syzbot


KCSAN: data-race in geneve_xmit / geneve_xmit (5)

Status: auto-closed as invalid on 2022/07/17 10:41
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 174d, last: 174d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in geneve_xmit / geneve_xmit (4) 1 314d 314d 0/24 auto-closed as invalid on 2022/02/27 09:30
upstream KCSAN: data-race in geneve_xmit / geneve_xmit (2) 1 724d 724d 0/24 auto-closed as invalid on 2021/01/12 17:00
upstream KCSAN: data-race in geneve_xmit / geneve_xmit 4 1000d 1037d 0/24 auto-closed as invalid on 2020/05/17 12:40
upstream KCSAN: data-race in geneve_xmit / geneve_xmit (3) 1 379d 379d 0/24 auto-closed as invalid on 2021/12/23 17:26

Sample crash report:
==================================================================
BUG: KCSAN: data-race in geneve_xmit / geneve_xmit

read-write to 0xffff8881380521b8 of 8 bytes by task 12185 on cpu 1:
 geneve_xmit+0x1820/0x1950
 __netdev_start_xmit include/linux/netdevice.h:4805 [inline]
 netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3588
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3604
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4253
 dev_queue_xmit include/linux/netdevice.h:2994 [inline]
 neigh_hh_output include/net/neighbour.h:533 [inline]
 neigh_output include/net/neighbour.h:547 [inline]
 ip_finish_output2+0x70b/0x850 net/ipv4/ip_output.c:228
 ip_finish_output+0xf3/0x250 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xf3/0x1a0 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:451 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 ip_send_skb+0x6e/0xe0 net/ipv4/ip_output.c:1571
 udp_send_skb+0x626/0x860 net/ipv4/udp.c:967
 udp_sendmsg+0x114b/0x1200 net/ipv4/udp.c:1254
 inet_sendmsg+0x5f/0x80 net/ipv4/af_inet.c:819
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0x38f/0x500 net/socket.c:2492
 ___sys_sendmsg net/socket.c:2546 [inline]
 __sys_sendmmsg+0x27c/0x4a0 net/socket.c:2632
 __do_sys_sendmmsg net/socket.c:2661 [inline]
 __se_sys_sendmmsg net/socket.c:2658 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2658
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

read-write to 0xffff8881380521b8 of 8 bytes by task 12166 on cpu 0:
 geneve_xmit+0x1820/0x1950
 __netdev_start_xmit include/linux/netdevice.h:4805 [inline]
 netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3588
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3604
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4253
 dev_queue_xmit include/linux/netdevice.h:2994 [inline]
 neigh_hh_output include/net/neighbour.h:533 [inline]
 neigh_output include/net/neighbour.h:547 [inline]
 ip_finish_output2+0x70b/0x850 net/ipv4/ip_output.c:228
 ip_finish_output+0xf3/0x250 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xf3/0x1a0 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:451 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 ip_send_skb+0x6e/0xe0 net/ipv4/ip_output.c:1571
 udp_send_skb+0x626/0x860 net/ipv4/udp.c:967
 udp_sendmsg+0x114b/0x1200 net/ipv4/udp.c:1254
 inet_sendmsg+0x5f/0x80 net/ipv4/af_inet.c:819
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 ____sys_sendmsg+0x38f/0x500 net/socket.c:2492
 ___sys_sendmsg net/socket.c:2546 [inline]
 __sys_sendmmsg+0x27c/0x4a0 net/socket.c:2632
 __do_sys_sendmmsg net/socket.c:2661 [inline]
 __se_sys_sendmmsg net/socket.c:2658 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2658
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

value changed: 0x00000000000001d1 -> 0x00000000000001d2

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 12166 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00303-g7a68065eb9cd-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/06/12 10:31 upstream 7a68065eb9cd 0d5abf15 .config log report info KCSAN: data-race in geneve_xmit / geneve_xmit
* Struck through repros no longer work on HEAD.