IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE ================================================================== BUG: KCSAN: data-race in data_alloc / data_push_tail write to 0xffffffff86e8beb0 of 8 bytes by task 5047 on cpu 0: data_alloc+0x205/0x2b0 kernel/printk/printk_ringbuffer.c:1074 prb_reserve+0x897/0xbd0 kernel/printk/printk_ringbuffer.c:1555 vprintk_store+0x51c/0xb50 kernel/printk/printk.c:2196 vprintk_emit+0xcc/0x430 kernel/printk/printk.c:2252 vprintk_default+0x22/0x30 kernel/printk/printk.c:2282 vprintk+0x7f/0x90 kernel/printk/printk_safe.c:50 _printk+0x76/0x96 kernel/printk/printk.c:2292 set_capacity_and_notify+0x170/0x1d0 block/genhd.c:90 loop_set_size+0x2e/0x70 drivers/block/loop.c:237 loop_configure+0xb1b/0xc20 drivers/block/loop.c:1095 lo_ioctl+0x641/0x1290 blkdev_ioctl+0x20e/0x440 block/ioctl.c:614 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:856 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read to 0xffffffff86e8beb0 of 8 bytes by task 5051 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:590 [inline] data_push_tail+0x10f/0x440 kernel/printk/printk_ringbuffer.c:675 data_alloc+0xbc/0x2b0 kernel/printk/printk_ringbuffer.c:1046 prb_reserve+0x897/0xbd0 kernel/printk/printk_ringbuffer.c:1555 vprintk_store+0x51c/0xb50 kernel/printk/printk.c:2196 vprintk_emit+0xcc/0x430 kernel/printk/printk.c:2252 vprintk_default+0x22/0x30 kernel/printk/printk.c:2282 vprintk+0x7f/0x90 kernel/printk/printk_safe.c:50 _printk+0x76/0x96 kernel/printk/printk.c:2292 fib6_add+0x3f1/0x1f50 net/ipv6/ip6_fib.c:1391 __ip6_ins_rt net/ipv6/route.c:1302 [inline] ip6_route_add+0x6d/0x100 net/ipv6/route.c:3847 inet6_rtm_newroute+0x152/0x1160 net/ipv6/route.c:5512 rtnetlink_rcv_msg+0x811/0x8c0 net/core/rtnetlink.c:6089 netlink_rcv_skb+0x13e/0x240 net/netlink/af_netlink.c:2501 rtnetlink_rcv+0x18/0x20 net/core/rtnetlink.c:6107 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x58a/0x660 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x661/0x750 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0x38f/0x500 net/socket.c:2488 ___sys_sendmsg net/socket.c:2542 [inline] __sys_sendmsg+0x1f9/0x400 net/socket.c:2571 __do_sys_sendmsg net/socket.c:2580 [inline] __se_sys_sendmsg net/socket.c:2578 [inline] __x64_sys_sendmsg+0x42/0x50 net/socket.c:2578 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x000000010000a9d5 -> 0x000000010000b7b3 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 5051 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 ================================================================== syz-executor.5 (5051) used greatest stack depth: 9584 bytes left