syzbot

 sign-in | mailing list | source | docs
🐞 Open [1646]
≡ Subsystems
🐞 Fixed [6009]
🐞 Invalid [14804]
⬇ Missing Backports [135]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KCSAN: data-race in del_timer / enqueue_timer

Status: auto-closed as invalid on 2020/04/17 06:04
Subsystems: net
[Documentation on labels]
First crash: 1917d, last: 1817d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in del_timer / enqueue_timer

read to 0xffffffff85e130a8 of 8 bytes by task 7995 on cpu 0:
 del_timer+0x3b/0xb0 kernel/time/timer.c:1198
 try_to_grab_pending+0x22d/0x3e0 kernel/workqueue.c:1246
 __cancel_work kernel/workqueue.c:3216 [inline]
 cancel_delayed_work+0x45/0x1c0 kernel/workqueue.c:3245
 __inet_insert_ifa+0x4a1/0x650 net/ipv4/devinet.c:545
 inet_rtm_newaddr+0x8a5/0xaa0 net/ipv4/devinet.c:951
 rtnetlink_rcv_msg+0x1d3/0x500 net/core/rtnetlink.c:5424
 netlink_rcv_skb+0xb0/0x260 net/netlink/af_netlink.c:2477
 rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:5442
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x3a6/0x4d0 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x4d3/0x8b0 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:639 [inline]
 sock_sendmsg+0x9f/0xc0 net/socket.c:659
 __sys_sendto+0x21f/0x320 net/socket.c:1985
 __do_sys_sendto net/socket.c:1997 [inline]
 __se_sys_sendto net/socket.c:1993 [inline]
 __x64_sys_sendto+0x89/0xb0 net/socket.c:1993
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffffffff85e130a8 of 8 bytes by task 7989 on cpu 1:
 hlist_add_head include/linux/list.h:789 [inline]
 enqueue_timer+0x9c/0x210 kernel/time/timer.c:540
 __internal_add_timer+0x4f/0x60 kernel/time/timer.c:553
 internal_add_timer kernel/time/timer.c:595 [inline]
 __mod_timer kernel/time/timer.c:1053 [inline]
 mod_timer kernel/time/timer.c:1100 [inline]
 add_timer+0x250/0x550 kernel/time/timer.c:1136
 __queue_delayed_work+0x13b/0x1d0 kernel/workqueue.c:1644
 queue_delayed_work_on+0xf3/0x110 kernel/workqueue.c:1669
 queue_delayed_work include/linux/workqueue.h:509 [inline]
 check_lifetime+0x325/0x5a0 net/ipv4/devinet.c:788
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2264
 worker_thread+0xa0/0x800 kernel/workqueue.c:2410
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 7989 Comm: kworker/1:3 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_power_efficient check_lifetime
==================================================================

Crashes (23):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/07 05:56 https://github.com/google/ktsan.git kcsan 245a43005292 06150bf1 .config console log report ci2-upstream-kcsan-gce
2020/02/06 06:43 https://github.com/google/ktsan.git kcsan 245a43005292 662cf49a .config console log report ci2-upstream-kcsan-gce
2020/02/01 23:10 https://github.com/google/ktsan.git kcsan 245a43005292 2274ad39 .config console log report ci2-upstream-kcsan-gce
2020/02/01 18:55 https://github.com/google/ktsan.git kcsan 245a43005292 326d4c78 .config console log report ci2-upstream-kcsan-gce
2020/01/24 07:54 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/22 21:06 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/21 12:06 https://github.com/google/ktsan.git kcsan 245a43005292 8eda0b95 .config console log report ci2-upstream-kcsan-gce
2020/01/15 17:58 https://github.com/google/ktsan.git kcsan 245a43005292 f9b69507 .config console log report ci2-upstream-kcsan-gce
2020/01/13 19:54 https://github.com/google/ktsan.git kcsan 245a43005292 99565c1a .config console log report ci2-upstream-kcsan-gce
2020/01/12 16:05 https://github.com/google/ktsan.git kcsan 245a43005292 31290a45 .config console log report ci2-upstream-kcsan-gce
2020/01/09 23:14 https://github.com/google/ktsan.git kcsan 245a43005292 4de4e9f0 .config console log report ci2-upstream-kcsan-gce
2020/01/06 03:10 https://github.com/google/ktsan.git kcsan 245a43005292 438e1227 .config console log report ci2-upstream-kcsan-gce
2020/01/04 04:07 https://github.com/google/ktsan.git kcsan 245a43005292 68256974 .config console log report ci2-upstream-kcsan-gce
2019/12/30 18:12 https://github.com/google/ktsan.git kcsan 245a43005292 6b36d338 .config console log report ci2-upstream-kcsan-gce
2019/12/28 18:08 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/17 07:04 https://github.com/google/ktsan.git kcsan 245a43005292 d13d7958 .config console log report ci2-upstream-kcsan-gce
2019/12/13 09:16 https://github.com/google/ktsan.git kcsan 245a43005292 2a752b7c .config console log report ci2-upstream-kcsan-gce
2019/12/03 23:46 https://github.com/google/ktsan.git kcsan ef798c30ba4e 0ecb9746 .config console log report ci2-upstream-kcsan-gce
2019/12/03 16:58 https://github.com/google/ktsan.git kcsan ef798c30ba4e ab342da3 .config console log report ci2-upstream-kcsan-gce
2019/11/21 17:34 https://github.com/google/ktsan.git kcsan 5863cc791e4c 8098ea0f .config console log report ci2-upstream-kcsan-gce
2019/11/15 17:54 https://github.com/google/ktsan.git kcsan 5863cc791e4c 79248ee8 .config console log report ci2-upstream-kcsan-gce
2019/11/12 23:19 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
2019/10/30 22:45 https://github.com/google/ktsan.git kcsan 05f2236801fe a41ca8fa .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.