KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr

Status: moderation: reported C repro on 2026/07/25 04:27
Subsystems: acpica
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+b60b9dcd3441fc7ac4e2@syzkaller.appspotmail.com
First crash: 79d, last: 33m
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
53fc4af2 repro-c Reproduced: ✅ ❓ KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr 2026/09/25 07:43 2026/09/25 07:44 2026/09/25 08:28 f281d9d2
b5a6505f assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr 2026/07/27 00:00 2026/07/27 00:00 2026/07/27 00:02 492bab15
d10e06dd assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr 2026/07/25 04:26 2026/07/25 04:26 2026/07/25 04:54 1bdb5c57
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/09/25 09:53 11m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git f49a343b305c0b6c19a3b50c0bbf10bcd0e2e8fd report job log log

Sample crash report:
==================================================================
BUG: KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr

read to 0xffffffff89629908 of 4 bytes by task 3644 on cpu 1:
 acpi_ut_track_stack_ptr+0x5f/0xd0 drivers/acpi/acpica/utdebug.c:73
 acpi_get_handle+0x40/0x180 drivers/acpi/acpica/nsxfname.c:53
 acpi_has_method+0x46/0x80 drivers/acpi/utils.c:672
 acpi_pci_set_power_state+0x5d/0x190 drivers/pci/pci-acpi.c:1084
 platform_pci_set_power_state drivers/pci/pci.c:1091 [inline]
 pci_power_up+0x40/0x3b0 drivers/pci/pci.c:1339
 pci_pm_power_up_and_verify_state+0x29/0x130 drivers/pci/pci.c:3186
 pci_pm_default_resume_early drivers/pci/pci-driver.c:614 [inline]
 pci_pm_runtime_resume+0x5b/0x170 drivers/pci/pci-driver.c:1406
 __rpm_callback+0x2e6/0x6d0 drivers/base/power/runtime.c:406
 rpm_callback drivers/base/power/runtime.c:460 [inline]
 rpm_resume+0x94e/0xce0 drivers/base/power/runtime.c:939
 pm_runtime_forbid+0x84/0xa0 drivers/base/power/runtime.c:1672
 control_store+0x6a/0x90 drivers/base/power/sysfs.c:114
 dev_attr_store+0x4a/0x70 drivers/base/core.c:2509
 sysfs_kf_write+0xfe/0x120 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x1d2/0x2e0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57f/0x9a0 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read-write to 0xffffffff89629908 of 4 bytes by task 3643 on cpu 0:
 acpi_ut_trace+0x44/0x180 drivers/acpi/acpica/utdebug.c:268
 acpi_ds_init_object_from_op+0x3b/0x620 drivers/acpi/acpica/dsobject.c:328
 acpi_ds_create_operand+0x21b/0x7c0 drivers/acpi/acpica/dsutils.c:626
 acpi_ds_create_operands+0x270/0x420 drivers/acpi/acpica/dsutils.c:707
 acpi_ds_exec_end_op+0x1c8/0xff0 drivers/acpi/acpica/dswexec.c:385
 acpi_ps_parse_loop+0xb22/0x1520 drivers/acpi/acpica/psloop.c:553
 acpi_ps_parse_aml+0x2b0/0xa10 drivers/acpi/acpica/psparse.c:489
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000020 -> 0x00000022

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3643 Comm: syz-executor297 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================

Crashes (22):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/12 12:19 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 24a19b953e2a 95928915 .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/10/08 14:05 upstream 7b63ef2d55f2 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/21 16:04 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/20 10:52 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/19 17:25 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/15 17:04 upstream 587858367581 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/15 06:32 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/14 13:00 upstream 704340f1cd0d 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/09 16:19 upstream 893e11787f78 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/08 14:46 upstream 28924df2a08f 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/01 13:39 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/09/01 05:46 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/27 15:42 upstream 73e3f0710014 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/25 16:50 upstream 66498c75b4f8 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/09 08:03 upstream 06cf61899d64 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/04 21:25 upstream 562bfb501c54 d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/04 14:53 upstream 848acc8ffe1b d4abbeac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/08/01 13:10 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/07/31 04:46 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/07/26 12:36 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/07/26 06:11 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
2026/07/25 04:26 upstream e2a936998ab2 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr
* Struck through repros no longer work on HEAD.