syzbot


KCSAN: data-race in hrtimer_reprogram / print_cpu (11)

Status: auto-obsoleted due to no activity on 2024/08/04 04:55
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+15ce54add047ef6c0921@syzkaller.appspotmail.com
First crash: 95d, last: 76d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (9) kernel 7 187d 243d 0/28 auto-obsoleted due to no activity on 2024/04/14 23:48
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (6) kernel 19 420d 605d 0/28 auto-obsoleted due to no activity on 2023/08/26 13:01
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu kernel 1 1639d 1639d 0/28 auto-closed as invalid on 2020/05/29 16:43
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (2) kernel 1 1472d 1472d 0/28 auto-closed as invalid on 2020/10/08 05:09
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (5) kernel 11 699d 782d 0/28 auto-obsoleted due to no activity on 2022/11/20 13:25
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (3) kernel 1 1042d 1042d 0/28 auto-closed as invalid on 2021/12/12 15:07
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (10) kernel 2 140d 141d 0/28 auto-obsoleted due to no activity on 2024/06/01 18:17
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (7) kernel 3 374d 384d 0/28 auto-obsoleted due to no activity on 2023/10/11 12:54
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (4) kernel 1 1006d 1006d 0/28 auto-closed as invalid on 2022/01/17 18:45
upstream KCSAN: data-race in hrtimer_reprogram / print_cpu (8) kernel 1 298d 277d 0/28 auto-obsoleted due to no activity on 2023/12/26 20:48

Sample crash report:
==================================================================
BUG: KCSAN: data-race in hrtimer_reprogram / print_cpu

write to 0xffff888237d1ffa0 of 8 bytes by task 9645 on cpu 1:
 __hrtimer_reprogram kernel/time/hrtimer.c:657 [inline]
 hrtimer_reprogram+0x1a2/0x220 kernel/time/hrtimer.c:864
 hrtimer_start_range_ns+0x4ee/0x560 kernel/time/hrtimer.c:1301
 hrtimer_start_expires include/linux/hrtimer.h:289 [inline]
 hrtimer_restart include/linux/hrtimer.h:297 [inline]
 common_hrtimer_rearm+0xa6/0xc0 kernel/time/posix-timers.c:249
 posixtimer_rearm+0xc7/0x1a0 kernel/time/posix-timers.c:267
 dequeue_signal+0x282/0x430 kernel/signal.c:696
 get_signal+0x37d/0x1080 kernel/signal.c:2788
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x59/0x130 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237d1ffa0 of 8 bytes by task 9668 on cpu 0:
 print_cpu+0x2fb/0x670 kernel/time/timer_list.c:133
 timer_list_show+0x115/0x180 kernel/time/timer_list.c:295
 seq_read_iter+0x2d7/0x940 fs/seq_file.c:230
 proc_reg_read_iter+0x11e/0x190 fs/proc/inode.c:299
 copy_splice_read+0x3a4/0x5d0 fs/splice.c:365
 do_splice_read fs/splice.c:985 [inline]
 splice_direct_to_actor+0x26c/0x670 fs/splice.c:1089
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x3ab/0x960 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1362 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1348
 x64_sys_call+0x2c9f/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000006441c29200 -> 0x00000064416e49b8

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 9668 Comm: syz.1.7010 Tainted: G        W          6.10.0-rc5-syzkaller-00280-g27b31deb900d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
==================================================================

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/30 04:54 upstream 27b31deb900d 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
2024/06/17 21:23 upstream 6226e74900d7 1f11cfd7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
2024/06/17 14:15 upstream 6ba59ff42279 1f11cfd7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
2024/06/14 10:50 upstream d20f6b3d747c 8d849073 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
2024/06/13 16:15 upstream 2ccbdf43d5e7 a9616ff5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
2024/06/11 08:59 upstream 83a7eefedc9b b7d9eb04 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hrtimer_reprogram / print_cpu
* Struck through repros no longer work on HEAD.