syzbot


KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (5)

Status: auto-obsoleted due to no activity on 2024/10/12 18:17
Subsystems: net
[Documentation on labels]
First crash: 189d, last: 158d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (4) net 2 224d 257d 0/28 auto-obsoleted due to no activity on 2024/08/08 02:32
upstream KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (2) net 2 1487d 1519d 0/28 auto-closed as invalid on 2021/02/22 11:54
upstream KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (3) net 1 939d 937d 0/28 auto-closed as invalid on 2022/08/23 20:42
upstream KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release net 22 1835d 1938d 0/28 auto-closed as invalid on 2020/04/15 13:52

Sample crash report:
==================================================================
BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release

write to 0xffff88810413e5e0 of 8 bytes by task 3731 on cpu 1:
 sk_set_socket include/net/sock.h:1982 [inline]
 sock_orphan include/net/sock.h:2001 [inline]
 sk_common_release+0xda/0x250 net/core/sock.c:3769
 udp_lib_close+0x15/0x20 include/net/udp.h:199
 inet_release+0xce/0xf0 net/ipv4/af_inet.c:437
 inet6_release+0x3e/0x60 net/ipv6/af_inet6.c:489
 __sock_release net/socket.c:659 [inline]
 sock_close+0x68/0x150 net/socket.c:1421
 __fput+0x192/0x6f0 fs/file_table.c:422
 ____fput+0x15/0x20 fs/file_table.c:450
 task_work_run+0x13a/0x1a0 kernel/task_work.c:228
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xbe/0x130 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810413e5e0 of 8 bytes by task 50 on cpu 0:
 l2tp_tunnel_del_work+0x33/0x2b0 net/l2tp/l2tp_core.c:1343
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312
 worker_thread+0x526/0x6e0 kernel/workqueue.c:3389
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0xffff8881065a6d80 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: l2tp l2tp_tunnel_del_work
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/07 18:15 upstream b31c44928842 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release
2024/08/15 20:42 upstream 1fb918967b56 e4bacdaf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release
2024/08/12 22:49 upstream 7c626ce4bae1 842184b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release
2024/08/08 07:33 upstream 6a0e38264012 de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release
* Struck through repros no longer work on HEAD.