[tglx-devel:sched/hrtick] [x86/apic] acefed487a: Oops:divide_error:#[##]KASAN

Hello,

kernel test robot noticed "Oops:divide_error:#[##]KASAN" on:

commit: acefed487add38662f5d12bc7550b215d577aeb1 ("x86/apic: Enable TSC coupled programming mode")
https://git.kernel.org/cgit/linux/kernel/git/tglx/devel.git sched/hrtick

in testcase: boot

config: x86_64-randconfig-003-20260217
compiler: gcc-14
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+------------------------------------------+------------+------------+
|                                          | c903d71146 | acefed487a |
+------------------------------------------+------------+------------+
| boot_failures                            | 0          | 12         |
| Oops:divide_error:#[##]KASAN             | 0          | 12         |
| RIP:timekeeping_update_from_shadow       | 0          | 12         |
| Kernel_panic-not_syncing:Fatal_exception | 0          | 12         |
+------------------------------------------+------------+------------+

If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <[email protected]>
| Closes: https://lore.kernel.org/oe-lkp/[email protected]



[    5.888967][    T1] e820: register RAM buffer resource [mem 0xbffe0000-0xbfffffff]
[    5.890270][    T1] pci 0000:00:02.0: vgaarb: setting as boot VGA device
[    5.890772][    T1] pci 0000:00:02.0: vgaarb: bridge control possible
[    5.891232][    T1] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[    5.891888][    T1] vgaarb: loaded
[    5.893016][    T1] Oops: divide error: 0000 [#1] KASAN
[    5.893403][    T1] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Tainted: G                T   6.19.0-09386-gacefed487add #1 PREEMPT
[    5.894230][    T1] Tainted: [T]=RANDSTRUCT
[    5.894533][    T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[    5.894554][    T1] RIP: 0010:timekeeping_update_from_shadow (kbuild/src/consumer/include/linux/math64.h:29 kbuild/src/consumer/include/linux/math64.h:130 kbuild/src/consumer/kernel/time/timekeeping.c:762 kbuild/src/consumer/kernel/time/timekeeping.c:799)
[    5.894554][    T1] Code: 2a 49 8d 7f 08 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 47 d0 25 00 49 8b 47 08 31 d2 45 89 e4 48 8d bb 30 02 00 00 48 89 f9 <49> f7 f4 ba ff ff 37 00 48 c1 e9 03 48 c1 e2 2a 80 3c 11 00 74 0d
All code
========
   0:	2a 49 8d             	sub    -0x73(%rcx),%cl
   3:	7f 08                	jg     0xd
   5:	48 89 fa             	mov    %rdi,%rdx
   8:	48 c1 ea 03          	shr    $0x3,%rdx
   c:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  10:	74 05                	je     0x17
  12:	e8 47 d0 25 00       	call   0x25d05e
  17:	49 8b 47 08          	mov    0x8(%r15),%rax
  1b:	31 d2                	xor    %edx,%edx
  1d:	45 89 e4             	mov    %r12d,%r12d
  20:	48 8d bb 30 02 00 00 	lea    0x230(%rbx),%rdi
  27:	48 89 f9             	mov    %rdi,%rcx
  2a:*	49 f7 f4             	div    %r12		<-- trapping instruction
  2d:	ba ff ff 37 00       	mov    $0x37ffff,%edx
  32:	48 c1 e9 03          	shr    $0x3,%rcx
  36:	48 c1 e2 2a          	shl    $0x2a,%rdx
  3a:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
  3e:	74 0d                	je     0x4d

Code starting with the faulting instruction
===========================================
   0:	49 f7 f4             	div    %r12
   3:	ba ff ff 37 00       	mov    $0x37ffff,%edx
   8:	48 c1 e9 03          	shr    $0x3,%rcx
   c:	48 c1 e2 2a          	shl    $0x2a,%rdx
  10:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
  14:	74 0d                	je     0x23
[    5.894554][    T1] RSP: 0000:ffffc9000001fc18 EFLAGS: 00010046
[    5.894554][    T1] RAX: ffffffffffffffff RBX: ffffffff9fa5fc40 RCX: ffffffff9fa5fe70
[    5.894554][    T1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9fa5fe70
[    5.894554][    T1] RBP: ffffc9000001fc48 R08: 0000000000000000 R09: 0000000000000000
[    5.894554][    T1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[    5.894554][    T1] R13: ffffffff9fa5fda8 R14: 0000000000000003 R15: ffffffff9e1328e0
[    5.894554][    T1] FS:  0000000000000000(0000) GS:0000000000000000(0000) knlGS:0000000000000000
[    5.894554][    T1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    5.894554][    T1] CR2: ffff88883ffff000 CR3: 00000003a3eb0000 CR4: 00000000000406f0
[    5.894554][    T1] Call Trace:
[    5.894554][    T1]  <TASK>
[    5.894554][    T1]  timekeeping_notify (kbuild/src/consumer/include/linux/spinlock.h:570 kbuild/src/consumer/kernel/time/timekeeping.c:1723 kbuild/src/consumer/include/linux/stop_machine.h:171 kbuild/src/consumer/include/linux/stop_machine.h:179 kbuild/src/consumer/kernel/time/timekeeping.c:1760)
[    5.894554][    T1]  ? lockdep_hardirqs_on (kbuild/src/consumer/kernel/locking/lockdep.c:4474)
[    5.894554][    T1]  __clocksource_select (kbuild/src/consumer/kernel/time/clocksource.c:1069 (discriminator 1))
[    5.894554][    T1]  ? __clocksource_watchdog_kthread (kbuild/src/consumer/kernel/time/clocksource.c:716)


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260218/[email protected]



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki