syzbot


KCSAN: data-race in skb_queue_tail / unix_dgram_poll (2)

Status: auto-closed as invalid on 2020/09/08 00:38
Subsystems: net
[Documentation on labels]
First crash: 1358d, last: 1358d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll (3) net 1 1168d 1168d 0/26 auto-closed as invalid on 2021/03/17 02:28
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll net 2 1633d 1641d 0/26 closed as invalid on 2019/11/19 13:24
upstream KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4) net 2 954d 959d 20/26 fixed on 2022/03/08 16:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in skb_queue_tail / unix_dgram_poll

write to 0xffff888090f238e0 of 4 bytes by task 27929 on cpu 1:
 __skb_insert include/linux/skbuff.h:1896 [inline]
 __skb_queue_before include/linux/skbuff.h:2001 [inline]
 __skb_queue_tail include/linux/skbuff.h:2034 [inline]
 skb_queue_tail+0x80/0xa0 net/core/skbuff.c:3144
 unix_dgram_sendmsg+0x1003/0x1500 net/unix/af_unix.c:1806
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2352
 ___sys_sendmsg net/socket.c:2406 [inline]
 __sys_sendmmsg+0x322/0x4b0 net/socket.c:2496
 __do_sys_sendmmsg net/socket.c:2525 [inline]
 __se_sys_sendmmsg net/socket.c:2522 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2522
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888090f238e0 of 4 bytes by task 27935 on cpu 0:
 skb_queue_len include/linux/skbuff.h:1827 [inline]
 unix_recvq_full net/unix/af_unix.c:194 [inline]
 unix_dgram_poll+0x30a/0x3b0 net/unix/af_unix.c:2733
 sock_poll+0x185/0x1a0 net/socket.c:1266
 vfs_poll include/linux/poll.h:90 [inline]
 do_pollfd fs/select.c:869 [inline]
 do_poll fs/select.c:917 [inline]
 do_sys_poll+0x606/0xbc0 fs/select.c:1011
 __do_sys_ppoll fs/select.c:1111 [inline]
 __se_sys_ppoll+0x169/0x1b0 fs/select.c:1091
 __x64_sys_ppoll+0x63/0x70 fs/select.c:1091
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27935 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/04 00:32 upstream e4cbce4d1317 96dd3623 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.