syzbot


KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (7)

Status: moderation: reported on 2024/02/09 22:19
Subsystems: serial
[Documentation on labels]
Reported-by: syzbot+ef7ff586ea286b061516@syzkaller.appspotmail.com
First crash: 66d, last: 16h01m
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios serial 5 1152d 1182d 0/26 auto-closed as invalid on 2021/03/26 07:48
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (6) serial 1 114d 114d 0/26 auto-obsoleted due to no activity on 2024/01/28 03:42
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (4) serial 1 373d 373d 0/26 auto-obsoleted due to no activity on 2023/05/14 00:05
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (5) serial 16 287d 324d 0/26 auto-obsoleted due to no activity on 2023/08/08 14:34
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (3) serial 2 674d 686d 0/26 auto-closed as invalid on 2022/07/17 12:41
upstream KCSAN: data-race in ppp_asynctty_receive / tty_set_termios (2) serial 1 1105d 1105d 0/26 auto-closed as invalid on 2021/05/17 11:47

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios

read-write to 0xffff88810d7d3908 of 4 bytes by task 21654 on cpu 0:
 unset_locked_termios drivers/tty/tty_ioctl.c:214 [inline]
 tty_set_termios+0xfa/0x8b0 drivers/tty/tty_ioctl.c:340
 set_termios+0x497/0x4e0 drivers/tty/tty_ioctl.c:516
 tty_mode_ioctl+0x391/0x5d0
 ppp_asynctty_ioctl+0x21d/0x2e0 drivers/net/ppp/ppp_async.c:324
 tty_ioctl+0x886/0xbe0 drivers/tty/tty_io.c:2812
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:904 [inline]
 __se_sys_ioctl+0xd3/0x150 fs/ioctl.c:890
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:890
 x64_sys_call+0x155d/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810d7d3908 of 4 bytes by task 3116 on cpu 1:
 ppp_async_input drivers/net/ppp/ppp_async.c:905 [inline]
 ppp_asynctty_receive+0x751/0x1050 drivers/net/ppp/ppp_async.c:342
 tty_ldisc_receive_buf+0xd9/0x100 drivers/tty/tty_buffer.c:391
 tty_port_default_receive_buf+0x59/0x90 drivers/tty/tty_port.c:37
 receive_buf drivers/tty/tty_buffer.c:445 [inline]
 flush_to_ldisc+0x1ce/0x410 drivers/tty/tty_buffer.c:495
 process_one_work kernel/workqueue.c:3254 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3335
 worker_thread+0x526/0x730 kernel/workqueue.c:3416
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x00000500 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3116 Comm: kworker/u8:5 Tainted: G        W          6.9.0-rc4-syzkaller-00031-g96fca68c4fbf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: events_unbound flush_to_ldisc
==================================================================
tipc: Subscription rejected, illegal request

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/16 04:53 upstream 96fca68c4fbf 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/15 22:54 upstream 0bbac3facb5d b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/14 09:48 upstream 7efd0a74039f c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/12 17:59 upstream 5939d45155bb c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/12 14:50 upstream 586b5dfb51b9 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/12 07:26 upstream 586b5dfb51b9 27de0a5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/11 15:59 upstream e8c39d0f57f3 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/11 01:36 upstream 9875c0beb8ad 33b9e058 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/10 00:32 upstream 20cb38a7af88 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/09 02:21 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/08 15:43 upstream fec50db7033e 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/08 06:38 upstream fec50db7033e ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/05 01:00 upstream c88b9b4cde17 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/04 00:24 upstream 3e92c1e6cd87 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/04/03 02:10 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/30 02:06 upstream 4535e1a4174c 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/27 08:49 upstream 7033999ecd7b 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/14 17:15 upstream 480e035fc4c7 8d8ee116 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/13 05:15 upstream 1f440397665f db5b7ff0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/12 13:55 upstream 855684c7d938 c35c26ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/10 13:33 upstream 005f6f34bd47 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/05 16:07 upstream 90d35da658da f39a7eed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/03/04 07:42 upstream 90d35da658da 25905f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/29 13:30 upstream 805d849d7c3c 352ab904 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/29 00:22 upstream e326df53af00 352ab904 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/28 12:01 upstream cf1182944c7c 55d6f11d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/27 18:40 upstream 45ec2f5f6ed3 d367cbe5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/27 10:05 upstream 45ec2f5f6ed3 05e69c83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/25 18:18 upstream ab0a97cffa0b 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/23 00:00 upstream 1c892cdd8fe0 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/21 20:00 upstream 39133352cbed 345111b5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
2024/02/09 22:18 upstream e6f39a90de92 77b23aa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ppp_asynctty_receive / tty_set_termios
* Struck through repros no longer work on HEAD.