syzbot


KCSAN: data-race in rxrpc_activate_one_channel / rxrpc_connect_call

Status: auto-closed as invalid on 2022/04/17 14:33
Subsystems: net afs
[Documentation on labels]
Reported-by: syzbot+71ad20d9b91fc9a21fe2@syzkaller.appspotmail.com
First crash: 636d, last: 636d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in rxrpc_activate_one_channel / rxrpc_connect_call

write to 0xffff8881447cdd50 of 4 bytes by task 20595 on cpu 0:
 rxrpc_activate_one_channel+0x210/0x3f0 net/rxrpc/conn_client.c:539
 rxrpc_activate_channels_locked+0x265/0x2c0 net/rxrpc/conn_client.c:614
 rxrpc_activate_channels net/rxrpc/conn_client.c:631 [inline]
 rxrpc_wait_for_channel+0x18a/0x4a0 net/rxrpc/conn_client.c:657
 rxrpc_connect_call+0x4a6/0xac0 net/rxrpc/conn_client.c:715
 rxrpc_new_client_call+0x519/0x9b0 net/rxrpc/call_object.c:330
 rxrpc_new_client_call_for_sendmsg net/rxrpc/sendmsg.c:605 [inline]
 rxrpc_do_sendmsg+0x7b0/0xcf0 net/rxrpc/sendmsg.c:658
 rxrpc_sendmsg+0x3d7/0x4c0 net/rxrpc/af_rxrpc.c:561
 sock_sendmsg_nosec net/socket.c:705 [inline]
 sock_sendmsg net/socket.c:725 [inline]
 ____sys_sendmsg+0x39a/0x510 net/socket.c:2413
 ___sys_sendmsg net/socket.c:2467 [inline]
 __sys_sendmmsg+0x267/0x4c0 net/socket.c:2553
 __do_sys_sendmmsg net/socket.c:2582 [inline]
 __se_sys_sendmmsg net/socket.c:2579 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2579
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881447cdd50 of 4 bytes by task 20596 on cpu 1:
 rxrpc_connect_call+0x47b/0xac0 net/rxrpc/conn_client.c:714
 rxrpc_new_client_call+0x519/0x9b0 net/rxrpc/call_object.c:330
 rxrpc_new_client_call_for_sendmsg net/rxrpc/sendmsg.c:605 [inline]
 rxrpc_do_sendmsg+0x7b0/0xcf0 net/rxrpc/sendmsg.c:658
 rxrpc_sendmsg+0x3d7/0x4c0 net/rxrpc/af_rxrpc.c:561
 sock_sendmsg_nosec net/socket.c:705 [inline]
 sock_sendmsg net/socket.c:725 [inline]
 ____sys_sendmsg+0x39a/0x510 net/socket.c:2413
 ___sys_sendmsg net/socket.c:2467 [inline]
 __sys_sendmmsg+0x267/0x4c0 net/socket.c:2553
 __do_sys_sendmmsg net/socket.c:2582 [inline]
 __se_sys_sendmmsg net/socket.c:2579 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2579
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000001 -> 0x00000002

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 20596 Comm: syz-executor.3 Not tainted 5.17.0-rc7-syzkaller-00235-gaad611a868d1-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/13 14:32 upstream aad611a868d1 9e8eaa75 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in rxrpc_activate_one_channel / rxrpc_connect_call
* Struck through repros no longer work on HEAD.