syzbot


KCSAN: data-race in dequeue_signal / ptrace_check_attach

Status: auto-obsoleted due to no activity on 2022/10/15 10:03
Subsystems: kernel
[Documentation on labels]
First crash: 673d, last: 673d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (6) kernel 1 276d 276d 0/27 auto-obsoleted due to no activity on 2023/11/16 03:30
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (7) kernel 13 112d 215d 0/27 auto-obsoleted due to no activity on 2024/04/27 21:52
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (5) kernel 3 315d 378d 0/27 auto-obsoleted due to no activity on 2023/10/08 11:58
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (3) kernel 3 500d 525d 0/27 auto-obsoleted due to no activity on 2023/04/16 11:35
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (2) kernel 1 570d 570d 0/27 auto-obsoleted due to no activity on 2023/02/02 07:54
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (4) kernel 2 439d 448d 0/27 auto-obsoleted due to no activity on 2023/06/06 04:16
upstream KCSAN: data-race in dequeue_signal / ptrace_check_attach (8) kernel 2 57d 77d 0/27 auto-obsoleted due to no activity on 2024/06/22 14:38

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach

read-write to 0xffff8881568d50c0 of 8 bytes by task 17785 on cpu 0:
 dequeue_signal+0x3f5/0x440 kernel/signal.c:688
 get_signal+0x381/0x1020 kernel/signal.c:2737
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff8881568d50c0 of 8 bytes by task 17783 on cpu 1:
 ptrace_freeze_traced kernel/ptrace.c:199 [inline]
 ptrace_check_attach+0x7c/0x280 kernel/ptrace.c:266
 __do_sys_ptrace kernel/ptrace.c:1291 [inline]
 __se_sys_ptrace+0xd4/0x2b0 kernel/ptrace.c:1269
 __x64_sys_ptrace+0x51/0x60 kernel/ptrace.c:1269
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0000000000000000 -> 0x0000000008010000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 17783 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-00284-gce888220d5c7-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/09/10 09:54 upstream ce888220d5c7 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dequeue_signal / ptrace_check_attach
* Struck through repros no longer work on HEAD.