syzbot


KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (2)

Status: auto-obsoleted due to no activity on 2023/04/17 04:19
Subsystems: net
[Documentation on labels]
First crash: 355d, last: 355d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in xfrmi_xmit / xfrmi_xmit net 1 426d 426d 0/26 auto-obsoleted due to no activity on 2023/02/05 20:34
upstream KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (3) net 2 151d 175d 25/26 fixed on 2023/12/21 03:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in xfrmi_xmit / xfrmi_xmit

read-write to 0xffff8881383981c0 of 8 bytes by task 13988 on cpu 1:
 xfrmi_xmit2 net/xfrm/xfrm_interface_core.c:520 [inline]
 xfrmi_xmit+0x6a4/0xb70 net/xfrm/xfrm_interface_core.c:575
 __netdev_start_xmit include/linux/netdevice.h:4881 [inline]
 netdev_start_xmit include/linux/netdevice.h:4895 [inline]
 xmit_one net/core/dev.c:3580 [inline]
 dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596
 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246
 dev_queue_xmit include/linux/netdevice.h:3051 [inline]
 neigh_connected_output+0x231/0x2a0 net/core/neighbour.c:1612
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0x9bc/0xc50 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x39a/0x4e0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0xeb/0x220 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0x64/0x80 net/ipv6/output_core.c:155
 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline]
 udp_tunnel6_xmit_skb+0x333/0x4c0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ea/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3e6/0x750 kernel/workqueue.c:2390
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2537
 kthread+0x1ac/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

read-write to 0xffff8881383981c0 of 8 bytes by task 13984 on cpu 0:
 xfrmi_xmit2 net/xfrm/xfrm_interface_core.c:520 [inline]
 xfrmi_xmit+0x6a4/0xb70 net/xfrm/xfrm_interface_core.c:575
 __netdev_start_xmit include/linux/netdevice.h:4881 [inline]
 netdev_start_xmit include/linux/netdevice.h:4895 [inline]
 xmit_one net/core/dev.c:3580 [inline]
 dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596
 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246
 dev_queue_xmit include/linux/netdevice.h:3051 [inline]
 neigh_connected_output+0x231/0x2a0 net/core/neighbour.c:1612
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0x9bc/0xc50 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x39a/0x4e0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0xeb/0x220 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0x64/0x80 net/ipv6/output_core.c:155
 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline]
 udp_tunnel6_xmit_skb+0x333/0x4c0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ea/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3e6/0x750 kernel/workqueue.c:2390
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2537
 kthread+0x1ac/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

value changed: 0x00000000000003de -> 0x00000000000003df

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13984 Comm: kworker/u4:6 Not tainted 6.2.0-syzkaller-13563-gf915322fe014-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/06 03:34 upstream f915322fe014 f8902b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xfrmi_xmit / xfrmi_xmit
* Struck through repros no longer work on HEAD.