syzbot


KCSAN: data-race in dccp_poll / dccp_rcv_reset (2)

Status: auto-obsoleted due to no activity on 2022/11/10 15:55
Subsystems: dccp
[Documentation on labels]
First crash: 703d, last: 567d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dccp_poll / dccp_rcv_reset dccp 1 801d 801d 0/26 auto-closed as invalid on 2022/03/21 09:54

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dccp_poll / dccp_rcv_reset

write to 0xffff888128e670a2 of 1 bytes by interrupt on cpu 1:
 dccp_fin net/dccp/input.c:38 [inline]
 dccp_rcv_reset+0xad/0x190 net/dccp/input.c:152
 dccp_rcv_state_process+0x2fb/0x4d0 net/dccp/input.c:662
 dccp_v4_do_rcv+0x8f/0xe0 net/dccp/ipv4.c:716
 sk_backlog_rcv include/net/sock.h:1109 [inline]
 __sk_receive_skb+0x22e/0x590 net/core/sock.c:565
 dccp_v4_rcv+0xc55/0xe90 net/dccp/ipv4.c:910
 ip_protocol_deliver_rcu+0x23f/0x490 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x126/0x160 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ip_local_deliver+0x100/0x1b0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:455 [inline]
 ip_rcv_finish net/ipv4/ip_input.c:444 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ip_rcv+0x1b1/0x260 net/ipv4/ip_input.c:564
 __netif_receive_skb_one_core net/core/dev.c:5485 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599
 process_backlog+0x23f/0x3b0 net/core/dev.c:5927
 __napi_poll+0x65/0x390 net/core/dev.c:6494
 napi_poll net/core/dev.c:6561 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6672
 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571
 __irq_exit_rcu kernel/softirq.c:650 [inline]
 irq_exit_rcu+0x41/0x70 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x8d/0xb0 arch/x86/kernel/apic/apic.c:1107
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
 finish_task_switch+0xcf/0x260 kernel/sched/core.c:5063
 schedule_tail+0x6/0x50 kernel/sched/core.c:5119
 ret_from_fork+0x8/0x30 arch/x86/entry/entry_64.S:291

read to 0xffff888128e670a2 of 1 bytes by task 27373 on cpu 0:
 dccp_poll+0xe0/0x3c0 net/dccp/proto.c:326
 sock_poll+0x23e/0x260 net/socket.c:1353
 vfs_poll include/linux/poll.h:88 [inline]
 io_poll_check_events+0x183/0x360 io_uring/poll.c:233
 io_apoll_task_func+0x1a/0xa0 io_uring/poll.c:295
 handle_tw_list+0x12a/0x180 io_uring/io_uring.c:984
 tctx_task_work+0x72/0x360 io_uring/io_uring.c:1031
 task_work_run+0x8e/0x110 kernel/task_work.c:177
 get_signal+0xeca/0x1020 kernel/signal.c:2634
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00 -> 0x03

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27373 Comm: syz-executor.0 Not tainted 6.0.0-syzkaller-05118-g833477fce7a1-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
==================================================================

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/06 15:44 upstream 833477fce7a1 80b58a42 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/10/03 12:44 upstream a962b54e162c feb56351 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/09/26 22:28 upstream f76349cf4145 d59ba983 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/09/11 08:07 upstream b96fbd602d35 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/08/16 21:30 upstream 7ebfc85e2cd7 9e4b39c2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/08/12 01:17 upstream 2ae08b36c06e 21724cb2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/07/29 01:39 upstream 33ea1340bafe fb95c74d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/07/13 15:16 upstream b047602d579b 5d921b08 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/07/11 23:02 upstream 5a29232d870d da3d6955 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/07/09 13:55 upstream e5524c2a1fc4 b5765a15 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/06/14 11:30 upstream b13baccc3850 0f087040 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/06/08 05:45 upstream 9886142c7a22 b2706118 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
2022/05/23 23:31 upstream 140e40e39a29 e7f9308d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dccp_poll / dccp_rcv_reset
* Struck through repros no longer work on HEAD.