syzbot


KCSAN: data-race in mq_clear_sbinfo / test_keyed_super (3)

Status: auto-closed as invalid on 2022/03/24 15:37
Subsystems: kernel
[Documentation on labels]
First crash: 821d, last: 798d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in mq_clear_sbinfo / test_keyed_super kernel 1 1098d 1095d 0/26 auto-closed as invalid on 2021/05/28 16:41
upstream KCSAN: data-race in mq_clear_sbinfo / test_keyed_super (2) kernel 1 906d 906d 0/26 auto-closed as invalid on 2021/12/06 18:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mq_clear_sbinfo / test_keyed_super

write to 0xffff88811a5c8370 of 8 bytes by task 14759 on cpu 0:
 mq_clear_sbinfo+0x35/0x50 ipc/mqueue.c:1698
 put_ipc_ns+0x28/0x90 ipc/namespace.c:168
 free_nsproxy+0xb8/0x310 kernel/nsproxy.c:195
 put_nsproxy include/linux/nsproxy.h:105 [inline]
 switch_task_namespaces+0x8d/0xa0 kernel/nsproxy.c:249
 ksys_unshare+0x527/0x6f0 kernel/fork.c:3073
 __do_sys_unshare kernel/fork.c:3119 [inline]
 __se_sys_unshare kernel/fork.c:3117 [inline]
 __x64_sys_unshare+0x1b/0x20 kernel/fork.c:3117
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88811a5c8370 of 8 bytes by task 14768 on cpu 1:
 test_keyed_super+0x1a/0x40 fs/super.c:1077
 sget_fc+0xe8/0x450 fs/super.c:524
 vfs_get_super fs/super.c:1134 [inline]
 get_tree_keyed+0x3f/0x120 fs/super.c:1195
 mqueue_get_tree+0x32/0x40 ipc/mqueue.c:430
 vfs_get_tree+0x4a/0x1a0 fs/super.c:1497
 fc_mount+0x12/0x60 fs/namespace.c:1000
 mq_create_mount ipc/mqueue.c:473 [inline]
 mq_init_ns+0x26d/0x310 ipc/mqueue.c:1689
 create_ipc_ns ipc/namespace.c:58 [inline]
 copy_ipcs+0x211/0x360 ipc/namespace.c:84
 create_new_namespaces+0x137/0x560 kernel/nsproxy.c:90
 unshare_nsproxy_namespaces+0xe2/0x120 kernel/nsproxy.c:226
 ksys_unshare+0x376/0x6f0 kernel/fork.c:3048
 __do_sys_unshare kernel/fork.c:3119 [inline]
 __se_sys_unshare kernel/fork.c:3117 [inline]
 __x64_sys_unshare+0x1b/0x20 kernel/fork.c:3117
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff8881178ef400 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 14768 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-00054-gf71077a4d84b-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/02/17 15:33 upstream f71077a4d84b 2bea8a27 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mq_clear_sbinfo / test_keyed_super
2022/01/26 04:11 upstream 49d766f3a0e4 2cbffd88 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mq_clear_sbinfo / test_keyed_super
* Struck through repros no longer work on HEAD.