syzbot


KCSAN: data-race in do_exit / futex_wait_queue_me
Status: auto-closed as invalid on 2020/09/02 20:47
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 696d, last: 666d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_exit / futex_wait_queue_me (2) 1 606d 606d 0/22 auto-closed as invalid on 2020/11/02 08:53
upstream KCSAN: data-race in do_exit / futex_wait_queue_me (3) 3 507d 536d 0/22 auto-closed as invalid on 2021/02/08 21:09
upstream KCSAN: data-race in do_exit / futex_wait_queue_me (4) 5 377d 433d 0/22 auto-closed as invalid on 2021/06/19 09:40

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_exit / futex_wait_queue_me

write to 0xffff8880a72aa024 of 4 bytes by task 10967 on cpu 1:
 freezer_count include/linux/freezer.h:121 [inline]
 freezable_schedule include/linux/freezer.h:173 [inline]
 futex_wait_queue_me+0x1a8/0x250 kernel/futex.c:2634
 futex_wait+0x145/0x390 kernel/futex.c:2740
 do_futex+0x144a/0x21c0 kernel/futex.c:3811
 __do_sys_futex kernel/futex.c:3872 [inline]
 __se_sys_futex+0x26d/0x330 kernel/futex.c:3840
 __x64_sys_futex+0x74/0x80 kernel/futex.c:3840
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880a72aa024 of 4 bytes by task 10955 on cpu 0:
 find_alive_thread kernel/exit.c:492 [inline]
 find_new_reaper kernel/exit.c:541 [inline]
 forget_original_parent kernel/exit.c:616 [inline]
 exit_notify kernel/exit.c:649 [inline]
 do_exit+0x810/0x16e0 kernel/exit.c:826
 do_group_exit+0xcb/0x180 kernel/exit.c:903
 get_signal+0x106d/0x1650 kernel/signal.c:2743
 do_signal+0x25/0x270 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:235 [inline]
 __prepare_exit_to_usermode+0x127/0x230 arch/x86/entry/common.c:269
 __syscall_return_slowpath+0x47/0x60 arch/x86/entry/common.c:352
 do_syscall_64+0x5d/0xb0 arch/x86/entry/common.c:393
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10955 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2020/07/29 20:40 upstream 6ba1b005ffc3 233283a1 .config log report
ci2-upstream-kcsan-gce 2020/07/05 09:09 upstream 35e884f89df4 24d7f505 .config log report
ci2-upstream-kcsan-gce 2020/06/29 20:06 upstream 7c30b859a947 ce9ef6f2 .config log report