syzbot


KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add

Status: auto-closed as invalid on 2020/04/06 03:45
Subsystems: batman
[Documentation on labels]
Reported-by: syzbot+1d5dadec56d9e87f0aac@syzkaller.appspotmail.com
First crash: 1854d, last: 1761d
Discussions (1)
Title Replies (including bot) Last reply
KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add 0 (1) 2019/11/08 14:28
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add (3) batman 1 224d 224d 0/28 auto-obsoleted due to no activity on 2024/05/17 04:58
upstream KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add (4) batman 2 77d 97d 0/28 auto-obsoleted due to no activity on 2024/10/11 08:22
upstream KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add (2) batman 1 1025d 1025d 0/28 auto-closed as invalid on 2022/03/08 09:06

Sample crash report:
==================================================================
BUG: KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_add

read to 0xffff888120c97818 of 2 bytes by task 17456 on cpu 0:
 batadv_tt_local_add+0x11e/0x1200 net/batman-adv/translation-table.c:672
 batadv_interface_tx+0x398/0xbe0 net/batman-adv/soft-interface.c:248
 __netdev_start_xmit include/linux/netdevice.h:4447 [inline]
 netdev_start_xmit include/linux/netdevice.h:4461 [inline]
 xmit_one net/core/dev.c:3420 [inline]
 dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3436
 __dev_queue_xmit+0x14e9/0x1ba0 net/core/dev.c:4013
 dev_queue_xmit+0x21/0x30 net/core/dev.c:4046
 __bpf_tx_skb net/core/filter.c:2060 [inline]
 __bpf_redirect_common net/core/filter.c:2099 [inline]
 __bpf_redirect+0x4b4/0x710 net/core/filter.c:2106
 ____bpf_clone_redirect net/core/filter.c:2139 [inline]
 bpf_clone_redirect+0x1a5/0x1f0 net/core/filter.c:2111
 0xffffffffa000cb84
 bpf_test_run+0x1c3/0x490 net/bpf/test_run.c:44
 bpf_prog_test_run_skb+0x511/0x8a0 net/bpf/test_run.c:362
 bpf_prog_test_run kernel/bpf/syscall.c:2272 [inline]
 __do_sys_bpf+0xf77/0x3150 kernel/bpf/syscall.c:3048
 __se_sys_bpf kernel/bpf/syscall.c:2989 [inline]
 __x64_sys_bpf+0x4c/0x60 kernel/bpf/syscall.c:2989
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff888120c97818 of 2 bytes by task 17457 on cpu 1:
 batadv_tt_local_add+0x21e/0x1200 net/batman-adv/translation-table.c:799
 batadv_interface_tx+0x398/0xbe0 net/batman-adv/soft-interface.c:248
 __netdev_start_xmit include/linux/netdevice.h:4447 [inline]
 netdev_start_xmit include/linux/netdevice.h:4461 [inline]
 xmit_one net/core/dev.c:3420 [inline]
 dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3436
 __dev_queue_xmit+0x14e9/0x1ba0 net/core/dev.c:4013
 dev_queue_xmit+0x21/0x30 net/core/dev.c:4046
 __bpf_tx_skb net/core/filter.c:2060 [inline]
 __bpf_redirect_common net/core/filter.c:2099 [inline]
 __bpf_redirect+0x4b4/0x710 net/core/filter.c:2106
 ____bpf_clone_redirect net/core/filter.c:2139 [inline]
 bpf_clone_redirect+0x1a5/0x1f0 net/core/filter.c:2111
 bpf_prog_bb15b996d00816f9+0xec0/0x1000
 bpf_test_run+0x1c3/0x490 net/bpf/test_run.c:44
 bpf_prog_test_run_skb+0x511/0x8a0 net/bpf/test_run.c:362
 bpf_prog_test_run kernel/bpf/syscall.c:2272 [inline]
 __do_sys_bpf+0xf77/0x3150 kernel/bpf/syscall.c:3048
 __se_sys_bpf kernel/bpf/syscall.c:2989 [inline]
 __x64_sys_bpf+0x4c/0x60 kernel/bpf/syscall.c:2989
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 17457 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/27 03:44 https://github.com/google/ktsan.git kcsan 245a43005292 dd56146d .config console log report ci2-upstream-kcsan-gce
2020/01/26 14:09 https://github.com/google/ktsan.git kcsan 245a43005292 f4e7270e .config console log report ci2-upstream-kcsan-gce
2020/01/24 11:13 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/18 05:50 https://github.com/google/ktsan.git kcsan 245a43005292 3de7aabb .config console log report ci2-upstream-kcsan-gce
2020/01/15 08:35 https://github.com/google/ktsan.git kcsan 245a43005292 fa12bd3c .config console log report ci2-upstream-kcsan-gce
2020/01/08 15:15 https://github.com/google/ktsan.git kcsan 245a43005292 ddc3e859 .config console log report ci2-upstream-kcsan-gce
2019/12/28 02:29 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/20 05:51 https://github.com/google/ktsan.git kcsan 245a43005292 36650b4b .config console log report ci2-upstream-kcsan-gce
2019/12/17 00:04 https://github.com/google/ktsan.git kcsan 245a43005292 0ae38e44 .config console log report ci2-upstream-kcsan-gce
2019/12/08 23:47 https://github.com/google/ktsan.git kcsan ef798c30ba4e 1508f453 .config console log report ci2-upstream-kcsan-gce
2019/11/30 14:59 https://github.com/google/ktsan.git kcsan ef798c30ba4e 3a75be00 .config console log report ci2-upstream-kcsan-gce
2019/11/23 09:43 https://github.com/google/ktsan.git kcsan 5863cc791e4c 598ca6c8 .config console log report ci2-upstream-kcsan-gce
2019/11/13 07:52 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
2019/11/05 23:00 https://github.com/google/ktsan.git kcsan 94c006602e13 af5c522d .config console log report ci2-upstream-kcsan-gce
2019/11/04 21:17 https://github.com/google/ktsan.git kcsan 94c006602e13 18e12644 .config console log report ci2-upstream-kcsan-gce
2019/11/01 03:02 https://github.com/google/ktsan.git kcsan 05f2236801fe a41ca8fa .config console log report ci2-upstream-kcsan-gce
2019/10/28 20:28 https://github.com/google/ktsan.git kcsan 05f2236801fe 439d7b14 .config console log report ci2-upstream-kcsan-gce
2019/10/26 16:15 https://github.com/google/ktsan.git kcsan 05f2236801fe 25bb509e .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.