syzbot


KCSAN: data-race in af_alg_sendpage / af_alg_wait_for_data

Status: closed as invalid on 2020/06/18 14:13
Subsystems: crypto
[Documentation on labels]
First crash: 1434d, last: 1408d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in af_alg_sendpage / af_alg_wait_for_data (2) crypto 23 1365d 1405d 0/26 auto-closed as invalid on 2020/09/02 06:27

Sample crash report:
==================================================================
BUG: KCSAN: data-race in af_alg_sendpage / af_alg_wait_for_data

write to 0xffff8880ab8214c8 of 8 bytes by task 16863 on cpu 0:
 af_alg_sendpage+0x39b/0x620 crypto/af_alg.c:1001
 kernel_sendpage+0x64/0xa0 net/socket.c:3808
 sock_sendpage+0x64/0x80 net/socket.c:950
 pipe_to_sendpage+0x101/0x190 fs/splice.c:458
 splice_from_pipe_feed fs/splice.c:512 [inline]
 __splice_from_pipe+0x298/0x4a0 fs/splice.c:636
 splice_from_pipe+0xc2/0x100 fs/splice.c:671
 generic_splice_sendpage+0x41/0x60 fs/splice.c:844
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x97/0xb0 fs/splice.c:1037
 splice_direct_to_actor+0x22f/0x540 fs/splice.c:992
 do_splice_direct+0x152/0x1d0 fs/splice.c:1080
 do_sendfile+0x380/0x800 fs/read_write.c:1521
 __do_sys_sendfile64 fs/read_write.c:1582 [inline]
 __se_sys_sendfile64 fs/read_write.c:1568 [inline]
 __x64_sys_sendfile64+0x121/0x140 fs/read_write.c:1568
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880ab8214c8 of 8 bytes by task 16860 on cpu 1:
 af_alg_wait_for_data+0x1cf/0x2e0 crypto/af_alg.c:761
 _aead_recvmsg crypto/algif_aead.c:110 [inline]
 aead_recvmsg+0x479/0xd40 crypto/algif_aead.c:330
 sock_recvmsg_nosec net/socket.c:886 [inline]
 sock_recvmsg net/socket.c:904 [inline]
 sock_recvmsg+0x8e/0xb0 net/socket.c:900
 sock_read_iter+0x185/0x230 net/socket.c:982
 call_read_iter include/linux/fs.h:1901 [inline]
 generic_file_splice_read+0x2df/0x470 fs/splice.c:313
 sock_splice_read+0xc2/0xd0 net/socket.c:960
 do_splice_to+0xc7/0x100 fs/splice.c:892
 do_splice+0xbae/0xc30 fs/splice.c:1205
 __do_sys_splice fs/splice.c:1447 [inline]
 __se_sys_splice fs/splice.c:1427 [inline]
 __x64_sys_splice+0x1fd/0x210 fs/splice.c:1427
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 16860 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/15 21:30 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 baca2611 .config console log report ci2-upstream-kcsan-gce
2020/06/11 03:45 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3ab7a05a .config console log report ci2-upstream-kcsan-gce
2020/06/06 13:28 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 e6b89e4e .config console log report ci2-upstream-kcsan-gce
2020/05/21 11:14 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4afdfa20 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.