syzbot


KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_commit_changes_nolock (3)

Status: auto-obsoleted due to no activity on 2024/10/30 10:58
Subsystems: batman
[Documentation on labels]
First crash: 175d, last: 175d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_commit_changes_nolock batman 1 1878d 1878d 0/28 auto-closed as invalid on 2020/04/06 19:35
upstream KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_commit_changes_nolock (2) batman 1 291d 291d 0/28 auto-obsoleted due to no activity on 2024/07/06 18:55

Sample crash report:
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave batadv0): Releasing backup interface
==================================================================
BUG: KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_commit_changes_nolock

read to 0xffff88810409e118 of 2 bytes by task 10028 on cpu 1:
 batadv_tt_local_set_flags net/batman-adv/translation-table.c:3621 [inline]
 batadv_tt_local_commit_changes_nolock+0xd5/0x550 net/batman-adv/translation-table.c:3694
 batadv_tt_local_commit_changes+0x26/0x40 net/batman-adv/translation-table.c:3718
 batadv_iv_ogm_schedule_buff net/batman-adv/bat_iv_ogm.c:811 [inline]
 batadv_iv_ogm_schedule+0x1e6/0x790 net/batman-adv/bat_iv_ogm.c:868
 batadv_iv_send_outstanding_bat_ogm_packet+0x44c/0x4b0 net/batman-adv/bat_iv_ogm.c:1712
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310
 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

write to 0xffff88810409e118 of 2 bytes by task 8319 on cpu 0:
 batadv_tt_local_add+0xd67/0x1020
 batadv_interface_set_mac_addr+0x162/0x1e0 net/batman-adv/soft-interface.c:146
 dev_set_mac_address+0x19c/0x260 net/core/dev.c:9095
 __bond_release_one+0x8f3/0xa00 drivers/net/bonding/bond_main.c:2625
 bond_uninit+0x1b3/0x320 drivers/net/bonding/bond_main.c:6044
 unregister_netdevice_many_notify+0xc9d/0x11b0 net/core/dev.c:11421
 unregister_netdevice_many+0x19/0x20 net/core/dev.c:11461
 cleanup_net+0x411/0x810 net/core/net_namespace.c:621
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310
 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x0300 -> 0x0100

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8319 Comm: kworker/u8:13 Tainted: G        W          6.11.0-syzkaller-10547-g684a64bf32b6 #0
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: netns cleanup_net
==================================================================
bond0 (unregistering): Released all slaves
tipc: Disabling bearer <udp:s>
tipc: Left network mode
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
IPVS: stop unused estimator thread 0...

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/25 10:49 upstream 684a64bf32b6 349a68c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in batadv_tt_local_add / batadv_tt_local_commit_changes_nolock
* Struck through repros no longer work on HEAD.