syzbot


KCSAN: data-race in enqueue_timer / timer_reduce (2)

Status: auto-closed as invalid on 2020/04/13 01:10
Subsystems: batman
[Documentation on labels]
First crash: 1932d, last: 1868d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in enqueue_timer / timer_reduce batman 2 1952d 1958d 0/28 closed as invalid on 2019/11/19 14:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in enqueue_timer / timer_reduce

write to 0xffff88809b630d18 of 8 bytes by task 7962 on cpu 0:
 hlist_add_head include/linux/list.h:787 [inline]
 enqueue_timer+0x6c/0x210 kernel/time/timer.c:540
 __internal_add_timer+0x4f/0x60 kernel/time/timer.c:553
 internal_add_timer kernel/time/timer.c:595 [inline]
 __mod_timer kernel/time/timer.c:1053 [inline]
 mod_timer kernel/time/timer.c:1100 [inline]
 add_timer+0x250/0x550 kernel/time/timer.c:1136
 __queue_delayed_work+0x13b/0x1d0 kernel/workqueue.c:1644
 queue_delayed_work_on+0xf3/0x110 kernel/workqueue.c:1669
 queue_delayed_work include/linux/workqueue.h:509 [inline]
 batadv_nc_start_timer net/batman-adv/network-coding.c:79 [inline]
 batadv_nc_worker+0x29d/0x390 net/batman-adv/network-coding.c:740
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2264
 worker_thread+0xa0/0x800 kernel/workqueue.c:2410
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

read to 0xffff88809b630d18 of 8 bytes by task 6929 on cpu 1:
 __mod_timer kernel/time/timer.c:963 [inline]
 timer_reduce+0x5d/0x830 kernel/time/timer.c:1115
 cgroup_file_notify+0x11f/0x130 kernel/cgroup/cgroup.c:4097
 pids_can_fork+0x176/0x1b0 kernel/cgroup/pids.c:233
 cgroup_can_fork+0xde/0x1b0 kernel/cgroup/cgroup.c:5881
 copy_process+0x263b/0x3c40 kernel/fork.c:2175
 _do_fork+0xfe/0x7a0 kernel/fork.c:2421
 __do_sys_clone kernel/fork.c:2576 [inline]
 __se_sys_clone kernel/fork.c:2557 [inline]
 __x64_sys_clone+0x130/0x170 kernel/fork.c:2557
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6929 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/03 01:01 https://github.com/google/ktsan.git kcsan 245a43005292 93e5e335 .config console log report ci2-upstream-kcsan-gce
2020/01/25 06:41 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/03 13:51 https://github.com/google/ktsan.git kcsan 245a43005292 9dcc1191 .config console log report ci2-upstream-kcsan-gce
2019/12/23 17:54 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/01 23:48 https://github.com/google/ktsan.git kcsan ef798c30ba4e f879db37 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.