syzbot


KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (5)

Status: auto-closed as invalid on 2021/12/08 03:28
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 485d, last: 395d
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (3) 1 661d 661d 0/24 auto-closed as invalid on 2021/03/16 10:18
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (7) 1 204d 204d 0/24 auto-closed as invalid on 2022/06/17 02:34
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock 1 959d 959d 0/24 auto-closed as invalid on 2020/06/18 13:53
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (2) 1 755d 721d 0/24 auto-closed as invalid on 2020/12/25 11:24
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (4) 5 557d 596d 0/24 auto-closed as invalid on 2021/06/29 03:52
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (6) 1 321d 321d 0/24 auto-closed as invalid on 2022/02/19 07:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock

write to 0xffff888137d3aa78 of 1 bytes by task 22258 on cpu 0:
 unix_release_sock+0x298/0x680 net/unix/af_unix.c:565
 unix_release+0x4e/0x70 net/unix/af_unix.c:949
 __sock_release net/socket.c:649 [inline]
 sock_close+0x6c/0x150 net/socket.c:1314
 __fput+0x295/0x520 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0x8e/0x110 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:175 [inline]
 exit_to_user_mode_prepare+0x160/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888137d3aa78 of 1 bytes by task 22284 on cpu 1:
 __skb_wait_for_more_packets+0xe8/0x2f0 net/core/datagram.c:106
 __unix_dgram_recvmsg+0x21c/0x8c0 net/unix/af_unix.c:2316
 unix_dgram_recvmsg net/unix/af_unix.c:2401 [inline]
 unix_seqpacket_recvmsg+0x5a/0x70 net/unix/af_unix.c:2269
 sock_recvmsg_nosec net/socket.c:944 [inline]
 sock_recvmsg net/socket.c:962 [inline]
 sock_read_iter+0x19d/0x1e0 net/socket.c:1035
 call_read_iter include/linux/fs.h:2155 [inline]
 new_sync_read fs/read_write.c:400 [inline]
 vfs_read+0x66c/0x750 fs/read_write.c:481
 ksys_read+0xd9/0x190 fs/read_write.c:619
 __do_sys_read fs/read_write.c:629 [inline]
 __se_sys_read fs/read_write.c:627 [inline]
 __x64_sys_read+0x3e/0x50 fs/read_write.c:627
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x03

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 22284 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/11/03 03:19 upstream bfc484fe6abb 17f3edd2 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/10/13 14:58 upstream f4d0cc426f77 9d56e7dd .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/10/01 04:39 upstream 4de593fb965f 1d849ab4 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/09/23 08:10 upstream 58e2cf5d7946 8cac236e .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/09/08 04:34 upstream 0bcfe68b8767 064c9eb7 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/09/07 10:52 upstream 4b93c544e90e 6ca60148 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
ci2-upstream-kcsan-gce 2021/08/04 16:30 upstream d5ad8ec3cfb5 b97d64c9 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
* Struck through repros no longer work on HEAD.