syzbot


kmsan boot error: KMSAN: uninit-value in corrupted (2)

Status: closed as invalid on 2021/11/18 14:05
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 380d, last: 380d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kmsan boot error: KMSAN: uninit-value in corrupted 20 389d 459d 0/24 closed as invalid on 2021/11/05 09:46
upstream kmsan boot error: KMSAN: uninit-value in corrupted (3) 1 361d 361d 0/24 auto-closed as invalid on 2022/03/02 10:49

Sample crash report:
input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2
=====================================================
BUG: KMSAN: uninit-value in genius_detect+0x2e1/0x510 drivers/input/mouse/psmouse-base.c:557
 genius_detect+0x2e1/0x510 drivers/input/mouse/psmouse-base.c:557
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0x21c9/0x2200 drivers/input/serio/libps2.c:299
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x18d/0x510 drivers/input/mouse/psmouse-base.c:555
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0x10f7/0x2200 drivers/input/serio/libps2.c:253
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x18d/0x510 drivers/input/mouse/psmouse-base.c:555
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Local variable param created at:
 genius_detect+0x6b/0x510 drivers/input/mouse/psmouse-base.c:548
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
=====================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kmsan-gce-386 2021/11/13 05:56 https://github.com/google/kmsan.git master 386004877847 83f5c9b5 .config log report kmsan boot error: KMSAN: uninit-value in corrupted
* Struck through repros no longer work on HEAD.