kmsan boot error: KMSAN: uninit-value in corrupted (2)

Status: closed as invalid on 2021/11/18 14:05
Subsystems: input
[Documentation on labels]
First crash: 1753d, last: 1753d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kmsan boot error: KMSAN: uninit-value in corrupted input -1 20 1762d 1832d 0/29 closed as invalid on 2021/11/05 09:46
upstream kmsan boot error: KMSAN: uninit-value in corrupted (3) tomoyo -1 1 1733d 1733d 0/29 auto-closed as invalid on 2022/03/02 10:49

Sample crash report:
input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2
=====================================================
BUG: KMSAN: uninit-value in genius_detect+0x2e1/0x510 drivers/input/mouse/psmouse-base.c:557
 genius_detect+0x2e1/0x510 drivers/input/mouse/psmouse-base.c:557
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0x21c9/0x2200 drivers/input/serio/libps2.c:299
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x18d/0x510 drivers/input/mouse/psmouse-base.c:555
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0x10f7/0x2200 drivers/input/serio/libps2.c:253
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x18d/0x510 drivers/input/mouse/psmouse-base.c:555
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1542
 psmouse_connect+0x14f8/0x22f0 drivers/input/mouse/psmouse-base.c:1632
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x66e/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x210/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x1283/0x2830 drivers/input/serio/serio.c:227
 process_one_work+0xdc7/0x1760 kernel/workqueue.c:2297
 worker_thread+0x1101/0x22b0 kernel/workqueue.c:2444
 kthread+0x66b/0x780 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

Local variable param created at:
 genius_detect+0x6b/0x510 drivers/input/mouse/psmouse-base.c:548
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1179
=====================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/11/13 05:56 https://github.com/google/kmsan.git master 386004877847 83f5c9b5 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in corrupted
* Struck through repros no longer work on HEAD.