syzbot


KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (4)

Status: auto-closed as invalid on 2021/03/28 23:05
Subsystems: crypto
[Documentation on labels]
Reported-by: syzbot+0843a6d7ab43b4fd4ad4@syzkaller.appspotmail.com
First crash: 1350d, last: 1121d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (3) crypto 8 1374d 1485d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data (2) crypto 3 1571d 1579d 0/26 auto-closed as invalid on 2020/02/07 16:47
upstream KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data crypto 1 1606d 1606d 0/26 closed as invalid on 2019/11/19 13:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data

write to 0xffff88810d27ee57 of 1 bytes by task 10352 on cpu 0:
 af_alg_sendmsg+0x3d8/0xd10 crypto/af_alg.c:875
 skcipher_sendmsg crypto/algif_skcipher.c:47 [inline]
 skcipher_sendmsg_nokey+0x172/0x190 crypto/algif_skcipher.c:246
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2348
 ___sys_sendmsg net/socket.c:2402 [inline]
 __sys_sendmmsg+0x335/0x4b0 net/socket.c:2492
 __do_sys_sendmmsg net/socket.c:2521 [inline]
 __se_sys_sendmmsg net/socket.c:2518 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2518
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88810d27ee57 of 1 bytes by task 10350 on cpu 1:
 af_alg_wait_for_data+0x194/0x3c0 crypto/af_alg.c:774
 _skcipher_recvmsg crypto/algif_skcipher.c:65 [inline]
 skcipher_recvmsg+0x17a/0x7f0 crypto/algif_skcipher.c:157
 skcipher_recvmsg_nokey+0x12a/0x150 crypto/algif_skcipher.c:270
 sock_recvmsg_nosec net/socket.c:886 [inline]
 sock_recvmsg net/socket.c:904 [inline]
 __sys_recvfrom+0x1d7/0x2a0 net/socket.c:2032
 __do_sys_recvfrom net/socket.c:2050 [inline]
 __se_sys_recvfrom net/socket.c:2046 [inline]
 __x64_sys_recvfrom+0x74/0x90 net/socket.c:2046
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 10350 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/21 23:04 upstream 55f62bc87347 a659b3f1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data
2021/02/01 05:34 upstream 1048ba83fb1c fc9fd31e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data
2021/01/31 07:39 upstream 8c947645151c fc9fd31e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data
2021/01/19 19:04 upstream 1e2a199f6ccd 63631df1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in af_alg_sendmsg / af_alg_wait_for_data
2020/12/30 15:03 upstream 139711f033f6 ecb8c012 .config console log report info ci2-upstream-kcsan-gce
2020/12/03 13:23 upstream 34816d20f173 59ad4022 .config console log report info ci2-upstream-kcsan-gce
2020/11/02 22:33 upstream 495023e4e49e 7f344fa6 .config console log report info ci2-upstream-kcsan-gce
2020/10/26 10:17 upstream 3650b228f83a a7aac492 .config console log report info ci2-upstream-kcsan-gce
2020/09/24 12:28 upstream c9c9e6a49f89 54289b08 .config console log report info ci2-upstream-kcsan-gce
2020/09/23 07:47 upstream 805c6d3c1921 287cd75a .config console log report info ci2-upstream-kcsan-gce
2020/09/19 08:20 upstream 92ab97adeefc 53ce8104 .config console log report info ci2-upstream-kcsan-gce
2020/09/17 01:05 upstream 5925fa68fe82 77507d02 .config console log report info ci2-upstream-kcsan-gce
2020/09/12 04:59 upstream e8878ab82545 79fb24e2 .config console log report ci2-upstream-kcsan-gce
2020/08/21 06:57 upstream da2968ff879b 1d75fe45 .config console log report ci2-upstream-kcsan-gce
2020/08/09 19:07 upstream 06a81c1c7db9 70301872 .config console log report ci2-upstream-kcsan-gce
2020/08/07 06:54 upstream d6efb3ac3e6c cb436c69 .config console log report ci2-upstream-kcsan-gce
2020/07/31 09:28 upstream e2c46b5762c6 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/07/30 19:46 upstream 83bdc7275e62 b0947553 .config console log report ci2-upstream-kcsan-gce
2020/07/26 00:47 upstream 04300d66f0a0 1f7cc1ca .config console log report ci2-upstream-kcsan-gce
2020/07/21 17:33 upstream 4fa640dc5230 e562dd8a .config console log report ci2-upstream-kcsan-gce
2020/07/17 21:43 upstream 8882572675c1 9c812472 .config console log report ci2-upstream-kcsan-gce
2020/07/14 15:55 upstream 0dc589da873b 6f458026 .config console log report ci2-upstream-kcsan-gce
2020/07/10 18:56 upstream 42f82040ee66 56d01184 .config console log report ci2-upstream-kcsan-gce
2020/07/09 18:29 upstream 0bddd227f3dc bc238812 .config console log report ci2-upstream-kcsan-gce
2020/07/07 23:50 upstream aa27b32b76d0 08fc4ef1 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.