syzbot


KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack (3)

Status: moderation: reported on 2020/12/07 11:53
Reported-by: syzbot+85537422410fcb98abbd@syzkaller.appspotmail.com
First crash: 763d, last: 11d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack (2) 4 800d 820d 0/24 auto-closed as invalid on 2020/08/28 23:47
upstream KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack 6 916d 981d 0/24 auto-closed as invalid on 2020/06/09 05:57

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack

write to 0xffff888103756040 of 8 bytes by interrupt on cpu 1:
 ps2_handle_ack+0x1b3/0x320 drivers/input/serio/libps2.c:444
 atkbd_interrupt+0xa5b/0xc30 drivers/input/keyboard/atkbd.c:422
 serio_interrupt+0x5d/0xe0 drivers/input/serio/serio.c:1001
 i8042_interrupt+0x380/0x710 drivers/input/serio/i8042.c:606
 __handle_irq_event_percpu+0x92/0x400 kernel/irq/handle.c:158
 handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
 handle_irq_event+0x60/0xf0 kernel/irq/handle.c:210
 handle_edge_irq+0x17e/0x5a0 kernel/irq/chip.c:819
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x60/0x100 arch/x86/kernel/irq.c:250
 common_interrupt+0x9a/0xc0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x22/0x40
 release_pages+0x794/0x840 mm/swap.c:942
 free_pages_and_swap_cache+0x68/0x70 mm/swap_state.c:311
 tlb_batch_pages_flush mm/mmu_gather.c:58 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:255 [inline]
 tlb_flush_mmu+0x5b2/0x640 mm/mmu_gather.c:262
 zap_pte_range+0x14f2/0x1560 mm/memory.c:1526
 zap_pmd_range mm/memory.c:1575 [inline]
 zap_pud_range mm/memory.c:1604 [inline]
 zap_p4d_range mm/memory.c:1625 [inline]
 unmap_page_range+0x3ac/0x730 mm/memory.c:1646
 unmap_single_vma+0x157/0x230 mm/memory.c:1694
 unmap_vmas+0xdf/0x1a0 mm/memory.c:1731
 exit_mmap+0x11f/0x380 mm/mmap.c:3116
 __mmput+0x27/0x1b0 kernel/fork.c:1187
 mmput+0x3d/0x50 kernel/fork.c:1208
 exit_mm+0xdb/0x170 kernel/exit.c:510
 do_exit+0x525/0x16e0 kernel/exit.c:782
 do_group_exit+0xa5/0x160 kernel/exit.c:925
 get_signal+0xf54/0x1020 kernel/signal.c:2857
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888103756040 of 8 bytes by task 1929 on cpu 0:
 ps2_do_sendbyte+0x12e/0x380 drivers/input/serio/libps2.c:45
 __ps2_command+0x35e/0x8c0 drivers/input/serio/libps2.c:273
 ps2_command+0x51/0x90 drivers/input/serio/libps2.c:332
 atkbd_set_repeat_rate drivers/input/keyboard/atkbd.c:583 [inline]
 atkbd_event_work+0x2a8/0x2e0 drivers/input/keyboard/atkbd.c:637
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x0000000000000001 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 1929 Comm: kworker/0:6 Not tainted 6.0.0-rc6-syzkaller-00030-g06f7db949993-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
Workqueue: events atkbd_event_work
==================================================================

Crashes (201):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/09/22 04:13 upstream 06f7db949993 60af5050 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/09/20 12:09 upstream 521a547ced64 7c41a9ba .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/09/09 18:33 upstream 9b4509495418 90058bdc .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/09/08 08:03 upstream 0066f1b0e275 435aeef7 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/31 02:48 upstream dcf8e5633e2e 4a380809 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/28 19:08 upstream 10d4879f9ef0 07177916 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/27 18:46 upstream 89b749d8552d 07177916 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/11 07:55 upstream f41445645ab5 a6201f11 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/10 05:23 upstream 426b4ca2d6a5 c2a623d6 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/02 17:29 upstream 9de1f9c8ca51 fef302b1 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/08/01 17:30 upstream 3d7cb6b04c3f fef302b1 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/07/17 08:31 upstream 972a278fe60c 95cb00d1 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/07/05 01:58 upstream c1084b6c5620 bff65f44 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/07/04 15:32 upstream 88084a3df167 bff65f44 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/06/23 00:33 upstream 3abc3ae553c7 912f5df7 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/06/14 19:59 upstream 24625f7d91fb 127d1faf .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/05/22 23:55 upstream 978df3e15846 7268fa62 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/04/27 05:53 upstream cf424ef014ac 1fa34c1b .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/04/23 14:01 upstream c00c5e1d157b 131df97d .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/04/14 17:41 upstream a19944809fe9 b17b2923 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/04/05 09:51 upstream 312310928417 5915c2cb .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/04/02 22:38 upstream be2d3ecedd99 79a2a8fc .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/03/31 17:15 upstream 787af64d05cd c4c32d8c .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/03/28 16:00 upstream f82da161ea75 89bc8608 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/03/11 17:59 upstream 79b00034e9dc 9e8eaa75 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/03/03 22:59 upstream 5859a2b19911 45a13a73 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/03/01 00:08 upstream 7e57714cd0ad 45a13a73 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/01/27 15:42 upstream 626b2dda7651 2cbffd88 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/01/23 10:11 upstream 1c52283265a4 214351e1 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2022/01/16 03:41 upstream a33f5c380c4b 723cfaf0 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/12/30 12:17 upstream eec4df26e24e 2e49f10d .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/12/11 07:01 upstream 9e65da135b39 49ca1f59 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/11/18 06:26 upstream ee1703cda8dc cafff8b6 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/31 00:07 upstream 119c85055d86 098b5d53 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/29 04:10 upstream 411a44c24a56 be531bb4 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/27 10:33 upstream d25f27432f80 d50eb50a .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/27 02:52 upstream 3906fe9bb7f1 d50eb50a .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/24 19:56 upstream 9c0c4d24ac00 282f03fb .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/22 05:37 upstream 2f111a6fd5b5 55f90bc6 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/18 13:43 upstream cf52ad5ff16c 0c5d9412 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/16 05:41 upstream 8fe31e0995f0 0c5d9412 .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/10/12 10:20 upstream fa5878760579 838e7e2c .config log report info KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce 2021/01/03 16:01 upstream 3516bd729358 79264ae3 .config log report info
ci2-upstream-kcsan-gce 2020/11/28 03:46 upstream c84e1efae022 486f93ef .config log report info
ci2-upstream-kcsan-gce 2020/08/31 09:21 upstream dcc5c6f013d8 d5a3ae1f .config log report
* Struck through repros no longer work on HEAD.