syzbot


KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (6)

Status: auto-closed as invalid on 2022/01/21 16:19
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 520d, last: 355d
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit 22 996d 1128d 0/24 auto-closed as invalid on 2020/05/25 22:33
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (9) 1 115d 115d 0/24 auto-closed as invalid on 2022/09/18 04:26
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (2) 11 792d 896d 0/24 auto-closed as invalid on 2020/11/10 03:04
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (5) 5 570d 534d 0/24 auto-closed as invalid on 2021/07/05 08:43
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (8) 1 158d 158d 0/24 auto-closed as invalid on 2022/08/06 22:00
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (4) 2 659d 682d 0/24 auto-closed as invalid on 2021/03/23 07:29
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (7) 10 196d 306d 0/24 auto-closed as invalid on 2022/06/29 00:38
upstream KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (3) 5 718d 726d 0/24 auto-closed as invalid on 2021/01/23 09:54

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit

read to 0xffff8881325f3150 of 8 bytes by task 21364 on cpu 1:
 ip_tunnel_xmit+0x9ec/0x1210 net/ipv4/ip_tunnel.c:819
 __gre_xmit net/ipv4/ip_gre.c:471 [inline]
 ipgre_xmit+0x553/0x5a0 net/ipv4/ip_gre.c:658
 __netdev_start_xmit include/linux/netdevice.h:4994 [inline]
 netdev_start_xmit include/linux/netdevice.h:5008 [inline]
 xmit_one+0x105/0x2f0 net/core/dev.c:3590
 dev_hard_start_xmit net/core/dev.c:3606 [inline]
 __dev_queue_xmit+0x869/0xf70 net/core/dev.c:4229
 dev_queue_xmit+0x13/0x20 net/core/dev.c:4262
 __bpf_tx_skb net/core/filter.c:2114 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2139 [inline]
 __bpf_redirect+0x5a2/0x840 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2429 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2401
 ___bpf_prog_run+0xc87/0x30c0 kernel/bpf/core.c:1558
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:1786
 bpf_dispatcher_nop_func include/linux/bpf.h:727 [inline]
 __bpf_prog_run include/linux/filter.h:626 [inline]
 bpf_prog_run include/linux/filter.h:633 [inline]
 bpf_test_run+0x18b/0x400 net/bpf/test_run.c:120
 bpf_prog_test_run_skb+0x73d/0xed0 net/bpf/test_run.c:666
 bpf_prog_test_run kernel/bpf/syscall.c:3349 [inline]
 __sys_bpf+0x3ca4/0xa3c0 kernel/bpf/syscall.c:4651
 __do_sys_bpf kernel/bpf/syscall.c:4737 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4735 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:4735
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

write to 0xffff8881325f3150 of 8 bytes by task 21367 on cpu 0:
 ip_tunnel_xmit+0x9fe/0x1210 net/ipv4/ip_tunnel.c:819
 __gre_xmit net/ipv4/ip_gre.c:471 [inline]
 ipgre_xmit+0x553/0x5a0 net/ipv4/ip_gre.c:658
 __netdev_start_xmit include/linux/netdevice.h:4994 [inline]
 netdev_start_xmit include/linux/netdevice.h:5008 [inline]
 xmit_one+0x105/0x2f0 net/core/dev.c:3590
 dev_hard_start_xmit net/core/dev.c:3606 [inline]
 __dev_queue_xmit+0x869/0xf70 net/core/dev.c:4229
 dev_queue_xmit+0x13/0x20 net/core/dev.c:4262
 __bpf_tx_skb net/core/filter.c:2114 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2139 [inline]
 __bpf_redirect+0x5a2/0x840 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2429 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2401
 ___bpf_prog_run+0xc87/0x30c0 kernel/bpf/core.c:1558
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:1786
 bpf_dispatcher_nop_func include/linux/bpf.h:727 [inline]
 __bpf_prog_run include/linux/filter.h:626 [inline]
 bpf_prog_run include/linux/filter.h:633 [inline]
 bpf_test_run+0x18b/0x400 net/bpf/test_run.c:120
 bpf_prog_test_run_skb+0x73d/0xed0 net/bpf/test_run.c:666
 bpf_prog_test_run kernel/bpf/syscall.c:3349 [inline]
 __sys_bpf+0x3ca4/0xa3c0 kernel/bpf/syscall.c:4651
 __do_sys_bpf kernel/bpf/syscall.c:4737 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4735 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:4735
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000000001778 -> 0x0000000000001779

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 21367 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (32):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/17 16:11 upstream 6441998e2e37 44068e19 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/12/12 21:35 upstream 90d9fbc16b69 49ca1f59 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/12/03 05:03 upstream a51e3ac43ddb 61f86278 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/12/03 04:40 upstream a51e3ac43ddb 61f86278 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/12/02 12:40 upstream 58e1100fdc59 61f86278 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/25 19:54 upstream b501b85957de 63eeac02 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/24 13:21 upstream 5d9f4cf36721 545ab074 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/23 21:29 upstream 136057256686 545ab074 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/19 13:30 upstream 4c388a8e740d 31a30fc0 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/09 15:26 upstream d2f38a3c6507 59bcaf9a .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/08 13:40 upstream 6b75d88fa81b d29682f1 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/07 05:58 upstream 512b7931ad05 4c1be0be .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/06 17:05 upstream fe91c4725aee 4c1be0be .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/05 06:14 upstream d4439a1189f9 4c1be0be .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/05 00:47 upstream 7ddb58cb0eca 4c1be0be .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/02 06:43 upstream e66435936756 098b5d53 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/11/01 19:59 upstream 8bb7eca972ad 098b5d53 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/31 13:01 upstream 180eca540ae0 098b5d53 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/28 05:48 upstream 1fc596a56b33 be531bb4 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/27 21:49 upstream d25f27432f80 be531bb4 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/26 05:02 upstream 87066fdd2e30 c1132b49 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/21 09:42 upstream 2f111a6fd5b5 f111d03b .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/18 21:11 upstream 519d81956ee2 24dc29db .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/18 07:14 upstream cf52ad5ff16c 0c5d9412 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/14 01:36 upstream 348949d9a444 5462d470 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/13 03:03 upstream f4d0cc426f77 08362356 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/10/03 09:58 upstream 7b66f4393ad4 db0f5787 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/09/21 08:55 upstream e8f71f89236e af796c18 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/09/09 13:00 upstream a3fa7a101dcf e2776ee4 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/08/08 18:05 upstream 85a90500f9a1 6972b106 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/08/07 06:50 upstream 894d6f401b21 6972b106 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
ci2-upstream-kcsan-gce 2021/07/05 15:07 upstream 3dbdb38e2869 55aa55c2 .config log report info KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
* Struck through repros no longer work on HEAD.