syzbot


KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (6)

Status: auto-obsoleted due to no activity on 2022/10/14 12:43
Subsystems: bpf
[Documentation on labels]
First crash: 656d, last: 593d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (5) bpf 39 695d 779d 0/26 auto-closed as invalid on 2022/07/05 10:02
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (3) bpf 1 1222d 1222d 0/26 auto-closed as invalid on 2021/01/23 10:19
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (4) bpf 3 855d 865d 0/26 auto-closed as invalid on 2022/01/25 13:08
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem bpf 3 1426d 1492d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (2) bpf 11 1295d 1404d 0/26 auto-closed as invalid on 2020/11/11 15:25
upstream KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem (7) bpf 5 309d 360d 0/26 auto-obsoleted due to no activity on 2023/07/26 07:54

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem

write to 0xffff8881230ef823 of 1 bytes by task 3744 on cpu 0:
 bpf_lru_node_set_ref kernel/bpf/bpf_lru_list.h:71 [inline]
 __htab_lru_percpu_map_update_elem+0x39b/0x7f0 kernel/bpf/hashtab.c:1310
 bpf_percpu_hash_update+0x5a/0x90 kernel/bpf/hashtab.c:2282
 bpf_map_update_value+0x1dd/0x2f0 kernel/bpf/syscall.c:200
 generic_map_update_batch+0x36e/0x4d0 kernel/bpf/syscall.c:1657
 bpf_map_do_batch+0x373/0x3d0
 __sys_bpf+0x5d4/0x620
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff8881230ef823 of 1 bytes by task 3745 on cpu 1:
 bpf_lru_node_is_ref kernel/bpf/bpf_lru_list.c:44 [inline]
 __bpf_lru_list_shrink_inactive kernel/bpf/bpf_lru_list.c:218 [inline]
 __bpf_lru_list_shrink+0xd5/0x700 kernel/bpf/bpf_lru_list.c:266
 bpf_lru_list_pop_free_to_local kernel/bpf/bpf_lru_list.c:340 [inline]
 bpf_common_lru_pop_free kernel/bpf/bpf_lru_list.c:447 [inline]
 bpf_lru_pop_free+0x892/0xf00 kernel/bpf/bpf_lru_list.c:499
 prealloc_lru_pop kernel/bpf/hashtab.c:310 [inline]
 __htab_lru_percpu_map_update_elem+0xdb/0x7f0 kernel/bpf/hashtab.c:1294
 bpf_percpu_hash_update+0x5a/0x90 kernel/bpf/hashtab.c:2282
 bpf_map_update_value+0x1dd/0x2f0 kernel/bpf/syscall.c:200
 generic_map_update_batch+0x36e/0x4d0 kernel/bpf/syscall.c:1657
 bpf_map_do_batch+0x373/0x3d0
 __sys_bpf+0x5d4/0x620
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3745 Comm: syz-executor.5 Not tainted 6.0.0-rc4-syzkaller-00204-g9b4509495418-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
==================================================================

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/09/09 12:33 upstream 9b4509495418 90058bdc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/09/09 03:20 upstream 506357871c18 f3027468 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/09/04 21:18 upstream 7e18e42e4b28 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/09/02 20:43 upstream 0b3acd1cc022 25194605 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/09/01 17:13 upstream 2880e1a175b9 86c46e46 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/30 06:46 upstream dcf8e5633e2e 4a380809 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/29 16:44 upstream b90cb1053190 d7593c58 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/29 11:50 upstream b90cb1053190 94da0b6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/28 08:33 upstream 10d4879f9ef0 07177916 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/22 03:33 upstream e3f259d33c0e 26a13b38 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/08/05 10:43 upstream c040862bfbd9 a65a7ce9 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/28 21:37 upstream 33ea1340bafe fb95c74d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/26 23:12 upstream 5de64d44968e ae971e66 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/26 01:16 upstream e0dccc3b76fb 34795c51 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/18 20:13 upstream 80e19f34c288 ff988920 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/17 09:06 upstream 972a278fe60c 95cb00d1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/16 20:50 upstream c658cabbfd32 95cb00d1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/16 02:04 upstream 9b59ec8d50a1 95cb00d1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/14 21:30 upstream 9bd572ec7a66 5d921b08 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/13 21:29 upstream 4a57a8400075 5d921b08 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/12 16:45 upstream 72a8e05d4f66 d91dd8ea .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/11 08:47 upstream 32346491ddf2 b5765a15 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/11 08:06 upstream 32346491ddf2 b5765a15 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/10 00:40 upstream b1c428b6c368 b5765a15 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
2022/07/08 11:41 upstream e8a4e1c1bb69 8442e655 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __bpf_lru_list_shrink / __htab_lru_percpu_map_update_elem
* Struck through repros no longer work on HEAD.