syzbot


KCSAN: data-race in do_nanosleep / prepare_signal

Status: auto-closed as invalid on 2020/06/05 14:22
Subsystems: kernel
[Documentation on labels]
First crash: 1619d, last: 1490d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_nanosleep / prepare_signal (3) kernel 7 1131d 1220d 0/26 auto-closed as invalid on 2021/04/25 23:25
upstream KCSAN: data-race in do_nanosleep / prepare_signal (4) kernel 3 1062d 1088d 0/26 auto-closed as invalid on 2021/07/03 09:44
upstream KCSAN: data-race in do_nanosleep / prepare_signal (2) kernel 10 1277d 1397d 0/26 auto-closed as invalid on 2020/11/30 23:30

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_nanosleep / prepare_signal

write to 0xffff8880a8ee3064 of 4 bytes by task 26211 on cpu 0:
 freezer_do_not_count include/linux/freezer.h:109 [inline]
 freezable_schedule include/linux/freezer.h:171 [inline]
 do_nanosleep+0x127/0x320 kernel/time/hrtimer.c:1874
 hrtimer_nanosleep+0x136/0x230 kernel/time/hrtimer.c:1927
 __do_sys_nanosleep kernel/time/hrtimer.c:1961 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1948 [inline]
 __x64_sys_nanosleep+0x14b/0x190 kernel/time/hrtimer.c:1948
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880a8ee3064 of 4 bytes by interrupt on cpu 1:
 sig_task_ignored kernel/signal.c:94 [inline]
 sig_ignored kernel/signal.c:119 [inline]
 prepare_signal+0x1f0/0x770 kernel/signal.c:956
 send_sigqueue+0xbb/0x500 kernel/signal.c:1859
 posix_timer_event kernel/time/posix-timers.c:353 [inline]
 posix_timer_fn+0x104/0x220 kernel/time/posix-timers.c:379
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1119 [inline]
 smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1144
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline]
 kcsan_setup_watchpoint+0x25a/0x440 kernel/kcsan/core.c:530
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:404 [inline]
 batadv_nc_worker+0x10f/0x340 net/batman-adv/network-coding.c:718
 process_one_work+0x424/0x930 kernel/workqueue.c:2264
 worker_thread+0x9a/0x7e0 kernel/workqueue.c:2410
 kthread+0x1cb/0x1f0 kernel/kthread.c:255
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 2623 Comm: kworker/u4:4 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/27 14:18 https://github.com/google/ktsan.git kcsan 40959e34d670 831e9a81 .config console log report ci2-upstream-kcsan-gce
2020/02/05 14:22 https://github.com/google/ktsan.git kcsan 245a43005292 662cf49a .config console log report ci2-upstream-kcsan-gce
2020/01/11 03:09 https://github.com/google/ktsan.git kcsan 245a43005292 4c04afaa .config console log report ci2-upstream-kcsan-gce
2019/12/23 10:47 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/22 11:33 https://github.com/google/ktsan.git kcsan 245a43005292 8b967267 .config console log report ci2-upstream-kcsan-gce
2019/12/19 18:07 https://github.com/google/ktsan.git kcsan 245a43005292 36650b4b .config console log report ci2-upstream-kcsan-gce
2019/12/11 00:14 https://github.com/google/ktsan.git kcsan ef798c30ba4e 101194eb .config console log report ci2-upstream-kcsan-gce
2019/12/01 20:44 https://github.com/google/ktsan.git kcsan ef798c30ba4e f879db37 .config console log report ci2-upstream-kcsan-gce
2019/11/19 10:14 https://github.com/google/ktsan.git kcsan 5863cc791e4c 432c7650 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.