syzbot


KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv (3)

Status: auto-closed as invalid on 2022/09/20 08:49
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 104d, last: 104d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv (4) 1 40d 12d 0/24 moderation: reported on 2022/11/16 04:40
upstream KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv (2) 1 240d 240d 0/24 auto-closed as invalid on 2022/05/06 15:53
upstream KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv 2 278d 302d 0/24 auto-closed as invalid on 2022/03/29 21:12

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv

read-write to 0xffff88814865c776 of 2 bytes by task 6475 on cpu 0:
 tipc_sk_conn_proto_rcv+0x389/0x710 net/tipc/socket.c:1371
 tipc_sk_proto_rcv+0x146/0x450 net/tipc/socket.c:2158
 tipc_sk_filter_rcv+0x1619/0x1730 net/tipc/socket.c:2352
 tipc_sk_backlog_rcv+0x65/0xc0 net/tipc/socket.c:2407
 sk_backlog_rcv include/net/sock.h:1075 [inline]
 __release_sock+0xa7/0x220 net/core/sock.c:2850
 release_sock+0x40/0x110 net/core/sock.c:3406
 __tipc_sendstream+0x49a/0xb10 net/tipc/socket.c:1586
 tipc_sendstream+0x3a/0x50 net/tipc/socket.c:1550
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 sock_write_iter+0x1b7/0x220 net/socket.c:1108
 call_write_iter include/linux/fs.h:2192 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x468/0x760 fs/read_write.c:578
 ksys_write+0xe8/0x1a0 fs/read_write.c:631
 __do_sys_write fs/read_write.c:643 [inline]
 __se_sys_write fs/read_write.c:640 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:640
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff88814865c776 of 2 bytes by task 6460 on cpu 1:
 tsk_conn_cong net/tipc/socket.c:224 [inline]
 tipc_poll+0x1d9/0x320 net/tipc/socket.c:808
 sock_poll+0x23e/0x260 net/socket.c:1353
 vfs_poll include/linux/poll.h:88 [inline]
 do_pollfd fs/select.c:873 [inline]
 do_poll fs/select.c:921 [inline]
 do_sys_poll+0x6d5/0xca0 fs/select.c:1015
 __do_sys_ppoll fs/select.c:1121 [inline]
 __se_sys_ppoll+0x195/0x1d0 fs/select.c:1101
 __x64_sys_ppoll+0x63/0x70 fs/select.c:1101
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0208 -> 0x0186

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6460 Comm: syz-executor.3 Tainted: G        W          5.19.0-syzkaller-13930-g7ebfc85e2cd7-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/08/16 08:43 upstream 7ebfc85e2cd7 7a7cb304 .config log report info KCSAN: data-race in tipc_poll / tipc_sk_conn_proto_rcv
* Struck through repros no longer work on HEAD.