syzbot


KCSAN: data-race in clockevents_program_event / print_tickdevice (3)

Status: auto-closed as invalid on 2021/12/08 10:38
Subsystems: kernel
[Documentation on labels]
First crash: 929d, last: 898d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (8) kernel 1 122d 122d 0/26 auto-obsoleted due to no activity on 2024/01/23 08:37
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (6) kernel 28 308d 600d 0/26 auto-obsoleted due to no activity on 2023/07/21 02:50
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (7) kernel 2 175d 176d 0/26 auto-obsoleted due to no activity on 2023/11/30 21:56
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (5) kernel 7 648d 673d 0/26 auto-closed as invalid on 2022/08/15 19:00
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (2) kernel 1 1009d 1009d 0/26 auto-closed as invalid on 2021/08/19 20:40
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (9) kernel 1 11d 11d 0/26 moderation: reported on 2024/04/08 19:49
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice (4) kernel 1 797d 797d 0/26 auto-closed as invalid on 2022/03/19 14:36
upstream KCSAN: data-race in clockevents_program_event / print_tickdevice kernel 1 1092d 1089d 0/26 auto-closed as invalid on 2021/05/28 09:07

Sample crash report:
==================================================================
BUG: KCSAN: data-race in clockevents_program_event / print_tickdevice

write to 0xffff888237c1af18 of 8 bytes by interrupt on cpu 0:
 clockevents_program_event+0x35/0x1e0 kernel/time/clockevents.c:313
 tick_program_event+0x84/0xd0 kernel/time/tick-oneshot.c:44
 hrtimer_interrupt+0x868/0xac0 kernel/time/hrtimer.c:1824
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0xa3/0x240 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x88/0xb0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 rmqueue_pcplist+0x3/0x1f0 mm/page_alloc.c:3646
 rmqueue+0x4a/0xd20 mm/page_alloc.c:3690
 get_page_from_freelist+0x2dd/0x810 mm/page_alloc.c:4152
 __alloc_pages+0x18e/0x330 mm/page_alloc.c:5381
 alloc_pages+0x382/0x3d0
 folio_alloc+0x1a/0x20 mm/mempolicy.c:2201
 filemap_alloc_folio+0x53/0xf0 mm/filemap.c:1021
 __filemap_get_folio+0x443/0x690 mm/filemap.c:1935
 pagecache_get_page+0x26/0xe0 mm/folio-compat.c:125
 grab_cache_page_write_begin+0x3f/0x50 mm/folio-compat.c:139
 mext_page_double_lock fs/ext4/move_extent.c:146 [inline]
 move_extent_per_page fs/ext4/move_extent.c:303 [inline]
 ext4_move_extents+0xec5/0x22e0 fs/ext4/move_extent.c:673
 __ext4_ioctl fs/ext4/ioctl.c:988 [inline]
 ext4_ioctl+0x1532/0x2170 fs/ext4/ioctl.c:1279
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888237c1af18 of 8 bytes by task 28522 on cpu 1:
 print_tickdevice+0x158/0x370 kernel/time/timer_list.c:204
 timer_list_show+0x74/0x180 kernel/time/timer_list.c:296
 seq_read_iter+0x60b/0x930 fs/seq_file.c:272
 proc_reg_read_iter+0xfc/0x170 fs/proc/inode.c:300
 call_read_iter include/linux/fs.h:2155 [inline]
 generic_file_splice_read+0x24f/0x330 fs/splice.c:311
 do_splice_to fs/splice.c:796 [inline]
 splice_direct_to_actor+0x2aa/0x650 fs/splice.c:870
 do_splice_direct+0x106/0x190 fs/splice.c:979
 do_sendfile+0x675/0xc40 fs/read_write.c:1245
 __do_sys_sendfile64 fs/read_write.c:1310 [inline]
 __se_sys_sendfile64 fs/read_write.c:1296 [inline]
 __x64_sys_sendfile64+0x102/0x140 fs/read_write.c:1296
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x7fffffffffffffff -> 0x000000a3b1cbb57a

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 28522 Comm: syz-executor.1 Tainted: G        W         5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/11/03 10:32 upstream 56d33754481f 17f3edd2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in clockevents_program_event / print_tickdevice
2021/11/01 03:35 upstream 8bb7eca972ad 098b5d53 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in clockevents_program_event / print_tickdevice
2021/10/31 13:48 upstream 180eca540ae0 098b5d53 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in clockevents_program_event / print_tickdevice
2021/10/28 20:24 upstream 411a44c24a56 be531bb4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in clockevents_program_event / print_tickdevice
2021/10/03 16:28 upstream 7b66f4393ad4 db0f5787 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in clockevents_program_event / print_tickdevice
* Struck through repros no longer work on HEAD.