===================================================== BUG: KMSAN: uninit-value in fast_imageblit drivers/video/fbdev/core/cfbimgblt.c:256 [inline] BUG: KMSAN: uninit-value in cfb_imageblit+0x1c71/0x2a60 drivers/video/fbdev/core/cfbimgblt.c:300 CPU: 0 PID: 29009 Comm: kworker/0:0 Not tainted 5.9.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_power_efficient fb_flashcursor Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x21c/0x280 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:122 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:219 fast_imageblit drivers/video/fbdev/core/cfbimgblt.c:256 [inline] cfb_imageblit+0x1c71/0x2a60 drivers/video/fbdev/core/cfbimgblt.c:300 vga16fb_imageblit+0xda2/0x20c0 drivers/video/fbdev/vga16fb.c:1250 soft_cursor+0x12bc/0x13f0 drivers/video/fbdev/core/softcursor.c:74 bit_cursor+0x38c6/0x3a40 drivers/video/fbdev/core/bitblit.c:386 fb_flashcursor+0x12f3/0x1320 drivers/video/fbdev/core/fbcon.c:417 process_one_work+0x1688/0x2140 kernel/workqueue.c:2269 worker_thread+0x10bc/0x2730 kernel/workqueue.c:2415 kthread+0x551/0x590 kernel/kthread.c:293 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:143 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:311 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:169 __fb_pad_aligned_buffer include/linux/fb.h:654 [inline] fb_pad_aligned_buffer+0x7c4/0x8e0 drivers/video/fbdev/core/fbmem.c:116 soft_cursor+0x1224/0x13f0 drivers/video/fbdev/core/softcursor.c:72 bit_cursor+0x38c6/0x3a40 drivers/video/fbdev/core/bitblit.c:386 fb_flashcursor+0x12f3/0x1320 drivers/video/fbdev/core/fbcon.c:417 process_one_work+0x1688/0x2140 kernel/workqueue.c:2269 worker_thread+0x10bc/0x2730 kernel/workqueue.c:2415 kthread+0x551/0x590 kernel/kthread.c:293 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:143 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:311 __msan_chain_origin+0x50/0x90 mm/kmsan/kmsan_instr.c:169 soft_cursor+0xb09/0x13f0 drivers/video/fbdev/core/softcursor.c:61 bit_cursor+0x38c6/0x3a40 drivers/video/fbdev/core/bitblit.c:386 fb_flashcursor+0x12f3/0x1320 drivers/video/fbdev/core/fbcon.c:417 process_one_work+0x1688/0x2140 kernel/workqueue.c:2269 worker_thread+0x10bc/0x2730 kernel/workqueue.c:2415 kthread+0x551/0x590 kernel/kthread.c:293 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:143 [inline] kmsan_internal_poison_shadow+0x66/0xd0 mm/kmsan/kmsan.c:126 kmsan_slab_alloc+0x8a/0xe0 mm/kmsan/kmsan_hooks.c:80 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2916 [inline] __kmalloc+0x2bb/0x4b0 mm/slub.c:3982 kmalloc include/linux/slab.h:559 [inline] fbcon_set_font+0x5ad/0xfb0 drivers/video/fbdev/core/fbcon.c:2694 con_font_set drivers/tty/vt/vt.c:4663 [inline] con_font_op+0x1e59/0x2290 drivers/tty/vt/vt.c:4728 vt_io_ioctl drivers/tty/vt/vt_ioctl.c:586 [inline] vt_ioctl+0x14b2/0x6800 drivers/tty/vt/vt_ioctl.c:856 vt_compat_ioctl+0x59b/0x1040 drivers/tty/vt/vt_ioctl.c:1257 tty_compat_ioctl+0x74b/0x1660 drivers/tty/tty_io.c:2847 __do_compat_sys_ioctl fs/ioctl.c:842 [inline] __se_compat_sys_ioctl+0x55f/0x1100 fs/ioctl.c:793 __ia32_compat_sys_ioctl+0x4a/0x70 fs/ioctl.c:793 do_syscall_32_irqs_on arch/x86/entry/common.c:80 [inline] __do_fast_syscall_32+0x129/0x180 arch/x86/entry/common.c:139 do_fast_syscall_32+0x6a/0xc0 arch/x86/entry/common.c:162 do_SYSENTER_32+0x73/0x90 arch/x86/entry/common.c:205 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c =====================================================