syzbot


KCSAN: data-race in dccp_disconnect / dccp_poll (3)

Status: auto-closed as invalid on 2022/09/17 15:17
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 135d, last: 114d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (4) 2 61d 79d 0/24 auto-obsoleted due to no activity on 2022/11/10 12:48
upstream KCSAN: data-race in dccp_disconnect / dccp_poll 3 364d 366d 0/24 auto-closed as invalid on 2022/01/10 21:18
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (2) 1 264d 264d 0/24 auto-closed as invalid on 2022/04/21 07:05

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dccp_disconnect / dccp_poll

write to 0xffff8881486850a2 of 1 bytes by task 4198 on cpu 0:
 dccp_disconnect+0x4d9/0x5f0 net/dccp/proto.c:285
 __inet_stream_connect+0x5cc/0x6d0 net/ipv4/af_inet.c:712
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:724
 __sys_connect_file+0xd3/0xe0 net/socket.c:1976
 io_connect+0x102/0x270 io_uring/net.c:1211
 io_issue_sqe+0x3b2/0x900 io_uring/io_uring.c:1576
 io_wq_submit_work+0x3de/0x580 io_uring/io_uring.c:1653
 io_worker_handle_work+0x547/0xbf0 io_uring/io-wq.c:587
 io_wqe_worker+0x202/0x930 io_uring/io-wq.c:634
 ret_from_fork+0x1f/0x30

read to 0xffff8881486850a2 of 1 bytes by task 4183 on cpu 1:
 dccp_poll+0xe0/0x3c0 net/dccp/proto.c:326
 sock_poll+0x23e/0x260 net/socket.c:1353
 vfs_poll include/linux/poll.h:88 [inline]
 io_poll_check_events+0x183/0x360 io_uring/poll.c:233
 io_apoll_task_func+0x1a/0xa0 io_uring/poll.c:295
 handle_tw_list+0x12a/0x180 io_uring/io_uring.c:984
 tctx_task_work+0xbd/0x360 io_uring/io_uring.c:1037
 task_work_run+0x8e/0x110 kernel/task_work.c:177
 get_signal+0xeca/0x1020 kernel/signal.c:2634
 arch_do_signal_or_restart+0x87/0x2d0 arch/x86/kernel/signal.c:869
 exit_to_user_mode_loop+0x78/0x130 kernel/entry/common.c:166
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x03 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 4183 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
==================================================================

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/08/13 15:11 upstream 7ebfc85e2cd7 8dfcaa3d .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
ci2-upstream-kcsan-gce 2022/07/31 00:56 upstream 620725263f42 fef302b1 .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
ci2-upstream-kcsan-gce 2022/07/24 05:13 upstream 515f71412bb7 22343af4 .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
* Struck through repros no longer work on HEAD.