syzbot


KCSAN: data-race in complete_signal / exit_signals

Status: closed as invalid on 2020/06/18 14:13
Subsystems: kernel
[Documentation on labels]
First crash: 1412d, last: 1412d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in complete_signal / exit_signals (3) kernel 2 1180d 1192d 0/26 auto-closed as invalid on 2021/03/05 20:46
upstream KCSAN: data-race in complete_signal / exit_signals (2) kernel 1 1376d 1376d 0/26 auto-closed as invalid on 2020/08/22 00:27
upstream KCSAN: data-race in complete_signal / exit_signals (4) kernel 1 1062d 1062d 0/26 auto-closed as invalid on 2021/07/01 12:39

Sample crash report:
==================================================================
BUG: KCSAN: data-race in complete_signal / exit_signals

write to 0xffff8880b42c10a4 of 4 bytes by task 14807 on cpu 0:
 exit_signals+0x135/0x4c0 kernel/signal.c:2827
 do_exit+0x17b/0x11e0 kernel/exit.c:744
 do_group_exit+0xae/0x1a0 kernel/exit.c:893
 __do_sys_exit_group kernel/exit.c:904 [inline]
 __se_sys_exit_group kernel/exit.c:902 [inline]
 __x64_sys_exit_group+0x2b/0x30 kernel/exit.c:902
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880b42c10a4 of 4 bytes by interrupt on cpu 1:
 wants_signal kernel/signal.c:977 [inline]
 complete_signal+0x85/0x5c0 kernel/signal.c:1000
 send_sigqueue+0x30c/0x500 kernel/signal.c:1884
 posix_timer_event kernel/time/posix-timers.c:354 [inline]
 posix_timer_fn+0x104/0x220 kernel/time/posix-timers.c:380
 __run_hrtimer kernel/time/hrtimer.c:1520 [inline]
 __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584
 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline]
 smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_enable arch/x86/include/asm/paravirt.h:769 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
 _raw_spin_unlock_irq+0x4b/0x80 kernel/locking/spinlock.c:199
 spin_unlock_irq include/linux/spinlock.h:403 [inline]
 get_signal+0xb9f/0x1290 kernel/signal.c:2616
 do_signal+0x2b/0x840 arch/x86/kernel/signal.c:784
 exit_to_usermode_loop+0x24a/0x2c0 arch/x86/entry/common.c:161
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:279 [inline]
 do_syscall_64+0x38b/0x3b0 arch/x86/entry/common.c:305
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 14815 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/11 16:42 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 1beaee21 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.