syzbot


KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (6)

Status: auto-closed as invalid on 2022/02/19 07:24
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 315d, last: 315d
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (3) 1 655d 655d 0/24 auto-closed as invalid on 2021/03/16 10:18
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (7) 1 197d 197d 0/24 auto-closed as invalid on 2022/06/17 02:34
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock 1 953d 953d 0/24 auto-closed as invalid on 2020/06/18 13:53
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (5) 7 388d 479d 0/24 auto-closed as invalid on 2021/12/08 03:28
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (2) 1 749d 715d 0/24 auto-closed as invalid on 2020/12/25 11:24
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (4) 5 550d 590d 0/24 auto-closed as invalid on 2021/06/29 03:52

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock

write to 0xffff8881073d42ea of 1 bytes by task 29395 on cpu 0:
 unix_release_sock+0x2b9/0x6a0 net/unix/af_unix.c:607
 unix_release+0x4e/0x70 net/unix/af_unix.c:990
 __sock_release net/socket.c:650 [inline]
 sock_close+0x6c/0x150 net/socket.c:1318
 __fput+0x295/0x520 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0x8e/0x110 kernel/task_work.c:164
 get_signal+0x1506/0x1550 kernel/signal.c:2624
 arch_do_signal_or_restart+0x8c/0x2e0 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x113/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881073d42ea of 1 bytes by task 29422 on cpu 1:
 __skb_wait_for_more_packets+0xe8/0x2f0 net/core/datagram.c:106
 __unix_dgram_recvmsg+0x21c/0x8c0 net/unix/af_unix.c:2404
 unix_dgram_recvmsg net/unix/af_unix.c:2489 [inline]
 unix_seqpacket_recvmsg+0xab/0xc0 net/unix/af_unix.c:2357
 sock_recvmsg_nosec net/socket.c:948 [inline]
 sock_recvmsg net/socket.c:966 [inline]
 sock_read_iter+0x19d/0x1e0 net/socket.c:1039
 call_read_iter include/linux/fs.h:2080 [inline]
 generic_file_splice_read+0x24f/0x330 fs/splice.c:311
 sock_splice_read+0xa5/0xb0 net/socket.c:1017
 do_splice_to fs/splice.c:796 [inline]
 splice_file_to_pipe+0x233/0x360 fs/splice.c:1018
 do_splice+0xc53/0xde0 fs/splice.c:1104
 __do_splice fs/splice.c:1144 [inline]
 __do_sys_splice fs/splice.c:1350 [inline]
 __se_sys_splice+0x2bd/0x3a0 fs/splice.c:1332
 __x64_sys_splice+0x74/0x80 fs/splice.c:1332
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x03

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29422 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/01/15 07:19 upstream 112450df61b7 723cfaf0 .config log report info KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
* Struck through repros no longer work on HEAD.