syzbot


KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out (3)

Status: auto-closed as invalid on 2021/05/19 06:43
Subsystems: net
[Documentation on labels]
First crash: 1127d, last: 1106d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out net 2 1583d 1622d 0/26 auto-closed as invalid on 2020/03/02 12:52
upstream KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out (4) net 3 804d 845d 0/26 auto-closed as invalid on 2022/03/17 06:42
upstream KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out (2) net 1 1327d 1327d 0/26 auto-closed as invalid on 2020/10/10 06:10

Sample crash report:
==================================================================
BUG: KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out

write to 0xffff88802bf4b07e of 2 bytes by task 20163 on cpu 0:
 hsr_register_frame_out+0xd2/0xf0 net/hsr/hsr_framereg.c:424
 hsr_forward_do net/hsr/hsr_forward.c:400 [inline]
 hsr_forward_skb+0x5d0/0xae0 net/hsr/hsr_forward.c:562
 hsr_dev_xmit+0x8e/0xc0 net/hsr/hsr_device.c:221
 __netdev_start_xmit include/linux/netdevice.h:4825 [inline]
 netdev_start_xmit include/linux/netdevice.h:4839 [inline]
 xmit_one+0xf9/0x2e0 net/core/dev.c:3605
 dev_hard_start_xmit net/core/dev.c:3621 [inline]
 __dev_queue_xmit+0xf22/0x1580 net/core/dev.c:4194
 dev_queue_xmit+0x13/0x20 net/core/dev.c:4227
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x6b8/0x7a0 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2420
 0xffffffffa005e256
 bpf_dispatcher_nop_func include/linux/bpf.h:661 [inline]
 bpf_test_run+0x27d/0x440 net/bpf/test_run.c:50
 bpf_prog_test_run_skb+0x714/0xe90 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3132 [inline]
 __do_sys_bpf+0x3971/0x99c0 kernel/bpf/syscall.c:4411
 __se_sys_bpf kernel/bpf/syscall.c:4351 [inline]
 __x64_sys_bpf+0x3d/0x50 kernel/bpf/syscall.c:4351
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88802bf4b07e of 2 bytes by task 20137 on cpu 1:
 hsr_register_frame_out+0x30/0xf0 net/hsr/hsr_framereg.c:418
 hsr_forward_do net/hsr/hsr_forward.c:400 [inline]
 hsr_forward_skb+0x5d0/0xae0 net/hsr/hsr_forward.c:562
 hsr_dev_xmit+0x8e/0xc0 net/hsr/hsr_device.c:221
 __netdev_start_xmit include/linux/netdevice.h:4825 [inline]
 netdev_start_xmit include/linux/netdevice.h:4839 [inline]
 xmit_one+0xf9/0x2e0 net/core/dev.c:3605
 dev_hard_start_xmit net/core/dev.c:3621 [inline]
 __dev_queue_xmit+0xf22/0x1580 net/core/dev.c:4194
 dev_queue_xmit+0x13/0x20 net/core/dev.c:4227
 __bpf_tx_skb net/core/filter.c:2116 [inline]
 __bpf_redirect_common net/core/filter.c:2155 [inline]
 __bpf_redirect+0x6b8/0x7a0 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2448 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2420
 bpf_prog_9a590cd3832e68e4+0x56/0x460
 bpf_dispatcher_nop_func include/linux/bpf.h:661 [inline]
 bpf_test_run+0x27d/0x440 net/bpf/test_run.c:50
 bpf_prog_test_run_skb+0x714/0xe90 net/bpf/test_run.c:582
 bpf_prog_test_run kernel/bpf/syscall.c:3132 [inline]
 __do_sys_bpf+0x3971/0x99c0 kernel/bpf/syscall.c:4411
 __se_sys_bpf kernel/bpf/syscall.c:4351 [inline]
 __x64_sys_bpf+0x3d/0x50 kernel/bpf/syscall.c:4351
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 20137 Comm: syz-executor.4 Tainted: G        W         5.12.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/14 06:38 upstream eebe426d32e1 a184b83e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out
2021/03/23 23:47 upstream 7acac4b3196c e613994b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out
* Struck through repros no longer work on HEAD.