syzbot


KCSAN: data-race in tick_nohz_idle_stop_tick / tick_sched_do_timer (2)

Status: closed as invalid on 2019/11/19 14:04
Subsystems: kernel
[Documentation on labels]
First crash: 1649d, last: 1628d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tick_nohz_idle_stop_tick / tick_sched_do_timer kernel 8 1654d 1660d 0/26 closed as invalid on 2019/10/18 14:11
upstream KCSAN: data-race in tick_nohz_idle_stop_tick / tick_sched_do_timer (3) kernel 53 1409d 1409d 0/26 auto-closed as invalid on 2020/07/20 08:09

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tick_nohz_idle_stop_tick / tick_sched_do_timer

write to 0xffffffff85cb26d0 of 4 bytes by task 0 on cpu 0:
 tick_nohz_stop_tick kernel/time/tick-sched.c:760 [inline]
 __tick_nohz_idle_stop_tick kernel/time/tick-sched.c:952 [inline]
 tick_nohz_idle_stop_tick+0x525/0x670 kernel/time/tick-sched.c:973
 cpuidle_idle_call kernel/sched/idle.c:151 [inline]
 do_idle+0x1a5/0x280 kernel/sched/idle.c:263
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:355
 rest_init+0xec/0xf6 init/main.c:452
 arch_call_rest_init+0x17/0x37
 start_kernel+0x838/0x85e init/main.c:786
 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:490
 x86_64_start_kernel+0x72/0x76 arch/x86/kernel/head64.c:471
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241

read to 0xffffffff85cb26d0 of 4 bytes by interrupt on cpu 1:
 tick_sched_do_timer+0x33/0xe0 kernel/time/tick-sched.c:128
 tick_sched_timer+0x43/0xe0 kernel/time/tick-sched.c:1292
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x274/0x5f0 kernel/time/hrtimer.c:1576
 hrtimer_interrupt+0x22a/0x480 kernel/time/hrtimer.c:1638
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0xdc/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:756 [inline]
 kcsan_setup_watchpoint+0x205/0x410 kernel/kcsan/core.c:369
 check_access kernel/kcsan/core.c:409 [inline]
 __tsan_unaligned_write1+0x13d/0x1e0 kernel/kcsan/core.c:527
 kallsyms_expand_symbol.constprop.0+0xe8/0x160 kernel/kallsyms.c:87
 kallsyms_lookup_name+0x7f/0x120 kernel/kallsyms.c:170
 insert_report_filterlist kernel/kcsan/debugfs.c:155 [inline]
 debugfs_write+0x14b/0x2d0 kernel/kcsan/debugfs.c:256
 full_proxy_write+0xbd/0x100 fs/debugfs/file.c:225
 __vfs_write+0x67/0xc0 fs/read_write.c:494
 vfs_write fs/read_write.c:558 [inline]
 vfs_write+0x18a/0x390 fs/read_write.c:542
 ksys_write+0xd5/0x1b0 fs/read_write.c:611
 __do_sys_write fs/read_write.c:623 [inline]
 __se_sys_write fs/read_write.c:620 [inline]
 __x64_sys_write+0x4c/0x60 fs/read_write.c:620
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8036 Comm: syz-executor Not tainted 5.4.0-rc6+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/09 01:41 https://github.com/google/ktsan.git kcsan 94c006602e13 1e35461e .config console log report ci2-upstream-kcsan-gce
2019/11/07 15:08 https://github.com/google/ktsan.git kcsan 94c006602e13 d5bc6812 .config console log report ci2-upstream-kcsan-gce
2019/10/30 09:38 https://github.com/google/ktsan.git kcsan 05f2236801fe 5ea87a66 .config console log report ci2-upstream-kcsan-gce
2019/10/23 14:21 https://github.com/google/ktsan.git kcsan 05f2236801fe b602d64b .config console log report ci2-upstream-kcsan-gce
2019/10/18 17:57 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.