syzbot


KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
Status: moderation: reported on 2022/04/24 17:40
Reported-by: syzbot+1dc46d73e4c1b726ed95@syzkaller.appspotmail.com
First crash: 318d, last: 4d17h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in virtqueue_disable_cb / vring_interrupt

write to 0xffff888103691dca of 1 bytes by interrupt on cpu 0:
 vring_interrupt+0x132/0x180 drivers/virtio/virtio_ring.c:2144
 __handle_irq_event_percpu+0x92/0x400 kernel/irq/handle.c:158
 handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
 handle_irq_event+0x60/0xf0 kernel/irq/handle.c:210
 handle_edge_irq+0x17e/0x5a0 kernel/irq/chip.c:817
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq arch/x86/kernel/irq.c:231 [inline]
 __common_interrupt+0x60/0x100 arch/x86/kernel/irq.c:250
 common_interrupt+0x9a/0xc0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40
 finish_task_switch+0xfa/0x240 kernel/sched/core.c:4953
 context_switch kernel/sched/core.c:5076 [inline]
 __schedule+0x514/0x6c0 kernel/sched/core.c:6388
 schedule+0x71/0xa0 kernel/sched/core.c:6460
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0xc4/0x390 kernel/time/hrtimer.c:2044
 hrtimer_nanosleep+0x10b/0x200 kernel/time/hrtimer.c:2097
 common_nsleep+0x64/0x80 kernel/time/posix-timers.c:1227
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
 __se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline]
 __x64_sys_clock_nanosleep+0x20c/0x240 kernel/time/posix-timers.c:1245
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888103691dca of 1 bytes by interrupt on cpu 1:
 virtqueue_disable_cb+0x17/0x160 drivers/virtio/virtio_ring.c:2008
 start_xmit+0xd1/0xaf0 drivers/net/virtio_net.c:1784
 __netdev_start_xmit include/linux/netdevice.h:4775 [inline]
 netdev_start_xmit include/linux/netdevice.h:4789 [inline]
 xmit_one+0x105/0x2f0 net/core/dev.c:3532
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3548
 sch_direct_xmit+0x1ac/0x580 net/sched/sch_generic.c:342
 __dev_xmit_skb+0x808/0xdb0 net/core/dev.c:3759
 __dev_queue_xmit+0x569/0xef0 net/core/dev.c:4141
 dev_queue_xmit+0x13/0x20 net/core/dev.c:4209
 neigh_hh_output include/net/neighbour.h:533 [inline]
 neigh_output include/net/neighbour.h:547 [inline]
 ip_finish_output2+0x709/0x850 net/ipv4/ip_output.c:228
 ip_finish_output+0xf3/0x250 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xf3/0x1a0 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:451 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 __ip_queue_xmit+0xa2e/0xa50 net/ipv4/ip_output.c:532
 ip_queue_xmit+0x34/0x40 net/ipv4/ip_output.c:546
 __tcp_transmit_skb+0x12a8/0x1790 net/ipv4/tcp_output.c:1403
 __tcp_send_ack+0x1dc/0x2e0 net/ipv4/tcp_output.c:3971
 tcp_send_ack+0x23/0x30 net/ipv4/tcp_output.c:3977
 __tcp_ack_snd_check+0x2d6/0x510 net/ipv4/tcp_input.c:5508
 tcp_rcv_established+0xc68/0xe50 net/ipv4/tcp_input.c:5944
 tcp_v4_do_rcv+0x2a8/0x5a0 net/ipv4/tcp_ipv4.c:1660
 tcp_v4_rcv+0x16f4/0x19b0 net/ipv4/tcp_ipv4.c:2074
 ip_protocol_deliver_rcu+0x23b/0x480 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x126/0x160 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:307 [inline]
 ip_local_deliver+0x100/0x1b0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:461 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:567 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:617 [inline]
 ip_sublist_rcv+0x4d4/0x5a0 net/ipv4/ip_input.c:625
 ip_list_rcv+0x24e/0x280 net/ipv4/ip_input.c:660
 __netif_receive_skb_list_ptype net/core/dev.c:5448 [inline]
 __netif_receive_skb_list_core+0x34d/0x460 net/core/dev.c:5496
 __netif_receive_skb_list+0x281/0x2f0 net/core/dev.c:5548
 netif_receive_skb_list_internal+0x236/0x360 net/core/dev.c:5639
 gro_normal_list include/net/gro.h:430 [inline]
 napi_complete_done+0x1b2/0x3c0 net/core/dev.c:5980
 virtqueue_napi_complete drivers/net/virtio_net.c:366 [inline]
 virtnet_poll+0x63e/0x8e0 drivers/net/virtio_net.c:1631
 __napi_poll+0x65/0x390 net/core/dev.c:6413
 napi_poll net/core/dev.c:6480 [inline]
 net_rx_action+0x29e/0x650 net/core/dev.c:6567
 __do_softirq+0x158/0x2e3 kernel/softirq.c:558
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0x41/0x70 kernel/softirq.c:649
 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40
 kcsan_setup_watchpoint+0x3e9/0x3f0 kernel/kcsan/core.c:694
 selinux_inode_permission+0x2a9/0x400 security/selinux/hooks.c:3094
 security_inode_permission+0x72/0xc0 security/security.c:1330
 inode_permission+0xbb/0x300 fs/namei.c:532
 may_lookup fs/namei.c:1733 [inline]
 link_path_walk+0x17d/0x7a0 fs/namei.c:2289
 path_lookupat+0x7b/0x2b0 fs/namei.c:2498
 filename_lookup+0x130/0x310 fs/namei.c:2528
 vfs_statx+0xa3/0x3d0 fs/stat.c:228
 vfs_fstatat fs/stat.c:255 [inline]
 __do_sys_newfstatat fs/stat.c:425 [inline]
 __se_sys_newfstatat+0x8a/0x290 fs/stat.c:419
 __x64_sys_newfstatat+0x51/0x60 fs/stat.c:419
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1441 Comm: udevd Not tainted 5.18.0-syzkaller-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (58):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/05/23 11:20 upstream 4b0986a3613c 4c7657cb .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/05/19 16:42 upstream f993aed406ea cb1ac2e7 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/05/14 00:20 upstream f2dd007445b1 107f6434 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/05/13 08:33 upstream f3f19f939c11 9ad6612a .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/05/07 14:48 upstream 4b97bac0756a e60b1103 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/28 20:09 upstream 259b897e5a79 e9076525 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/25 23:51 upstream af2d861d4cd2 152baedd .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/23 20:35 upstream 13bc32bad705 131df97d .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/23 08:08 upstream c00c5e1d157b 131df97d .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/20 16:05 upstream 559089e0a93d d4befee1 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/19 04:38 upstream b2d229d4ddb1 8bcc32a6 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/15 19:28 upstream 028192fea1de 8bcc32a6 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/04/04 02:47 upstream be2d3ecedd99 79a2a8fc .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/24 11:02 upstream ed4643521e6a 89bc8608 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/24 00:11 upstream 6b1f86f8e9c7 5ff41e94 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/21 21:32 upstream eaa54b1458ca e2d91b1d .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/17 02:23 upstream 56e337f2cf13 46cc3b21 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/15 19:20 upstream 56e337f2cf13 9e8eaa75 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/14 16:49 upstream 09688c0166e7 9e8eaa75 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/13 02:02 upstream aad611a868d1 9e8eaa75 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/03/10 17:41 upstream 1db333d9a51f 9e8eaa75 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/28 00:59 upstream 52a025546731 45a13a73 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/26 09:17 upstream c47658311d60 45a13a73 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/19 20:45 upstream 4f12b742eb2b 3cd800e4 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/17 00:00 upstream 359303076163 50221962 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/15 07:01 upstream d567f5db412e 8b9ca619 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/07 13:20 upstream dfd42facf1e4 a7dab638 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/02/03 17:28 upstream 88808fbbead4 4ebb2798 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/01/31 02:15 upstream 26291c54e111 495e00c5 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/01/29 21:41 upstream f8c7e4ede46f 495e00c5 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/01/24 03:29 upstream dd81e1c7d5fb 214351e1 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/01/07 04:46 upstream b2b436ec0205 6acc789a .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2022/01/05 17:44 upstream c9e6606c7fe9 6acc789a .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/12/17 08:58 upstream fa36bbe6d43f 44068e19 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/12/13 10:21 upstream 90d9fbc16b69 49ca1f59 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/12/12 05:09 upstream a763d5a5abd6 49ca1f59 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/12/02 07:37 upstream 58e1100fdc59 61f86278 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/11/26 09:23 upstream a4849f6000e2 63eeac02 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/11/17 17:25 upstream ee1703cda8dc cafff8b6 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/11/13 20:22 upstream a9b9669d9822 75b04091 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/11/03 06:23 upstream 56d33754481f 17f3edd2 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/10/30 22:12 upstream 119c85055d86 098b5d53 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/10/27 03:00 upstream 3906fe9bb7f1 d50eb50a .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/10/22 01:58 upstream 2f111a6fd5b5 55f90bc6 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/10/15 00:43 upstream 26d657410983 7aa5fe41 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/10/04 08:15 upstream 9e1ff307c779 ce697b49 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/09/22 08:45 upstream 92477dd1faa6 169724fe .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/09/09 15:37 upstream a3fa7a101dcf e2776ee4 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/09/08 23:20 upstream 2d338201d531 e2776ee4 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/27 16:39 upstream 77dd11439b86 b318694d .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/20 06:09 upstream f87d64319e6f b599f2fc .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/15 20:25 upstream ecf93431963a 2489ab88 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/15 06:50 upstream 0aa78d17099b 2489ab88 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/13 04:17 upstream f8e6dfc64f61 3fd2ea69 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/08/07 13:25 upstream c9194f32bfd9 6972b106 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/07/20 15:52 upstream 8cae8cd89f05 1b201b48 .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt
ci2-upstream-kcsan-gce 2021/07/14 03:55 upstream 40226a3d96ef 484502bd .config log report info KCSAN: data-race in virtqueue_disable_cb / vring_interrupt