syzbot


KCSAN: data-race in ad_agg_selection_logic / bond_3ad_get_active_agg_info

Status: auto-obsoleted due to no activity on 2024/04/15 16:33
Subsystems: net
[Documentation on labels]
First crash: 323d, last: 323d

Sample crash report:
8021q: adding VLAN 0 to HW filter on device batadv494
bond494: (slave batadv494): Enslaving as a backup interface with an up link
==================================================================
BUG: KCSAN: data-race in ad_agg_selection_logic / bond_3ad_get_active_agg_info

write to 0xffff888171b6da30 of 2 bytes by task 9256 on cpu 1:
 ad_agg_selection_logic+0x9a1/0xe50 drivers/net/bonding/bond_3ad.c:1759
 ad_port_selection_logic drivers/net/bonding/bond_3ad.c:1563 [inline]
 bond_3ad_state_machine_handler+0xd21/0x2470 drivers/net/bonding/bond_3ad.c:2368
 process_one_work kernel/workqueue.c:2633 [inline]
 process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706
 worker_thread+0x525/0x730 kernel/workqueue.c:2787
 kthread+0x1d7/0x210 kernel/kthread.c:388
 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:243

read to 0xffff888171b6da30 of 2 bytes by task 3263 on cpu 0:
 __bond_3ad_get_active_agg_info drivers/net/bonding/bond_3ad.c:2657 [inline]
 bond_3ad_get_active_agg_info+0xa0/0x220 drivers/net/bonding/bond_3ad.c:2680
 bond_fill_info+0xd87/0x1020 drivers/net/bonding/bond_netlink.c:793
 rtnl_link_info_fill net/core/rtnetlink.c:708 [inline]
 rtnl_link_fill+0x1ca/0x4e0 net/core/rtnetlink.c:729
 rtnl_fill_ifinfo+0xde6/0x1140 net/core/rtnetlink.c:1910
 rtmsg_ifinfo_build_skb+0x129/0x1b0 net/core/rtnetlink.c:4081
 rtmsg_ifinfo_event net/core/rtnetlink.c:4115 [inline]
 rtmsg_ifinfo+0x6b/0x100 net/core/rtnetlink.c:4124
 __dev_notify_flags+0x75/0x1a0 net/core/dev.c:8683
 dev_change_flags+0xab/0xd0 net/core/dev.c:8725
 do_setlink+0x839/0x2440 net/core/rtnetlink.c:2906
 __rtnl_newlink net/core/rtnetlink.c:3704 [inline]
 rtnl_newlink+0x1191/0x1670 net/core/rtnetlink.c:3751
 rtnetlink_rcv_msg+0x80a/0x8c0 net/core/rtnetlink.c:6617
 netlink_rcv_skb+0x126/0x220 net/netlink/af_netlink.c:2543
 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:6635
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x589/0x660 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x66e/0x770 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x37c/0x4d0 net/socket.c:2584
 ___sys_sendmsg net/socket.c:2638 [inline]
 __sys_sendmsg+0x1e9/0x270 net/socket.c:2667
 __do_sys_sendmsg net/socket.c:2676 [inline]
 __se_sys_sendmsg net/socket.c:2674 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2674
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x0000 -> 0x0001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3263 Comm: syz-executor.3 Not tainted 6.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
==================================================================
8021q: adding VLAN 0 to HW filter on device bond494

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/11 16:25 upstream e8f897f4afef 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ad_agg_selection_logic / bond_3ad_get_active_agg_info
* Struck through repros no longer work on HEAD.