syzbot


KCSAN: data-race in fasync_remove_entry / sock_wake_async

Status: auto-closed as invalid on 2020/05/26 22:23
Subsystems: fs
[Documentation on labels]
First crash: 1471d, last: 1471d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (4) fs 1 1314d 1314d 0/26 auto-closed as invalid on 2020/09/26 10:37
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (10) fs 1 395d 395d 0/26 auto-obsoleted due to no activity on 2023/04/24 02:17
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (5) fs 3 1041d 1078d 0/26 auto-closed as invalid on 2021/06/26 18:07
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (8) fs 1 737d 737d 0/26 auto-closed as invalid on 2022/04/26 03:12
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (6) fs 2 837d 864d 0/26 auto-closed as invalid on 2022/01/16 09:31
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (2) fs 1 1398d 1398d 0/26 closed as invalid on 2020/06/18 14:13
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (9) fs 2 521d 527d 0/26 auto-obsoleted due to no activity on 2022/11/28 02:38
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (11) fs 1 301d 301d 0/26 auto-obsoleted due to no activity on 2023/07/06 10:32
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (3) fs 1 1366d 1366d 0/26 auto-closed as invalid on 2020/08/05 10:16
upstream KCSAN: data-race in fasync_remove_entry / sock_wake_async (7) fs 1 783d 783d 0/26 auto-closed as invalid on 2022/03/11 19:41

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async

write to 0xffff888128cfa9d8 of 8 bytes by task 18120 on cpu 0:
 fasync_remove_entry+0xb7/0x120 fs/fcntl.c:882
 fasync_helper+0xc9/0xd6 fs/fcntl.c:981
 sock_fasync+0x74/0x100 net/socket.c:1308
 __fput+0x448/0x4f0 fs/file_table.c:277
 ____fput+0x1b/0x30 fs/file_table.c:313
 task_work_run+0xf5/0x130 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x2ae/0x2c0 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:278 [inline]
 do_syscall_64+0x36e/0x390 arch/x86/entry/common.c:304
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888128cfa9d8 of 8 bytes by task 18117 on cpu 1:
 sock_wake_async+0x37/0x100 net/socket.c:1323
 sk_wake_async include/net/sock.h:2200 [inline]
 sk_wake_async include/net/sock.h:2196 [inline]
 unix_release_sock+0x5d2/0x670 net/unix/af_unix.c:553
 unix_release+0x3a/0x60 net/unix/af_unix.c:862
 __sock_release+0x85/0x160 net/socket.c:605
 sock_close+0x1f/0x30 net/socket.c:1283
 __fput+0x1c3/0x4f0 fs/file_table.c:280
 ____fput+0x1b/0x30 fs/file_table.c:313
 task_work_run+0xf5/0x130 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x2ae/0x2c0 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:278 [inline]
 do_syscall_64+0x36e/0x390 arch/x86/entry/common.c:304
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 18117 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/17 22:15 https://github.com/google/ktsan.git kcsan 941e0d917bbf 97bc55ce .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.