KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt

Status: moderation: reported on 2026/07/24 18:43
Subsystems: input
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+96605ccb04166cb6cfe8@syzkaller.appspotmail.com
First crash: 95d, last: 1d16h
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
a54ac6e2 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt 2026/07/26 01:50 2026/07/26 01:50 2026/07/26 02:20 492bab15
f55a2969 assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt 2026/07/24 18:42 2026/07/24 18:42 2026/07/24 18:45 1bdb5c57

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt

write to 0xffff888103d9ac48 of 8 bytes by interrupt on cpu 0:
 ps2_interrupt+0x50d/0x550 drivers/input/serio/libps2.c:-1
 serio_interrupt+0x66/0xf0 drivers/input/serio/serio.c:967
 i8042_handle_data+0x388/0x680 drivers/input/serio/i8042.c:598
 i8042_interrupt+0x15/0x90 drivers/input/serio/i8042.c:605
 __handle_irq_event_percpu+0x8b/0x480 kernel/irq/handle.c:209
 handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
 handle_irq_event+0x64/0xf0 kernel/irq/handle.c:263
 handle_edge_irq+0x155/0x440 kernel/irq/chip.c:859
 generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
 handle_irq arch/x86/kernel/irq.c:209 [inline]
 call_irq_handler arch/x86/kernel/irq.c:-1 [inline]
 __common_interrupt+0x60/0xb0 arch/x86/kernel/irq.c:280
 common_interrupt+0x7e/0x90 arch/x86/kernel/irq.c:273
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
 kcsan_setup_watchpoint+0x429/0x4a0 kernel/kcsan/core.c:714
 free_pages_and_swap_cache+0x246/0x3b0 mm/swap_state.c:639
 __tlb_batch_free_encoded_pages mm/mmu_gather.c:138 [inline]
 tlb_batch_pages_flush mm/mmu_gather.c:151 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:397 [inline]
 tlb_flush_mmu+0x54f/0x6b0 mm/mmu_gather.c:404
 zap_pte_range mm/memory.c:2067 [inline]
 zap_pmd_range mm/memory.c:2114 [inline]
 zap_pud_range mm/memory.c:2142 [inline]
 zap_p4d_range mm/memory.c:2163 [inline]
 __zap_vma_range+0x259f/0x2c50 mm/memory.c:2203
 unmap_vmas+0x1fb/0x2e0 mm/memory.c:2272
 exit_mmap+0x1a2/0x5e0 mm/mmap.c:1315
 __mmput+0x28/0x1c0 kernel/fork.c:1191
 mmput+0x3b/0x50 kernel/fork.c:1214
 exit_mm+0x11b/0x1b0 kernel/exit.c:586
 do_exit+0x437/0x14f0 kernel/exit.c:967
 do_group_exit+0xfe/0x140 kernel/exit.c:1123
 get_signal+0xe02/0xf00 kernel/signal.c:3112
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x15d/0x8c0 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline]
 do_syscall_64+0x212/0x360 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103d9ac48 of 8 bytes by task 6507 on cpu 1:
 ps2_do_sendbyte+0x106/0x320 drivers/input/serio/libps2.c:65
 __ps2_command+0x3b9/0xa90 drivers/input/serio/libps2.c:328
 ps2_command+0x52/0x90 drivers/input/serio/libps2.c:403
 psmouse_set_resolution+0x7d/0xd0 drivers/input/mouse/psmouse-base.c:455
 psmouse_initialize drivers/input/mouse/psmouse-base.c:1271 [inline]
 psmouse_attr_set_protocol+0x555/0xad0 drivers/input/mouse/psmouse-base.c:1924
 psmouse_attr_set_helper+0x2a3/0x450 drivers/input/mouse/psmouse-base.c:1815
 dev_attr_store+0x4a/0x70 drivers/base/core.c:2509
 sysfs_kf_write+0xfe/0x120 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x1d2/0x2e0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57a/0x990 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000001 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6507 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
==================================================================
input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5

Crashes (139):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/26 04:10 upstream 390febb5805d 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/24 17:11 upstream 5b0764a53235 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/23 08:34 upstream a1c2b1da93f5 d566bfda .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/23 04:01 upstream a1c2b1da93f5 b55fad29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/20 15:53 upstream f47d223627f8 df8746fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/19 05:34 upstream a0ff06b3a7bd 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/17 23:51 upstream 58161ead29e5 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/17 04:57 upstream 70dd4ee72eb2 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/16 11:26 upstream 2f2f7eeef8b0 4c840a2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/15 20:56 upstream 9aa622dbaab8 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/15 10:27 upstream 0fcb05b72344 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/14 22:55 upstream 4056b3c9d3c9 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/14 02:22 upstream ca3e345926b0 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/13 11:31 upstream 24a19b953e2a 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/12 16:46 upstream 24a19b953e2a 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/11 08:44 upstream a5ebb76233b7 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/11 00:57 upstream 3857c2fe5449 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/10 02:43 upstream fc1c25014ff8 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/09 09:08 upstream af32da41b032 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/09 06:08 upstream 6c377d19d4a5 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/08 14:13 upstream 7b63ef2d55f2 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/07 23:37 upstream 7b63ef2d55f2 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/07 12:44 upstream 602042bf29f6 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/07 04:58 upstream 69f80fef3153 f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/05 17:48 upstream 67f0943b394d af63e995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/05 11:17 upstream a90ee4305c4a 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/04 12:57 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/04 06:29 upstream a74306e2e676 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/03 14:28 upstream e767a4ea70a3 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/02 22:55 upstream 5e0f8396d480 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/10/02 14:34 upstream ce1e0223d8ad 6d32eb1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/30 22:00 upstream 551c722f4080 38f7f0d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/30 14:14 upstream 551c722f4080 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/29 03:52 upstream 72d3fcf802c4 7bf4ea23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/28 18:11 upstream 72d3fcf802c4 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/26 21:09 upstream fddfc3ec3179 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/26 16:51 upstream 6812ce4e4379 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/25 21:21 upstream aa98230e410f f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/25 07:52 upstream f49a343b305c f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/24 10:11 upstream 62f4c998b297 0281b448 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/23 12:25 upstream fe2ec83746e5 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/22 20:27 upstream c4e9f74da438 5207b90e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/20 06:03 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/19 15:26 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/19 09:56 upstream 17e7b8eacf4c 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/18 14:48 upstream 5dd1818b15d9 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/18 06:47 upstream 4982d3552a3b 8d7d05f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/17 02:38 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/16 22:15 upstream 238650ef6c7c 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/09/16 11:18 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/26 00:27 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
2026/07/24 18:42 upstream 48a5a7ab8d6a dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt
* Struck through repros no longer work on HEAD.