syzbot


KCSAN: data-race in do_nanosleep / prepare_signal (4)

Status: auto-closed as invalid on 2021/07/03 09:44
Subsystems: kernel
[Documentation on labels]
First crash: 1087d, last: 1061d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_nanosleep / prepare_signal (3) kernel 7 1130d 1219d 0/26 auto-closed as invalid on 2021/04/25 23:25
upstream KCSAN: data-race in do_nanosleep / prepare_signal kernel 9 1489d 1618d 0/26 auto-closed as invalid on 2020/06/05 14:22
upstream KCSAN: data-race in do_nanosleep / prepare_signal (2) kernel 10 1276d 1396d 0/26 auto-closed as invalid on 2020/11/30 23:30

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_nanosleep / prepare_signal

write to 0xffff8881339a40ac of 4 bytes by task 6907 on cpu 0:
 freezer_count include/linux/freezer.h:121 [inline]
 freezable_schedule include/linux/freezer.h:173 [inline]
 do_nanosleep+0x121/0x3d0 kernel/time/hrtimer.c:1896
 hrtimer_nanosleep_restart+0x57/0x80 kernel/time/hrtimer.c:1930
 __do_sys_restart_syscall+0x2d/0x40 kernel/signal.c:2975
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881339a40ac of 4 bytes by interrupt on cpu 1:
 sig_task_ignored kernel/signal.c:93 [inline]
 sig_ignored kernel/signal.c:118 [inline]
 prepare_signal+0x952/0xeb0 kernel/signal.c:1001
 send_sigqueue+0xea/0x3e0 kernel/signal.c:1913
 posix_timer_event kernel/time/posix-timers.c:354 [inline]
 posix_timer_fn+0xe8/0x210 kernel/time/posix-timers.c:380
 __run_hrtimer+0x160/0x480 kernel/time/hrtimer.c:1537
 __hrtimer_run_queues kernel/time/hrtimer.c:1601 [inline]
 hrtimer_interrupt+0x380/0xaf0 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x6f/0x1c0 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x64/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
 _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:192
 unlock_hrtimer_base kernel/time/hrtimer.c:915 [inline]
 hrtimer_start_range_ns+0x11e/0x140 kernel/time/hrtimer.c:1153
 hrtimer_start_expires include/linux/hrtimer.h:436 [inline]
 hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1817 [inline]
 do_nanosleep+0xd2/0x3d0 kernel/time/hrtimer.c:1893
 hrtimer_nanosleep_restart+0x57/0x80 kernel/time/hrtimer.c:1930
 __do_sys_restart_syscall+0x2d/0x40 kernel/signal.c:2975
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x40404040 -> 0x00404040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6936 Comm: syz-executor.0 Tainted: G        W         5.13.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/05/29 09:43 upstream 6799d4f2da49 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/05/17 21:40 upstream d07f6ca923ea a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
2021/05/03 19:00 upstream 6f8ee8d36d07 ad61f371 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in do_nanosleep / prepare_signal
* Struck through repros no longer work on HEAD.