syzbot


KCSAN: data-race in free_pid / zap_pid_ns_processes (2)

Status: auto-closed as invalid on 2021/03/08 05:19
Subsystems: kernel
[Documentation on labels]
First crash: 1191d, last: 1177d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (4) kernel 2 1044d 1057d 0/26 auto-closed as invalid on 2021/07/19 14:02
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (5) kernel 1 13d 13d 0/26 upstream: reported on 2024/04/10 08:30
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (3) kernel 2 1104d 1120d 0/26 auto-closed as invalid on 2021/05/20 16:55
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes kernel 12 1536d 1641d 0/26 auto-closed as invalid on 2020/04/18 12:14

Sample crash report:
==================================================================
BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes

write to 0xffff88800f27a710 of 4 bytes by task 12791 on cpu 0:
 free_pid+0x79/0x190 kernel/pid.c:136
 __change_pid kernel/pid.c:353 [inline]
 detach_pid+0x147/0x160 kernel/pid.c:358
 __unhash_process kernel/exit.c:77 [inline]
 __exit_signal kernel/exit.c:148 [inline]
 release_task+0x6f0/0xb90 kernel/exit.c:199
 exit_notify kernel/exit.c:699 [inline]
 do_exit+0xf11/0x1690 kernel/exit.c:845
 do_group_exit+0xce/0x180 kernel/exit.c:922
 get_signal+0xdce/0x14e0 kernel/signal.c:2773
 arch_do_signal_or_restart+0x2a/0x270 arch/x86/kernel/signal.c:811
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x11a/0x1b0 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88800f27a710 of 4 bytes by task 8458 on cpu 1:
 zap_pid_ns_processes+0x236/0x350 kernel/pid_namespace.c:244
 find_child_reaper kernel/exit.c:542 [inline]
 forget_original_parent kernel/exit.c:631 [inline]
 exit_notify kernel/exit.c:668 [inline]
 do_exit+0x13f4/0x1690 kernel/exit.c:845
 do_group_exit+0xa4/0x180 kernel/exit.c:922
 __do_sys_exit_group+0xb/0x10 kernel/exit.c:933
 __se_sys_exit_group+0x5/0x10 kernel/exit.c:931
 __x64_sys_exit_group+0x16/0x20 kernel/exit.c:931
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8458 Comm: syz-executor.3 Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/01 05:19 upstream 1048ba83fb1c fc9fd31e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in free_pid / zap_pid_ns_processes
2021/01/18 06:41 upstream 19c329f68089 fd103621 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in free_pid / zap_pid_ns_processes
* Struck through repros no longer work on HEAD.