syzbot


KCSAN: data-race in wq_watchdog_reset_touched / wq_watchdog_touch (2)

Status: auto-closed as invalid on 2020/02/17 08:06
Subsystems: kernel
[Documentation on labels]
First crash: 1611d, last: 1611d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in wq_watchdog_reset_touched / wq_watchdog_touch kasan 3 1641d 1657d 0/26 closed as invalid on 2019/11/19 14:44

Sample crash report:
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave bond_slave[ 3152.108968][ T5180] ==================================================================
BUG: KCSAN: data-race in wq_watchdog_reset_touched / wq_watchdog_touch

write to 0xffff88812bf172c8 of 8 bytes by interrupt on cpu 0:
 wq_watchdog_reset_touched+0x8c/0xe0 kernel/workqueue.c:5699
 wq_watchdog_timer_fn+0x270/0x2b0 kernel/workqueue.c:5752
 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xc7a/0xcd0 kernel/time/timer.c:1788
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60
 arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:571
 default_idle_call+0x1e/0x40 kernel/sched/idle.c:94
 cpuidle_idle_call kernel/sched/idle.c:154 [inline]
 do_idle+0x1af/0x280 kernel/sched/idle.c:263
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:355
 rest_init+0xec/0xf6 init/main.c:452
 arch_call_rest_init+0x17/0x37
 start_kernel+0x838/0x85e init/main.c:786
 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:490
 x86_64_start_kernel+0x72/0x76 arch/x86/kernel/head64.c:471
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241

write to 0xffff88812bf172c8 of 8 bytes by task 5180 on cpu 1:
 wq_watchdog_touch+0x61/0xae kernel/workqueue.c:5759
 touch_softlockup_watchdog+0x2a/0x40 kernel/watchdog.c:283
 touch_nmi_watchdog include/linux/nmi.h:135 [inline]
 wait_for_xmitr+0x6f/0x1b0 drivers/tty/serial/8250/8250_port.c:1978
 serial8250_console_putchar+0x28/0x50 drivers/tty/serial/8250/8250_port.c:3110
 uart_console_write+0x9b/0xd0 drivers/tty/serial/serial_core.c:1928
 serial8250_console_write+0x3a0/0x500 drivers/tty/serial/8250/8250_port.c:3174
 univ8250_console_write+0x47/0x60 drivers/tty/serial/8250/8250_core.c:587
 call_console_drivers kernel/printk/printk.c:1791 [inline]
 console_unlock+0x935/0xb80 kernel/printk/printk.c:2473
 vprintk_emit+0x38f/0x4e0 kernel/printk/printk.c:1996
 vprintk_default+0x31/0x50 kernel/printk/printk.c:2023
 vprintk_func+0x85/0x140 kernel/printk/printk_safe.c:386
 printk+0x69/0x91 kernel/printk/printk.c:2056
 __netdev_printk+0x19f/0x1d1 net/core/dev.c:9991
 netdev_info+0x90/0xb3 net/core/dev.c:10038
 __bond_release_one+0x312/0x3d0 drivers/net/bonding/bond_main.c:1915
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3122 [inline]
 bond_netdev_event+0x4da/0x510 drivers/net/bonding/bond_main.c:3233
 notifier_call_chain+0xd7/0x160 kernel/notifier.c:95
 __raw_notifier_call_chain kernel/notifier.c:396 [inline]
 raw_notifier_call_chain+0x37/0x50 kernel/notifier.c:403
 call_netdevice_notifiers_info+0x48/0xc0 net/core/dev.c:1668
 call_netdevice_notifiers_extack net/core/dev.c:1680 [inline]
 call_netdevice_notifiers net/core/dev.c:1694 [inline]
 rollback_registered_many+0x723/0xa00 net/core/dev.c:8522
 unregister_netdevice_many net/core/dev.c:9675 [inline]
 unregister_netdevice_many+0x62/0x240 net/core/dev.c:9670
 default_device_exit_batch+0x234/0x270 net/core/dev.c:10146
 ops_exit_list.isra.0+0xa2/0xc0 net/core/net_namespace.c:175
 cleanup_net+0x405/0x6b0 net/core/net_namespace.c:597
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2269
 worker_thread+0xa0/0x800 kernel/workqueue.c:2415
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 5180 Comm: kworker/u4:4 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/09 08:00 https://github.com/google/ktsan.git kcsan ef798c30ba4e 1508f453 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.