syzbot


KCSAN: data-race in __acct_update_integrals / vm_stat_account (2)

Status: auto-closed as invalid on 2020/03/25 04:11
Subsystems: kernel
[Documentation on labels]
First crash: 1609d, last: 1562d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __acct_update_integrals / vm_stat_account kernel 1 1636d 1636d 0/26 closed as invalid on 2019/11/19 13:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __acct_update_integrals / vm_stat_account

read to 0xffff88809fcd9200 of 8 bytes by interrupt on cpu 1:
 __acct_update_integrals+0x1b1/0x1e0 kernel/tsacct.c:137
 acct_account_cputime+0x4e/0x60 kernel/tsacct.c:161
 account_system_index_time+0xa2/0xb0 kernel/sched/cputime.c:175
 irqtime_account_process_tick.isra.0+0x16a/0x1b0 kernel/sched/cputime.c:389
 account_process_tick+0x14e/0x190 kernel/sched/cputime.c:482
 update_process_times+0x29/0x80 kernel/time/timer.c:1724
 tick_sched_handle+0x75/0x100 kernel/time/tick-sched.c:167
 tick_sched_timer+0x58/0xe0 kernel/time/tick-sched.c:1310
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x274/0x5f0 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x22a/0x480 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0xdc/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 widen_string+0x2c/0x1a0 lib/vsprintf.c:580
 string_nocheck+0xe0/0x100 lib/vsprintf.c:615
 string+0x97/0xa0 lib/vsprintf.c:689
 vsnprintf+0x574/0xb40 lib/vsprintf.c:2574
 tomoyo_supervisor+0xc3/0xd20 security/tomoyo/common.c:2067
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x323/0x3c0 security/tomoyo/file.c:734
 tomoyo_file_ioctl+0x2c/0x40 security/tomoyo/tomoyo.c:335
 security_file_ioctl+0x6d/0xa0 security/security.c:1409
 ksys_ioctl+0x64/0xe0 fs/ioctl.c:747
 __do_sys_ioctl fs/ioctl.c:756 [inline]
 __se_sys_ioctl fs/ioctl.c:754 [inline]
 __x64_sys_ioctl+0x4c/0x60 fs/ioctl.c:754
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88809fcd9200 of 8 bytes by task 25155 on cpu 0:
 vm_stat_account+0x45/0x150 mm/mmap.c:3303
 mprotect_fixup+0x311/0x510 mm/mprotect.c:439
 do_mprotect_pkey+0x3eb/0x660 mm/mprotect.c:553
 __do_sys_mprotect mm/mprotect.c:578 [inline]
 __se_sys_mprotect mm/mprotect.c:575 [inline]
 __x64_sys_mprotect+0x51/0x70 mm/mprotect.c:575
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 25155 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/15 04:06 https://github.com/google/ktsan.git kcsan 245a43005292 fa12bd3c .config console log report ci2-upstream-kcsan-gce
2020/01/13 06:09 https://github.com/google/ktsan.git kcsan 245a43005292 53faa9fe .config console log report ci2-upstream-kcsan-gce
2019/12/29 11:58 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/10 05:35 https://github.com/google/ktsan.git kcsan ef798c30ba4e 4b83c8fb .config console log report ci2-upstream-kcsan-gce
2019/11/29 06:04 https://github.com/google/ktsan.git kcsan ef798c30ba4e 76357d6f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.