220fd .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.