mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: syzbot <syzbot+e7d46eb426883fb97efd@syzkaller.appspotmail.com>
To: christophe.jaillet@wanadoo.fr, glider@google.com,
	linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] KMSAN: uninit-value in alauda_check_media
Date: Tue, 28 Dec 2021 03:10:05 -0800	[thread overview]
Message-ID: <00000000000012758405d432dd36@google.com> (raw)
In-Reply-To: <f1164c41-c262-0413-dd2f-cded7510b8b6@wanadoo.fr>

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
KMSAN: uninit-value in scsi_mode_sense

sd 2:0:0:0: [sdd] 0 512-byte logical blocks: (0 B/0 B)
sd 2:0:0:0: [sdd] 0-byte physical blocks
=====================================================
BUG: KMSAN: uninit-value in scsi_mode_sense+0x1046/0x16d0 drivers/scsi/scsi_lib.c:2200
 scsi_mode_sense+0x1046/0x16d0 drivers/scsi/scsi_lib.c:2200
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in set_disk_ro+0x2ab/0x310 block/genhd.c:1413
 set_disk_ro+0x2ab/0x310 block/genhd.c:1413
 sd_read_write_protect_flag drivers/scsi/sd.c:2712 [inline]
 sd_revalidate_disk+0x5697/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 scsi_mode_sense+0x1656/0x16d0
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:638 [inline]
BUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:720
 string_nocheck lib/vsprintf.c:638 [inline]
 string+0x4ec/0x6f0 lib/vsprintf.c:720
 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2805
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2714 [inline]
 sd_revalidate_disk+0x597c/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 sd_read_write_protect_flag drivers/scsi/sd.c:2711 [inline]
 sd_revalidate_disk+0x5b19/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 scsi_mode_sense+0x1656/0x16d0
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:638 [inline]
BUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:720
 string_nocheck lib/vsprintf.c:638 [inline]
 string+0x4ec/0x6f0 lib/vsprintf.c:720
 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2805
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2714 [inline]
 sd_revalidate_disk+0x597c/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 sd_read_write_protect_flag drivers/scsi/sd.c:2711 [inline]
 sd_revalidate_disk+0x5b19/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 scsi_mode_sense+0x1656/0x16d0
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:638 [inline]
BUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:720
 string_nocheck lib/vsprintf.c:638 [inline]
 string+0x4ec/0x6f0 lib/vsprintf.c:720
 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2805
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2714 [inline]
 sd_revalidate_disk+0x597c/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 sd_read_write_protect_flag drivers/scsi/sd.c:2711 [inline]
 sd_revalidate_disk+0x5b19/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 scsi_mode_sense+0x1656/0x16d0
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:638 [inline]
BUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:720
 string_nocheck lib/vsprintf.c:638 [inline]
 string+0x4ec/0x6f0 lib/vsprintf.c:720
 vsnprintf+0x2222/0x3650 lib/vsprintf.c:2805
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2714 [inline]
 sd_revalidate_disk+0x597c/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 sd_read_write_protect_flag drivers/scsi/sd.c:2711 [inline]
 sd_revalidate_disk+0x5b19/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 scsi_mode_sense+0x1656/0x16d0
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
sd 2:0:0:0: [sdd] Write Protect is off
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x962/0xa40 lib/vsprintf.c:1182
 hex_string+0x962/0xa40 lib/vsprintf.c:1182
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x962/0xa40 lib/vsprintf.c:1182
 hex_string+0x962/0xa40 lib/vsprintf.c:1182
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x962/0xa40 lib/vsprintf.c:1182
 hex_string+0x962/0xa40 lib/vsprintf.c:1182
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 hex_string+0x92b/0xa40 lib/vsprintf.c:1179
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in hex_string+0x962/0xa40 lib/vsprintf.c:1182
 hex_string+0x962/0xa40 lib/vsprintf.c:1182
 pointer+0x3ae/0x2060 lib/vsprintf.c:2407
 vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2809
 vscnprintf+0xbe/0x1c0 lib/vsprintf.c:2908
 sdev_prefix_printk+0x4b9/0x5a0 drivers/scsi/scsi_logging.c:73
 sd_read_write_protect_flag drivers/scsi/sd.c:2716 [inline]
 sd_revalidate_disk+0x5afc/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was stored to memory at:
 memcpy_from_page include/linux/highmem.h:346 [inline]
 memcpy_from_bvec include/linux/bvec.h:207 [inline]
 bio_copy_kern_endio_read+0x4a3/0x620 block/blk-map.c:403
 bio_endio+0xa7f/0xac0 block/bio.c:1491
 req_bio_endio block/blk-mq.c:674 [inline]
 blk_update_request+0x1129/0x22d0 block/blk-mq.c:742
 blk_mq_end_request block/blk-mq.c:821 [inline]
 blk_mq_dispatch_rq_list+0x16f8/0x3f50 block/blk-mq.c:1685
 __blk_mq_sched_dispatch_requests+0x58b/0x8d0 block/blk-mq-sched.c:325
 blk_mq_sched_dispatch_requests+0x1b9/0x380 block/blk-mq-sched.c:358
 __blk_mq_run_hw_queue+0x201/0x350 block/blk-mq.c:1785
 __blk_mq_delay_run_hw_queue+0x21d/0x970 block/blk-mq.c:1862
 blk_mq_run_hw_queue+0x57c/0x7b0 block/blk-mq.c:1915
 blk_mq_sched_insert_request+0x3b8/0x790 block/blk-mq-sched.c:477
 blk_execute_rq_nowait block/blk-exec.c:62 [inline]
 blk_execute_rq+0x406/0x7c0 block/blk-exec.c:102
 __scsi_execute+0x84d/0xe30 drivers/scsi/scsi_lib.c:244
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

Uninit was created at:
 __alloc_pages+0xbbf/0x1090 mm/page_alloc.c:5409
 alloc_pages+0x8a5/0xb80
 bio_copy_kern block/blk-map.c:449 [inline]
 blk_rq_map_kern+0x813/0x1400 block/blk-map.c:640
 __scsi_execute+0x4bd/0xe30 drivers/scsi/scsi_lib.c:229
 scsi_execute_req include/scsi/scsi_device.h:470 [inline]
 scsi_mode_sense+0x737/0x16d0 drivers/scsi/scsi_lib.c:2163
 sd_revalidate_disk+0x5206/0xdfd0 drivers/scsi/sd.c:3328
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

CPU: 0 PID: 51 Comm: kworker/u4:2 Tainted: G    B             5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound async_run_entry_fn
=====================================================
=====================================================
BUG: KMSAN: uninit-value in scsi_mode_sense+0x1046/0x16d0 drivers/scsi/scsi_lib.c:2200
 scsi_mode_sense+0x1046/0x16d0 drivers/scsi/scsi_lib.c:2200
 sd_do_mode_sense drivers/scsi/sd.c:2657 [inline]
 sd_read_cache_type drivers/scsi/sd.c:2765 [inline]
 sd_revalidate_disk+0x6225/0xdfd0 drivers/scsi/sd.c:3329
 sd_probe+0x10a7/0x1970 drivers/scsi/sd.c:3567
 really_probe+0x67d/0x1510 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:751
 driver_probe_device drivers/base/dd.c:781 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:898
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach_async_helper+0x314/0x3e0 drivers/base/dd.c:927
 async_run_entry_fn+0xd2/0x630 kernel/async.c:127
 process_one_work+0xdb9/0x1820 kernel/workqueue.c:2298
 worker_thread+0x10bc/0x21f0 kernel/workqueue.c:2445
 kthread+0x721/0x850 kernel/kthre

Tested on:

commit:         81c325bb kmsan: hooks: do not check memory in kmsan_in..
git tree:       https://github.com/google/kmsan.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=1736b3dbb00000
kernel config:  https://syzkaller.appspot.com/x/.config?x=1e3911d4873b88c8
dashboard link: https://syzkaller.appspot.com/bug?extid=e7d46eb426883fb97efd
compiler:       clang version 14.0.0 (/usr/local/google/src/llvm-git-monorepo 2b554920f11c8b763cd9ed9003f4e19b919b8e1f), GNU ld (GNU Binutils for Debian) 2.35.2
patch:          https://syzkaller.appspot.com/x/patch.diff?x=1436c22db00000


      reply	other threads:[~2021-12-28 11:10 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-10-07 19:39 syzbot
2019-10-11 11:23 ` Jaskaran Singh
2019-10-11 11:51   ` Alexander Potapenko
2019-10-11 15:42     ` syzbot
2019-10-11 14:08   ` Alan Stern
2019-10-11 14:18     ` Andrey Konovalov
2019-10-11 14:53       ` Alan Stern
2019-10-11 15:06         ` Greg Kroah-Hartman
2019-10-14 12:56           ` Andrey Konovalov
2019-10-11 15:24   ` syzbot
2021-12-28  7:47 ` Christophe JAILLET
2021-12-28  7:47   ` syzbot
2021-12-28 22:49   ` Alan Stern
2021-12-29  9:16     ` Christophe JAILLET
2021-12-29 16:45       ` Alan Stern
2021-12-28  8:01 ` Christophe JAILLET
2021-12-28 11:10   ` syzbot [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=00000000000012758405d432dd36@google.com \
    --to=syzbot+e7d46eb426883fb97efd@syzkaller.appspotmail.com \
    --cc=christophe.jaillet@wanadoo.fr \
    --cc=glider@google.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=syzkaller-bugs@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

Powered by JetHome