syzbot


KCSAN: data-race in do_nanosleep / prepare_signal (3)

Status: auto-closed as invalid on 2021/04/25 23:25
Subsystems: kernel
[Documentation on labels]
First crash: 1219d, last: 1130d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_nanosleep / prepare_signal (4) kernel 3 1061d 1087d 0/26 auto-closed as invalid on 2021/07/03 09:44
upstream KCSAN: data-race in do_nanosleep / prepare_signal kernel 9 1489d 1618d 0/26 auto-closed as invalid on 2020/06/05 14:22
upstream KCSAN: data-race in do_nanosleep / prepare_signal (2) kernel 10 1276d 1396d 0/26 auto-closed as invalid on 2020/11/30 23:30

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_nanosleep / prepare_signal

write to 0xffff88801214402c of 4 bytes by task 5316 on cpu 0:
 freezer_do_not_count include/linux/freezer.h:109 [inline]
 freezable_schedule include/linux/freezer.h:171 [inline]
 do_nanosleep+0xff/0x3d0 kernel/time/hrtimer.c:1896
 hrtimer_nanosleep+0xfa/0x1f0 kernel/time/hrtimer.c:1949
 common_nsleep+0x69/0x80 kernel/time/posix-timers.c:1227
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
 __se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline]
 __x64_sys_clock_nanosleep+0x1ee/0x220 kernel/time/posix-timers.c:1245
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88801214402c of 4 bytes by interrupt on cpu 1:
 sig_task_ignored kernel/signal.c:94 [inline]
 sig_ignored kernel/signal.c:119 [inline]
 prepare_signal+0x891/0xdb0 kernel/signal.c:962
 send_sigqueue+0xea/0x430 kernel/signal.c:1861
 posix_timer_event kernel/time/posix-timers.c:354 [inline]
 posix_timer_fn+0xe8/0x210 kernel/time/posix-timers.c:380
 __run_hrtimer+0x163/0x460 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x380/0xaf0 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x6f/0x200 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x32/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
 _raw_spin_unlock_irq+0x2c/0x40 kernel/locking/spinlock.c:199
 expire_timers+0x107/0x260 kernel/time/timer.c:1475
 __run_timers+0x358/0x3f0 kernel/time/timer.c:1745
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1758
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:422
 sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
 tomoyo_domain_quota_is_ok+0x7d/0x2f0 security/tomoyo/util.c:1059
 tomoyo_supervisor+0x1f4/0xb40 security/tomoyo/common.c:2089
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_perm+0x261/0x330 security/tomoyo/file.c:838
 tomoyo_path_rmdir+0x43/0x60 security/tomoyo/tomoyo.c:183
 security_path_rmdir+0x82/0xd0 security/security.c:1103
 do_rmdir+0x12d/0x310 fs/namei.c:3958
 __do_sys_rmdir fs/namei.c:3980 [inline]
 __se_sys_rmdir fs/namei.c:3978 [inline]
 __x64_sys_rmdir+0x2c/0x30 fs/namei.c:3978
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 4593 Comm: syz-executor.2 Not tainted 5.12.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/03/21 23:21 upstream 5ee96fa9dd78 4c9a64da .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/03/09 01:32 upstream 144c79ef3353 09fbf400 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/02/22 00:26 upstream 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/02/15 15:08 upstream f40ddce88593 98682e5e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/02/04 19:38 upstream 61556703b610 42b90a7c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/01/05 11:10 upstream 36bbbd0e234d a0234d98 .config console log report info ci2-upstream-kcsan-gce
2020/12/23 00:33 upstream 614cb5894306 04201c06 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.