syzbot


KCSAN: data-race in netlink_dump / netlink_recvmsg

Status: closed as invalid on 2019/11/19 13:44
Subsystems: net
[Documentation on labels]
First crash: 2129d, last: 2123d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in netlink_dump / netlink_recvmsg (2) net 6 1 1284d 1284d 0/29 auto-closed as invalid on 2022/03/28 21:19
upstream KCSAN: data-race in netlink_dump / netlink_recvmsg (4) net 6 27 843d 1053d 0/29 auto-obsoleted due to no activity on 2023/06/12 14:16
upstream KCSAN: data-race in netlink_dump / netlink_recvmsg (3) net 6 4 1097d 1130d 0/29 auto-closed as invalid on 2022/10/01 04:32

Sample crash report:
==================================================================
BUG: KCSAN: data-race in netlink_dump / netlink_recvmsg

read to 0xffff888100123341 of 1 bytes by task 9327 on cpu 0:
 netlink_recvmsg+0x38f/0x910 net/netlink/af_netlink.c:1998
 sock_recvmsg_nosec net/socket.c:871 [inline]
 sock_recvmsg net/socket.c:889 [inline]
 sock_recvmsg+0x92/0xb0 net/socket.c:885
 ___sys_recvmsg+0x1a0/0x3e0 net/socket.c:2480
 do_recvmmsg+0x19a/0x5c0 net/socket.c:2601
 __sys_recvmmsg+0x1ef/0x200 net/socket.c:2680
 __do_sys_recvmmsg net/socket.c:2703 [inline]
 __se_sys_recvmmsg net/socket.c:2696 [inline]
 __x64_sys_recvmmsg+0x89/0xb0 net/socket.c:2696
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff888100123341 of 1 bytes by task 9325 on cpu 1:
 netlink_dump+0x6ba/0x800 net/netlink/af_netlink.c:2284
 __netlink_dump_start+0x35f/0x400 net/netlink/af_netlink.c:2352
 netlink_dump_start include/linux/netlink.h:233 [inline]
 rtnetlink_rcv_msg+0x3d2/0x500 net/core/rtnetlink.c:5187
 netlink_rcv_skb+0xb0/0x260 net/netlink/af_netlink.c:2477
 rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:5242
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x354/0x430 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x456/0x770 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:637 [inline]
 sock_sendmsg+0x9f/0xc0 net/socket.c:657
 ___sys_sendmsg+0x59d/0x5d0 net/socket.c:2311
 __sys_sendmsg+0xa0/0x160 net/socket.c:2356
 __do_sys_sendmsg net/socket.c:2365 [inline]
 __se_sys_sendmsg net/socket.c:2363 [inline]
 __x64_sys_sendmsg+0x51/0x70 net/socket.c:2363
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 9325 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/05 02:10 https://github.com/google/ktsan.git kcsan 94c006602e13 76630fc9 .config console log report ci2-upstream-kcsan-gce
2019/10/30 15:56 https://github.com/google/ktsan.git kcsan 05f2236801fe 5ea87a66 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.