KCSAN: data-race in dequeue_signal / ptrace_check_attach (12)

Status: moderation: reported on 2026/04/24 13:36
Subsystems: kernel
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+317772dacbc1ea722bd2@syzkaller.appspotmail.com
First crash: 103d, last: 7d21h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
ccf4cc7e assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in dequeue_signal / ptrace_check_attach (12) 2026/05/13 05:50 2026/05/13 05:50 2026/05/13 05:52 a0949470
00347d9b assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in dequeue_signal / ptrace_check_attach (12) 2026/04/24 13:35 2026/04/24 13:35 2026/04/24 13:56 9cfb3ca7
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (6) kernel 6 1 1028d 1028d 0/29 auto-obsoleted due to no activity on 2023/11/16 03:30
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (10) kernel 6 1 665d 665d 0/29 auto-obsoleted due to no activity on 2024/11/13 22:28
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (7) kernel 6 13 865d 968d 0/29 auto-obsoleted due to no activity on 2024/04/27 21:52
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (5) kernel 6 3 1067d 1130d 0/29 auto-obsoleted due to no activity on 2023/10/08 11:58
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (3) kernel 6 3 1253d 1277d 0/29 auto-obsoleted due to no activity on 2023/04/16 11:35
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (11) kernel 6 35 175d 628d 0/29 auto-obsoleted due to no activity on 2026/04/08 23:50
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (2) kernel 6 1 1322d 1322d 0/29 auto-obsoleted due to no activity on 2023/02/02 07:54
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (9) kernel 6 1 730d 730d 0/29 auto-obsoleted due to no activity on 2024/09/09 07:15
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach kernel 6 1 1425d 1425d 0/29 auto-obsoleted due to no activity on 2022/10/15 10:03
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (4) kernel 6 2 1191d 1200d 0/29 auto-obsoleted due to no activity on 2023/06/06 04:16
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (8) kernel 6 2 809d 829d 0/29 auto-obsoleted due to no activity on 2024/06/22 14:38

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach

read-write to 0xffff888104636d20 of 8 bytes by task 8151 on cpu 1:
 dequeue_signal+0x2db/0x370 kernel/signal.c:656
 get_signal+0x356/0xf10 kernel/signal.c:2926
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x15d/0x8c0 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
 do_syscall_64+0x23c/0x3c0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888104636d20 of 8 bytes by task 8150 on cpu 0:
 ptrace_freeze_traced kernel/ptrace.c:207 [inline]
 ptrace_check_attach+0xac/0x290 kernel/ptrace.c:274
 __do_sys_ptrace kernel/ptrace.c:1435 [inline]
 __se_sys_ptrace+0xd3/0x2c0 kernel/ptrace.c:1413
 __x64_sys_ptrace+0x55/0x70 kernel/ptrace.c:1413
 x64_sys_call+0x287b/0x3020 arch/x86/include/generated/asm/syscalls_64.h:102
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0x0000000008010000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8150 Comm: syz.8.779 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
==================================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/29 04:15 upstream fc02acf6ac0c 19622d9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/07/16 02:03 upstream 58717b2a1365 27a8bd60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/07/15 16:23 upstream 58717b2a1365 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/07/09 18:08 upstream 2c7c88a412aa a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/05/18 10:48 upstream 5200f5f493f7 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/04/26 07:48 upstream 897d54018cc9 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
2026/04/24 13:35 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
* Struck through repros no longer work on HEAD.