syzbot


KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 (2)

Status: closed as invalid on 2019/10/18 14:11
Subsystems: kernel
[Documentation on labels]
First crash: 1645d, last: 1642d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 (3) kernel 599 1610d 1642d 0/26 closed as invalid on 2019/11/19 14:04
upstream KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 (4) kernel 394 1524d 1595d 15/26 fixed on 2020/02/18 14:31
upstream KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 kernel 133 1645d 1656d 0/26 closed as invalid on 2019/10/15 15:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64

write to 0xffffffff86042008 of 8 bytes by interrupt on cpu 0:
 tick_do_update_jiffies64+0x105/0x260 kernel/time/tick-sched.c:73
 tick_sched_do_timer+0xd4/0xe0 kernel/time/tick-sched.c:138
 tick_sched_timer+0x43/0xe0 kernel/time/tick-sched.c:1292
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x288/0x600 kernel/time/hrtimer.c:1576
 hrtimer_interrupt+0x22a/0x480 kernel/time/hrtimer.c:1638
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0xdc/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830

read to 0xffffffff86042008 of 8 bytes by interrupt on cpu 1:
 tick_do_update_jiffies64+0x2b/0x260 kernel/time/tick-sched.c:62
 tick_sched_do_timer+0xd4/0xe0 kernel/time/tick-sched.c:138
 tick_sched_timer+0x43/0xe0 kernel/time/tick-sched.c:1292
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x288/0x600 kernel/time/hrtimer.c:1576
 hrtimer_interrupt+0x22a/0x480 kernel/time/hrtimer.c:1638
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0xdc/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 7170 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 7170 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xf5/0x159 lib/dump_stack.c:113
 panic+0x210/0x640 kernel/panic.c:221
 kcsan_report.cold+0xc/0x10 kernel/kcsan/report.c:302
 __kcsan_setup_watchpoint+0x32e/0x4a0 kernel/kcsan/core.c:411
 __tsan_read8 kernel/kcsan/kcsan.c:36 [inline]
 __tsan_read8+0x2c/0x30 kernel/kcsan/kcsan.c:36
 tick_do_update_jiffies64+0x2b/0x260 kernel/time/tick-sched.c:62
 tick_sched_do_timer+0xd4/0xe0 kernel/time/tick-sched.c:138
 tick_sched_timer+0x43/0xe0 kernel/time/tick-sched.c:1292
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x288/0x600 kernel/time/hrtimer.c:1576
 hrtimer_interrupt+0x22a/0x480 kernel/time/hrtimer.c:1638
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0xdc/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 </IRQ>
RIP: 0033:0x41d474
Code: 0f 83 51 01 00 00 48 85 ff 0f 84 40 01 00 00 41 83 fa 03 0f 83 2b 01 00 00 45 8d 42 01 44 0f b6 0b 49 89 ca 44 89 c1 41 d3 e9 <48> 83 ff 08 74 0b 41 0f ba e1 04 0f 83 db 00 00 00 41 0f ba e1 00
RSP: 002b:000000c42014de90 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13
RAX: 000000c420000000 RBX: 000000c41ffe881a RCX: 0000000000000001
RDX: 000000c420600000 RSI: 000000c4202efc80 RDI: 0000000000000028
RBP: 000000c42014df28 R08: 0000000000000001 R09: 000000000000003a
R10: 0000000000000040 R11: 000000c4202efd00 R12: 000000c42056a000
R13: 0000000000000022 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (46):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/18 10:48 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/18 07:19 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/18 02:42 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/18 01:14 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/18 00:13 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 23:33 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 21:44 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 21:00 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 19:05 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 18:10 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 12:29 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 09:45 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 09:21 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 07:26 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 07:07 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 07:03 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 06:43 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 05:53 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 05:52 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 05:25 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 03:52 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 03:13 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 23:39 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 23:34 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 21:24 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 20:58 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 20:39 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 19:54 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 19:24 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 18:39 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 16:09 https://github.com/google/ktsan.git kcsan a6311db074d9 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 16:06 https://github.com/google/ktsan.git kcsan a6311db074d9 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 14:54 https://github.com/google/ktsan.git kcsan a6311db074d9 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 12:52 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 11:29 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 10:22 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 05:05 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/16 00:17 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/15 23:50 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/15 22:25 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 21:42 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 17:21 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 16:43 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 16:24 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.