syzbot


KCSAN: data-race in unix_poll / unix_release_sock (6)

Status: auto-obsoleted due to no activity on 2023/05/14 22:15
Subsystems: net
[Documentation on labels]
First crash: 479d, last: 383d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in unix_poll / unix_release_sock (3) net 1 658d 658d 0/26 auto-closed as invalid on 2022/08/12 09:16
upstream KCSAN: data-race in unix_poll / unix_release_sock (5) net 1 574d 574d 0/26 auto-obsoleted due to no activity on 2022/11/04 19:08
upstream KCSAN: data-race in unix_poll / unix_release_sock net 1 1107d 1107d 0/26 auto-closed as invalid on 2021/05/21 02:26
upstream KCSAN: data-race in unix_poll / unix_release_sock (4) net 1 612d 612d 0/26 auto-closed as invalid on 2022/09/28 03:19
upstream KCSAN: data-race in unix_poll / unix_release_sock (2) net 1 1066d 1066d 0/26 auto-closed as invalid on 2021/06/30 15:16

Sample crash report:
==================================================================
BUG: KCSAN: data-race in unix_poll / unix_release_sock

write to 0xffff8881428b7960 of 4 bytes by task 5642 on cpu 1:
 unix_release_sock+0x3ff/0x780 net/unix/af_unix.c:633
 unix_release+0x52/0x70 net/unix/af_unix.c:1042
 __sock_release net/socket.c:653 [inline]
 sock_close+0x70/0x150 net/socket.c:1395
 __fput+0x245/0x570 fs/file_table.c:321
 ____fput+0x15/0x20 fs/file_table.c:349
 task_work_run+0x123/0x160 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xd1/0xe0 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff8881428b7960 of 4 bytes by task 5650 on cpu 0:
 unix_poll+0x71/0x250 net/unix/af_unix.c:3168
 sock_poll+0x253/0x270 net/socket.c:1383
 vfs_poll include/linux/poll.h:88 [inline]
 __io_arm_poll_handler+0x205/0xe30 io_uring/poll.c:600
 io_arm_poll_handler+0x48b/0x5e0 io_uring/poll.c:735
 io_queue_async+0x85/0x4a0 io_uring/io_uring.c:2057
 io_queue_sqe io_uring/io_uring.c:2088 [inline]
 io_req_task_submit+0x11c/0x130 io_uring/io_uring.c:1425
 handle_tw_list io_uring/io_uring.c:1184 [inline]
 tctx_task_work+0x1fe/0x4d0 io_uring/io_uring.c:1246
 task_work_run+0x123/0x160 kernel/task_work.c:179
 get_signal+0xe64/0xff0 kernel/signal.c:2635
 arch_do_signal_or_restart+0x89/0x2a0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop+0x6f/0xe0 kernel/entry/common.c:168
 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00000000 -> 0x00000068

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 5650 Comm: syz-executor.3 Not tainted 6.3.0-rc5-syzkaller-00247-gcdc9718d5e59 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/04/09 22:11 upstream cdc9718d5e59 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in unix_poll / unix_release_sock
2023/04/03 13:45 upstream 7e364e56293b 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in unix_poll / unix_release_sock
2023/03/09 08:39 upstream 6a98c9cae232 f08b59ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in unix_poll / unix_release_sock
2023/03/02 02:16 upstream ee3f96b16468 f8902b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in unix_poll / unix_release_sock
2023/01/04 07:20 upstream 69b41ac87e4a 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in unix_poll / unix_release_sock
* Struck through repros no longer work on HEAD.