syzbot


KCSAN: data-race in kcm_rcv_ready / kcm_rfree (2)

Status: closed as invalid on 2020/06/18 14:13
Subsystems: net
[Documentation on labels]
First crash: 1435d, last: 1435d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kcm_rcv_ready / kcm_rfree (3) net 1 695d 695d 0/26 auto-closed as invalid on 2022/07/05 19:59
upstream KCSAN: data-race in kcm_rcv_ready / kcm_rfree net 1 1533d 1487d 0/26 auto-closed as invalid on 2020/04/24 00:37

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kcm_rcv_ready / kcm_rfree

write to 0xffff88806a082f78 of 1 bytes by task 12724 on cpu 1:
 kcm_rcv_ready+0x43b/0x500 net/kcm/kcmsock.c:164
 unreserve_rx_kcm+0x11d/0x260 net/kcm/kcmsock.c:336
 kcm_read_sock_done+0x26/0x40 net/kcm/kcmsock.c:391
 strp_read_sock+0xfe/0x140 net/strparser/strparser.c:368
 do_strp_work net/strparser/strparser.c:414 [inline]
 strp_work+0x90/0xd0 net/strparser/strparser.c:423
 process_one_work+0x424/0x930 kernel/workqueue.c:2268
 worker_thread+0x9a/0x7e0 kernel/workqueue.c:2414
 kthread+0x203/0x230 kernel/kthread.c:268
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

read to 0xffff88806a082f78 of 1 bytes by task 28773 on cpu 0:
 kcm_rfree+0xe7/0x1d0 net/kcm/kcmsock.c:180
 skb_release_head_state+0xb0/0x180 net/core/skbuff.c:651
 skb_release_all+0x1b/0x50 net/core/skbuff.c:662
 __kfree_skb net/core/skbuff.c:678 [inline]
 kfree_skb net/core/skbuff.c:696 [inline]
 kfree_skb+0x93/0x200 net/core/skbuff.c:690
 kcm_recvmsg+0x2d7/0x320 net/kcm/kcmsock.c:1160
 sock_recvmsg_nosec net/socket.c:886 [inline]
 ____sys_recvmsg+0x343/0x350 net/socket.c:2583
 ___sys_recvmsg+0xb2/0x100 net/socket.c:2627
 do_recvmmsg+0x17a/0x540 net/socket.c:2725
 __sys_recvmmsg+0x1f1/0x200 net/socket.c:2804
 __do_sys_recvmmsg net/socket.c:2827 [inline]
 __se_sys_recvmmsg net/socket.c:2820 [inline]
 __x64_sys_recvmmsg+0x82/0xb0 net/socket.c:2820
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 28773 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/21 15:07 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4afdfa20 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.