syzbot


KCSAN: data-race in handle_irq_event / synchronize_irq

Status: auto-closed as invalid on 2021/07/08 00:53
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+f4b8dc5f4e026528d301@syzkaller.appspotmail.com
First crash: 1396d, last: 1055d

Sample crash report:
Freezing user space processes ... (elapsed 0.001 seconds) done.
OOM killer disabled.
Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done.
printk: Suspending console(s) (use no_console_suspend to debug)
==================================================================
BUG: KCSAN: data-race in handle_irq_event / synchronize_irq

write to 0xffff8881000eb000 of 4 bytes by interrupt on cpu 0:
 irqd_clear kernel/irq/internals.h:225 [inline]
 handle_irq_event+0x12a/0x160 kernel/irq/handle.c:216
 handle_edge_irq+0x17e/0x600 kernel/irq/chip.c:819
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x38/0xb0 arch/x86/kernel/irq.c:250
 common_interrupt+0x73/0x90 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:638
 _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:192
 spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
 i8042_command drivers/input/serio/i8042.c:352 [inline]
 i8042_aux_write+0xa2/0xd0 drivers/input/serio/i8042.c:387
 serio_write include/linux/serio.h:125 [inline]
 ps2_do_sendbyte+0xdf/0x3a0 drivers/input/serio/libps2.c:40
 __ps2_command+0x285/0xa40 drivers/input/serio/libps2.c:265
 ps2_command+0x51/0x90 drivers/input/serio/libps2.c:332
 genius_detect+0x49/0x220 drivers/input/mouse/psmouse-base.c:551
 psmouse_do_detect drivers/input/mouse/psmouse-base.c:1009 [inline]
 psmouse_try_protocol drivers/input/mouse/psmouse-base.c:1023 [inline]
 psmouse_extensions+0x15a9/0x1790 drivers/input/mouse/psmouse-base.c:1179
 __psmouse_reconnect+0x31e/0x620 drivers/input/mouse/psmouse-base.c:1728
 psmouse_reconnect+0x13/0x20 drivers/input/mouse/psmouse-base.c:1766
 serio_reconnect_driver drivers/input/serio/serio.c:59 [inline]
 serio_reconnect_port drivers/input/serio/serio.c:588 [inline]
 serio_handle_event+0x6be/0xc20 drivers/input/serio/serio.c:214
 process_one_work+0x3e9/0x8f0 kernel/workqueue.c:2276
 worker_thread+0x636/0xae0 kernel/workqueue.c:2422
 kthread+0x1d0/0x1f0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff8881000eb000 of 4 bytes by task 9862 on cpu 1:
 irqd_irq_inprogress include/linux/irq.h:354 [inline]
 __synchronize_hardirq kernel/irq/manage.c:51 [inline]
 synchronize_irq+0x64/0x2e0 kernel/irq/manage.c:132
 suspend_device_irqs+0x23d/0x2e0 kernel/irq/pm.c:147
 dpm_suspend_noirq+0x18/0x80 drivers/base/power/main.c:1345
 suspend_enter+0x144/0x8f0 kernel/power/suspend.c:408
 suspend_devices_and_enter+0x1cb/0x500 kernel/power/suspend.c:505
 enter_state+0x274/0x530 kernel/power/suspend.c:586
 pm_suspend+0x4b/0x130 kernel/power/suspend.c:613
 state_store+0x1f2/0x210 kernel/power/main.c:658
 kobj_attr_store+0x40/0x60 lib/kobject.c:856
 sysfs_kf_write+0xa6/0xc0 fs/sysfs/file.c:139
 kernfs_fop_write_iter+0x1d3/0x2d0 fs/kernfs/file.c:296
 call_write_iter include/linux/fs.h:2114 [inline]
 do_iter_readv_writev+0x2cb/0x360 fs/read_write.c:740
 do_iter_write+0x112/0x4c0 fs/read_write.c:866
 vfs_iter_write+0x4c/0x70 fs/read_write.c:907
 iter_file_splice_write+0x40a/0x750 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0xf5/0x170 fs/splice.c:979
 do_sendfile+0x773/0xda0 fs/read_write.c:1260
 __do_sys_sendfile64 fs/read_write.c:1319 [inline]
 __se_sys_sendfile64 fs/read_write.c:1311 [inline]
 __x64_sys_sendfile64+0xa9/0x130 fs/read_write.c:1311
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x35450200 -> 0x35410200

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 9862 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
ACPI: Preparing to enter system sleep state S3
PM: Saving platform NVS memory
Disabling non-boot CPUs ...
smpboot: CPU 1 is now offline
kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume
ACPI: Low-level resume complete
PM: Restoring platform NVS memory
kvm-guest: stealtime: cpu 0, msr 237c170c0
Enabling non-boot CPUs ...
x86: Booting SMP configuration:
smpboot: Booting Node 0 Processor 1 APIC 0x1
CPU1 is up
ACPI: Waking up from system sleep state S3
OOM killer enabled.
Restarting tasks ... 
done.
PM: suspend exit
netlink: 'syz-executor.3': attribute type 19 has an invalid length.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 'syz-executor.3': attribute type 19 has an invalid length.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.

Crashes (121):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/03 00:53 upstream 324c92e5e0ee 0740de69 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/06/02 18:09 upstream 231bc5390667 0740de69 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/06/02 06:45 upstream 231bc5390667 032639db .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/31 23:29 upstream c2131f7e73c9 032639db .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/31 13:09 upstream 8124c8a6b353 032639db .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/31 03:09 upstream 8124c8a6b353 325a8dab .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/30 08:10 upstream b90e90f40b4f 325a8dab .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/29 18:52 upstream f956cb99b938 325a8dab .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/28 22:41 upstream 5ff2756afde0 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/28 04:39 upstream 97e5bf604b7a 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/27 22:08 upstream d7c5303fbc8a 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/27 09:08 upstream 7ac3a1c1ae51 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/22 04:04 upstream 45af60e7ced0 3c7fef33 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/21 14:20 upstream 79a106fc6585 3c7fef33 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/19 19:03 upstream c3d0e3fd41b7 a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/18 14:09 upstream 8ac91e6c6033 a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/17 20:43 upstream d07f6ca923ea a2eb125d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/16 06:35 upstream c12a29ed9094 f54a5c09 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/12 18:50 upstream dbb5afad100a ed7d41c5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/11 23:30 upstream 88b06399c9c7 b3c3bb8e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/11 04:04 upstream 1140ab592e2e ca873091 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/10 18:17 upstream 6efb943b8616 ca873091 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/09 15:01 upstream b741596468b0 bc5434be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/08 11:21 upstream dd860052c99b bc5434be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/08 05:26 upstream 1ad77a05cfae bc5434be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/06 15:36 upstream 8404c9fbc84b 06585184 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/06 08:36 upstream a79cdfba68a1 06c27ff5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/05 13:19 upstream d665ea6ea86c 06c27ff5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/04 14:52 upstream 5e321ded302d 06c27ff5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/03 14:47 upstream 9ccce092fc64 ad61f371 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/02 13:52 upstream 17ae69aba89d 77e2b668 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/05/02 02:06 upstream 10a3efd0fee5 77e2b668 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/29 13:57 upstream d72cd4ad4174 77e2b668 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/28 09:58 upstream e359bce39d90 77e2b668 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/27 10:53 upstream 4a0225c3d208 805b5003 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/27 02:52 upstream 9f4ad9e425a1 8ee2dea6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/25 20:57 upstream d2d09fbe33f8 2a82f1b3 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/25 18:47 upstream d2d09fbe33f8 36c88236 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/24 18:15 upstream 2a1d7946fa53 17f0b706 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/24 05:38 upstream 8db5efb83fa9 17f0b706 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/23 10:44 upstream 90c911ad7445 590921a5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/04/21 23:22 upstream 16fc44d6387e 2bc8999a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in handle_irq_event / synchronize_irq
2021/01/11 13:42 upstream 7c53f6b671f4 2c1f2513 .config console log report info ci2-upstream-kcsan-gce
2020/12/05 12:34 upstream b3298500b23f 0ef84591 .config console log report info ci2-upstream-kcsan-gce
2020/06/27 06:18 upstream 1590a2e1c681 ffec44b5 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.