syzbot


KCSAN: data-race in internal_add_timer / timer_clear_idle (3)

Status: auto-obsoleted due to no activity on 2023/04/06 07:20
Subsystems: kernel
[Documentation on labels]
First crash: 963d, last: 963d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in internal_add_timer / timer_clear_idle kernel 6 127 1397d 1729d 0/29 auto-closed as invalid on 2021/12/10 01:40
upstream KCSAN: data-race in internal_add_timer / timer_clear_idle (2) kernel 6 1 1068d 1068d 0/29 auto-obsoleted due to no activity on 2022/11/04 03:22

Sample crash report:
==================================================================
BUG: KCSAN: data-race in internal_add_timer / timer_clear_idle

write to 0xffff888237c1bba5 of 1 bytes by task 0 on cpu 0:
 timer_clear_idle+0x2e/0x40 kernel/time/timer.c:1987
 tick_nohz_restart_sched_tick+0x20/0x110 kernel/time/tick-sched.c:968
 tick_nohz_idle_update_tick kernel/time/tick-sched.c:1315 [inline]
 tick_nohz_idle_exit+0x119/0x280 kernel/time/tick-sched.c:1349
 do_idle+0x215/0x250 kernel/sched/idle.c:316
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:400
 rest_init+0xe8/0xf0 init/main.c:732
 arch_call_rest_init+0x5/0x10 init/main.c:894
 start_kernel+0x59e/0x630 init/main.c:1148
 secondary_startup_64_no_verify+0xcf/0xdb

read to 0xffff888237c1bba5 of 1 bytes by interrupt on cpu 1:
 trigger_dyntick_cpu kernel/time/timer.c:592 [inline]
 enqueue_timer kernel/time/timer.c:624 [inline]
 internal_add_timer+0x22e/0x2b0 kernel/time/timer.c:634
 __mod_timer+0x796/0xc10 kernel/time/timer.c:1131
 mod_timer+0x1b/0x20 kernel/time/timer.c:1190
 sk_reset_timer+0x1f/0xa0 net/core/sock.c:3363
 tcp_send_delayed_ack+0x239/0x250 net/ipv4/tcp_output.c:3941
 __tcp_ack_snd_check+0x2f6/0x500 net/ipv4/tcp_input.c:5541
 tcp_ack_snd_check net/ipv4/tcp_input.c:5582 [inline]
 tcp_rcv_established+0x6ed/0xe00 net/ipv4/tcp_input.c:6020
 tcp_v4_do_rcv+0x2a8/0x5e0 net/ipv4/tcp_ipv4.c:1721
 tcp_v4_rcv+0x18e6/0x1b40 net/ipv4/tcp_ipv4.c:2142
 ip_protocol_deliver_rcu+0x380/0x710 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x134/0x1a0 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ip_local_deliver+0x100/0x1b0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:454 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:630 [inline]
 ip_sublist_rcv+0x524/0x5f0 net/ipv4/ip_input.c:638
 ip_list_rcv+0x277/0x2b0 net/ipv4/ip_input.c:673
 __netif_receive_skb_list_ptype net/core/dev.c:5525 [inline]
 __netif_receive_skb_list_core+0x37d/0x490 net/core/dev.c:5573
 __netif_receive_skb_list+0x2a2/0x320 net/core/dev.c:5625
 netif_receive_skb_list_internal+0x254/0x390 net/core/dev.c:5716
 gro_normal_list include/net/gro.h:433 [inline]
 napi_complete_done+0x1b2/0x3c0 net/core/dev.c:6056
 virtqueue_napi_complete drivers/net/virtio_net.c:405 [inline]
 virtnet_poll+0x6e4/0x990 drivers/net/virtio_net.c:1682
 __napi_poll+0x65/0x390 net/core/dev.c:6485
 napi_poll net/core/dev.c:6552 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6663
 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571
 __irq_exit_rcu kernel/softirq.c:650 [inline]
 irq_exit_rcu+0x41/0x70 kernel/softirq.c:662
 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:640
 native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
 arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
 acpi_safe_halt drivers/acpi/processor_idle.c:112 [inline]
 acpi_idle_do_entry drivers/acpi/processor_idle.c:570 [inline]
 acpi_idle_enter+0x283/0x340 drivers/acpi/processor_idle.c:707
 cpuidle_enter_state+0x2de/0x960 drivers/cpuidle/cpuidle.c:239
 cpuidle_enter+0x3c/0x60 drivers/cpuidle/cpuidle.c:356
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x1a7/0x250 kernel/sched/idle.c:303
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:400
 start_secondary+0x78/0x80 arch/x86/kernel/smpboot.c:264
 secondary_startup_64_no_verify+0xcf/0xdb

value changed: 0x01 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.2.0-rc3-syzkaller-00021-g7dd4b804e080-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/01/12 06:55 upstream 7dd4b804e080 96166539 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in internal_add_timer / timer_clear_idle
* Struck through repros no longer work on HEAD.