syzbot


KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node

Status: auto-closed as invalid on 2020/09/10 11:48
Subsystems: net
[Documentation on labels]
First crash: 1397d, last: 1359d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (5) net 6 871d 896d 0/26 auto-closed as invalid on 2022/01/10 22:59
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (3) net 5 1167d 1196d 0/26 auto-closed as invalid on 2021/03/21 16:17
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (4) net 4 1108d 1123d 0/26 auto-closed as invalid on 2021/05/19 03:13
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (2) net 6 1245d 1232d 0/26 auto-closed as invalid on 2021/01/02 02:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node

write to 0xffff8880b4f140ac of 4 bytes by task 9617 on cpu 0:
 fib6_clean_node+0xc0/0x260 net/ipv6/ip6_fib.c:2168
 fib6_walk_continue+0x38e/0x430 net/ipv6/ip6_fib.c:2102
 fib6_walk net/ipv6/ip6_fib.c:2150 [inline]
 fib6_clean_tree net/ipv6/ip6_fib.c:2230 [inline]
 __fib6_clean_all+0x188/0x2b0 net/ipv6/ip6_fib.c:2246
 fib6_flush_trees+0x6c/0x80 net/ipv6/ip6_fib.c:2271
 rt_genid_bump_ipv6 include/net/net_namespace.h:458 [inline]
 addrconf_dad_completed+0x57f/0x860 net/ipv6/addrconf.c:4219
 addrconf_dad_work+0x8de/0x1150 net/ipv6/addrconf.c:3972
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff8880b4f140ac of 4 bytes by task 51 on cpu 1:
 fib6_get_cookie_safe include/net/ip6_fib.h:283 [inline]
 rt6_get_cookie include/net/ip6_fib.h:304 [inline]
 dst_cache_set_ip6+0xd3/0x1e0 net/core/dst_cache.c:115
 send6+0x255/0x3a0 drivers/net/wireguard/socket.c:148
 wg_socket_send_skb_to_peer+0xbb/0x130 drivers/net/wireguard/socket.c:177
 wg_packet_create_data_done drivers/net/wireguard/send.c:252 [inline]
 wg_packet_tx_worker+0x1e2/0x4c0 drivers/net/wireguard/send.c:280
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 51 Comm: kworker/1:1 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: wg-crypt-wg2 wg_packet_tx_worker
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/06 11:46 upstream 47ec5303d73e 4ca1c0ea .config console log report ci2-upstream-kcsan-gce
2020/08/02 03:38 upstream d52daa8620c6 8df85ed9 .config console log report ci2-upstream-kcsan-gce
2020/06/29 03:51 upstream 9ebcfadb0610 a2cdad9d .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.