syzbot


KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (7)

Status: auto-obsoleted due to no activity on 2022/10/14 23:50
Subsystems: bpf
[Documentation on labels]
First crash: 1143d, last: 1126d
Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (3) bpf 6 1 1396d 1396d 0/29 auto-closed as invalid on 2022/01/17 12:35
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free bpf 6 1 2025d 2025d 0/29 auto-closed as invalid on 2020/06/02 14:31
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (6) bpf 6 1 1242d 1242d 0/29 auto-closed as invalid on 2022/06/21 01:00
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (4) bpf 6 1 1352d 1352d 0/29 auto-closed as invalid on 2022/03/02 08:29
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (8) bpf 6 5 837d 899d 0/29 auto-obsoleted due to no activity on 2023/07/30 11:13
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (5) bpf 6 2 1312d 1316d 0/29 auto-closed as invalid on 2022/04/12 08:01
upstream KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free (2) bpf 6 1 1861d 1861d 0/29 auto-closed as invalid on 2020/10/10 03:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free

read to 0xffff888127397ee3 of 1 bytes by task 13890 on cpu 0:
 bpf_lru_node_set_ref kernel/bpf/bpf_lru_list.h:70 [inline]
 __htab_lru_percpu_map_update_elem+0x2d4/0x7f0 kernel/bpf/hashtab.c:1310
 bpf_percpu_hash_update+0x5a/0x90 kernel/bpf/hashtab.c:2282
 bpf_map_update_value+0x1dd/0x2f0 kernel/bpf/syscall.c:200
 generic_map_update_batch+0x36e/0x4d0 kernel/bpf/syscall.c:1657
 bpf_map_do_batch+0x373/0x3d0
 __sys_bpf+0x5d4/0x620
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

write to 0xffff888127397ee3 of 1 bytes by task 13899 on cpu 1:
 __bpf_lru_node_move_in kernel/bpf/bpf_lru_list.c:92 [inline]
 __local_list_flush kernel/bpf/bpf_lru_list.c:300 [inline]
 bpf_lru_list_pop_free_to_local kernel/bpf/bpf_lru_list.c:327 [inline]
 bpf_common_lru_pop_free kernel/bpf/bpf_lru_list.c:447 [inline]
 bpf_lru_pop_free+0x392/0xf00 kernel/bpf/bpf_lru_list.c:499
 prealloc_lru_pop kernel/bpf/hashtab.c:310 [inline]
 __htab_lru_percpu_map_update_elem+0xdb/0x7f0 kernel/bpf/hashtab.c:1294
 bpf_percpu_hash_update+0x5a/0x90 kernel/bpf/hashtab.c:2282
 bpf_map_update_value+0x1dd/0x2f0 kernel/bpf/syscall.c:200
 generic_map_update_batch+0x36e/0x4d0 kernel/bpf/syscall.c:1657
 bpf_map_do_batch+0x373/0x3d0
 __sys_bpf+0x5d4/0x620
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 13899 Comm: syz-executor.2 Not tainted 6.0.0-rc4-syzkaller-00284-gce888220d5c7-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
==================================================================

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/09/09 23:48 upstream ce888220d5c7 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/09 10:48 upstream 506357871c18 90058bdc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/08 13:43 upstream 26b1224903b3 f3027468 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/08 01:01 upstream 0066f1b0e275 435aeef7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/06 22:42 upstream d2ec799d1c1b 5fc30c37 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/05 10:08 upstream 7e18e42e4b28 922294ab .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/04 10:00 upstream 7726d4c3e60b 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/03 19:36 upstream 42cf58c272ee 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/03 14:50 upstream d895ec7938c4 28811d0a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/03 05:49 upstream d895ec7938c4 49e94a20 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/02 14:29 upstream 42e66b1cc3a0 25194605 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/09/01 04:00 upstream c5e4d5e99162 b01ec571 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/08/28 22:36 upstream 8379c0b31fbc 07177916 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
2022/08/23 17:23 upstream 072e51356cd5 cea8b0f7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __htab_lru_percpu_map_update_elem / bpf_lru_pop_free
* Struck through repros no longer work on HEAD.