syzbot


KCSAN: data-race in complete_signal / do_nanosleep (2)

Status: auto-closed as invalid on 2020/08/18 02:42
Subsystems: kernel
[Documentation on labels]
First crash: 1399d, last: 1375d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in complete_signal / do_nanosleep kernel 1 1533d 1533d 0/26 auto-closed as invalid on 2020/04/17 00:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in complete_signal / do_nanosleep

write to 0xffff88805682e064 of 4 bytes by task 19060 on cpu 1:
 freezer_do_not_count include/linux/freezer.h:109 [inline]
 freezable_schedule include/linux/freezer.h:171 [inline]
 do_nanosleep+0xff/0x3a0 kernel/time/hrtimer.c:1879
 hrtimer_nanosleep kernel/time/hrtimer.c:1932 [inline]
 __do_sys_nanosleep kernel/time/hrtimer.c:1966 [inline]
 __se_sys_nanosleep+0x20b/0x2a0 kernel/time/hrtimer.c:1953
 __x64_sys_nanosleep+0x2d/0x40 kernel/time/hrtimer.c:1953
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88805682e064 of 4 bytes by interrupt on cpu 0:
 wants_signal kernel/signal.c:977 [inline]
 complete_signal+0x7c/0x600 kernel/signal.c:1000
 send_sigqueue+0x261/0x450 kernel/signal.c:1880
 posix_timer_event kernel/time/posix-timers.c:354 [inline]
 posix_timer_fn+0xe8/0x210 kernel/time/posix-timers.c:380
 __run_hrtimer+0x154/0x4b0 kernel/time/hrtimer.c:1520
 __hrtimer_run_queues kernel/time/hrtimer.c:1584 [inline]
 hrtimer_interrupt+0x37c/0xa40 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1080 [inline]
 __sysvec_apic_timer_interrupt+0xa3/0x280 arch/x86/kernel/apic/apic.c:1097
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:711
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 sysvec_apic_timer_interrupt+0x80/0xd0 arch/x86/kernel/apic/apic.c:1091
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:587
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:765 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x44/0x70 kernel/locking/spinlock.c:191
 unlock_hrtimer_base kernel/time/hrtimer.c:898 [inline]
 hrtimer_start_range_ns+0x226/0x250 kernel/time/hrtimer.c:1136
 hrtimer_start_expires include/linux/hrtimer.h:435 [inline]
 hrtimer_sleeper_start_expires kernel/time/hrtimer.c:1800 [inline]
 do_nanosleep+0xd2/0x3a0 kernel/time/hrtimer.c:1876
 hrtimer_nanosleep_restart+0x57/0x80 kernel/time/hrtimer.c:1913
 __do_sys_restart_syscall+0x2a/0x30 kernel/signal.c:2879
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 19062 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/14 02:41 upstream 0dc589da873b ce4c95b3 .config console log report ci2-upstream-kcsan-gce
2020/06/19 14:07 upstream 5e857ce6eae7 123cf502 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.