syzbot


KCSAN: data-race in is_eth_port_of_netdev_filter / team_port_del

Status: auto-closed as invalid on 2020/11/18 11:29
Subsystems: net
[Documentation on labels]
First crash: 1311d, last: 1286d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in is_eth_port_of_netdev_filter / team_port_del (2) net 2 1184d 1213d 0/26 auto-closed as invalid on 2021/02/28 21:47
upstream KCSAN: data-race in is_eth_port_of_netdev_filter / team_port_del (3) net 1 1105d 1105d 0/26 auto-closed as invalid on 2021/05/19 01:03

Sample crash report:
==================================================================
BUG: KCSAN: data-race in is_eth_port_of_netdev_filter / team_port_del

write to 0xffff8880b93c922c of 4 bytes by task 25 on cpu 0:
 team_upper_dev_unlink drivers/net/team/team.c:1124 [inline]
 team_port_del+0x243/0x8a0 drivers/net/team/team.c:1343
 team_del_slave drivers/net/team/team.c:1982 [inline]
 team_device_event+0x161/0x510 drivers/net/team/team.c:3004
 notifier_call_chain kernel/notifier.c:83 [inline]
 raw_notifier_call_chain+0x53/0xb0 kernel/notifier.c:410
 call_netdevice_notifiers_info net/core/dev.c:2033 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline]
 call_netdevice_notifiers net/core/dev.c:2059 [inline]
 rollback_registered_many+0x782/0xd20 net/core/dev.c:9347
 unregister_netdevice_many net/core/dev.c:10509 [inline]
 default_device_exit_batch+0x260/0x3f0 net/core/dev.c:10992
 ops_exit_list net/core/net_namespace.c:189 [inline]
 cleanup_net+0x4dc/0x8c0 net/core/net_namespace.c:603
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff8880b93c922c of 4 bytes by task 407 on cpu 1:
 is_vlan_dev include/linux/if_vlan.h:74 [inline]
 rdma_vlan_dev_real_dev include/rdma/ib_addr.h:266 [inline]
 is_eth_port_of_netdev_filter+0x29/0x1a0 drivers/infiniband/core/roce_gid_mgmt.c:157
 ib_enum_roce_netdev+0x292/0x310 drivers/infiniband/core/device.c:2294
 ib_enum_all_roce_netdevs+0x94/0x100 drivers/infiniband/core/device.c:2323
 netdevice_event_work_handler+0xf8/0x200 drivers/infiniband/core/roce_gid_mgmt.c:626
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 407 Comm: kworker/u4:3 Not tainted 5.9.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: gid-cache-wq netdevice_event_work_handler
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/14 11:23 upstream b5fc7a89e58b fc7735a2 .config console log report info ci2-upstream-kcsan-gce
2020/10/14 04:38 upstream 6ad4bf6ea160 fc7735a2 .config console log report info ci2-upstream-kcsan-gce
2020/09/20 02:29 upstream 325d0eab4f31 53ce8104 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.