KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt

Status: moderation: reported on 2026/07/24 18:43
Subsystems: input
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+96605ccb04166cb6cfe8@syzkaller.appspotmail.com
First crash: 48d, last: 18h02m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
a54ac6e2 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt 2026/07/26 01:50 2026/07/26 01:50 2026/07/26 02:20 492bab15
f55a2969 assessment-kcsan Benign: ✅ KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt 2026/07/24 18:42 2026/07/24 18:42 2026/07/24 18:45 1bdb5c57

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt

write to 0xffff888103c73448 of 8 bytes by interrupt on cpu 0:
 ps2_interrupt+0x50d/0x550 drivers/input/serio/libps2.c:-1
 serio_interrupt+0x66/0xf0 drivers/input/serio/serio.c:967
 i8042_handle_data+0x388/0x680 drivers/input/serio/i8042.c:598
 i8042_interrupt+0x15/0x90 drivers/input/serio/i8042.c:605
 __handle_irq_event_percpu+0x8b/0x480 kernel/irq/handle.c:209
 handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
 handle_irq_event+0x64/0xf0 kernel/irq/handle.c:263
 handle_edge_irq+0x155/0x440 kernel/irq/chip.c:859
 generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
 handle_irq arch/x86/kernel/irq.c:209 [inline]
 call_irq_handler arch/x86/kernel/irq.c:-1 [inline]
 __common_interrupt+0x60/0xb0 arch/x86/kernel/irq.c:280
 common_interrupt+0x7e/0x90 arch/x86/kernel/irq.c:273
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
 its_return_thunk+0x0/0x10
 tlb_flush_rmap_batch mm/mmu_gather.c:68 [inline]
 tlb_flush_rmaps+0x1f4/0x270 mm/mmu_gather.c:91
 zap_pte_range mm/memory.c:2093 [inline]
 zap_pmd_range mm/memory.c:2151 [inline]
 zap_pud_range mm/memory.c:2179 [inline]
 zap_p4d_range mm/memory.c:2200 [inline]
 __zap_vma_range+0x256d/0x2ce0 mm/memory.c:2240
 unmap_vmas+0x200/0x310 mm/memory.c:2309
 exit_mmap+0x1a2/0x5e0 mm/mmap.c:1315
 __mmput+0x28/0x1c0 kernel/fork.c:1193
 mmput+0x40/0x50 kernel/fork.c:1216
 exit_mm+0x113/0x1a0 kernel/exit.c:617
 do_exit+0x438/0x1510 kernel/exit.c:999
 do_group_exit+0xfe/0x140 kernel/exit.c:1154
 get_signal+0xe07/0xf10 kernel/signal.c:3051
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x15d/0x8c0 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline]
 do_syscall_64+0x212/0x360 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103c73448 of 8 bytes by task 5333 on cpu 1:
 ps2_do_sendbyte+0x10b/0x320 drivers/input/serio/libps2.c:65
 __ps2_command+0x364/0xaa0 drivers/input/serio/libps2.c:322
 ps2_command+0x52/0x90 drivers/input/serio/libps2.c:403
 ps2pp_detect+0x71/0x940 drivers/input/mouse/logips2pp.c:369
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:995 [inline]
 psmouse_try_protocol+0x25e/0x310 drivers/input/mouse/psmouse-base.c:1009
 psmouse_extensions+0x7ec/0x960 drivers/input/mouse/psmouse-base.c:1162
 __psmouse_reconnect+0x3dd/0x880 drivers/input/mouse/psmouse-base.c:1685
 psmouse_reconnect+0x23/0x40 drivers/input/mouse/psmouse-base.c:1723
 serio_reconnect_driver drivers/input/serio/serio.c:52 [inline]
 serio_reconnect_port drivers/input/serio/serio.c:558 [inline]
 serio_handle_event+0x1c7/0xac0 drivers/input/serio/serio.c:201
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 worker_thread+0x569/0x750 kernel/workqueue.c:3560
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x0000000000000001 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 5333 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_long serio_handle_event
==================================================================

Crashes (53):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/10 19:43 upstream 50d05c7c76c9 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/09 13:19 upstream 893e11787f78 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/08 16:44 upstream 28924df2a08f 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/08 01:40 upstream 28924df2a08f 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/07 16:20 upstream df2908090cda 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/06 22:59 upstream 88405f0ad1d5 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/05 08:19 upstream bc35965f6940 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/04 20:45 upstream bc35965f6940 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/03 15:20 upstream 940de590b839 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/02 06:46 upstream 89a312991dc6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/02 00:14 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/01 05:50 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/01 05:46 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/01 05:46 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/31 20:58 upstream cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/30 19:33 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/28 21:43 upstream c20313e98b04 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/28 17:10 upstream 1b78070aaef6 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/28 02:10 upstream 1b78070aaef6 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/27 12:07 upstream 73e3f0710014 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/27 10:15 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/26 21:11 upstream 73ae59e97596 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/25 21:22 upstream 73ae59e97596 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/25 16:49 upstream 66498c75b4f8 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/25 08:39 upstream 66498c75b4f8 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/25 08:38 upstream 66498c75b4f8 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/17 10:06 upstream 8d3ae59288f1 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/12 00:11 upstream f5bbbfec59b4 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/09 20:30 upstream b9b3e33b70b7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/08 22:08 upstream a7c7074b58d2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/06 02:40 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/05 07:09 upstream c21bb4193868 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/04 21:33 upstream 562bfb501c54 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/04 15:54 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/02 23:50 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/02 08:38 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/02 04:15 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/01 07:10 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/08/01 07:09 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/31 04:48 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/28 05:31 upstream 62cc90241548 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/27 15:41 upstream f5098b6bae76 aae9036b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/27 15:38 upstream f5098b6bae76 aae9036b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/27 10:31 upstream f5098b6bae76 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/27 03:03 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 09:55 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 06:08 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 06:06 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 06:01 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 00:27 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/25 10:11 upstream e2a936998ab2 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/24 18:42 upstream 48a5a7ab8d6a dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
* Struck through repros no longer work on HEAD.