syzbot


KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (6)

Status: auto-closed as invalid on 2022/02/19 07:24
Subsystems: net
[Documentation on labels]
First crash: 803d, last: 803d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (3) net 1 1143d 1143d 0/26 auto-closed as invalid on 2021/03/16 10:18
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (7) net 1 685d 685d 0/26 auto-closed as invalid on 2022/06/17 02:34
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock net 1 1441d 1441d 0/26 auto-closed as invalid on 2020/06/18 13:53
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (8) net 1 480d 480d 0/26 auto-obsoleted due to no activity on 2023/01/13 19:25
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (5) net 7 876d 966d 0/26 auto-closed as invalid on 2021/12/08 03:28
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (2) net 1 1237d 1203d 0/26 auto-closed as invalid on 2020/12/25 11:24
upstream KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock (4) net 5 1038d 1077d 0/26 auto-closed as invalid on 2021/06/29 03:52

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock

write to 0xffff8881073d42ea of 1 bytes by task 29395 on cpu 0:
 unix_release_sock+0x2b9/0x6a0 net/unix/af_unix.c:607
 unix_release+0x4e/0x70 net/unix/af_unix.c:990
 __sock_release net/socket.c:650 [inline]
 sock_close+0x6c/0x150 net/socket.c:1318
 __fput+0x295/0x520 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0x8e/0x110 kernel/task_work.c:164
 get_signal+0x1506/0x1550 kernel/signal.c:2624
 arch_do_signal_or_restart+0x8c/0x2e0 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x113/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881073d42ea of 1 bytes by task 29422 on cpu 1:
 __skb_wait_for_more_packets+0xe8/0x2f0 net/core/datagram.c:106
 __unix_dgram_recvmsg+0x21c/0x8c0 net/unix/af_unix.c:2404
 unix_dgram_recvmsg net/unix/af_unix.c:2489 [inline]
 unix_seqpacket_recvmsg+0xab/0xc0 net/unix/af_unix.c:2357
 sock_recvmsg_nosec net/socket.c:948 [inline]
 sock_recvmsg net/socket.c:966 [inline]
 sock_read_iter+0x19d/0x1e0 net/socket.c:1039
 call_read_iter include/linux/fs.h:2080 [inline]
 generic_file_splice_read+0x24f/0x330 fs/splice.c:311
 sock_splice_read+0xa5/0xb0 net/socket.c:1017
 do_splice_to fs/splice.c:796 [inline]
 splice_file_to_pipe+0x233/0x360 fs/splice.c:1018
 do_splice+0xc53/0xde0 fs/splice.c:1104
 __do_splice fs/splice.c:1144 [inline]
 __do_sys_splice fs/splice.c:1350 [inline]
 __se_sys_splice+0x2bd/0x3a0 fs/splice.c:1332
 __x64_sys_splice+0x74/0x80 fs/splice.c:1332
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x03

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29422 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/15 07:19 upstream 112450df61b7 723cfaf0 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __skb_wait_for_more_packets / unix_release_sock
* Struck through repros no longer work on HEAD.