syzbot


KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (3)

Status: closed as invalid on 2020/06/18 14:24
Subsystems: crypto
[Documentation on labels]
First crash: 1523d, last: 1412d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (2) crypto 3 1608d 1617d 0/26 auto-closed as invalid on 2020/02/07 16:47
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (4) crypto 25 1158d 1231d 0/26 auto-closed as invalid on 2021/03/28 23:05
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data crypto 1 1644d 1644d 0/26 closed as invalid on 2019/11/19 13:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data

write to 0xffff88812531e2c8 of 8 bytes by task 19913 on cpu 1:
 af_alg_sendmsg+0x438/0xc00 crypto/af_alg.c:932
 aead_sendmsg+0x83/0xa0 crypto/algif_aead.c:71
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0x98/0xc0 net/socket.c:672
 sock_write_iter+0x186/0x240 net/socket.c:1004
 call_write_iter include/linux/fs.h:1907 [inline]
 new_sync_write+0x303/0x400 fs/read_write.c:484
 __vfs_write+0x9e/0xb0 fs/read_write.c:497
 vfs_write fs/read_write.c:559 [inline]
 vfs_write+0x189/0x380 fs/read_write.c:543
 ksys_write+0x16a/0x1a0 fs/read_write.c:612
 __do_sys_write fs/read_write.c:624 [inline]
 __se_sys_write fs/read_write.c:621 [inline]
 __x64_sys_write+0x49/0x60 fs/read_write.c:621
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88812531e2c8 of 8 bytes by task 19907 on cpu 0:
 af_alg_wait_for_data+0x1cf/0x2e0 crypto/af_alg.c:761
 _aead_recvmsg crypto/algif_aead.c:110 [inline]
 aead_recvmsg+0x479/0xd40 crypto/algif_aead.c:330
 sock_recvmsg_nosec net/socket.c:886 [inline]
 sock_recvmsg net/socket.c:904 [inline]
 sock_recvmsg+0x8e/0xb0 net/socket.c:900
 sock_read_iter+0x185/0x230 net/socket.c:982
 call_read_iter include/linux/fs.h:1901 [inline]
 generic_file_splice_read+0x2df/0x470 fs/splice.c:313
 sock_splice_read+0xc2/0xd0 net/socket.c:960
 do_splice_to+0xc7/0x100 fs/splice.c:892
 do_splice+0xbae/0xc30 fs/splice.c:1205
 __do_sys_splice fs/splice.c:1447 [inline]
 __se_sys_splice fs/splice.c:1427 [inline]
 __x64_sys_splice+0x1fd/0x210 fs/splice.c:1427
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 19907 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/13 10:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 f4724dd3 .config console log report ci2-upstream-kcsan-gce
2020/05/29 13:34 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d19ed305 .config console log report ci2-upstream-kcsan-gce
2020/04/30 21:27 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3698959a .config console log report ci2-upstream-kcsan-gce
2020/04/27 03:13 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 0ce7569e .config console log report ci2-upstream-kcsan-gce
2020/04/23 13:27 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 2e44d63e .config console log report ci2-upstream-kcsan-gce
2020/03/26 11:32 https://github.com/google/ktsan.git kcsan 40959e34d670 e8e6c7d2 .config console log report ci2-upstream-kcsan-gce
2020/03/09 23:00 https://github.com/google/ktsan.git kcsan 941e0d917bbf 35f53e45 .config console log report ci2-upstream-kcsan-gce
2020/02/23 08:40 https://github.com/google/ktsan.git kcsan 766d004d1b85 2c36e7a7 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.