syzbot


KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (3)

Status: auto-closed as invalid on 2022/02/28 22:53
Subsystems: net
[Documentation on labels]
First crash: 897d, last: 821d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (6) net 13 394d 534d 0/26 auto-obsoleted due to no activity on 2023/05/01 12:30
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (4) net 5 731d 729d 0/26 auto-closed as invalid on 2022/05/29 17:16
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (5) net 2 620d 626d 0/26 auto-closed as invalid on 2022/09/18 05:49
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (2) net 1 1131d 1131d 0/26 auto-closed as invalid on 2021/04/24 14:25
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail net 1 1360d 1360d 0/26 auto-closed as invalid on 2020/09/07 17:18

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail

write to 0xffff888127ee9084 of 1 bytes by task 8875 on cpu 1:
 __neigh_event_send+0x40d/0xb20 net/core/neighbour.c:1157
 neigh_event_send include/net/neighbour.h:470 [inline]
 neigh_resolve_output+0x104/0x410 net/core/neighbour.c:1506
 neigh_output include/net/neighbour.h:541 [inline]
 ip6_finish_output2+0x9be/0xbd0 net/ipv6/ip6_output.c:126
 __ip6_finish_output net/ipv6/ip6_output.c:191 [inline]
 ip6_finish_output+0x446/0x4c0 net/ipv6/ip6_output.c:201
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:224
 dst_output include/net/dst.h:451 [inline]
 ip6_local_out+0x60/0x80 net/ipv6/output_core.c:161
 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline]
 udp_tunnel6_xmit_skb+0x31a/0x4d0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2f1/0x3b0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbb/0x130 drivers/net/wireguard/socket.c:177
 wg_socket_send_buffer_to_peer+0xf7/0x120 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x109/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3f6/0x960 kernel/workqueue.c:2307
 worker_thread+0x616/0xa70 kernel/workqueue.c:2454
 kthread+0x1bf/0x1e0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30

read to 0xffff888127ee9084 of 1 bytes by task 16716 on cpu 0:
 ip6_dst_lookup_tail+0x660/0x920 net/ipv6/ip6_output.c:1116
 ip6_dst_lookup_flow+0x44/0xc0 net/ipv6/ip6_output.c:1200
 send6+0x238/0x3b0 drivers/net/wireguard/socket.c:139
 wg_socket_send_skb_to_peer+0xbb/0x130 drivers/net/wireguard/socket.c:177
 wg_socket_send_buffer_to_peer+0xf7/0x120 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x109/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3f6/0x960 kernel/workqueue.c:2307
 worker_thread+0x616/0xa70 kernel/workqueue.c:2454
 kthread+0x1bf/0x1e0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30

value changed: 0x20 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 16716 Comm: kworker/u4:2 Not tainted 5.17.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
==================================================================
bond3: (slave bridge10): failed to get link speed/duplex
bond2: (slave bridge9): failed to get link speed/duplex
bond1: (slave bridge8): failed to get link speed/duplex
bond1: (slave bridge8): failed to get link speed/duplex
bond3: (slave bridge10): failed to get link speed/duplex
bond1: (slave bridge8): failed to get link speed/duplex
bond2: (slave bridge9): failed to get link speed/duplex

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/24 22:47 upstream dd81e1c7d5fb 2cbffd88 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail
2022/01/01 21:55 upstream 278218f6778b e1768e9c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail
2021/12/01 00:52 upstream f080815fdb3e 80270552 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail
2021/11/10 04:50 upstream cb690f5238d7 55fa030c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail
* Struck through repros no longer work on HEAD.