syzbot


KCSAN: data-race in ktime_get_ts64 / timekeeping_advance (2)

Status: closed as invalid on 2020/06/18 14:24
Subsystems: kernel
[Documentation on labels]
First crash: 1847d, last: 1690d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ktime_get_ts64 / timekeeping_advance kernel 3 1905d 1917d 0/28 closed as invalid on 2019/11/19 14:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ktime_get_ts64 / timekeeping_advance

write to 0xffffffff88ae90c8 of 280 bytes by interrupt on cpu 0:
 timekeeping_advance+0x88e/0xd80 include/linux/string.h:381
 update_wall_time+0x15/0x20 kernel/time/timekeeping.c:2136
 tick_do_update_jiffies64+0x1e5/0x2a0 kernel/time/tick-sched.c:101
 tick_sched_do_timer+0xc7/0xd0 kernel/time/tick-sched.c:147
 tick_sched_timer+0x3f/0xd0 kernel/time/tick-sched.c:1313
 __run_hrtimer kernel/time/hrtimer.c:1520 [inline]
 __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584
 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline]
 smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:759 [inline]
 kcsan_setup_watchpoint+0x25a/0x440 kernel/kcsan/core.c:542
 tomoyo_check_acl+0x1aa/0x280 security/tomoyo/domain.c:171
 tomoyo_path2_perm+0x38e/0x470 security/tomoyo/file.c:942
 tomoyo_path_rename+0x97/0xd0 security/tomoyo/tomoyo.c:285
 security_path_rename+0x17d/0x1e0 security/security.c:1130
 do_renameat2+0x6d5/0xa50 fs/namei.c:4433
 __do_sys_rename fs/namei.c:4483 [inline]
 __se_sys_rename fs/namei.c:4481 [inline]
 __x64_sys_rename+0x44/0x60 fs/namei.c:4481
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffffff88ae90e8 of 8 bytes by task 15647 on cpu 1:
 timekeeping_delta_to_ns kernel/time/timekeeping.c:363 [inline]
 timekeeping_get_ns kernel/time/timekeeping.c:375 [inline]
 ktime_get_ts64+0x12c/0x2c0 kernel/time/timekeeping.c:892
 posix_get_monotonic_timespec+0x45/0x110 kernel/time/posix-timers.c:199
 __do_sys_clock_gettime kernel/time/posix-timers.c:1092 [inline]
 __se_sys_clock_gettime kernel/time/posix-timers.c:1082 [inline]
 __x64_sys_clock_gettime+0xae/0x160 kernel/time/posix-timers.c:1082
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 15647 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/12 10:25 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 819b58b0 .config console log report ci2-upstream-kcsan-gce
2020/06/09 12:23 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 092934c1 .config console log report ci2-upstream-kcsan-gce
2020/04/21 00:42 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 98a9f9e6 .config console log report ci2-upstream-kcsan-gce
2020/04/17 10:22 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 18397578 .config console log report ci2-upstream-kcsan-gce
2020/03/09 10:19 https://github.com/google/ktsan.git kcsan 941e0d917bbf 2e9971bb .config console log report ci2-upstream-kcsan-gce
2020/03/04 11:32 https://github.com/google/ktsan.git kcsan 766d004d1b85 712198ac .config console log report ci2-upstream-kcsan-gce
2020/02/29 05:35 https://github.com/google/ktsan.git kcsan 766d004d1b85 c88c7b75 .config console log report ci2-upstream-kcsan-gce
2020/02/14 03:45 https://github.com/google/ktsan.git kcsan b12d66a6c34f 5d7b90f1 .config console log report ci2-upstream-kcsan-gce
2020/01/15 18:41 https://github.com/google/ktsan.git kcsan 245a43005292 f9b69507 .config console log report ci2-upstream-kcsan-gce
2020/01/07 23:45 https://github.com/google/ktsan.git kcsan 245a43005292 6738e0b3 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.