syzbot


KCSAN: data-race in free_kthread_struct / kthread_is_per_cpu

Status: auto-closed as invalid on 2022/03/04 02:39
Subsystems: fs mm
[Documentation on labels]
First crash: 1430d, last: 1430d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in free_kthread_struct / kthread_is_per_cpu (3) mm fs 6 2 1319d 1326d 0/29 auto-closed as invalid on 2022/06/23 06:17
upstream KCSAN: data-race in free_kthread_struct / kthread_is_per_cpu (2) fs mm 6 4 1368d 1389d 0/29 auto-closed as invalid on 2022/05/05 08:32

Sample crash report:
==================================================================
BUG: KCSAN: data-race in free_kthread_struct / kthread_is_per_cpu

write to 0xffff8881184cb2a8 of 8 bytes by task 13825 on cpu 1:
 free_kthread_struct+0x5f/0xa0 kernel/kthread.c:144
 begin_new_exec+0xf57/0x1430 fs/exec.c:1313
 load_elf_binary+0x539/0x26d0 fs/binfmt_elf.c:1001
 search_binary_handler fs/exec.c:1727 [inline]
 exec_binprm+0x1d9/0x720 fs/exec.c:1768
 bprm_execve+0x3b5/0x520 fs/exec.c:1837
 kernel_execve+0x61b/0x640 fs/exec.c:1980
 call_usermodehelper_exec_async+0x1a6/0x250 kernel/umh.c:112
 ret_from_fork+0x1f/0x30

read to 0xffff8881184cb2a8 of 8 bytes by task 13812 on cpu 0:
 __to_kthread kernel/kthread.c:93 [inline]
 kthread_is_per_cpu+0x18/0x80 kernel/kthread.c:607
 can_migrate_task+0xf/0x180 kernel/sched/fair.c:7754
 detach_tasks+0xab/0x3a0 kernel/sched/fair.c:7918
 load_balance+0x7d3/0xcf0 kernel/sched/fair.c:9906
 newidle_balance+0x174/0x350 kernel/sched/fair.c:10915
 pick_next_task_fair+0x37/0x260 kernel/sched/fair.c:7334
 __pick_next_task kernel/sched/core.c:5608 [inline]
 pick_next_task kernel/sched/core.c:6111 [inline]
 __schedule+0x267/0x690 kernel/sched/core.c:6259
 schedule+0x81/0xb0 kernel/sched/core.c:6368
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0xcc/0x3a0 kernel/time/hrtimer.c:2044
 hrtimer_nanosleep+0x10b/0x200 kernel/time/hrtimer.c:2097
 common_nsleep+0x69/0x80 kernel/time/posix-timers.c:1227
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
 __se_sys_clock_nanosleep+0x1f1/0x220 kernel/time/posix-timers.c:1245
 __x64_sys_clock_nanosleep+0x51/0x60 kernel/time/posix-timers.c:1245
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff888117af0600 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13812 Comm: syz-executor.4 Not tainted 5.17.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/28 02:37 upstream 626b2dda7651 64a8e201 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in free_kthread_struct / kthread_is_per_cpu
* Struck through repros no longer work on HEAD.