syzbot


KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb (6)

Status: auto-obsoleted due to no activity on 2023/08/19 13:30
Subsystems: net
[Documentation on labels]
First crash: 319d, last: 296d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb net 1 1359d 1359d 0/26 auto-closed as invalid on 2020/09/20 18:11
upstream KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb (3) net 2 1184d 1209d 0/26 auto-closed as invalid on 2021/03/14 11:17
upstream KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb (4) net 48 405d 895d 0/26 auto-obsoleted due to no activity on 2023/05/02 11:32
upstream KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb (2) net 1 1274d 1242d 0/26 auto-closed as invalid on 2020/12/25 11:33
upstream KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb (5) net 1 363d 363d 0/26 auto-obsoleted due to no activity on 2023/06/13 21:35

Sample crash report:
==================================================================
BUG: KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb

read-write to 0xffff888107ee1160 of 8 bytes by task 12257 on cpu 0:
 iptunnel_xmit_stats include/net/ip_tunnels.h:489 [inline]
 ip6tunnel_xmit include/net/ip6_tunnel.h:166 [inline]
 udp_tunnel6_xmit_skb+0x440/0x4b0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ec/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x434/0x860 kernel/workqueue.c:2597
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2748
 kthread+0x1d7/0x210 kernel/kthread.c:389
 ret_from_fork+0x2e/0x40 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:296

read-write to 0xffff888107ee1160 of 8 bytes by task 25 on cpu 1:
 iptunnel_xmit_stats include/net/ip_tunnels.h:489 [inline]
 ip6tunnel_xmit include/net/ip6_tunnel.h:166 [inline]
 udp_tunnel6_xmit_skb+0x440/0x4b0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ec/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x434/0x860 kernel/workqueue.c:2597
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2748
 kthread+0x1d7/0x210 kernel/kthread.c:389
 ret_from_fork+0x2e/0x40 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:296

value changed: 0x00000000000003d6 -> 0x00000000000003d7

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 25 Comm: kworker/u4:1 Not tainted 6.5.0-rc1-syzkaller-00248-gb6e6cc1f78c7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/15 13:21 upstream b6e6cc1f78c7 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb
2023/06/22 10:10 upstream dad9774deaf1 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in udp_tunnel6_xmit_skb / udp_tunnel6_xmit_skb
* Struck through repros no longer work on HEAD.