syzbot


WARNING in nsim_udp_tunnel_set_port

Status: upstream: reported C repro on 2025/01/15 14:42
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+2e5de9e3ab986b71d2bf@syzkaller.appspotmail.com
Fix commit: 50bf398e1cea net: netdevsim: try to close UDP port harness races
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-qemu2-arm32 ci-upstream-bpf-kasan-gce]
First crash: 53d, last: 11d
Discussions (2)
Title Replies (including bot) Last reply
[PATCH net] net: netdevsim: try to close UDP port harness races 3 (3) 2025/01/27 22:30
[syzbot] [net?] WARNING in nsim_udp_tunnel_set_port 0 (4) 2025/01/22 21:24
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/01/22 21:24 16m kuba@kernel.org patch upstream report log
2025/01/22 17:17 22m (2) kuba@kernel.org patch upstream report log
2025/01/22 16:56 13m kuba@kernel.org git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git main report log

Sample crash report:
------------[ cut here ]------------
entry already in use
WARNING: CPU: 0 PID: 5871 at drivers/net/netdevsim/udp_tunnels.c:26 nsim_udp_tunnel_set_port+0x2d3/0x390 drivers/net/netdevsim/udp_tunnels.c:26
Modules linked in:
CPU: 0 UID: 0 PID: 5871 Comm: syz-executor307 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:nsim_udp_tunnel_set_port+0x2d3/0x390 drivers/net/netdevsim/udp_tunnels.c:26
Code: c3 cc cc cc cc e8 9d a2 c4 fa 44 89 f7 e8 b5 44 b2 fa e9 ee fd ff ff e8 8b a2 c4 fa 90 48 c7 c7 20 7b 2b 8c e8 4e 87 85 fa 90 <0f> 0b 90 90 4c 8d 73 04 41 bf f0 ff ff ff e9 fa fe ff ff e8 25 2f
RSP: 0018:ffffc9000408fab8 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffc9000408fbb0 RCX: ffffffff8159fbe9
RDX: ffff888076b31e00 RSI: ffffffff8159fbf6 RDI: 0000000000000001
RBP: ffff88807cffc000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000017c10002 R15: 0000000000000000
FS:  000055555c278480(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc9597ec2b0 CR3: 00000000123a2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 udp_tunnel_nic_device_sync_one net/ipv4/udp_tunnel_nic.c:225 [inline]
 udp_tunnel_nic_device_sync_by_port net/ipv4/udp_tunnel_nic.c:246 [inline]
 __udp_tunnel_nic_device_sync.part.0+0x935/0xed0 net/ipv4/udp_tunnel_nic.c:289
 __udp_tunnel_nic_device_sync net/ipv4/udp_tunnel_nic.c:283 [inline]
 __udp_tunnel_nic_reset_ntf+0x3c1/0x520 net/ipv4/udp_tunnel_nic.c:581
 udp_tunnel_nic_reset_ntf include/net/udp_tunnel.h:377 [inline]
 nsim_udp_tunnels_info_reset_write+0xc2/0x110 drivers/net/netdevsim/udp_tunnels.c:117
 full_proxy_write+0xfd/0x1b0 fs/debugfs/file.c:369
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc9597710e9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd3d5c5ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc9597710e9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffd3d5c5f10 R08: 00000000000f4240 R09: 00000000000f4240
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f4240
R13: 0000000000016177 R14: 00007ffd3d5c5edc R15: 00007ffd3d5c5ef0
 </TASK>

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/01/22 09:26 upstream c4b9570cfb63 da72ac06 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/04 05:12 upstream 63676eefb7a0 f3558dbf .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/23 00:56 upstream bcde95ce32b6 b4fbdbd4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/23 00:15 upstream bcde95ce32b6 b4fbdbd4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/22 23:36 upstream bcde95ce32b6 b4fbdbd4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/18 20:06 upstream aef25be35d23 1432fc84 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/18 19:06 upstream aef25be35d23 1432fc84 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/18 18:06 upstream aef25be35d23 1432fc84 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/29 13:45 upstream 805ba04cb7cc 08fa8553 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/22 08:11 upstream c4b9570cfb63 da72ac06 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/14 10:30 upstream c45323b7560e 0dce2409 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/14 00:38 upstream c45323b7560e b1f1cd88 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2025/01/03 01:02 upstream 0bc21e701a6f d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/22 22:52 upstream bcde95ce32b6 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
2024/12/18 17:06 upstream aef25be35d23 1432fc84 .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto WARNING in nsim_udp_tunnel_set_port
* Struck through repros no longer work on HEAD.