syzbot


KCSAN: data-race in get_task_mm / ns_capable_common (2)

Status: auto-closed as invalid on 2020/03/28 05:19
Subsystems: kernel
[Documentation on labels]
First crash: 1592d, last: 1552d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in get_task_mm / ns_capable_common kernel 2 1620d 1636d 0/26 closed as invalid on 2019/11/19 14:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in get_task_mm / ns_capable_common

read to 0xffff88809f440064 of 4 bytes by task 10970 on cpu 1:
 get_task_mm+0x4f/0xa0 kernel/fork.c:1212
 get_task_cmdline fs/proc/base.c:346 [inline]
 proc_pid_cmdline_read+0x9d/0x6d0 fs/proc/base.c:366
 __vfs_read+0x67/0xc0 fs/read_write.c:425
 vfs_read fs/read_write.c:461 [inline]
 vfs_read+0x143/0x2c0 fs/read_write.c:446
 ksys_read+0xd5/0x1b0 fs/read_write.c:587
 __do_sys_read fs/read_write.c:597 [inline]
 __se_sys_read fs/read_write.c:595 [inline]
 __x64_sys_read+0x4c/0x60 fs/read_write.c:595
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88809f440064 of 4 bytes by task 8031 on cpu 0:
 ns_capable_common+0x9f/0xc0 kernel/capability.c:377
 ns_capable+0x29/0x40 kernel/capability.c:396
 do_ebt_get_ctl+0x61/0x440 net/bridge/netfilter/ebtables.c:1487
 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline]
 nf_getsockopt+0x71/0xb0 net/netfilter/nf_sockopt.c:122
 ip_getsockopt net/ipv4/ip_sockglue.c:1576 [inline]
 ip_getsockopt+0x118/0x160 net/ipv4/ip_sockglue.c:1556
 tcp_getsockopt net/ipv4/tcp.c:3692 [inline]
 tcp_getsockopt+0x7c/0xc0 net/ipv4/tcp.c:3686
 sock_common_getsockopt+0x67/0x90 net/core/sock.c:3108
 __sys_getsockopt+0xf1/0x210 net/socket.c:2162
 __do_sys_getsockopt net/socket.c:2177 [inline]
 __se_sys_getsockopt net/socket.c:2174 [inline]
 __x64_sys_getsockopt+0x70/0x90 net/socket.c:2174
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8031 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/18 05:18 https://github.com/google/ktsan.git kcsan 245a43005292 3de7aabb .config console log report ci2-upstream-kcsan-gce
2020/01/08 05:57 https://github.com/google/ktsan.git kcsan 245a43005292 6738e0b3 .config console log report ci2-upstream-kcsan-gce
2019/12/09 06:51 https://github.com/google/ktsan.git kcsan ef798c30ba4e 1508f453 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.