syzbot


KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner

Status: auto-closed as invalid on 2020/09/10 17:38
Subsystems: lsm
[Documentation on labels]
First crash: 1682d, last: 1682d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (4) kernel 7 1384d 1443d 0/28 auto-closed as invalid on 2021/07/06 03:43
upstream KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (2) lsm 2 1628d 1641d 0/28 auto-closed as invalid on 2020/11/04 12:23
upstream KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner (3) lsm 1 1551d 1551d 0/28 auto-closed as invalid on 2021/01/20 08:48

Sample crash report:
==================================================================
BUG: KCSAN: data-race in capable_wrt_inode_uidgid / mm_update_next_owner

write to 0xffff88811e5a9064 of 4 bytes by task 8773 on cpu 0:
 ns_capable_common kernel/capability.c:377 [inline]
 ns_capable kernel/capability.c:396 [inline]
 capable_wrt_inode_uidgid+0xa0/0x130 kernel/capability.c:506
 generic_permission+0x19b/0x3e0 fs/namei.c:381
 do_inode_permission fs/namei.c:405 [inline]
 inode_permission+0x6c/0x330 fs/namei.c:463
 may_open+0x14e/0x260 fs/namei.c:2866
 do_open fs/namei.c:3241 [inline]
 path_openat+0x17cb/0x20e0 fs/namei.c:3360
 do_filp_open+0xbd/0x1d0 fs/namei.c:3387
 do_sys_openat2+0x33c/0x4a0 fs/open.c:1179
 do_sys_open fs/open.c:1195 [inline]
 ksys_open include/linux/syscalls.h:1390 [inline]
 __do_sys_open fs/open.c:1201 [inline]
 __se_sys_open fs/open.c:1199 [inline]
 __x64_sys_open+0xe2/0x110 fs/open.c:1199
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811e5a9064 of 4 bytes by task 8774 on cpu 1:
 mm_update_next_owner+0x1d9/0x4a0 kernel/exit.c:387
 exit_mm+0x2c0/0x330 kernel/exit.c:482
 do_exit+0x40f/0x16a0 kernel/exit.c:793
 do_group_exit+0x17a/0x180 kernel/exit.c:903
 __do_sys_exit_group+0xb/0x10 kernel/exit.c:914
 __se_sys_exit_group+0x5/0x10 kernel/exit.c:912
 __x64_sys_exit_group+0x16/0x20 kernel/exit.c:912
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8774 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/06 17:37 upstream 47ec5303d73e 4ca1c0ea .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.