syzbot

 sign-in | mailing list | source | docs
🐞 Open [993] ≡ Subsystems 🐞 Fixed [5244] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer (3)

Status: auto-closed as invalid on 2020/07/23 13:12
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+929b07c435c8b335a61a@syzkaller.appspotmail.com
First crash: 1619d, last: 1408d
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer (2) kernel 192 1620d 1655d 0/26 closed as invalid on 2019/11/19 14:04
upstream KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer kernel 204 1655d 1666d 0/26 closed as invalid on 2019/10/15 15:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer

write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0:
 tick_sched_do_timer+0xb4/0xd0 kernel/time/tick-sched.c:141
 tick_sched_timer+0x3f/0xd0 kernel/time/tick-sched.c:1313
 __run_hrtimer kernel/time/hrtimer.c:1520 [inline]
 __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584
 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline]
 smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 find_watchpoint kernel/kcsan/core.c:107 [inline]
 check_access kernel/kcsan/core.c:566 [inline]
 __tsan_unaligned_write2+0xa/0x110 kernel/kcsan/core.c:768
 virtqueue_add_split drivers/virtio/virtio_ring.c:552 [inline]
 virtqueue_add+0xa51/0x1ab0 drivers/virtio/virtio_ring.c:1706
 virtqueue_add_inbuf_ctx+0x4c/0x64 drivers/virtio/virtio_ring.c:1809
 add_recvbuf_mergeable drivers/net/virtio_net.c:1213 [inline]
 try_fill_recv+0x69a/0xe60 drivers/net/virtio_net.c:1235
 virtnet_receive drivers/net/virtio_net.c:1347 [inline]
 virtnet_poll+0x62d/0x790 drivers/net/virtio_net.c:1440
 napi_poll net/core/dev.c:6571 [inline]
 net_rx_action+0x3ad/0xac0 net/core/dev.c:6639
 __do_softirq+0x118/0x34a kernel/softirq.c:292
 run_ksoftirqd+0x41/0x60 kernel/softirq.c:604
 smpboot_thread_fn+0x374/0x4a0 kernel/smpboot.c:165
 kthread+0x203/0x230 kernel/kthread.c:268
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1:
 tick_sched_do_timer+0x2e/0xd0 kernel/time/tick-sched.c:137
 tick_sched_timer+0x3f/0xd0 kernel/time/tick-sched.c:1313
 __run_hrtimer kernel/time/hrtimer.c:1520 [inline]
 __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584
 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline]
 smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8906 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (269):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/18 13:11 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3ea11d3f .config console log report ci2-upstream-kcsan-gce
2020/06/18 01:20 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/17 11:08 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 00:29 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/16 12:47 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/15 23:25 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 baca2611 .config console log report ci2-upstream-kcsan-gce
2020/06/15 09:12 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 8e3ab941 .config console log report ci2-upstream-kcsan-gce
2020/06/14 12:00 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 2a22c77a .config console log report ci2-upstream-kcsan-gce
2020/06/14 00:43 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 a61674a5 .config console log report ci2-upstream-kcsan-gce
2020/06/13 12:51 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 dbce178a .config console log report ci2-upstream-kcsan-gce
2020/06/13 05:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 f4724dd3 .config console log report ci2-upstream-kcsan-gce
2020/06/12 16:28 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3036d6fd .config console log report ci2-upstream-kcsan-gce
2020/06/12 05:11 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 819b58b0 .config console log report ci2-upstream-kcsan-gce
2020/06/11 20:03 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 1beaee21 .config console log report ci2-upstream-kcsan-gce
2020/06/11 02:34 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3ab7a05a .config console log report ci2-upstream-kcsan-gce
2020/06/10 13:50 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 5caaad3a .config console log report ci2-upstream-kcsan-gce
2020/06/10 04:07 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 860c4de9 .config console log report ci2-upstream-kcsan-gce
2020/06/09 12:34 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 092934c1 .config console log report ci2-upstream-kcsan-gce
2020/06/09 03:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 0d60b78a .config console log report ci2-upstream-kcsan-gce
2020/06/08 10:37 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 7604bb03 .config console log report ci2-upstream-kcsan-gce
2020/06/07 21:33 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 7751efd0 .config console log report ci2-upstream-kcsan-gce
2020/06/07 09:08 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 2c2b926c .config console log report ci2-upstream-kcsan-gce
2020/06/06 13:43 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 e6b89e4e .config console log report ci2-upstream-kcsan-gce
2020/06/06 03:33 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 c3e9afb3 .config console log report ci2-upstream-kcsan-gce
2020/06/05 13:47 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d36418e9 .config console log report ci2-upstream-kcsan-gce
2020/06/05 04:15 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 2420d1bc .config console log report ci2-upstream-kcsan-gce
2020/06/04 17:33 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 6720fdef .config console log report ci2-upstream-kcsan-gce
2020/06/04 01:04 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b0d1c0d5 .config console log report ci2-upstream-kcsan-gce
2020/06/03 14:37 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 a5ce5de0 .config console log report ci2-upstream-kcsan-gce
2020/06/03 05:37 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 f3ba1b5b .config console log report ci2-upstream-kcsan-gce
2020/06/02 13:47 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 52fd7b7d .config console log report ci2-upstream-kcsan-gce
2020/05/31 10:46 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 a0331e89 .config console log report ci2-upstream-kcsan-gce
2020/05/30 16:26 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 6f3e1c7c .config console log report ci2-upstream-kcsan-gce
2020/05/30 02:24 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 954bd312 .config console log report ci2-upstream-kcsan-gce
2020/05/29 14:58 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 bed08304 .config console log report ci2-upstream-kcsan-gce
2020/05/29 02:31 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d19ed305 .config console log report ci2-upstream-kcsan-gce
2020/05/28 12:37 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 c7192a2f .config console log report ci2-upstream-kcsan-gce
2020/05/26 19:06 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 9072c126 .config console log report ci2-upstream-kcsan-gce
2020/05/26 02:43 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 8ca3b7d2 .config console log report ci2-upstream-kcsan-gce
2020/05/25 13:13 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 73964a9b .config console log report ci2-upstream-kcsan-gce
2020/05/25 01:28 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 11284182 .config console log report ci2-upstream-kcsan-gce
2020/05/24 15:08 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 ce7ca010 .config console log report ci2-upstream-kcsan-gce
2020/05/24 00:18 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 96c92ad3 .config console log report ci2-upstream-kcsan-gce
2020/05/22 18:13 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4afdfa20 .config console log report ci2-upstream-kcsan-gce
2020/05/20 15:14 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4afdfa20 .config console log report ci2-upstream-kcsan-gce
2020/05/20 10:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 1255f02a .config console log report ci2-upstream-kcsan-gce
2020/05/19 12:10 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 6d882fd2 .config console log report ci2-upstream-kcsan-gce
2020/05/18 22:21 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 684d3606 .config console log report ci2-upstream-kcsan-gce
2020/01/03 10:12 https://github.com/google/ktsan.git kcsan 245a43005292 9dcc1191 .config console log report ci2-upstream-kcsan-gce
2019/11/20 23:07 https://github.com/google/ktsan.git kcsan 5863cc791e4c 8098ea0f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.