syzbot


KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (4)

Status: auto-obsoleted due to no activity on 2022/12/13 21:39
Subsystems: net
[Documentation on labels]
First crash: 650d, last: 532d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (2) net 61 1124d 1229d 0/26 auto-closed as invalid on 2021/04/30 07:41
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (5) net 1 231d 231d 23/26 fixed on 2023/10/12 12:48
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit net 28 1408d 1633d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (3) net 33 689d 861d 0/26 auto-closed as invalid on 2022/07/10 03:55

Sample crash report:
==================================================================
BUG: KCSAN: data-race in iptunnel_xmit / iptunnel_xmit

read-write to 0xffff888122fb7168 of 8 bytes by task 10543 on cpu 1:
 iptunnel_xmit_stats include/net/ip_tunnels.h:483 [inline]
 iptunnel_xmit+0x405/0x470 net/ipv4/ip_tunnel_core.c:87
 ip_tunnel_xmit+0x1631/0x16f0 net/ipv4/ip_tunnel.c:813
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x51b/0x580 net/ipv4/ip_gre.c:661
 __netdev_start_xmit include/linux/netdevice.h:4840 [inline]
 netdev_start_xmit include/linux/netdevice.h:4854 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2141 [inline]
 __bpf_redirect+0x55a/0x820 net/core/filter.c:2164
 ____bpf_clone_redirect net/core/filter.c:2431 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2403
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1818
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2043
 bpf_dispatcher_nop_func include/linux/bpf.h:964 [inline]
 __bpf_prog_run include/linux/filter.h:600 [inline]
 bpf_prog_run include/linux/filter.h:607 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1182
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3630
 __sys_bpf+0x38a/0x630 kernel/bpf/syscall.c:4983
 __do_sys_bpf kernel/bpf/syscall.c:5069 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5067 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5067
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read-write to 0xffff888122fb7168 of 8 bytes by task 10536 on cpu 0:
 iptunnel_xmit_stats include/net/ip_tunnels.h:483 [inline]
 iptunnel_xmit+0x405/0x470 net/ipv4/ip_tunnel_core.c:87
 ip_tunnel_xmit+0x1631/0x16f0 net/ipv4/ip_tunnel.c:813
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x51b/0x580 net/ipv4/ip_gre.c:661
 __netdev_start_xmit include/linux/netdevice.h:4840 [inline]
 netdev_start_xmit include/linux/netdevice.h:4854 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2141 [inline]
 __bpf_redirect+0x55a/0x820 net/core/filter.c:2164
 ____bpf_clone_redirect net/core/filter.c:2431 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2403
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1818
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2043
 bpf_dispatcher_nop_func include/linux/bpf.h:964 [inline]
 __bpf_prog_run include/linux/filter.h:600 [inline]
 bpf_prog_run include/linux/filter.h:607 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1182
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3630
 __sys_bpf+0x38a/0x630 kernel/bpf/syscall.c:4983
 __do_sys_bpf kernel/bpf/syscall.c:5069 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5067 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5067
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x000000000000010f -> 0x0000000000000110

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10536 Comm: syz-executor.3 Not tainted 6.1.0-rc4-syzkaller-00015-gf141df371335-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
==================================================================
syz-executor.3 (10536) used greatest stack depth: 10208 bytes left

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/08 21:37 upstream f141df371335 060f945e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/11/08 04:19 upstream 59f2f4b8a757 6feb842b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/11/03 06:34 upstream 8e5423e991e8 7a2ebf95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/10/15 14:10 upstream 19d17ab7c68b 67cb024c .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/10/08 06:53 upstream 62e6e5940c0c aea5da89 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/10/02 07:46 upstream b357fd1c2afc feb56351 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/10/01 02:10 upstream 70575e77839f feb56351 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/09/27 08:15 upstream 3800a713b607 10323ddf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/09/14 22:58 upstream 3245cb65fd91 b884348d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/08/11 22:06 upstream 2ae08b36c06e 21724cb2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/08/11 11:32 upstream ffcf9c5700e4 787ed7e0 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/08/10 10:16 upstream d4252071b97d aaa9eaa0 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/08/02 00:48 upstream 9de1f9c8ca51 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/07/30 00:17 upstream e65c6a46df94 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
2022/07/13 19:10 upstream b047602d579b 5d921b08 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
* Struck through repros no longer work on HEAD.