syzbot


KCSAN: data-race in do_epoll_wait / ep_poll_callback (2)

Status: auto-closed as invalid on 2021/03/14 02:07
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 727d, last: 724d
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (7) 1 361d 361d 0/24 auto-closed as invalid on 2022/03/12 11:24
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (6) 1 403d 403d 0/24 auto-closed as invalid on 2022/01/29 14:05
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (5) 2 509d 519d 0/24 auto-closed as invalid on 2021/10/15 22:14
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (4) 1 602d 602d 0/24 auto-closed as invalid on 2021/07/14 13:56
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (3) 1 672d 672d 0/24 auto-closed as invalid on 2021/05/17 11:16
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback (8) 1 311d 311d 0/24 auto-closed as invalid on 2022/05/01 05:30
upstream KCSAN: data-race in do_epoll_wait / ep_poll_callback 221 912d 949d 0/24 auto-closed as invalid on 2020/08/31 10:40

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_epoll_wait / ep_poll_callback

write to 0xffff8881012d54e8 of 4 bytes by task 14792 on cpu 1:
 ep_send_events fs/eventpoll.c:1692 [inline]
 ep_poll fs/eventpoll.c:1792 [inline]
 do_epoll_wait+0x843/0xf00 fs/eventpoll.c:2220
 __do_sys_epoll_wait fs/eventpoll.c:2232 [inline]
 __se_sys_epoll_wait fs/eventpoll.c:2227 [inline]
 __x64_sys_epoll_wait+0xf6/0x120 fs/eventpoll.c:2227
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8881012d54e8 of 4 bytes by task 14805 on cpu 0:
 ep_poll_callback+0x415/0x4e0 fs/eventpoll.c:1200
 __wake_up_common+0xbc/0x130 kernel/sched/wait.c:108
 __wake_up_common_lock kernel/sched/wait.c:138 [inline]
 __wake_up_sync_key+0x83/0xc0 kernel/sched/wait.c:205
 unix_write_space+0xc9/0x140 net/unix/af_unix.c:464
 sock_wfree+0xaf/0x150 net/core/sock.c:2052
 unix_destruct_scm+0x164/0x190 net/unix/scm.c:150
 skb_release_head_state+0xb3/0x170 net/core/skbuff.c:665
 skb_release_all net/core/skbuff.c:676 [inline]
 __kfree_skb+0x14/0x150 net/core/skbuff.c:692
 kfree_skb+0x50/0x170 net/core/skbuff.c:710
 unix_release_sock+0x505/0x650 net/unix/af_unix.c:568
 unix_release+0x2f/0x50 net/unix/af_unix.c:859
 __sock_release net/socket.c:597 [inline]
 sock_close+0x6c/0x150 net/socket.c:1256
 __fput+0x24e/0x4e0 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0x8e/0x110 kernel/task_work.c:140
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
 exit_to_user_mode_prepare+0x17c/0x1b0 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 14805 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci2-upstream-kcsan-gce 2021/02/07 01:59 upstream 964d069f93c4 0655e081 .config console log report info KCSAN: data-race in do_epoll_wait / ep_poll_callback
ci2-upstream-kcsan-gce 2021/02/04 17:03 upstream 61556703b610 42b90a7c .config console log report info KCSAN: data-race in do_epoll_wait / ep_poll_callback
* Struck through repros no longer work on HEAD.