syzbot


KCSAN: data-race in tcp_disconnect / tcp_poll (3)

Status: auto-closed as invalid on 2022/01/18 12:46
Subsystems: net
[Documentation on labels]
First crash: 889d, last: 861d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (5) net 1 679d 679d 0/26 auto-closed as invalid on 2022/07/18 21:08
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (4) net 8 777d 813d 0/26 auto-closed as invalid on 2022/04/12 08:00
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (6) net 1 573d 573d 0/26 auto-obsoleted due to no activity on 2022/11/01 19:29
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (7) net 2 372d 351d 22/26 fixed on 2023/07/01 16:05
upstream KCSAN: data-race in tcp_disconnect / tcp_poll net 2 1218d 1229d 0/26 auto-closed as invalid on 2021/01/25 19:57
upstream KCSAN: data-race in tcp_disconnect / tcp_poll (2) net 1 928d 928d 0/26 auto-closed as invalid on 2021/11/12 06:31

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tcp_disconnect / tcp_poll

write to 0xffff88813bf36db8 of 1 bytes by task 23336 on cpu 1:
 tcp_disconnect+0x5ed/0xe70 net/ipv4/tcp.c:2977
 __inet_stream_connect+0x621/0x6e0 net/ipv4/af_inet.c:712
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:724
 __sys_connect_file+0xd3/0xe0 net/socket.c:1896
 io_connect fs/io_uring.c:5246 [inline]
 io_issue_sqe+0x2cab/0x55e0 fs/io_uring.c:6712
 io_wq_submit_work+0x1c5/0x370 fs/io_uring.c:6836
 io_worker_handle_work+0x4ca/0xbd0 fs/io-wq.c:574
 io_wqe_worker+0x1bc/0x4f0 fs/io-wq.c:630
 ret_from_fork+0x1f/0x30

read to 0xffff88813bf36db8 of 1 bytes by task 23320 on cpu 0:
 tcp_poll+0x100/0x580 net/ipv4/tcp.c:540
 sock_poll+0x23e/0x260 net/socket.c:1302
 vfs_poll include/linux/poll.h:90 [inline]
 io_poll_rewait fs/io_uring.c:5338 [inline]
 io_async_task_func+0x182/0x713 fs/io_uring.c:5561
 tctx_task_work+0x25a/0x410 fs/io_uring.c:2245
 task_work_run+0x8e/0x110 kernel/task_work.c:164
 tracehook_notify_signal include/linux/tracehook.h:214 [inline]
 handle_signal_work kernel/entry/common.c:146 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x102/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x03 -> 0x00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 23320 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/14 12:44 upstream 5472f14a3742 d018dd31 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2021/12/12 08:55 upstream a763d5a5abd6 49ca1f59 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2021/12/11 22:15 upstream 6f513529296f 49ca1f59 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
2021/11/16 07:59 upstream 8ab774587903 75b04091 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in tcp_disconnect / tcp_poll
* Struck through repros no longer work on HEAD.