syzbot


KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (8)

Status: moderation: reported on 2024/11/25 09:01
Subsystems: v9fs
[Documentation on labels]
Reported-by: syzbot+d364aa9986167a4b48ce@syzkaller.appspotmail.com
First crash: 1d14h, last: 1d14h
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (4) v9fs 1 243d 243d 0/28 auto-obsoleted due to no activity on 2024/05/02 19:52
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (7) v9fs 2 73d 87d 0/28 auto-obsoleted due to no activity on 2024/10/19 18:15
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (2) v9fs 1 491d 491d 0/28 auto-obsoleted due to no activity on 2023/08/28 09:43
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (5) v9fs 1 206d 206d 0/28 auto-obsoleted due to no activity on 2024/06/08 01:35
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (6) v9fs 1 162d 162d 0/28 auto-obsoleted due to no activity on 2024/07/22 12:28
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (3) v9fs 1 432d 432d 0/28 auto-obsoleted due to no activity on 2023/10/26 00:39
upstream KCSAN: data-race in p9_conn_cancel / p9_poll_workfn v9fs 1 1187d 1187d 0/28 auto-closed as invalid on 2021/10/01 19:17

Sample crash report:
==================================================================
BUG: KCSAN: data-race in p9_conn_cancel / p9_poll_workfn

write to 0xffff888118619628 of 4 bytes by task 10914 on cpu 0:
 p9_conn_cancel+0x89/0x400 net/9p/trans_fd.c:199
 p9_read_work+0x765/0x8c0 net/9p/trans_fd.c:406
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310
 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffff888118619628 of 4 bytes by task 4633 on cpu 1:
 p9_poll_mux net/9p/trans_fd.c:625 [inline]
 p9_poll_workfn+0xc0/0x410 net/9p/trans_fd.c:1177
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310
 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x00000000 -> 0xfffffffb

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 4633 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events p9_poll_workfn
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/25 09:01 upstream 9f16d5e6f220 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in p9_conn_cancel / p9_poll_workfn
* Struck through repros no longer work on HEAD.