syzbot


KCSAN: data-race in unix_inflight / wait_for_unix_gc

Status: auto-closed as invalid on 2021/07/19 11:30
Subsystems: net
[Documentation on labels]
First crash: 1091d, last: 1040d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in unix_inflight / wait_for_unix_gc (2) net 3 937d 972d 0/26 auto-closed as invalid on 2021/10/30 17:17
upstream KCSAN: data-race in unix_inflight / wait_for_unix_gc (3) net 1 840d 826d 20/26 fixed on 2022/03/08 16:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in unix_inflight / wait_for_unix_gc

write to 0xffffffff8458b114 of 4 bytes by task 6368 on cpu 1:
 unix_inflight+0x1e8/0x280 net/unix/scm.c:63
 unix_attach_fds+0x10c/0x1e0 net/unix/scm.c:121
 unix_scm_to_skb net/unix/af_unix.c:1534 [inline]
 unix_dgram_sendmsg+0x5cb/0x1610 net/unix/af_unix.c:1677
 unix_seqpacket_sendmsg+0xc2/0x100 net/unix/af_unix.c:2055
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg net/socket.c:674 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2350
 __sys_sendmsg_sock+0x25/0x30 net/socket.c:2416
 io_sendmsg fs/io_uring.c:4372 [inline]
 io_issue_sqe+0x231a/0x6750 fs/io_uring.c:6140
 __io_queue_sqe+0xe9/0x360 fs/io_uring.c:6419
 io_queue_sqe fs/io_uring.c:6468 [inline]
 io_submit_sqe+0x1887/0x3360 fs/io_uring.c:6631
 io_submit_sqes+0x5bd/0xbd0 fs/io_uring.c:6739
 __do_sys_io_uring_enter fs/io_uring.c:9336 [inline]
 __se_sys_io_uring_enter+0x1e1/0xa80 fs/io_uring.c:9278
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9278
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffffffff8458b114 of 4 bytes by task 6366 on cpu 0:
 wait_for_unix_gc+0x24/0x140 net/unix/garbage.c:196
 unix_dgram_sendmsg+0x5f/0x1610 net/unix/af_unix.c:1632
 unix_seqpacket_sendmsg+0xc2/0x100 net/unix/af_unix.c:2055
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg net/socket.c:674 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2350
 __sys_sendmsg_sock+0x25/0x30 net/socket.c:2416
 io_sendmsg fs/io_uring.c:4372 [inline]
 io_issue_sqe+0x231a/0x6750 fs/io_uring.c:6140
 __io_queue_sqe+0xe9/0x360 fs/io_uring.c:6419
 io_queue_sqe fs/io_uring.c:6468 [inline]
 io_submit_sqe+0x1887/0x3360 fs/io_uring.c:6631
 io_submit_sqes+0x5bd/0xbd0 fs/io_uring.c:6739
 __do_sys_io_uring_enter fs/io_uring.c:9336 [inline]
 __se_sys_io_uring_enter+0x1e1/0xa80 fs/io_uring.c:9278
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9278
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x000001bc -> 0x000001c1

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 6366 Comm: syz-executor.1 Not tainted 5.13.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/14 11:21 upstream 009c9aa5be65 1ba81399 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in unix_inflight / wait_for_unix_gc
2021/06/09 12:18 upstream 368094df48e6 5c2fe346 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in unix_inflight / wait_for_unix_gc
2021/06/08 07:16 upstream 614124bea77e b718257f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in unix_inflight / wait_for_unix_gc
2021/05/19 14:44 upstream 8ac91e6c6033 a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in unix_inflight / wait_for_unix_gc
2021/04/24 01:13 upstream 18a3c5f7abfd 17f0b706 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in unix_inflight / wait_for_unix_gc
* Struck through repros no longer work on HEAD.