syzbot


KCSAN: data-race in enqueue_timer / timer_clear_idle

Status: auto-obsoleted due to no activity on 2023/05/30 16:47
Subsystems: kernel
[Documentation on labels]
First crash: 898d, last: 858d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in enqueue_timer / timer_clear_idle (2) kernel 6 1 779d 779d 0/29 auto-obsoleted due to no activity on 2023/08/17 09:26

Sample crash report:
==================================================================
BUG: KCSAN: data-race in enqueue_timer / timer_clear_idle

write to 0xffff888237d1cc65 of 1 bytes by task 0 on cpu 1:
 timer_clear_idle+0x22/0x30 kernel/time/timer.c:1987
 tick_nohz_restart_sched_tick+0x20/0x110 kernel/time/tick-sched.c:978
 tick_nohz_idle_update_tick kernel/time/tick-sched.c:1325 [inline]
 tick_nohz_idle_exit+0x10f/0x290 kernel/time/tick-sched.c:1359
 do_idle+0x1ff/0x240 kernel/sched/idle.c:295
 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379
 start_secondary+0x7c/0x80 arch/x86/kernel/smpboot.c:264
 secondary_startup_64_no_verify+0xcf/0xdb

read to 0xffff888237d1cc65 of 1 bytes by interrupt on cpu 0:
 trigger_dyntick_cpu kernel/time/timer.c:592 [inline]
 enqueue_timer+0x1fb/0x2a0 kernel/time/timer.c:624
 __mod_timer+0x67e/0x860
 mod_timer+0x1f/0x30 kernel/time/timer.c:1190
 sk_reset_timer+0x23/0xa0 net/core/sock.c:3359
 tcp_send_delayed_ack+0x204/0x210 net/ipv4/tcp_output.c:3941
 __tcp_ack_snd_check+0x2f8/0x500 net/ipv4/tcp_input.c:5541
 tcp_ack_snd_check net/ipv4/tcp_input.c:5582 [inline]
 tcp_rcv_established+0x6f8/0xe50 net/ipv4/tcp_input.c:6020
 tcp_v4_do_rcv+0x2ac/0x600 net/ipv4/tcp_ipv4.c:1721
 tcp_v4_rcv+0x1856/0x1ab0 net/ipv4/tcp_ipv4.c:2143
 ip_protocol_deliver_rcu+0x356/0x6d0 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x13d/0x1b0 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ip_local_deliver+0xec/0x1c0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:454 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:630 [inline]
 ip_sublist_rcv+0x4e1/0x5b0 net/ipv4/ip_input.c:638
 ip_list_rcv+0x25e/0x290 net/ipv4/ip_input.c:673
 __netif_receive_skb_list_ptype net/core/dev.c:5523 [inline]
 __netif_receive_skb_list_core+0x356/0x460 net/core/dev.c:5571
 __netif_receive_skb_list net/core/dev.c:5623 [inline]
 netif_receive_skb_list_internal+0x4e6/0x660 net/core/dev.c:5714
 gro_normal_list include/net/gro.h:433 [inline]
 napi_complete_done+0x1b8/0x3d0 net/core/dev.c:6054
 virtqueue_napi_complete drivers/net/virtio_net.c:405 [inline]
 virtnet_poll+0x729/0x9a0 drivers/net/virtio_net.c:1855
 __napi_poll+0x60/0x3b0 net/core/dev.c:6483
 napi_poll net/core/dev.c:6550 [inline]
 net_rx_action+0x31a/0x6c0 net/core/dev.c:6660
 __do_softirq+0xc1/0x265 kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x57/0xa0 kernel/softirq.c:650
 common_interrupt+0x7f/0x90 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636
 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
 arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline]
 acpi_safe_halt+0x20/0x30 drivers/acpi/processor_idle.c:112
 acpi_idle_do_entry+0x19/0x30 drivers/acpi/processor_idle.c:573
 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:711
 cpuidle_enter_state+0xc6/0x260 drivers/cpuidle/cpuidle.c:267
 cpuidle_enter+0x40/0x60 drivers/cpuidle/cpuidle.c:388
 call_cpuidle kernel/sched/idle.c:134 [inline]
 cpuidle_idle_call kernel/sched/idle.c:215 [inline]
 do_idle+0x194/0x240 kernel/sched/idle.c:282
 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379
 rest_init+0xf3/0x100 init/main.c:736
 arch_call_rest_init+0x9/0x10 init/main.c:898
 start_kernel+0x58a/0x610 init/main.c:1152
 secondary_startup_64_no_verify+0xcf/0xdb

value changed: 0x01 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.3.0-syzkaller-00436-g173ea743bf7a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/04/25 16:41 upstream 173ea743bf7a 65320f8e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in enqueue_timer / timer_clear_idle
2023/03/16 09:05 upstream 9c1bec9c0b08 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in enqueue_timer / timer_clear_idle
* Struck through repros no longer work on HEAD.