KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next

KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner
Status: auto-closed as invalid on 2020/09/10 17:38
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 351d, last: 351d

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (4)	7	53d	112d	0/22	auto-closed as invalid on 2021/07/06 03:43
upstream	KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (2)	2	297d	310d	0/22	auto-closed as invalid on 2020/11/04 12:23
upstream	KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (3)	1	220d	220d	0/22	auto-closed as invalid on 2021/01/20 08:48

Sample crash report:

==================================================================
BUG: KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner

write to 0xffff88811e5a9064 of 4 bytes by task 8773 on cpu 0:
 ns_capable_common kernel/capability.c:377 [inline]
 ns_capable kernel/capability.c:396 [inline]
 capable_wrt_inode_uidgid+0xa0/0x130 kernel/capability.c:506
 generic_permission+0x19b/0x3e0 fs/namei.c:381
 do_inode_permission fs/namei.c:405 [inline]
 inode_permission+0x6c/0x330 fs/namei.c:463
 may_open+0x14e/0x260 fs/namei.c:2866
 do_open fs/namei.c:3241 [inline]
 path_openat+0x17cb/0x20e0 fs/namei.c:3360
 do_filp_open+0xbd/0x1d0 fs/namei.c:3387
 do_sys_openat2+0x33c/0x4a0 fs/open.c:1179
 do_sys_open fs/open.c:1195 [inline]
 ksys_open include/linux/syscalls.h:1390 [inline]
 __do_sys_open fs/open.c:1201 [inline]
 __se_sys_open fs/open.c:1199 [inline]
 __x64_sys_open+0xe2/0x110 fs/open.c:1199
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811e5a9064 of 4 bytes by task 8774 on cpu 1:
 mm_update_next_owner+0x1d9/0x4a0 kernel/exit.c:387
 exit_mm+0x2c0/0x330 kernel/exit.c:482
 do_exit+0x40f/0x16a0 kernel/exit.c:793
 do_group_exit+0x17a/0x180 kernel/exit.c:903
 __do_sys_exit_group+0xb/0x10 kernel/exit.c:914
 __se_sys_exit_group+0x5/0x10 kernel/exit.c:912
 __x64_sys_exit_group+0x16/0x20 kernel/exit.c:912
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8774 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-kcsan-gce	2020/08/06 17:37	upstream	47ec5303d73e	4ca1c0ea	.config	log	report