syzbot


KCSAN: data-race in dccp_disconnect / dccp_poll

Status: auto-closed as invalid on 2022/01/10 21:18
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 366d, last: 364d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (4) 2 61d 79d 0/24 auto-obsoleted due to no activity on 2022/11/10 12:48
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (3) 3 114d 135d 0/24 auto-closed as invalid on 2022/09/17 15:17
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (2) 1 264d 264d 0/24 auto-closed as invalid on 2022/04/21 07:05

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dccp_disconnect / dccp_poll

write to 0xffff8881386bb8f8 of 1 bytes by task 30505 on cpu 1:
 dccp_disconnect+0x4d3/0x5e0 net/dccp/proto.c:296
 __inet_stream_connect+0x621/0x6e0 net/ipv4/af_inet.c:712
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:724
 __sys_connect_file+0xd3/0xe0 net/socket.c:1896
 io_connect fs/io_uring.c:5246 [inline]
 io_issue_sqe+0x2cab/0x55e0 fs/io_uring.c:6712
 __io_queue_sqe+0x20/0x440 fs/io_uring.c:7018
 io_queue_sqe fs/io_uring.c:7060 [inline]
 io_submit_sqe+0x77a/0x47d3 fs/io_uring.c:7263
 io_submit_sqes+0x25d/0x670 fs/io_uring.c:7369
 __do_sys_io_uring_enter fs/io_uring.c:10070 [inline]
 __se_sys_io_uring_enter+0x212/0xb00 fs/io_uring.c:10012
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:10012
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881386bb8f8 of 1 bytes by task 30398 on cpu 0:
 dccp_poll+0xe0/0x3c0 net/dccp/proto.c:337
 sock_poll+0x23e/0x260 net/socket.c:1302
 vfs_poll include/linux/poll.h:90 [inline]
 __io_arm_poll_handler+0x1a8/0x780 fs/io_uring.c:5617
 io_arm_poll_handler+0x25e/0x3d0 fs/io_uring.c:5683
 io_queue_sqe_arm_apoll fs/io_uring.c:6995 [inline]
 __io_queue_sqe+0x16b/0x440 fs/io_uring.c:7033
 io_queue_sqe fs/io_uring.c:7060 [inline]
 io_submit_sqe+0x77a/0x47d3 fs/io_uring.c:7263
 io_submit_sqes+0x25d/0x670 fs/io_uring.c:7369
 __do_sys_io_uring_enter fs/io_uring.c:10070 [inline]
 __se_sys_io_uring_enter+0x212/0xb00 fs/io_uring.c:10012
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:10012
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x03 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 30398 Comm: syz-executor.3 Tainted: G        W         5.16.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/06 21:11 upstream 0fcfb00b28c0 579a8754 .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
ci2-upstream-kcsan-gce 2021/12/06 06:43 upstream 944207047ca4 a617004c .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
ci2-upstream-kcsan-gce 2021/12/05 01:00 upstream bbef3c7a63d2 a617004c .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
* Struck through repros no longer work on HEAD.