================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff8881020d1380 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline] rtc_pie_update_irq+0x95/0xf0 drivers/rtc/interface.c:672 __run_hrtimer kernel/time/hrtimer.c:1801 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1865 hrtimer_interrupt+0x235/0x4a0 kernel/time/hrtimer.c:1927 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 get_current arch/x86/include/asm/current.h:49 [inline] get_ctx kernel/kcsan/core.c:206 [inline] check_access kernel/kcsan/core.c:750 [inline] __tsan_read8+0xdc/0x180 kernel/kcsan/core.c:1025 cgroup_rstat_cpu kernel/cgroup/rstat.c:19 [inline] cgroup_rstat_updated+0x73/0x570 kernel/cgroup/rstat.c:98 memcg_rstat_updated mm/memcontrol.c:582 [inline] __mod_memcg_lruvec_state+0xfc/0x290 mm/memcontrol.c:766 __mod_lruvec_state mm/memcontrol.c:789 [inline] __lruvec_stat_mod_folio+0xd2/0x120 mm/memcontrol.c:809 __folio_mod_stat mm/rmap.c:1301 [inline] __folio_remove_rmap mm/rmap.c:1593 [inline] folio_remove_rmap_ptes+0x12f/0x1a0 mm/rmap.c:1620 zap_present_folio_ptes mm/memory.c:1535 [inline] zap_present_ptes mm/memory.c:1596 [inline] do_zap_pte_range mm/memory.c:1698 [inline] zap_pte_range mm/memory.c:1742 [inline] zap_pmd_range mm/memory.c:1834 [inline] zap_pud_range mm/memory.c:1863 [inline] zap_p4d_range mm/memory.c:1884 [inline] unmap_page_range+0x10c5/0x2660 mm/memory.c:1905 unmap_single_vma+0x142/0x1d0 mm/memory.c:1951 unmap_vmas+0x18d/0x2b0 mm/memory.c:1995 exit_mmap+0x1ae/0x6d0 mm/mmap.c:1284 __mmput+0x28/0x1d0 kernel/fork.c:1356 mmput+0x4c/0x60 kernel/fork.c:1378 exit_mm+0xe4/0x190 kernel/exit.c:570 do_exit+0x559/0x17f0 kernel/exit.c:925 do_group_exit+0x142/0x150 kernel/exit.c:1087 __do_sys_exit_group kernel/exit.c:1098 [inline] __se_sys_exit_group kernel/exit.c:1096 [inline] __x64_sys_exit_group+0x1f/0x20 kernel/exit.c:1096 x64_sys_call+0x2db8/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff8881020d1380 of 8 bytes by task 27863 on cpu 0: rtc_dev_poll+0x77/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] __io_arm_poll_handler+0x1e5/0xd50 io_uring/poll.c:582 io_poll_add+0x6b/0xf0 io_uring/poll.c:892 io_issue_sqe+0x15f/0xb70 io_uring/io_uring.c:1737 io_queue_sqe io_uring/io_uring.c:1947 [inline] io_req_task_submit+0x6a/0xc0 io_uring/io_uring.c:1373 io_poll_task_func+0x730/0xa50 io_handle_tw_list+0xe3/0x200 io_uring/io_uring.c:1059 tctx_task_work_run+0x6e/0x1c0 io_uring/io_uring.c:1123 tctx_task_work+0x40/0x80 io_uring/io_uring.c:1141 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 get_signal+0xe78/0x1000 kernel/signal.c:2809 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x000000000009a9c0 -> 0x000000000009aac0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 27863 Comm: syz.5.2681 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff8881020d1380 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline] rtc_pie_update_irq+0x95/0xf0 drivers/rtc/interface.c:672 __run_hrtimer kernel/time/hrtimer.c:1801 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1865 hrtimer_interrupt+0x235/0x4a0 kernel/time/hrtimer.c:1927 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline] acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:111 acpi_idle_do_entry+0x1d/0x30 drivers/acpi/processor_idle.c:568 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:699 cpuidle_enter_state+0xc5/0x260 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x40/0x70 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x192/0x230 kernel/sched/idle.c:325 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:423 start_secondary+0x96/0xa0 arch/x86/kernel/smpboot.c:315 common_startup_64+0x12c/0x137 read to 0xffff8881020d1380 of 8 bytes by task 27863 on cpu 0: rtc_dev_poll+0x77/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] io_poll_check_events io_uring/poll.c:262 [inline] io_poll_task_func+0x144/0xa50 io_uring/poll.c:318 io_handle_tw_list+0xe3/0x200 io_uring/io_uring.c:1059 tctx_task_work_run+0x6e/0x1c0 io_uring/io_uring.c:1123 tctx_task_work+0x40/0x80 io_uring/io_uring.c:1141 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 get_signal+0xe78/0x1000 kernel/signal.c:2809 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x000000000015d3c0 -> 0x000000000015d4c0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 27863 Comm: syz.5.2681 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff8881020d1380 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline] rtc_pie_update_irq+0x95/0xf0 drivers/rtc/interface.c:672 __run_hrtimer kernel/time/hrtimer.c:1801 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1865 hrtimer_interrupt+0x235/0x4a0 kernel/time/hrtimer.c:1927 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline] acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:111 acpi_idle_do_entry+0x1d/0x30 drivers/acpi/processor_idle.c:568 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:699 cpuidle_enter_state+0xc5/0x260 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x40/0x70 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x192/0x230 kernel/sched/idle.c:325 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:423 start_secondary+0x96/0xa0 arch/x86/kernel/smpboot.c:315 common_startup_64+0x12c/0x137 read to 0xffff8881020d1380 of 8 bytes by task 27863 on cpu 0: rtc_dev_poll+0x77/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] __io_arm_poll_handler+0x1e5/0xd50 io_uring/poll.c:582 io_poll_add+0x6b/0xf0 io_uring/poll.c:892 io_issue_sqe+0x15f/0xb70 io_uring/io_uring.c:1737 io_queue_sqe io_uring/io_uring.c:1947 [inline] io_req_task_submit+0x6a/0xc0 io_uring/io_uring.c:1373 io_poll_task_func+0x730/0xa50 io_handle_tw_list+0xe3/0x200 io_uring/io_uring.c:1059 tctx_task_work_run+0x6e/0x1c0 io_uring/io_uring.c:1123 tctx_task_work+0x40/0x80 io_uring/io_uring.c:1141 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 get_signal+0xe78/0x1000 kernel/signal.c:2809 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000241dc0 -> 0x0000000000241ec0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 27863 Comm: syz.5.2681 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff8881020d1380 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline] rtc_pie_update_irq+0x95/0xf0 drivers/rtc/interface.c:672 __run_hrtimer kernel/time/hrtimer.c:1801 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1865 hrtimer_interrupt+0x235/0x4a0 kernel/time/hrtimer.c:1927 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline] acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:111 acpi_idle_do_entry+0x1d/0x30 drivers/acpi/processor_idle.c:568 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:699 cpuidle_enter_state+0xc5/0x260 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x40/0x70 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x192/0x230 kernel/sched/idle.c:325 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:423 start_secondary+0x96/0xa0 arch/x86/kernel/smpboot.c:315 common_startup_64+0x12c/0x137 read to 0xffff8881020d1380 of 8 bytes by task 27863 on cpu 0: rtc_dev_poll+0x77/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] __io_arm_poll_handler+0x1e5/0xd50 io_uring/poll.c:582 io_poll_add+0x6b/0xf0 io_uring/poll.c:892 io_issue_sqe+0x15f/0xb70 io_uring/io_uring.c:1737 io_queue_sqe io_uring/io_uring.c:1947 [inline] io_req_task_submit+0x6a/0xc0 io_uring/io_uring.c:1373 io_poll_task_func+0x730/0xa50 io_handle_tw_list+0xe3/0x200 io_uring/io_uring.c:1059 tctx_task_work_run+0x6e/0x1c0 io_uring/io_uring.c:1123 tctx_task_work+0x40/0x80 io_uring/io_uring.c:1141 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 get_signal+0xe78/0x1000 kernel/signal.c:2809 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000003103c0 -> 0x00000000003104c0