syzbot


KCSAN: data-race in add_timer_on / timer_clear_idle (3)

Status: auto-closed as invalid on 2020/09/09 13:18
Subsystems: kernel
[Documentation on labels]
First crash: 1405d, last: 1358d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in add_timer_on / timer_clear_idle kernel 1 1656d 1656d 0/26 closed as invalid on 2019/10/18 14:11
upstream KCSAN: data-race in add_timer_on / timer_clear_idle (2) kernel 30 1411d 1644d 0/26 closed as invalid on 2020/06/18 14:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in add_timer_on / timer_clear_idle

write to 0xffff88812c01cb24 of 1 bytes by task 0 on cpu 0:
 timer_clear_idle+0x2e/0x40 kernel/time/timer.c:1687
 tick_nohz_idle_retain_tick+0x3e/0x40 kernel/time/tick-sched.c:1012
 cpuidle_idle_call kernel/sched/idle.c:210 [inline]
 do_idle+0x287/0x310 kernel/sched/idle.c:276
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:372
 rest_init+0xd8/0xe0 init/main.c:705
 arch_call_rest_init+0xa/0xb
 start_kernel+0x608/0x6d0 init/main.c:1043
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243

read to 0xffff88812c01cb24 of 1 bytes by interrupt on cpu 1:
 forward_timer_base kernel/time/timer.c:900 [inline]
 add_timer_on+0x218/0x3b0 kernel/time/timer.c:1183
 clocksource_watchdog+0x729/0x760 kernel/time/clocksource.c:303
 call_timer_fn+0x30/0x2a0 kernel/time/timer.c:1416
 expire_timers+0x116/0x290 kernel/time/timer.c:1461
 __run_timers+0x443/0x500 kernel/time/timer.c:1792
 run_timer_softirq+0x2e/0x60 kernel/time/timer.c:1805
 __do_softirq+0x198/0x360 kernel/softirq.c:298
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:711
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 do_softirq_own_stack+0x5d/0x80 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu+0x115/0x120 kernel/softirq.c:423
 sysvec_apic_timer_interrupt+0xba/0xd0 arch/x86/kernel/apic/apic.c:1091
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:592
 native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60
 arch_safe_halt arch/x86/include/asm/paravirt.h:150 [inline]
 acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
 acpi_idle_do_entry drivers/acpi/processor_idle.c:524 [inline]
 acpi_idle_enter+0x30d/0x680 drivers/acpi/processor_idle.c:650
 cpuidle_enter_state+0x245/0x5d0 drivers/cpuidle/cpuidle.c:235
 cpuidle_enter+0x3c/0x60 drivers/cpuidle/cpuidle.c:346
 call_cpuidle kernel/sched/idle.c:126 [inline]
 cpuidle_idle_call kernel/sched/idle.c:214 [inline]
 do_idle+0x229/0x310 kernel/sched/idle.c:276
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:372
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (30):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/05 13:15 upstream c0842fbc1b18 b7129355 .config console log report ci2-upstream-kcsan-gce
2020/08/04 20:31 upstream c0842fbc1b18 80a06902 .config console log report ci2-upstream-kcsan-gce
2020/08/02 15:13 upstream ac3a0c847296 96dd3623 .config console log report ci2-upstream-kcsan-gce
2020/08/02 06:03 upstream d52daa8620c6 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/08/01 10:24 upstream 7dc6fd0f3b84 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/08/01 02:16 upstream d8b9faec54ae 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/07/31 00:07 upstream e2c46b5762c6 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/07/29 23:15 upstream 6ba1b005ffc3 233283a1 .config console log report ci2-upstream-kcsan-gce
2020/07/26 15:10 upstream 04300d66f0a0 51265195 .config console log report ci2-upstream-kcsan-gce
2020/07/25 17:33 upstream 23ee3e4e5bd2 1f7cc1ca .config console log report ci2-upstream-kcsan-gce
2020/07/25 03:23 upstream 68845a55c31b 0a13649c .config console log report ci2-upstream-kcsan-gce
2020/07/24 17:25 upstream f37e99aca03f 554af388 .config console log report ci2-upstream-kcsan-gce
2020/07/24 05:16 upstream f37e99aca03f 70c104a1 .config console log report ci2-upstream-kcsan-gce
2020/07/23 00:27 upstream 8c26c87b0532 128cd85f .config console log report ci2-upstream-kcsan-gce
2020/07/22 06:23 upstream 4fa640dc5230 21f1765e .config console log report ci2-upstream-kcsan-gce
2020/07/21 05:50 upstream 4fa640dc5230 d88894e6 .config console log report ci2-upstream-kcsan-gce
2020/07/18 08:09 upstream 6a70f89cc58f 9c812472 .config console log report ci2-upstream-kcsan-gce
2020/07/18 00:37 upstream 8882572675c1 9c812472 .config console log report ci2-upstream-kcsan-gce
2020/07/17 01:08 upstream 07a56bb875af 54b3c45e .config console log report ci2-upstream-kcsan-gce
2020/07/16 14:43 upstream f8456690ba8e b090c643 .config console log report ci2-upstream-kcsan-gce
2020/07/14 19:35 upstream 0dc589da873b 6f458026 .config console log report ci2-upstream-kcsan-gce
2020/07/10 21:27 upstream a581387e415b 18d18b59 .config console log report ci2-upstream-kcsan-gce
2020/07/10 06:58 upstream 2a89b99f5803 edf162e8 .config console log report ci2-upstream-kcsan-gce
2020/07/08 07:26 upstream dcde237b9b0e 5962a2dc .config console log report ci2-upstream-kcsan-gce
2020/07/08 03:29 upstream aa27b32b76d0 08fc4ef1 .config console log report ci2-upstream-kcsan-gce
2020/07/04 10:31 upstream 0c7d7d1fada7 51095195 .config console log report ci2-upstream-kcsan-gce
2020/07/03 04:53 upstream 7cc2a8ea1048 f30c14bf .config console log report ci2-upstream-kcsan-gce
2020/06/26 07:05 upstream 4a21185cda0f aea82c00 .config console log report ci2-upstream-kcsan-gce
2020/06/25 00:07 upstream 26e122e97a3d 9d60b18e .config console log report ci2-upstream-kcsan-gce
2020/06/19 15:43 upstream 5e857ce6eae7 123cf502 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.