syzbot


KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (6)

Status: auto-closed as invalid on 2022/10/02 20:43
Subsystems: net
[Documentation on labels]
First crash: 865d, last: 607d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (4) net 4 1189d 1214d 0/26 auto-closed as invalid on 2021/02/27 15:17
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (2) net 1 1405d 1404d 0/26 auto-closed as invalid on 2020/07/27 00:03
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (5) net 2 1138d 1148d 0/26 auto-closed as invalid on 2021/04/19 17:00
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree net 21 1432d 1620d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (3) net 1 1316d 1316d 0/26 auto-closed as invalid on 2020/10/23 10:46
upstream KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (7) net 1 556d 556d 22/26 fixed on 2023/02/24 13:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kcm_rcv_strparser / kcm_rfree

write to 0xffff8881238447c0 of 1 bytes by task 46 on cpu 1:
 reserve_rx_kcm net/kcm/kcmsock.c:283 [inline]
 kcm_rcv_strparser+0x250/0x3a0 net/kcm/kcmsock.c:363
 __strp_recv+0x64c/0xd20 net/strparser/strparser.c:301
 strp_recv+0x6d/0x80 net/strparser/strparser.c:335
 tcp_read_sock+0x13e/0x5a0 net/ipv4/tcp.c:1704
 strp_read_sock net/strparser/strparser.c:358 [inline]
 do_strp_work net/strparser/strparser.c:406 [inline]
 strp_work+0xe8/0x180 net/strparser/strparser.c:415
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read to 0xffff8881238447c0 of 1 bytes by task 2660 on cpu 0:
 kcm_rfree+0x121/0x220 net/kcm/kcmsock.c:181
 skb_release_head_state+0x8e/0x160 net/core/skbuff.c:739
 skb_release_all net/core/skbuff.c:750 [inline]
 __kfree_skb+0x14/0x150 net/core/skbuff.c:766
 kfree_skb_reason+0x52/0x170 net/core/skbuff.c:788
 kfree_skb include/linux/skbuff.h:1206 [inline]
 kcm_recvmsg+0x226/0x2b0 net/kcm/kcmsock.c:1161
 ____sys_recvmsg+0x162/0x2f0
 ___sys_recvmsg net/socket.c:2743 [inline]
 do_recvmmsg+0x2f1/0x710 net/socket.c:2837
 __sys_recvmmsg net/socket.c:2916 [inline]
 __do_sys_recvmmsg net/socket.c:2939 [inline]
 __se_sys_recvmmsg net/socket.c:2932 [inline]
 __x64_sys_recvmmsg+0xde/0x160 net/socket.c:2932
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x01 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 2660 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-00327-g8379c0b31fbc-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
==================================================================

Crashes (22):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/28 20:43 upstream 8379c0b31fbc 07177916 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/08/22 19:47 upstream 1c23f9e627a7 26a13b38 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/08/18 21:24 upstream 573ae4f13f63 26a13b38 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/07/30 02:53 upstream e65c6a46df94 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/07/24 18:04 upstream af2c9ac24019 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/07/21 22:52 upstream 68e77ffbfd06 5e6028b9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/07/10 00:56 upstream b1c428b6c368 b5765a15 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/06/22 19:00 upstream 3abc3ae553c7 912f5df7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/05/31 20:01 upstream 8ab2afa23bd1 af70c3a9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/05/26 06:28 upstream d7227785e384 3037caa9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/05/01 19:29 upstream b2da7df52e16 2df221f6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/04/27 18:21 upstream 46cf2c613f4b 1fa34c1b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/04/21 14:44 upstream b253435746d9 2738b391 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/03/20 18:31 upstream 14702b3b2438 e2d91b1d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/02/23 13:33 upstream 5c1ee569660d 6e821dbf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/02/02 06:38 upstream 9f7fb8de5d9b 4ebb2798 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/01/21 05:02 upstream 2c271fe77d52 ab3d9f17 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/01/10 18:42 upstream df0cc57e057f ddb0ab8c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2022/01/03 10:51 upstream c9e6606c7fe9 e1768e9c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2021/12/26 10:01 upstream 438645193e59 e4f103c4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2021/12/22 23:49 upstream bc491fb12513 6caa12e4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
2021/12/13 11:29 upstream 2585cf9dfaad 49ca1f59 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rcv_strparser / kcm_rfree
* Struck through repros no longer work on HEAD.