kmsan boot error: KMSAN: uninit-value in genius_detect

Status: auto-closed as invalid on 2022/04/20 10:13
Subsystems: input
[Documentation on labels]
Reported-by: syzbot+ea4fcd3ec1e6f90262bb@syzkaller.appspotmail.com
First crash: 1725d, last: 1693d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] kmsan boot error: KMSAN: uninit-value in genius_detect 0 (1) 2021/12/17 10:57

Sample crash report:
input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2
=====================================================
BUG: KMSAN: uninit-value in genius_detect+0x4ec/0x6f0 drivers/input/mouse/psmouse-base.c:568
 genius_detect+0x4ec/0x6f0 drivers/input/mouse/psmouse-base.c:568
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1046 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1060 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1216
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1579
 psmouse_connect+0x14cc/0x2260 drivers/input/mouse/psmouse-base.c:1669
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x20e/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x11fb/0x2760 drivers/input/serio/serio.c:227
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0x23fe/0x25b0 drivers/input/serio/libps2.c:299
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x2f9/0x6f0 drivers/input/mouse/psmouse-base.c:564
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1046 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1060 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1216
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1579
 psmouse_connect+0x14cc/0x2260 drivers/input/mouse/psmouse-base.c:1669
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x20e/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x11fb/0x2760 drivers/input/serio/serio.c:227
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 __ps2_command+0xa33/0x25b0 drivers/input/serio/libps2.c:253
 ps2_command+0x124/0x210 drivers/input/serio/libps2.c:332
 genius_detect+0x2f9/0x6f0 drivers/input/mouse/psmouse-base.c:564
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1046 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1060 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1216
 psmouse_switch_protocol+0x184/0xbb0 drivers/input/mouse/psmouse-base.c:1579
 psmouse_connect+0x14cc/0x2260 drivers/input/mouse/psmouse-base.c:1669
 serio_connect_driver drivers/input/serio/serio.c:47 [inline]
 serio_driver_probe+0xc7/0x130 drivers/input/serio/serio.c:778
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __driver_attach+0x6a6/0x1350 drivers/base/dd.c:1140
 bus_for_each_dev+0x20e/0x340 drivers/base/bus.c:301
 driver_attach+0x89/0xb0 drivers/base/dd.c:1157
 serio_attach_driver drivers/input/serio/serio.c:807 [inline]
 serio_handle_event+0x11fb/0x2760 drivers/input/serio/serio.c:227
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Local variable param created at:
 genius_detect+0x6b/0x6f0 drivers/input/mouse/psmouse-base.c:548
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1046 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1060 [inline]
 psmouse_extensions+0x1964/0x1b60 drivers/input/mouse/psmouse-base.c:1216

CPU: 0 PID: 119 Comm: kworker/0:2 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_long serio_handle_event
=====================================================

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/21 10:12 https://github.com/google/kmsan.git master 81c325bbf94e 62bd192b .config console log report ci-upstream-kmsan-gce kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/17 02:06 https://github.com/google/kmsan.git master b0a8b5053e8b 44068e19 .config console log report ci-upstream-kmsan-gce kmsan boot error: KMSAN: uninit-value in genius_detect
2021/11/26 17:23 https://github.com/google/kmsan.git master 2f7561f04230 63eeac02 .config console log report ci-upstream-kmsan-gce kmsan boot error: KMSAN: uninit-value in genius_detect
2021/11/22 10:54 https://github.com/google/kmsan.git master 7ca3114e5a48 4eb20a4e .config console log report ci-upstream-kmsan-gce kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/13 19:47 https://github.com/google/kmsan.git master d82a8a8ca942 49ca1f59 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/13 15:39 https://github.com/google/kmsan.git master e168c4478ebf 49ca1f59 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/13 12:32 https://github.com/google/kmsan.git master acaa846ab6e1 49ca1f59 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/13 10:21 https://github.com/google/kmsan.git master 989895ae755e 49ca1f59 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
2021/12/07 10:19 https://github.com/google/kmsan.git master 8b936c96768e 0230ba3e .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
2021/11/19 04:57 https://github.com/google/kmsan.git master 412af9cd936d 31a30fc0 .config console log report ci-upstream-kmsan-gce-386 kmsan boot error: KMSAN: uninit-value in genius_detect
* Struck through repros no longer work on HEAD.