syzbot


KCSAN: data-race in free_pid / zap_pid_ns_processes (3)

Status: auto-closed as invalid on 2021/05/20 16:55
Subsystems: kernel
[Documentation on labels]
First crash: 1124d, last: 1107d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (2) kernel 2 1180d 1194d 0/26 auto-closed as invalid on 2021/03/08 05:19
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (4) kernel 2 1047d 1060d 0/26 auto-closed as invalid on 2021/07/19 14:02
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes (5) kernel 1 16d 16d 0/26 upstream: reported on 2024/04/10 08:30
upstream KCSAN: data-race in free_pid / zap_pid_ns_processes kernel 12 1539d 1644d 0/26 auto-closed as invalid on 2020/04/18 12:14

Sample crash report:
==================================================================
BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes

write to 0xffff88811c551798 of 4 bytes by task 9289 on cpu 0:
 free_pid+0x79/0x190 kernel/pid.c:136
 __change_pid kernel/pid.c:353 [inline]
 detach_pid+0x147/0x160 kernel/pid.c:358
 __unhash_process kernel/exit.c:77 [inline]
 __exit_signal kernel/exit.c:148 [inline]
 release_task+0x6f0/0xbe0 kernel/exit.c:199
 exit_notify kernel/exit.c:699 [inline]
 do_exit+0xee9/0x1560 kernel/exit.c:845
 do_group_exit+0xce/0x1a0 kernel/exit.c:922
 get_signal+0xf83/0x15d0 kernel/signal.c:2781
 arch_do_signal_or_restart+0x2a/0x220 arch/x86/kernel/signal.c:789
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x104/0x170 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:301
 do_syscall_64+0x40/0x50 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88811c551798 of 4 bytes by task 1764 on cpu 1:
 zap_pid_ns_processes+0x256/0x370 kernel/pid_namespace.c:244
 find_child_reaper kernel/exit.c:542 [inline]
 forget_original_parent kernel/exit.c:631 [inline]
 exit_notify kernel/exit.c:668 [inline]
 do_exit+0x13f0/0x1560 kernel/exit.c:845
 do_group_exit+0xa4/0x1a0 kernel/exit.c:922
 __do_sys_exit_group+0xb/0x10 kernel/exit.c:933
 __se_sys_exit_group+0x5/0x10 kernel/exit.c:931
 __x64_sys_exit_group+0x16/0x20 kernel/exit.c:931
 do_syscall_64+0x34/0x50 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1764 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/15 16:51 upstream 7f75285ca572 c59079a6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in free_pid / zap_pid_ns_processes
2021/03/30 04:12 upstream 1e43c377a79f 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in free_pid / zap_pid_ns_processes
* Struck through repros no longer work on HEAD.