syzbot


KCSAN: data-race in __packet_rcv_has_room / __packet_set_status

Status: auto-obsoleted due to no activity on 2023/07/31 09:03
Subsystems: net
[Documentation on labels]
First crash: 599d, last: 582d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __packet_rcv_has_room / __packet_set_status

write to 0xffff888117d7c080 of 8 bytes by interrupt on cpu 0:
 __packet_set_status+0x78/0xa0 net/packet/af_packet.c:407
 tpacket_rcv+0x18bb/0x1a60 net/packet/af_packet.c:2483
 deliver_skb net/core/dev.c:2173 [inline]
 __netif_receive_skb_core+0x408/0x1e80 net/core/dev.c:5337
 __netif_receive_skb_one_core net/core/dev.c:5491 [inline]
 __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5607
 process_backlog+0x21f/0x380 net/core/dev.c:5935
 __napi_poll+0x60/0x3b0 net/core/dev.c:6498
 napi_poll net/core/dev.c:6565 [inline]
 net_rx_action+0x32b/0x750 net/core/dev.c:6698
 __do_softirq+0xc1/0x265 kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x57/0xa0 kernel/softirq.c:650
 sysvec_apic_timer_interrupt+0x6d/0x80 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
 smpboot_thread_fn+0x33c/0x4a0 kernel/smpboot.c:112
 kthread+0x1d7/0x210 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

read to 0xffff888117d7c080 of 8 bytes by interrupt on cpu 1:
 __packet_get_status net/packet/af_packet.c:436 [inline]
 packet_lookup_frame net/packet/af_packet.c:524 [inline]
 __tpacket_has_room net/packet/af_packet.c:1255 [inline]
 __packet_rcv_has_room+0x3f9/0x450 net/packet/af_packet.c:1298
 tpacket_rcv+0x275/0x1a60 net/packet/af_packet.c:2285
 deliver_skb net/core/dev.c:2173 [inline]
 dev_queue_xmit_nit+0x38a/0x5e0 net/core/dev.c:2243
 xmit_one net/core/dev.c:3574 [inline]
 dev_hard_start_xmit+0xcf/0x3f0 net/core/dev.c:3594
 __dev_queue_xmit+0xefb/0x1d10 net/core/dev.c:4244
 dev_queue_xmit include/linux/netdevice.h:3088 [inline]
 can_send+0x4eb/0x5d0 net/can/af_can.c:276
 bcm_can_tx+0x314/0x410 net/can/bcm.c:302
 bcm_tx_timeout_handler+0xdb/0x260
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x217/0x700 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0xd6/0x120 kernel/time/hrtimer.c:1766
 __do_softirq+0xc1/0x265 kernel/softirq.c:571
 run_ksoftirqd+0x17/0x20 kernel/softirq.c:939
 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164
 kthread+0x1d7/0x210 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

value changed: 0x0000000000000000 -> 0x0000000020000081

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 6.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/26 08:57 upstream 6995e2de6891 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __packet_rcv_has_room / __packet_set_status
2023/06/18 17:32 upstream 1b29d271614a f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __packet_rcv_has_room / __packet_set_status
2023/06/14 01:30 upstream 15adb51c04cc d2ee9228 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __packet_rcv_has_room / __packet_set_status
2023/06/12 00:01 upstream 4c605260bc60 49519f06 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __packet_rcv_has_room / __packet_set_status
2023/06/09 21:23 upstream 33f2b5785a2b 9018a337 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __packet_rcv_has_room / __packet_set_status
* Struck through repros no longer work on HEAD.