KCSAN: data-race in do_nanosleep / mm_update_next_owner (2)

Status: closed as invalid on 2019/11/19 14:04
Subsystems: kernel
[Documentation on labels]
First crash: 2536d, last: 2504d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_nanosleep / mm_update_next_owner kernel 6 3 2542d 2547d 0/29 closed as invalid on 2019/10/15 15:50
upstream KCSAN: data-race in do_nanosleep / mm_update_next_owner (3) kernel 6 1238 1940d 2441d 0/29 auto-closed as invalid on 2021/07/07 20:29

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_nanosleep / mm_update_next_owner

read to 0xffff8881237ed0e4 of 4 bytes by task 12047 on cpu 0:
 mm_update_next_owner+0x29f/0x460 kernel/exit.c:389
 exit_mm kernel/exit.c:484 [inline]
 do_exit+0x4c1/0x18f0 kernel/exit.c:804
 do_group_exit+0xb4/0x1c0 kernel/exit.c:921
 __do_sys_exit_group kernel/exit.c:932 [inline]
 __se_sys_exit_group kernel/exit.c:930 [inline]
 __x64_sys_exit_group+0x2e/0x30 kernel/exit.c:930
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff8881237ed0e4 of 4 bytes by task 10353 on cpu 1:
 freezer_do_not_count include/linux/freezer.h:109 [inline]
 freezable_schedule include/linux/freezer.h:171 [inline]
 do_nanosleep+0x127/0x320 kernel/time/hrtimer.c:1871
 hrtimer_nanosleep+0x191/0x320 kernel/time/hrtimer.c:1924
 __do_sys_nanosleep kernel/time/hrtimer.c:1958 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1945 [inline]
 __x64_sys_nanosleep+0x106/0x150 kernel/time/hrtimer.c:1945
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 10353 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 10353 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x11d/0x181 lib/dump_stack.c:118
 panic+0x210/0x640 kernel/panic.c:221
 kcsan_report.cold+0xc/0xd kernel/kcsan/report.c:315
 kcsan_setup_watchpoint+0x3fe/0x460 kernel/kcsan/core.c:423
 check_access kernel/kcsan/core.c:466 [inline]
 __tsan_write4 kernel/kcsan/core.c:595 [inline]
 __tsan_unaligned_write4+0xc4/0x100 kernel/kcsan/core.c:595
 freezer_do_not_count include/linux/freezer.h:109 [inline]
 freezable_schedule include/linux/freezer.h:171 [inline]
 do_nanosleep+0x127/0x320 kernel/time/hrtimer.c:1871
 hrtimer_nanosleep+0x191/0x320 kernel/time/hrtimer.c:1924
 __do_sys_nanosleep kernel/time/hrtimer.c:1958 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1945 [inline]
 __x64_sys_nanosleep+0x106/0x150 kernel/time/hrtimer.c:1945
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x458ae0
Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 51 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00
RSP: 002b:00007ffdf574a798 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 0000000000040cf7 RCX: 0000000000458ae0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffdf574a7a0
RBP: 00000000000000d7 R08: 0000000000000001 R09: 0000000001ba4940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015
R13: 00007ffdf574a7f0 R14: 0000000000040c8b R15: 00007ffdf574a800
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (29):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/17 08:54 https://github.com/google/ktsan.git kcsan 5863cc791e4c d5696d51 .config console log report ci2-upstream-kcsan-gce
2019/11/16 05:43 https://github.com/google/ktsan.git kcsan 5863cc791e4c cdac920b .config console log report ci2-upstream-kcsan-gce
2019/11/12 08:51 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
2019/11/09 23:37 https://github.com/google/ktsan.git kcsan 94c006602e13 dc438b91 .config console log report ci2-upstream-kcsan-gce
2019/11/07 15:53 https://github.com/google/ktsan.git kcsan 94c006602e13 f39aff9e .config console log report ci2-upstream-kcsan-gce
2019/11/07 15:12 https://github.com/google/ktsan.git kcsan 94c006602e13 d5bc6812 .config console log report ci2-upstream-kcsan-gce
2019/11/07 02:53 https://github.com/google/ktsan.git kcsan 94c006602e13 d797d201 .config console log report ci2-upstream-kcsan-gce
2019/11/05 14:36 https://github.com/google/ktsan.git kcsan 94c006602e13 af5c522d .config console log report ci2-upstream-kcsan-gce
2019/11/05 12:33 https://github.com/google/ktsan.git kcsan 94c006602e13 0f3ec414 .config console log report ci2-upstream-kcsan-gce
2019/11/05 00:15 https://github.com/google/ktsan.git kcsan 94c006602e13 76630fc9 .config console log report ci2-upstream-kcsan-gce
2019/11/04 12:11 https://github.com/google/ktsan.git kcsan 05f2236801fe 18e12644 .config console log report ci2-upstream-kcsan-gce
2019/11/03 21:46 https://github.com/google/ktsan.git kcsan 05f2236801fe b35fad31 .config console log report ci2-upstream-kcsan-gce
2019/11/02 21:20 https://github.com/google/ktsan.git kcsan 05f2236801fe d603afc9 .config console log report ci2-upstream-kcsan-gce
2019/11/02 21:18 https://github.com/google/ktsan.git kcsan 05f2236801fe d603afc9 .config console log report ci2-upstream-kcsan-gce
2019/11/01 18:42 https://github.com/google/ktsan.git kcsan 05f2236801fe 997ccc67 .config console log report ci2-upstream-kcsan-gce
2019/10/29 04:07 https://github.com/google/ktsan.git kcsan 05f2236801fe 5ea87a66 .config console log report ci2-upstream-kcsan-gce
2019/10/28 16:14 https://github.com/google/ktsan.git kcsan 05f2236801fe 439d7b14 .config console log report ci2-upstream-kcsan-gce
2019/10/26 00:20 https://github.com/google/ktsan.git kcsan 05f2236801fe 413926c5 .config console log report ci2-upstream-kcsan-gce
2019/10/26 00:08 https://github.com/google/ktsan.git kcsan 05f2236801fe 413926c5 .config console log report ci2-upstream-kcsan-gce
2019/10/24 07:45 https://github.com/google/ktsan.git kcsan 05f2236801fe d01bb02a .config console log report ci2-upstream-kcsan-gce
2019/10/24 07:44 https://github.com/google/ktsan.git kcsan 05f2236801fe d01bb02a .config console log report ci2-upstream-kcsan-gce
2019/10/23 14:53 https://github.com/google/ktsan.git kcsan 05f2236801fe b602d64b .config console log report ci2-upstream-kcsan-gce
2019/10/23 14:43 https://github.com/google/ktsan.git kcsan 05f2236801fe b602d64b .config console log report ci2-upstream-kcsan-gce
2019/10/23 02:35 https://github.com/google/ktsan.git kcsan 05f2236801fe d0686497 .config console log report ci2-upstream-kcsan-gce
2019/10/17 18:22 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/17 14:41 https://github.com/google/ktsan.git kcsan 05f2236801fe 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 17:01 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
2019/10/16 13:08 https://github.com/google/ktsan.git kcsan a6311db074d9 d4ea592f .config console log report ci2-upstream-kcsan-gce
2019/10/15 23:59 https://github.com/google/ktsan.git kcsan e3d315561216 d4ea592f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.