syzbot


KCSAN: data-race in hsr_register_frame_in / hsr_register_frame_in

Status: auto-obsoleted due to no activity on 2023/01/15 10:48
Subsystems: net
[Documentation on labels]
First crash: 894d, last: 894d

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
==================================================================
BUG: KCSAN: data-race in hsr_register_frame_in / hsr_register_frame_in

write to 0xffff88812a99af40 of 8 bytes by task 1914 on cpu 0:
 hsr_register_frame_in+0xd0/0x100 net/hsr/hsr_framereg.c:472
 hsr_forward_skb+0x603/0x10b0 net/hsr/hsr_forward.c:622
 hsr_dev_xmit+0xb7/0x110 net/hsr/hsr_device.c:222
 __netdev_start_xmit include/linux/netdevice.h:4840 [inline]
 netdev_start_xmit include/linux/netdevice.h:4854 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x91c/0x11c0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 neigh_connected_output+0x25c/0x2d0 net/core/neighbour.c:1600
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0xa12/0xc30 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x395/0x4f0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:445 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0x49f/0x650 net/ipv6/ndisc.c:508
 ndisc_send_ns+0x75/0xe0 net/ipv6/ndisc.c:666
 addrconf_dad_work+0x6c8/0xb80 net/ipv6/addrconf.c:4171
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

write to 0xffff88812a99af40 of 8 bytes by task 1916 on cpu 1:
 hsr_register_frame_in+0xd0/0x100 net/hsr/hsr_framereg.c:472
 hsr_forward_skb+0x603/0x10b0 net/hsr/hsr_forward.c:622
 hsr_dev_xmit+0xb7/0x110 net/hsr/hsr_device.c:222
 __netdev_start_xmit include/linux/netdevice.h:4840 [inline]
 netdev_start_xmit include/linux/netdevice.h:4854 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x91c/0x11c0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 neigh_connected_output+0x25c/0x2d0 net/core/neighbour.c:1600
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0xa12/0xc30 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x395/0x4f0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:445 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 mld_sendpack+0x425/0x660 net/ipv6/mcast.c:1820
 mld_send_cr net/ipv6/mcast.c:2121 [inline]
 mld_ifc_work+0x576/0x810 net/ipv6/mcast.c:2653
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

value changed: 0x00000000fffffbf1 -> 0x00000000fffffbf5

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1916 Comm: kworker/1:5 Not tainted 6.1.0-rc7-syzkaller-00012-gca57f02295f1-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Workqueue: mld mld_ifc_work
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/29 16:40 upstream ca57f02295f1 579a3740 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in hsr_register_frame_in / hsr_register_frame_in
* Struck through repros no longer work on HEAD.