KCSAN: data-race in ps2_do_sendbyte / ps2_handle

KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack (3)
Status: moderation: reported on 2020/12/07 11:53
Reported-by: syzbot+85537422410fcb98abbd@syzkaller.appspotmail.com
First crash: 331d, last: 14d

similar bugs (2):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack (2)				4	368d	388d	0/22	auto-closed as invalid on 2020/08/28 23:47
upstream	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack				6	484d	548d	0/22	auto-closed as invalid on 2020/06/09 05:57

Sample crash report:

==================================================================
BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack

write to 0xffff888100e5c840 of 8 bytes by interrupt on cpu 1:
 ps2_handle_ack+0x15a/0x350 drivers/input/serio/libps2.c:439
 atkbd_interrupt+0xbf7/0xcd0 drivers/input/keyboard/atkbd.c:434
 serio_interrupt+0x5d/0xe0 drivers/input/serio/serio.c:1002
 i8042_interrupt+0x39e/0x720 drivers/input/serio/i8042.c:602
 __handle_irq_event_percpu+0x93/0x3f0 kernel/irq/handle.c:156
 handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
 handle_irq_event+0xb6/0x170 kernel/irq/handle.c:213
 handle_edge_irq+0x17e/0x600 kernel/irq/chip.c:819
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x38/0xb0 arch/x86/kernel/irq.c:250
 common_interrupt+0x73/0x90 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:629
 tlb_flush_pte_range include/asm-generic/tlb.h:524 [inline]
 zap_pte_range+0x3a0/0xe00 mm/memory.c:1348
 zap_pmd_range mm/memory.c:1481 [inline]
 zap_pud_range mm/memory.c:1510 [inline]
 zap_p4d_range mm/memory.c:1531 [inline]
 unmap_page_range+0x2dc/0x3d0 mm/memory.c:1552
 unmap_single_vma+0x157/0x210 mm/memory.c:1597
 unmap_vmas+0xc0/0x170 mm/memory.c:1629
 exit_mmap+0x22d/0x460 mm/mmap.c:3201
 __mmput+0x27/0x1c0 kernel/fork.c:1101
 mmput+0x3d/0x50 kernel/fork.c:1122
 exit_mm+0x2f7/0x3f0 kernel/exit.c:501
 do_exit+0x402/0x1530 kernel/exit.c:812
 do_group_exit+0xce/0x1a0 kernel/exit.c:922
 get_signal+0xfa3/0x15e0 kernel/signal.c:2808
 arch_do_signal_or_restart+0x2a/0x220 arch/x86/kernel/signal.c:865
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x109/0x190 kernel/entry/common.c:209
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x49/0x90 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888100e5c840 of 8 bytes by task 31176 on cpu 0:
 ps2_do_sendbyte+0x1c0/0x3a0 drivers/input/serio/libps2.c:45
 __ps2_command+0x2fd/0xa40 drivers/input/serio/libps2.c:273
 ps2_command+0x51/0x90 drivers/input/serio/libps2.c:332
 atkbd_set_repeat_rate drivers/input/keyboard/atkbd.c:595 [inline]
 atkbd_event_work+0x2b6/0x2f0 drivers/input/keyboard/atkbd.c:649
 process_one_work+0x3e9/0x8f0 kernel/workqueue.c:2276
 worker_thread+0x636/0xae0 kernel/workqueue.c:2422
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295

value changed: 0x0000000000000001 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 31176 Comm: kworker/0:3 Not tainted 5.14.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events atkbd_event_work
==================================================================

Crashes (139):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/07/13 23:03	upstream	40226a3d96ef	70168d5c	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/07/13 05:44	upstream	7fef2edf7cc7	f415556d	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/07/11 14:40	upstream	3dbdb38e2869	8f5a7b8c	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/07/01 13:30	upstream	dbe69e433722	658ebc66	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/28 02:06	upstream	b4b27b9eed8e	9d2ab5df	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/26 04:10	upstream	b7050b242430	ae6bf8dd	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/25 14:36	upstream	44db63d1ad8d	ae6bf8dd	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/25 10:32	upstream	44db63d1ad8d	0edbbe31	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/24 21:02	upstream	4a09d388f2ab	0edbbe31	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/24 07:46	upstream	7426cedc7dad	fe4ab389	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/23 17:29	upstream	7266f2030eb0	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/22 18:57	upstream	0c18f29aae7c	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/21 09:48	upstream	13311e74253f	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/20 18:32	upstream	cba5e97280f5	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/19 22:35	upstream	913ec3c22ef4	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/19 09:10	upstream	9ed13a17e38e	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/18 19:55	upstream	b1edae0d5f2e	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/18 01:14	upstream	fd0aa1a4567d	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/17 11:33	upstream	70585216fe77	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/16 21:51	upstream	6b00bc639f1f	aba2b2fb	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/16 16:44	upstream	6b00bc639f1f	c06f97ad	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/16 09:56	upstream	94f0b2d4a1d0	c06f97ad	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/15 21:52	upstream	94f0b2d4a1d0	990d3cbe	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/15 18:33	upstream	94f0b2d4a1d0	8022d7e3	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/15 09:31	upstream	009c9aa5be65	8022d7e3	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/14 09:44	upstream	009c9aa5be65	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/13 20:43	upstream	e4e453434a19	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/13 01:46	upstream	8ecfa36cd4db	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/13 01:41	upstream	8ecfa36cd4db	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/12 11:40	upstream	ad347abe4a98	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/11 22:25	upstream	f21b807c3cf8	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/11 09:05	upstream	06af8679449d	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/10 19:50	upstream	f09eacca59d2	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/10 00:46	upstream	cd1245d75ce9	1ba81399	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/09 12:42	upstream	368094df48e6	84fe5d96	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/09 06:39	upstream	368094df48e6	5c2fe346	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/08 17:46	upstream	4c8684fe555e	5c2fe346	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/08 08:07	upstream	614124bea77e	5c2fe346	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/07 18:37	upstream	614124bea77e	b718257f	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/07 06:52	upstream	614124bea77e	e59537be	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/06 20:36	upstream	decad3e1d1ed	500c2339	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/05 23:43	upstream	f5b6eb1e0182	500c2339	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/05 10:51	upstream	9d32fa5d74b1	500c2339	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/05 10:44	upstream	9d32fa5d74b1	500c2339	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/04 21:30	upstream	16f0596fc1d7	500c2339	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/04 17:53	upstream	16f0596fc1d7	966a236b	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/04 09:59	upstream	f88cd3fb9df2	966a236b	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/03 19:38	upstream	f88cd3fb9df2	0740de69	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/02 20:33	upstream	324c92e5e0ee	0740de69	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/06/02 04:23	upstream	231bc5390667	032639db	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/05/31 17:21	upstream	c2131f7e73c9	032639db	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/05/31 08:59	upstream	8124c8a6b353	032639db	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/05/30 23:51	upstream	8124c8a6b353	325a8dab	.config	log	report	info	KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack
ci2-upstream-kcsan-gce	2021/01/03 16:01	upstream	3516bd729358	79264ae3	.config	log	report	info
ci2-upstream-kcsan-gce	2020/11/28 03:46	upstream	c84e1efae022	486f93ef	.config	log	report	info
ci2-upstream-kcsan-gce	2020/08/31 09:21	upstream	dcc5c6f013d8	d5a3ae1f	.config	log	report