syzbot


KCSAN: data-race in tcp_disconnect / tcp_poll (4)

Status: auto-closed as invalid on 2022/04/12 08:00
Subsystems: net
[Documentation on labels]
First crash: 814d, last: 778d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (5) net 1 680d 680d 0/26 auto-closed as invalid on 2022/07/18 21:08
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (6) net 1 574d 574d 0/26 auto-obsoleted due to no activity on 2022/11/01 19:29
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (7) net 2 373d 352d 22/26 fixed on 2023/07/01 16:05
upstream KCSAN: data-race in tcp_disconnect / tcp_poll net 2 1219d 1230d 0/26 auto-closed as invalid on 2021/01/25 19:57
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (2) net 1 929d 929d 0/26 auto-closed as invalid on 2021/11/12 06:31
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (3) net 4 862d 890d 0/26 auto-closed as invalid on 2022/01/18 12:46

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tcp_disconnect / tcp_poll

write to 0xffff888134758d2a of 1 bytes by task 10962 on cpu 1:
 tcp_disconnect+0x5ee/0xef0 net/ipv4/tcp.c:3018
 __inet_stream_connect+0x621/0x6e0 net/ipv4/af_inet.c:712
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:724
 __sys_connect_file+0xd3/0xe0 net/socket.c:1900
 io_connect fs/io_uring.c:5353 [inline]
 io_issue_sqe+0x41a9/0x9610 fs/io_uring.c:6792
 io_wq_submit_work+0x1c5/0x370 fs/io_uring.c:6916
 io_worker_handle_work+0x51b/0xc10 fs/io-wq.c:588
 io_wqe_worker+0x1bc/0x4f0 fs/io-wq.c:639
 ret_from_fork+0x1f/0x30

read to 0xffff888134758d2a of 1 bytes by task 10955 on cpu 0:
 tcp_poll+0xfa/0x580 net/ipv4/tcp.c:539
 sock_poll+0x23e/0x260 net/socket.c:1306
 vfs_poll include/linux/poll.h:88 [inline]
 __io_arm_poll_handler+0x19c/0x8d0 fs/io_uring.c:5755
 io_arm_poll_handler+0x1fb/0x360 fs/io_uring.c:5839
 io_queue_sqe_arm_apoll fs/io_uring.c:7075 [inline]
 __io_queue_sqe+0x1a3/0x6a0 fs/io_uring.c:7113
 io_queue_sqe+0x46/0x550 fs/io_uring.c:7140
 io_submit_sqe+0x796/0x4b34 fs/io_uring.c:7348
 io_submit_sqes+0x25f/0x560 fs/io_uring.c:7454
 __do_sys_io_uring_enter fs/io_uring.c:10162 [inline]
 __se_sys_io_uring_enter+0x212/0xb00 fs/io_uring.c:10104
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:10104
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x03 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10955 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/08 07:55 upstream ea4424be1688 7bdd8b2c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/26 23:09 upstream 9137eda53752 45a13a73 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/22 22:00 upstream 917bbdb107f8 6e821dbf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/21 20:16 upstream 038101e6b2cd 6e821dbf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/12 12:08 upstream 83e396641110 8b9ca619 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/12 00:06 upstream 1d41d2e82623 8b9ca619 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/02/05 01:08 upstream 86286e486cbd e13a05ed .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2022/01/31 14:20 upstream 26291c54e111 a491ad2d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
* Struck through repros no longer work on HEAD.