syzbot


KCSAN: data-race in skb_queue_tail / unix_dgram_poll (3)

Status: auto-closed as invalid on 2021/03/17 02:28
Subsystems: net
[Documentation on labels]
First crash: 1182d, last: 1182d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll net 2 1647d 1655d 0/26 closed as invalid on 2019/11/19 13:24
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4) net 2 968d 973d 20/26 fixed on 2022/03/08 16:11
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll (2) net 1 1372d 1372d 0/26 auto-closed as invalid on 2020/09/08 00:38

Sample crash report:
==================================================================
BUG: KCSAN: data-race in skb_queue_tail / unix_dgram_poll

write to 0xffff888107803ce0 of 4 bytes by task 4977 on cpu 0:
 __skb_insert include/linux/skbuff.h:1917 [inline]
 __skb_queue_before include/linux/skbuff.h:2022 [inline]
 __skb_queue_tail include/linux/skbuff.h:2055 [inline]
 skb_queue_tail+0x80/0xa0 net/core/skbuff.c:3162
 unix_dgram_sendmsg+0xfd9/0x1640 net/unix/af_unix.c:1797
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2345
 ___sys_sendmsg net/socket.c:2399 [inline]
 __sys_sendmsg+0x1ed/0x270 net/socket.c:2432
 __do_sys_sendmsg net/socket.c:2441 [inline]
 __se_sys_sendmsg net/socket.c:2439 [inline]
 __x64_sys_sendmsg+0x42/0x50 net/socket.c:2439
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888107803ce0 of 4 bytes by task 4887 on cpu 1:
 skb_queue_len include/linux/skbuff.h:1848 [inline]
 unix_recvq_full net/unix/af_unix.c:194 [inline]
 unix_dgram_poll+0x30a/0x3b0 net/unix/af_unix.c:2724
 sock_poll+0x23e/0x260 net/socket.c:1244
 vfs_poll include/linux/poll.h:90 [inline]
 ep_item_poll fs/eventpoll.c:840 [inline]
 ep_insert fs/eventpoll.c:1507 [inline]
 do_epoll_ctl+0xff3/0x17d0 fs/eventpoll.c:2127
 __do_sys_epoll_ctl fs/eventpoll.c:2178 [inline]
 __se_sys_epoll_ctl fs/eventpoll.c:2169 [inline]
 __x64_sys_epoll_ctl+0xb3/0xe0 fs/eventpoll.c:2169
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 4887 Comm: systemd-journal Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/10 02:23 upstream e0756cfc7d7c 2bd9619f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in skb_queue_tail / unix_dgram_poll
* Struck through repros no longer work on HEAD.