KCSAN: data-race in acpi_ut_exit / acpi_ut_exit

Status: moderation: reported C repro on 2026/09/25 10:05
Labels: prio:low race:benign
[Documentation on labels]
Reported-by: syzbot+889c84fc16b794ae3347@syzkaller.appspotmail.com
First crash: 10h54m, last: 10h54m
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
7916a040 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in acpi_ut_exit / acpi_ut_exit 2026/09/25 10:05 2026/09/25 10:05 2026/09/25 10:08 f281d9d2
ee89d452 assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in acpi_ut_exit / acpi_ut_exit 2026/09/25 10:04 2026/09/25 10:05 2026/09/25 10:42 f281d9d2

Sample crash report:
==================================================================
BUG: KCSAN: data-race in acpi_ut_exit / acpi_ut_exit

write to 0xffffffff896248c8 of 4 bytes by task 3639 on cpu 1:
 acpi_ut_exit+0xd5/0xf0 drivers/acpi/acpica/utdebug.c:423
 acpi_ex_enter_interpreter+0xbb/0xd0 drivers/acpi/acpica/exutils.c:67
 acpi_evaluate_object+0x661/0x800 drivers/acpi/acpica/nsxfeval.c:427
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff896248c8 of 4 bytes by task 3643 on cpu 0:
 acpi_ut_exit+0xaf/0xf0 drivers/acpi/acpica/utdebug.c:422
 acpi_ns_delete_namespace_subtree+0x1f4/0x210 drivers/acpi/acpica/nsalloc.c:-1
 acpi_ds_terminate_control_method+0x289/0x5e0 drivers/acpi/acpica/dsmethod.c:780
 acpi_ps_parse_aml+0x68f/0xa10 drivers/acpi/acpica/psparse.c:582
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000015 -> 0x00000013

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3643 Comm: syz-executor102 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in acpi_ut_status_exit / acpi_ut_trace

read-write to 0xffffffff896248c8 of 4 bytes by task 3636 on cpu 0:
 acpi_ut_trace+0x44/0x180 drivers/acpi/acpica/utdebug.c:268
 acpi_evaluate_object+0x60/0x800 drivers/acpi/acpica/nsxfeval.c:173
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff896248c8 of 4 bytes by task 3643 on cpu 1:
 acpi_ut_status_exit+0xd8/0x120 drivers/acpi/acpica/utdebug.c:471
 acpi_ps_get_aml_opcode drivers/acpi/acpica/psobject.c:135 [inline]
 acpi_ps_create_op+0x24b/0x6b0 drivers/acpi/acpica/psobject.c:310
 acpi_ps_parse_loop+0x4e1/0x1520 drivers/acpi/acpica/psloop.c:306
 acpi_ps_parse_aml+0x2b0/0xa10 drivers/acpi/acpica/psparse.c:489
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000b -> 0x0000000e

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3643 Comm: syz-executor102 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in acpi_ut_exit / acpi_ut_trace

read to 0xffffffff896248c8 of 4 bytes by task 3641 on cpu 0:
 acpi_ut_exit+0xaf/0xf0 drivers/acpi/acpica/utdebug.c:422
 acpi_ex_enter_interpreter+0xbb/0xd0 drivers/acpi/acpica/exutils.c:67
 acpi_ds_terminate_control_method+0x28e/0x5e0 drivers/acpi/acpica/dsmethod.c:782
 acpi_ps_parse_aml+0x68f/0xa10 drivers/acpi/acpica/psparse.c:582
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read-write to 0xffffffff896248c8 of 4 bytes by task 3643 on cpu 1:
 acpi_ut_trace+0x44/0x180 drivers/acpi/acpica/utdebug.c:268
 acpi_ns_delete_namespace_subtree+0x33/0x210 drivers/acpi/acpica/nsalloc.c:324
 acpi_ds_terminate_control_method+0x289/0x5e0 drivers/acpi/acpica/dsmethod.c:780
 acpi_ps_parse_aml+0x68f/0xa10 drivers/acpi/acpica/psparse.c:582
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000d -> 0x00000007

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3643 Comm: syz-executor102 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in acpi_ut_trace / acpi_ut_trace_ptr

read-write to 0xffffffff896248c8 of 4 bytes by task 3640 on cpu 0:
 acpi_ut_trace+0x44/0x180 drivers/acpi/acpica/utdebug.c:268
 acpi_evaluate_object+0x60/0x800 drivers/acpi/acpica/nsxfeval.c:173
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read-write to 0xffffffff896248c8 of 4 bytes by task 3643 on cpu 1:
 acpi_ut_trace_ptr+0x49/0x180 drivers/acpi/acpica/utdebug.c:306
 acpi_ps_create_op+0x63/0x6b0 drivers/acpi/acpica/psobject.c:308
 acpi_ps_parse_loop+0x4e1/0x1520 drivers/acpi/acpica/psloop.c:306
 acpi_ps_parse_aml+0x2b0/0xa10 drivers/acpi/acpica/psparse.c:489
 acpi_ps_execute_method+0x4af/0x660 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0x8ae/0xac0 drivers/acpi/acpica/nseval.c:205
 acpi_evaluate_object+0x41b/0x800 drivers/acpi/acpica/nsxfeval.c:354
 acpi_evaluate_integer+0x7c/0x120 drivers/acpi/utils.c:260
 status_show+0x5d/0xc0 drivers/acpi/device_sysfs.c:539
 dev_attr_show+0x3f/0xa0 drivers/base/core.c:2491
 sysfs_kf_seq_show+0x1a3/0x280 fs/sysfs/file.c:65
 kernfs_seq_show+0x82/0xa0 fs/kernfs/file.c:216
 seq_read_iter+0x2d9/0x8f0 fs/seq_file.c:231
 kernfs_fop_read_iter+0xbe/0x320 fs/kernfs/file.c:290
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000d -> 0x00000010

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3643 Comm: syz-executor102 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/25 10:04 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git f49a343b305c 853b104b .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in acpi_ut_exit / acpi_ut_exit
* Struck through repros no longer work on HEAD.