syzbot


KCSAN: data-race in data_push_tail / mac_address_string

Status: auto-obsoleted due to no activity on 2024/06/13 22:15
Subsystems: batman
[Documentation on labels]
First crash: 332d, last: 315d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in data_push_tail / mac_address_string (2) batman 1 150d 150d 0/28 auto-obsoleted due to no activity on 2024/12/17 03:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in data_push_tail / mac_address_string

write to 0xffffffff883b3c48 of 1 bytes by task 12017 on cpu 0:
 string_nocheck lib/vsprintf.c:650 [inline]
 mac_address_string+0x55d/0x5e0 lib/vsprintf.c:1306
 pointer+0x75a/0xd20 lib/vsprintf.c:2439
 vsnprintf+0x861/0xe30 lib/vsprintf.c:2828
 vscnprintf+0x42/0x90 lib/vsprintf.c:2930
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2165
 vprintk_store+0x570/0x810 kernel/printk/printk.c:2279
 vprintk_emit+0x10c/0x5e0 kernel/printk/printk.c:2329
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2363
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:45
 _printk+0x7a/0xa0 kernel/printk/printk.c:2373
 batadv_check_known_mac_addr+0x147/0x180 net/batman-adv/hard-interface.c:526
 batadv_hard_if_event+0x4b0/0x1000 net/batman-adv/hard-interface.c:998
 notifier_call_chain kernel/notifier.c:93 [inline]
 raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:461
 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:1950
 call_netdevice_notifiers_extack net/core/dev.c:1988 [inline]
 call_netdevice_notifiers net/core/dev.c:2002 [inline]
 dev_set_mac_address+0x1ff/0x260 net/core/dev.c:8955
 dev_set_mac_address_user+0x31/0x50 net/core/dev.c:8969
 do_setlink+0x510/0x2490 net/core/rtnetlink.c:2839
 __rtnl_newlink net/core/rtnetlink.c:3680 [inline]
 rtnl_newlink+0x11a1/0x1690 net/core/rtnetlink.c:3727
 rtnetlink_rcv_msg+0x82e/0x8e0 net/core/rtnetlink.c:6595
 netlink_rcv_skb+0x12c/0x230 net/netlink/af_netlink.c:2559
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6613
 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
 netlink_unicast+0x58d/0x660 net/netlink/af_netlink.c:1361
 netlink_sendmsg+0x5d3/0x6e0 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x140/0x180 net/socket.c:745
 __sys_sendto+0x1e5/0x260 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0x78/0x90 net/socket.c:2199
 x64_sys_call+0x16bb/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:45
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff883b3c48 of 8 bytes by task 12201 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x53f/0x810 kernel/printk/printk.c:2269
 vprintk_emit+0x10c/0x5e0 kernel/printk/printk.c:2329
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2363
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:45
 _printk+0x7a/0xa0 kernel/printk/printk.c:2373
 do_blk_trace_setup+0x200/0x490 kernel/trace/blktrace.c:542
 __blk_trace_setup kernel/trace/blktrace.c:631 [inline]
 blk_trace_setup+0xad/0x140 kernel/trace/blktrace.c:649
 sg_ioctl_common drivers/scsi/sg.c:1121 [inline]
 sg_ioctl+0x6d4/0x1870 drivers/scsi/sg.c:1163
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:904 [inline]
 __se_sys_ioctl+0xd3/0x150 fs/ioctl.c:890
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:890
 x64_sys_call+0x155d/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000ffffecd9 -> 0x65726c6120296533

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 12201 Comm: syz-executor.4 Tainted: G        W          6.9.0-rc7-syzkaller-00117-g448b3fe5a0ea #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
==================================================================
loop4: detected capacity change from 0 to 512

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/09 22:08 upstream 448b3fe5a0ea 05079661 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / mac_address_string
2024/04/22 22:25 upstream ed30a4a51bb1 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / mac_address_string
* Struck through repros no longer work on HEAD.