syzbot


KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown (3)

Status: auto-closed as invalid on 2021/10/24 10:54
Subsystems: net
[Documentation on labels]
First crash: 981d, last: 949d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown (5) net 1 580d 580d 0/26 auto-obsoleted due to no activity on 2022/10/28 02:20
upstream KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown (2) net 1 1036d 1036d 0/26 auto-closed as invalid on 2021/07/29 06:04
upstream KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown (6) net 8 381d 528d 0/26 auto-obsoleted due to no activity on 2023/05/15 10:22
upstream KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown net 1 1394d 1394d 0/26 auto-closed as invalid on 2020/08/04 22:26
upstream KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown (4) net 5 645d 672d 0/26 auto-closed as invalid on 2022/08/23 19:49

Sample crash report:
==================================================================
BUG: KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown

write to 0xffff88813c1f0e70 of 1 bytes by task 23475 on cpu 0:
 unix_shutdown+0x21d/0x3f0 net/unix/af_unix.c:2867
 __sys_shutdown_sock net/socket.c:2248 [inline]
 __sys_shutdown net/socket.c:2260 [inline]
 __do_sys_shutdown net/socket.c:2268 [inline]
 __se_sys_shutdown+0xf6/0x140 net/socket.c:2266
 __x64_sys_shutdown+0x2d/0x40 net/socket.c:2266
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88813c1f0e70 of 1 bytes by task 23513 on cpu 1:
 sock_alloc_send_pskb+0x113/0x4e0 net/core/sock.c:2460
 unix_dgram_sendmsg+0x4a4/0x1650 net/unix/af_unix.c:1774
 unix_seqpacket_sendmsg+0xcc/0x110 net/unix/af_unix.c:2221
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg net/socket.c:724 [inline]
 ____sys_sendmsg+0x39a/0x510 net/socket.c:2409
 __sys_sendmsg_sock+0x25/0x30 net/socket.c:2475
 io_sendmsg fs/io_uring.c:4772 [inline]
 io_issue_sqe+0x2660/0x6300 fs/io_uring.c:6666
 __io_queue_sqe+0x34/0x460 fs/io_uring.c:6952
 io_queue_sqe fs/io_uring.c:7003 [inline]
 io_submit_sqe+0x88b/0x3e90 fs/io_uring.c:7179
 io_submit_sqes+0x505/0xde0 fs/io_uring.c:7285
 __do_sys_io_uring_enter fs/io_uring.c:9943 [inline]
 __se_sys_io_uring_enter+0x20d/0xb30 fs/io_uring.c:9885
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9885
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 23513 Comm: syz-executor.4 Tainted: G        W         5.15.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/09/19 10:45 upstream d4d016caa4b8 70b76c1d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown
2021/08/30 08:15 upstream 537b57bd5a20 be2c130d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown
2021/08/17 15:27 upstream 794c7931a242 a2fe1cb5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in sock_alloc_send_pskb / unix_shutdown
* Struck through repros no longer work on HEAD.