syzbot


KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (3)

Status: auto-closed as invalid on 2022/07/10 03:55
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 358d, last: 185d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (2) 61 621d 726d 0/24 auto-closed as invalid on 2021/04/30 07:41
upstream KCSAN: data-race in iptunnel_xmit / iptunnel_xmit 28 904d 1130d 0/24 closed as invalid on 2020/06/18 14:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in iptunnel_xmit / iptunnel_xmit

read-write to 0xffff8881334ad168 of 8 bytes by task 18138 on cpu 0:
 iptunnel_xmit_stats include/net/ip_tunnels.h:470 [inline]
 iptunnel_xmit+0x42b/0x490 net/ipv4/ip_tunnel_core.c:87
 ip_tunnel_xmit+0xf2f/0x11c0 net/ipv4/ip_tunnel.c:811
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x525/0x570 net/ipv4/ip_gre.c:657
 __netdev_start_xmit include/linux/netdevice.h:4805 [inline]
 netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3588
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3604
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4253
 dev_queue_xmit include/linux/netdevice.h:2994 [inline]
 __bpf_tx_skb net/core/filter.c:2114 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2139 [inline]
 __bpf_redirect+0x556/0x840 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2429 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2401
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1850
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2075
 bpf_dispatcher_nop_func include/linux/bpf.h:869 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1155
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3591
 __sys_bpf+0x3c4/0x630 kernel/bpf/syscall.c:4935
 __do_sys_bpf kernel/bpf/syscall.c:5021 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5019 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5019
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

read-write to 0xffff8881334ad168 of 8 bytes by task 18148 on cpu 1:
 iptunnel_xmit_stats include/net/ip_tunnels.h:470 [inline]
 iptunnel_xmit+0x42b/0x490 net/ipv4/ip_tunnel_core.c:87
 ip_tunnel_xmit+0xf2f/0x11c0 net/ipv4/ip_tunnel.c:811
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x525/0x570 net/ipv4/ip_gre.c:657
 __netdev_start_xmit include/linux/netdevice.h:4805 [inline]
 netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3588
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3604
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4253
 dev_queue_xmit include/linux/netdevice.h:2994 [inline]
 __bpf_tx_skb net/core/filter.c:2114 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2139 [inline]
 __bpf_redirect+0x556/0x840 net/core/filter.c:2162
 ____bpf_clone_redirect net/core/filter.c:2429 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2401
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1850
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2075
 bpf_dispatcher_nop_func include/linux/bpf.h:869 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1155
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3591
 __sys_bpf+0x3c4/0x630 kernel/bpf/syscall.c:4935
 __do_sys_bpf kernel/bpf/syscall.c:5021 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5019 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5019
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

value changed: 0x0000000000000511 -> 0x0000000000000512

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 18148 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-13818-gd0e60d46bc03-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (33):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/06/05 03:49 upstream d0e60d46bc03 c8857892 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/05/21 19:07 upstream 6c3f5bec9b40 7268fa62 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/05/15 10:17 upstream 2fe1020d73ca 744a39e2 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/05/14 22:32 upstream ec7f49619d8e 744a39e2 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/05/04 23:36 upstream a7391ad35724 dc9e5259 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/04/29 14:41 upstream 38d741cb70b3 44a5ca63 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/04/23 19:48 upstream 13bc32bad705 131df97d .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/04/14 21:20 upstream a19944809fe9 b17b2923 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/03/29 19:28 upstream 1930a6e739c4 6bdac766 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/03/24 04:45 upstream 6b1f86f8e9c7 5ff41e94 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/03/02 09:05 upstream 575115360652 45a13a73 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/25 23:36 upstream c47658311d60 45a13a73 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/24 22:29 upstream 73878e5eb1bd b28851a4 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/21 09:49 upstream cfb92440ee71 3cd800e4 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/17 08:47 upstream f71077a4d84b 2bea8a27 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/14 09:33 upstream 754e0b0e3560 8b9ca619 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/09 07:22 upstream e6251ab4551f 0b33604d .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/08 17:02 upstream 555f3d7be91a 0b33604d .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/07 08:36 upstream dfd42facf1e4 a7dab638 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/06 19:17 upstream d8ad2ce873ab a7dab638 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/04 12:17 upstream dcb85f85fa6f a3e470b2 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/04 06:47 upstream c36c04c2e132 30646bfe .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/02/01 12:45 upstream 26291c54e111 c1c1631d .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/01/29 10:44 upstream 169387e2aa29 495e00c5 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/01/22 09:12 upstream 0809edbae347 214351e1 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/01/20 17:40 upstream fa2e1ba3e9e3 b838eb76 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/01/19 23:50 upstream 1d1df41c5a33 5da9499f .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2022/01/05 10:06 upstream c9e6606c7fe9 0a2584dd .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2021/12/31 19:30 upstream 4f3d93c6eaff 36bd2e48 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2021/12/30 03:25 upstream eec4df26e24e 6cc879d4 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2021/12/15 20:54 upstream 2b14864acbaa 572bcb40 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2021/12/15 00:51 upstream 5472f14a3742 f752fb53 .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
ci2-upstream-kcsan-gce 2021/12/14 06:36 upstream 5472f14a3742 5d14b1ea .config log report info KCSAN: data-race in iptunnel_xmit / iptunnel_xmit
* Struck through repros no longer work on HEAD.