KCSAN: data-race in internal_add_timer / timer_clear

KCSAN: data-race in internal_add_timer / timer_clear_idle
Status: moderation: reported on 2020/12/07 11:53
Reported-by: syzbot+b130e0d14518a7e0d5bf@syzkaller.appspotmail.com
First crash: 347d, last: 7h21m

Sample crash report:

sd 0:0:1:0: tag#3809 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15
sd 0:0:1:0: tag#3809 CDB[40]: e8 a6 3a 02 43 60 25 99 d5 ed b2 df 3f
==================================================================
BUG: KCSAN: data-race in internal_add_timer / timer_clear_idle

write to 0xffff888237c176e5 of 1 bytes by task 0 on cpu 0:
 timer_clear_idle+0x1e/0x30 kernel/time/timer.c:1702
 tick_nohz_idle_retain_tick+0x31/0x40 kernel/time/tick-sched.c:1093
 cpuidle_idle_call kernel/sched/idle.c:237 [inline]
 do_idle+0x1e8/0x250 kernel/sched/idle.c:306
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403
 rest_init+0xee/0x100 init/main.c:733
 arch_call_rest_init+0xa/0xb
 start_kernel+0x5e4/0x669 init/main.c:1141
 secondary_startup_64_no_verify+0xb1/0xbb

read to 0xffff888237c176e5 of 1 bytes by interrupt on cpu 1:
 trigger_dyntick_cpu kernel/time/timer.c:569 [inline]
 enqueue_timer kernel/time/timer.c:601 [inline]
 internal_add_timer+0x22d/0x280 kernel/time/timer.c:611
 add_timer_on+0x262/0x2a0 kernel/time/timer.c:1182
 clocksource_watchdog+0xa74/0xac0 kernel/time/clocksource.c:478
 call_timer_fn+0x2e/0x1d0 kernel/time/timer.c:1421
 expire_timers+0x135/0x240 kernel/time/timer.c:1466
 __run_timers+0x378/0x440 kernel/time/timer.c:1734
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1747
 __do_softirq+0x12c/0x26e kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu kernel/softirq.c:636 [inline]
 irq_exit_rcu+0x4e/0xa0 kernel/softirq.c:648
 sysvec_apic_timer_interrupt+0x69/0x80 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
 arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
 acpi_safe_halt drivers/acpi/processor_idle.c:109 [inline]
 acpi_idle_do_entry drivers/acpi/processor_idle.c:553 [inline]
 acpi_idle_enter+0x258/0x2e0 drivers/acpi/processor_idle.c:688
 cpuidle_enter_state+0x2b4/0x760 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x3c/0x60 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x1a3/0x250 kernel/sched/idle.c:306
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403
 secondary_startup_64_no_verify+0xb1/0xbb

value changed: 0x01 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 0 Comm: swapper/1 Tainted: G        W         5.15.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
sd 0:0:1:0: tag#3810 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#3810 CDB: opcode=0x75 (reserved)
sd 0:0:1:0: tag#3810 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47
sd 0:0:1:0: tag#3810 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2
sd 0:0:1:0: tag#3810 CDB[20]: f1 6a 60 e1 92 ae 2c b7 af bf 6e 22 e9 fd 0f e9
sd 0:0:1:0: tag#3810 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15
sd 0:0:1:0: tag#3810 CDB[40]: e8 a6 3a 02 43 60 25 99 d5 ed b2 df 3f
sd 0:0:1:0: tag#3826 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
sd 0:0:1:0: tag#3826 CDB: opcode=0x75 (reserved)
sd 0:0:1:0: tag#3826 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47
sd 0:0:1:0: tag#3826 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2
sd 0:0:1:0: tag#3826 CDB[20]: f1 6a 60 e1 92 ae 2c b7 af bf 6e 22 e9 fd 0f e9
sd 0:0:1:0: tag#3826 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15
sd 0:0:1:0: tag#3826 CDB[40]: e8 a6 3a 02 43 60 25 99 d5 ed b2 df 3f

Crashes (103):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/09/18 10:46	upstream	4357f03d6611	70b76c1d	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/17 15:32	upstream	bdb575f87217	70b76c1d	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/16 14:39	upstream	ff1ffd71d5f0	aae492f2	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/14 16:05	upstream	d0ee23f9d78b	07e953c1	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/12 22:55	upstream	78e709522d2c	3ce60af8	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/12 05:12	upstream	c605c39677b9	3ce60af8	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/10 20:22	upstream	bf9f243f23e6	5ae8508a	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/09/04 00:43	upstream	a9c9a6f741cd	d236a457	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/31 18:55	upstream	b91db6a0b52e	7eb7e152	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/31 07:42	upstream	8596e589b787	8f58a0ef	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/30 14:21	upstream	7d2a07b76933	8f58a0ef	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/30 09:29	upstream	537b57bd5a20	be2c130d	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/28 07:39	upstream	64b4fc45bea6	d5a29e53	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/27 19:52	upstream	1a6436f37512	57b01c6e	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/27 02:25	upstream	1a6d80ff2419	b318694d	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/26 07:36	upstream	fe67f4dd8daa	b599f2fc	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/23 14:47	upstream	e22ce8eb631b	b599f2fc	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/22 20:13	upstream	9ff50bf2f2ff	b599f2fc	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/21 06:56	upstream	fa54d366a6e4	b599f2fc	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/20 16:01	upstream	d992fe5318d8	b599f2fc	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/17 12:21	upstream	a2824f19e606	33c26cb7	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/15 22:16	upstream	ecf93431963a	2489ab88	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/14 02:08	upstream	dfa377c35d70	2489ab88	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/12 08:43	upstream	1746f4db5135	6972b106	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/09 10:42	upstream	36a21d51725a	6972b106	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/08 02:19	upstream	85a90500f9a1	6972b106	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/04 20:01	upstream	d5ad8ec3cfb5	b97d64c9	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/08/02 21:00	upstream	c500bee1c5b2	6c236867	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/31 13:12	upstream	c7d102232649	6c236867	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/30 07:37	upstream	764a5bc89b12	c585c7b0	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/29 20:24	upstream	7e96bf476270	8a799410	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/29 10:58	upstream	4010a528219e	b44001ce	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/29 03:32	upstream	4010a528219e	9a4781d4	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/25 06:27	upstream	7ffca2bb9d8b	4d1b57d4	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/20 19:25	upstream	8cae8cd89f05	1b201b48	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/19 05:54	upstream	f0eb870a8422	f115ae98	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/18 07:41	upstream	1d67c8d993ba	f115ae98	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/14 06:35	upstream	40226a3d96ef	484502bd	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/12 16:11	upstream	e73f0f0ee754	a4869c92	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/10 16:39	upstream	3dbdb38e2869	8f5a7b8c	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/09 13:56	upstream	3dbdb38e2869	281e815f	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/06 07:47	upstream	3dbdb38e2869	6c4484eb	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/02 14:23	upstream	3dbdb38e2869	658ebc66	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2021/07/01 19:00	upstream	dbe69e433722	658ebc66	.config	log	report	info	KCSAN: data-race in internal_add_timer / timer_clear_idle
ci2-upstream-kcsan-gce	2020/12/22 11:55	upstream	8653b778e454	04201c06	.config	log	report	info
ci2-upstream-kcsan-gce	2020/11/20 22:39	upstream	4d02da974ea8	68068804	.config	log	report	info
ci2-upstream-kcsan-gce	2020/10/06 09:53	upstream	7575fdda569b	1880b4a9	.config	log	report	info