syzbot


KCSAN: data-race in dccp_disconnect / dccp_poll (2)

Status: auto-closed as invalid on 2022/04/21 07:05
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 264d, last: 264d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (4) 2 61d 79d 0/24 auto-obsoleted due to no activity on 2022/11/10 12:48
upstream KCSAN: data-race in dccp_disconnect / dccp_poll 3 364d 366d 0/24 auto-closed as invalid on 2022/01/10 21:18
upstream KCSAN: data-race in dccp_disconnect / dccp_poll (3) 3 114d 135d 0/24 auto-closed as invalid on 2022/09/17 15:17

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dccp_disconnect / dccp_poll

write to 0xffff8881084c922a of 1 bytes by task 6748 on cpu 1:
 dccp_disconnect+0x4d5/0x5e0 net/dccp/proto.c:285
 __inet_stream_connect+0x621/0x6e0 net/ipv4/af_inet.c:712
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:724
 __sys_connect_file+0xd3/0xe0 net/socket.c:1900
 io_connect fs/io_uring.c:5353 [inline]
 io_issue_sqe+0x41a9/0x9610 fs/io_uring.c:6792
 __io_queue_sqe+0x20/0x6a0 fs/io_uring.c:7098
 io_queue_sqe+0x46/0x550 fs/io_uring.c:7140
 io_submit_sqe+0x796/0x4b34 fs/io_uring.c:7348
 io_submit_sqes+0x25f/0x560 fs/io_uring.c:7454
 __io_sq_thread fs/io_uring.c:7520 [inline]
 io_sq_thread+0x61d/0xc00 fs/io_uring.c:7589
 ret_from_fork+0x1f/0x30

read to 0xffff8881084c922a of 1 bytes by task 6754 on cpu 0:
 dccp_poll+0xe0/0x3c0 net/dccp/proto.c:326
 sock_poll+0x23e/0x260 net/socket.c:1306
 vfs_poll include/linux/poll.h:88 [inline]
 __io_arm_poll_handler+0x19c/0x8d0 fs/io_uring.c:5755
 io_arm_poll_handler+0x1fb/0x360 fs/io_uring.c:5839
 io_queue_sqe_arm_apoll fs/io_uring.c:7075 [inline]
 __io_queue_sqe+0x1a3/0x6a0 fs/io_uring.c:7113
 io_queue_sqe+0x46/0x550 fs/io_uring.c:7140
 io_submit_sqe+0x796/0x4b34 fs/io_uring.c:7348
 io_submit_sqes+0x25f/0x560 fs/io_uring.c:7454
 __io_sq_thread fs/io_uring.c:7520 [inline]
 io_sq_thread+0x61d/0xc00 fs/io_uring.c:7589
 ret_from_fork+0x1f/0x30

value changed: 0x03 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 6754 Comm: iou-sqp-6747 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/03/17 06:57 upstream 56e337f2cf13 dfa9a8ed .config log report info KCSAN: data-race in dccp_disconnect / dccp_poll
* Struck through repros no longer work on HEAD.