KCSAN: data-race in complete_signal / futex_wait_queue_me (3)

4 views
Skip to first unread message

syzbot

unread,
Jul 4, 2020, 3:02:17 PM7/4/20
to syzkaller-upst...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: cdd3bb54 Merge tag 'm68knommu-for-v5.8-rc4' of git://git.k..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=10e4969d100000
kernel config: https://syzkaller.appspot.com/x/.config?x=ef2c2e4f6006998c
dashboard link: https://syzkaller.appspot.com/bug?extid=be5052a878945fd5a0a0
compiler: clang version 11.0.0 (https://github.com/llvm/llvm-project.git ca2dcbd030eadbf0aa9b660efe864ff08af6e18b)
CC: [dvh...@infradead.org linux-...@vger.kernel.org mi...@redhat.com pet...@infradead.org tg...@linutronix.de]

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+be5052...@syzkaller.appspotmail.com

==================================================================
BUG: KCSAN: data-race in complete_signal / futex_wait_queue_me

write to 0xffff88812093a064 of 4 bytes by task 8626 on cpu 1:
freezer_do_not_count include/linux/freezer.h:109 [inline]
freezable_schedule include/linux/freezer.h:171 [inline]
futex_wait_queue_me+0x186/0x250 kernel/futex.c:2634
futex_wait+0x145/0x390 kernel/futex.c:2740
do_futex+0x144a/0x21c0 kernel/futex.c:3811
__do_sys_futex kernel/futex.c:3872 [inline]
__se_sys_futex+0x26d/0x330 kernel/futex.c:3840
__x64_sys_futex+0x74/0x80 kernel/futex.c:3840
do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:359
entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88812093a064 of 4 bytes by task 8627 on cpu 0:
wants_signal kernel/signal.c:977 [inline]
complete_signal+0x7c/0x600 kernel/signal.c:1000
__send_signal+0x680/0x7d0 kernel/signal.c:1180
send_signal+0x398/0x3e0 kernel/signal.c:1241
do_send_sig_info+0x9b/0xe0 kernel/signal.c:1290
do_send_specific+0xc7/0x100 kernel/signal.c:3784
do_tkill kernel/signal.c:3810 [inline]
__do_sys_tgkill kernel/signal.c:3829 [inline]
__se_sys_tgkill kernel/signal.c:3823 [inline]
__x64_sys_tgkill+0x108/0x140 kernel/signal.c:3823
do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:359
entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8627 Comm: syz-fuzzer Not tainted 5.8.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Jul 7, 2021, 12:16:14 AM7/7/21
to syzkaller-upst...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages