syzbot


KCSAN: data-race in nci_dev_up / nci_req_complete (4)

Status: auto-obsoleted due to no activity on 2024/04/14 23:38
Subsystems: net nfc
[Documentation on labels]
First crash: 324d, last: 323d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in nci_dev_up / nci_req_complete (2) net nfc 1 458d 458d 0/28 auto-obsoleted due to no activity on 2023/12/02 10:14
upstream KCSAN: data-race in nci_dev_up / nci_req_complete nfc net 1 571d 571d 0/28 auto-obsoleted due to no activity on 2023/08/11 03:41
upstream KCSAN: data-race in nci_dev_up / nci_req_complete (3) net nfc 2 387d 401d 0/28 auto-obsoleted due to no activity on 2024/02/11 16:39

Sample crash report:
nci: nci_ntf_packet: unknown ntf opcode 0x700
==================================================================
BUG: KCSAN: data-race in nci_dev_up / nci_req_complete

write to 0xffff8881070c59a0 of 4 bytes by task 24195 on cpu 0:
 __nci_request net/nfc/nci/core.c:136 [inline]
 nci_open_device net/nfc/nci/core.c:503 [inline]
 nci_dev_up+0x257/0x8a0 net/nfc/nci/core.c:632
 nfc_dev_up+0x11b/0x1c0 net/nfc/core.c:118
 nfc_genl_dev_up+0x53/0x80 net/nfc/netlink.c:770
 genl_family_rcv_msg_doit net/netlink/genetlink.c:1113 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:1193 [inline]
 genl_rcv_msg+0x627/0x6c0 net/netlink/genetlink.c:1208
 netlink_rcv_skb+0x126/0x220 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1217
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x589/0x660 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x66e/0x770 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x37c/0x4d0 net/socket.c:2584
 ___sys_sendmsg net/socket.c:2638 [inline]
 __sys_sendmsg+0x1e9/0x270 net/socket.c:2667
 __do_sys_sendmsg net/socket.c:2676 [inline]
 __se_sys_sendmsg net/socket.c:2674 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2674
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff8881070c59a0 of 4 bytes by task 20045 on cpu 1:
 nci_req_complete+0x24/0x90 net/nfc/nci/core.c:80
 nci_rsp_packet+0xba8/0xe10
 nci_rx_work+0xe4/0x200 net/nfc/nci/core.c:1522
 process_one_work kernel/workqueue.c:2633 [inline]
 process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706
 worker_thread+0x525/0x730 kernel/workqueue.c:2787
 kthread+0x1d7/0x210 kernel/kthread.c:388
 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:243

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 20045 Comm: kworker/u4:0 Not tainted 6.8.0-rc7-syzkaller-00260-gfa4b851b4ad6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
Workqueue: nfc8_nci_rx_wq nci_rx_work
==================================================================
nci: nci_ntf_packet: unsupported ntf opcode 0xf00
nci: nci_ntf_packet: unknown ntf opcode 0x700
nci: nci_ntf_packet: unsupported ntf opcode 0xf00

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/10 23:31 upstream fa4b851b4ad6 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in nci_dev_up / nci_req_complete
2024/03/10 18:34 upstream 005f6f34bd47 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in nci_dev_up / nci_req_complete
* Struck through repros no longer work on HEAD.