syzbot


KCSAN: data-race in datagram_poll / inet_shutdown (3)

Status: auto-closed as invalid on 2021/10/02 11:08
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 485d, last: 465d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in datagram_poll / inet_shutdown 1 1110d 1110d 0/24 auto-closed as invalid on 2020/01/31 06:57
upstream KCSAN: data-race in datagram_poll / inet_shutdown (2) 1 558d 558d 0/24 auto-closed as invalid on 2021/06/30 16:26

Sample crash report:
==================================================================
BUG: KCSAN: data-race in datagram_poll / inet_shutdown

write to 0xffff888100db03b0 of 1 bytes by task 28606 on cpu 0:
 inet_shutdown+0x148/0x200 net/ipv4/af_inet.c:891
 __sys_shutdown_sock net/socket.c:2231 [inline]
 __sys_shutdown net/socket.c:2243 [inline]
 __do_sys_shutdown net/socket.c:2251 [inline]
 __se_sys_shutdown+0xf6/0x140 net/socket.c:2249
 __x64_sys_shutdown+0x2d/0x40 net/socket.c:2249
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888100db03b0 of 1 bytes by task 28564 on cpu 1:
 datagram_poll+0xe4/0x290 net/core/datagram.c:811
 udp_poll+0x24/0x100 net/ipv4/udp.c:2858
 sock_poll+0x23e/0x260 net/socket.c:1288
 vfs_poll include/linux/poll.h:90 [inline]
 __io_arm_poll_handler+0x1af/0x5c0 fs/io_uring.c:5153
 io_poll_add+0x61/0x290 fs/io_uring.c:5443
 io_issue_sqe+0xcb3/0x64b0 fs/io_uring.c:6193
 __io_queue_sqe+0xe7/0x360 fs/io_uring.c:6470
 io_queue_sqe fs/io_uring.c:6513 [inline]
 io_submit_sqe+0x1695/0x3400 fs/io_uring.c:6668
 io_submit_sqes+0x822/0xe50 fs/io_uring.c:6784
 __do_sys_io_uring_enter fs/io_uring.c:9392 [inline]
 __se_sys_io_uring_enter+0x213/0xae0 fs/io_uring.c:9334
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9334
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 28564 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/08/28 11:00 upstream 64b4fc45bea6 d5a29e53 .config log report info KCSAN: data-race in datagram_poll / inet_shutdown
ci2-upstream-kcsan-gce 2021/08/08 07:43 upstream 85a90500f9a1 6972b106 .config log report info KCSAN: data-race in datagram_poll / inet_shutdown
* Struck through repros no longer work on HEAD.