syzbot


KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (2)

Status: closed as invalid on 2022/10/12 17:53
Subsystems: net
[Documentation on labels]
First crash: 888d, last: 556d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (3) net 4 544d 549d 22/26 fixed on 2023/02/24 13:50
upstream KCSAN: data-race in kcm_rfree / unreserve_rx_kcm net 236 1107d 1298d 0/26 auto-closed as invalid on 2021/05/12 22:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kcm_rfree / unreserve_rx_kcm

write to 0xffff88812617b7b8 of 8 bytes by task 1831 on cpu 0:
 unreserve_rx_kcm+0x72/0x1f0 net/kcm/kcmsock.c:313
 kcm_rcv_strparser+0x2b5/0x3a0 net/kcm/kcmsock.c:373
 __strp_recv+0x64c/0xd20 net/strparser/strparser.c:301
 strp_recv+0x6d/0x80 net/strparser/strparser.c:335
 tcp_read_sock+0x13e/0x5a0 net/ipv4/tcp.c:1703
 strp_read_sock net/strparser/strparser.c:358 [inline]
 do_strp_work net/strparser/strparser.c:406 [inline]
 strp_work+0xe8/0x180 net/strparser/strparser.c:415
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

read to 0xffff88812617b7b8 of 8 bytes by task 8551 on cpu 1:
 kcm_rfree+0x14c/0x220 net/kcm/kcmsock.c:181
 skb_release_head_state+0x8e/0x160 net/core/skbuff.c:841
 skb_release_all net/core/skbuff.c:852 [inline]
 __kfree_skb net/core/skbuff.c:868 [inline]
 kfree_skb_reason+0x5c/0x260 net/core/skbuff.c:891
 kfree_skb include/linux/skbuff.h:1214 [inline]
 kcm_recvmsg+0x226/0x2b0 net/kcm/kcmsock.c:1161
 ____sys_recvmsg+0x162/0x2f0
 ___sys_recvmsg net/socket.c:2743 [inline]
 do_recvmmsg+0x2f1/0x710 net/socket.c:2837
 __sys_recvmmsg net/socket.c:2916 [inline]
 __do_sys_recvmmsg net/socket.c:2939 [inline]
 __se_sys_recvmmsg net/socket.c:2932 [inline]
 __x64_sys_recvmmsg+0xde/0x160 net/socket.c:2932
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0xffff888127ee5e00 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8551 Comm: syz-executor.3 Not tainted 6.0.0-syzkaller-10145-ge2302539dd4f-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
==================================================================

Crashes (141):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/10 23:43 upstream e2302539dd4f 5bcf0c31 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/10/09 00:00 upstream a6afa4199d3d aea5da89 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/10/07 23:04 upstream 4c86114194e6 79a59635 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/10/06 08:56 upstream 2bca25eaeba6 2c6543ad .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/10/01 15:53 upstream ffb4d94b4314 feb56351 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/10/01 05:29 upstream 70575e77839f feb56351 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/29 03:37 upstream 49c13ed0316d a41a2080 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/23 15:14 upstream bf682942cd26 0042f2b4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/22 03:07 upstream 06f7db949993 60af5050 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/16 09:55 upstream 3245cb65fd91 dd9a85ff .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/12 09:55 upstream 80e78fcce86d 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/11 20:23 upstream 4ed9c1e971b1 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/10 21:16 upstream b96fbd602d35 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/08 15:32 upstream 26b1224903b3 f3027468 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/06 14:08 upstream 53e99dcff61e 65aea2b9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/04 22:15 upstream 7e18e42e4b28 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/03 21:43 upstream 42cf58c272ee 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/03 05:21 upstream d895ec7938c4 49e94a20 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/09/01 19:37 upstream 2880e1a175b9 86c46e46 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/23 18:31 upstream 072e51356cd5 cea8b0f7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/19 23:45 upstream 50cd95ac4654 26a13b38 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/18 18:12 upstream 3b06a2755758 d58e263f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/16 01:39 upstream 7ebfc85e2cd7 7a7cb304 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/10 10:12 upstream d4252071b97d aaa9eaa0 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/08 19:15 upstream 3466f49dd0dd da700653 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/07 02:45 upstream 1612c382ffbd 88e3a122 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/08/05 09:42 upstream c040862bfbd9 a65a7ce9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/31 20:13 upstream 334c0ef6429f fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/31 09:07 upstream 6a010258447d fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/30 21:48 upstream 620725263f42 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/30 16:53 upstream e65c6a46df94 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/25 06:51 upstream e0dccc3b76fb 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/24 19:30 upstream af2c9ac24019 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/23 21:38 upstream 515f71412bb7 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/23 09:17 upstream 70664fc10c0d 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/23 00:06 upstream 4ba1329cbb94 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/21 23:02 upstream 68e77ffbfd06 5e6028b9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/21 07:53 upstream 353f7988dd84 6e67af9d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/20 19:48 upstream 353f7988dd84 88cb1383 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/19 21:24 upstream ca85855bdcae 775344bc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/18 21:22 upstream 80e19f34c288 ff988920 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2022/07/18 12:50 upstream ff6992735ade ff988920 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
2021/11/12 12:02 upstream ca2ef2d9f2aa 75b04091 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kcm_rfree / unreserve_rx_kcm
* Struck through repros no longer work on HEAD.