syzbot


KCSAN: data-race in do_select / pollwake (2)

Status: moderation: reported on 2023/12/09 00:09
Subsystems: kernfs
[Documentation on labels]
Reported-by: syzbot+98a4e3481a6349deaf03@syzkaller.appspotmail.com
First crash: 714d, last: 9h55m
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_select / pollwake fs 2554 753d 1775d 0/28 auto-obsoleted due to no activity on 2023/05/29 14:18

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_select / pollwake

write to 0xffffc90001597a00 of 4 bytes by interrupt on cpu 1:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xb6/0x100 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x4f/0x80 kernel/sched/wait.c:173
 sock_def_readable+0x70/0x190 net/core/sock.c:3533
 tcp_data_ready+0x1ab/0x290 net/ipv4/tcp_input.c:5250
 tcp_rcv_established+0xce0/0xea0 net/ipv4/tcp_input.c:6279
 tcp_v4_do_rcv+0x672/0x740 net/ipv4/tcp_ipv4.c:1925
 tcp_v4_rcv+0x1bcf/0x1f60 net/ipv4/tcp_ipv4.c:2363
 ip_protocol_deliver_rcu+0x397/0x780 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x184/0x220 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:314 [inline]
 ip_local_deliver+0xe8/0x1c0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:469 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:578 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:627 [inline]
 ip_sublist_rcv+0x56b/0x650 net/ipv4/ip_input.c:635
 ip_list_rcv+0x261/0x290 net/ipv4/ip_input.c:669
 __netif_receive_skb_list_ptype net/core/dev.c:5930 [inline]
 __netif_receive_skb_list_core+0x4dc/0x500 net/core/dev.c:5977
 __netif_receive_skb_list net/core/dev.c:6029 [inline]
 netif_receive_skb_list_internal+0x487/0x600 net/core/dev.c:6120
 gro_normal_list include/net/gro.h:532 [inline]
 napi_complete_done+0x1a3/0x410 net/core/dev.c:6490
 virtqueue_napi_complete drivers/net/virtio_net.c:737 [inline]
 virtnet_poll+0x18bf/0x1d00 drivers/net/virtio_net.c:3053
 __napi_poll+0x63/0x3a0 net/core/dev.c:7324
 napi_poll net/core/dev.c:7388 [inline]
 net_rx_action+0x38e/0x7b0 net/core/dev.c:7510
 handle_softirqs+0xb7/0x290 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0x3a/0xc0 kernel/softirq.c:680
 common_interrupt+0x83/0x90 arch/x86/kernel/irq.c:285
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
 kcsan_setup_watchpoint+0x415/0x430 kernel/kcsan/core.c:705
 avtab_search_node+0x122/0x2b0 security/selinux/ss/avtab.c:188
 cond_compute_av+0x51/0x230 security/selinux/ss/conditional.c:578
 context_struct_compute_av+0x44b/0xaa0 security/selinux/ss/services.c:679
 security_compute_av+0x25c/0x920 security/selinux/ss/services.c:1169
 avc_compute_av+0x5a/0x3e0 security/selinux/avc.c:992
 avc_perm_nonode+0x5e/0xe0 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0x156/0x200 security/selinux/avc.c:1160
 avc_has_perm+0x61/0x150 security/selinux/avc.c:1195
 inode_has_perm security/selinux/hooks.c:1676 [inline]
 dentry_has_perm security/selinux/hooks.c:1692 [inline]
 selinux_inode_readlink+0x1c7/0x210 security/selinux/hooks.c:3058
 security_inode_readlink+0x72/0xb0 security/security.c:2284
 do_readlinkat+0x10d/0x320 fs/stat.c:579
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x2cf3/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd0/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffc90001597a00 of 4 bytes by task 3305 on cpu 0:
 poll_schedule_timeout fs/select.c:240 [inline]
 do_select+0xe41/0xf40 fs/select.c:603
 core_sys_select+0x3b2/0x600 fs/select.c:677
 do_pselect fs/select.c:759 [inline]
 __do_sys_pselect6 fs/select.c:802 [inline]
 __se_sys_pselect6+0x216/0x280 fs/select.c:793
 __x64_sys_pselect6+0x78/0x90 fs/select.c:793
 x64_sys_call+0x1caa/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:271
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd0/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
==================================================================

Crashes (1467):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/16 21:25 upstream 3c21441eeffc f41472b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/16 19:24 upstream 3c21441eeffc cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/16 05:36 upstream fee3e843b309 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/15 16:19 upstream 088d13246a46 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/14 12:42 upstream 9f35e33144ae a4fa04ef .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/14 10:31 upstream 9f35e33144ae 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/14 10:31 upstream 9f35e33144ae 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/13 20:48 upstream 405e6c37c89e 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/13 15:14 upstream e9565e23cd89 7344edeb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/13 06:00 upstream e9565e23cd89 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/12 17:29 upstream 82f2b0b97b36 f6671af7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/11 20:24 upstream cd802e7e5f1e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/11 07:22 upstream 3ce9925823c7 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/10 17:25 upstream bec6f00f120e 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/10 03:52 upstream 0e1329d4045c 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/09 14:41 upstream 9c69f8884904 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/09 01:19 upstream 2c89c1b655c0 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/07 17:28 upstream 707df3375124 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/07 14:44 upstream 707df3375124 350f4ffc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/06 18:49 upstream 0d8d44db295c 350f4ffc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/06 02:44 upstream 01f95500a162 ae98e6b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/05 00:13 upstream 92a09c47464d b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/03 06:55 upstream 95d3481af6dc b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/02 18:28 upstream 2bfcee565c3a b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/02 16:43 upstream ebd297a2affa b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/02 09:26 upstream ebd297a2affa d7f099d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/02 03:47 upstream ebd297a2affa 51b137cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/05/01 12:44 upstream 4f79eaa2ceac 51b137cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/30 21:30 upstream 7a13c14ee59d ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/30 19:38 upstream 7a13c14ee59d 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/29 18:59 upstream ca91b9500108 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/29 08:56 upstream ca91b9500108 aeb6ec69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/28 17:47 upstream f15d97df5afa c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/27 23:47 upstream b4432656b36e c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/25 18:46 upstream 02ddfb981de8 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/25 05:45 upstream 02ddfb981de8 e3715315 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/24 18:41 upstream e72e9e693307 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/24 07:19 upstream a79be02bba5c 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/23 19:30 upstream a79be02bba5c 73a168d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/23 19:28 upstream a79be02bba5c 73a168d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/23 17:37 upstream bc3372351d0c 73a168d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/22 21:13 upstream bc3372351d0c 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/22 20:08 upstream a33b5a08cbbd 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/21 07:48 upstream 9d7a0577c9db 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/20 18:45 upstream 6fea5fabd332 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/20 05:27 upstream 119009db2674 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2025/04/19 15:42 upstream 8560697b23dc 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
2023/11/16 21:16 upstream 7475e51b8796 cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_select / pollwake
* Struck through repros no longer work on HEAD.