syzbot


KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (4)

Status: auto-closed as invalid on 2021/05/19 03:13
Subsystems: net
[Documentation on labels]
First crash: 1634d, last: 1619d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node net 6 3 1869d 1908d 0/29 auto-closed as invalid on 2020/09/10 11:48
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (5) net 6 6 1382d 1407d 0/29 auto-closed as invalid on 2022/01/10 22:59
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (3) net 6 5 1677d 1707d 0/29 auto-closed as invalid on 2021/03/21 16:17
upstream KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node (2) net 6 6 1756d 1742d 0/29 auto-closed as invalid on 2021/01/02 02:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node

write to 0xffff88802789b6ac of 4 bytes by task 35 on cpu 1:
 fib6_clean_node+0xc0/0x260 net/ipv6/ip6_fib.c:2177
 fib6_walk_continue+0x38e/0x430 net/ipv6/ip6_fib.c:2111
 fib6_walk net/ipv6/ip6_fib.c:2159 [inline]
 fib6_clean_tree net/ipv6/ip6_fib.c:2239 [inline]
 __fib6_clean_all+0x188/0x2b0 net/ipv6/ip6_fib.c:2255
 fib6_flush_trees+0x6c/0x80 net/ipv6/ip6_fib.c:2280
 rt_genid_bump_ipv6 include/net/net_namespace.h:450 [inline]
 addrconf_dad_completed+0x57f/0x870 net/ipv6/addrconf.c:4209
 addrconf_dad_work+0x8dd/0x1160 net/ipv6/addrconf.c:3962
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff88802789b6ac of 4 bytes by task 3649 on cpu 0:
 fib6_get_cookie_safe include/net/ip6_fib.h:284 [inline]
 rt6_get_cookie include/net/ip6_fib.h:305 [inline]
 dst_cache_set_ip6+0xab/0x1b0 net/core/dst_cache.c:115
 send6+0x26e/0x3b0 drivers/net/wireguard/socket.c:148
 wg_socket_send_skb_to_peer drivers/net/wireguard/socket.c:177 [inline]
 wg_socket_send_buffer_to_peer+0x186/0x210 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_response+0xd8/0x130 drivers/net/wireguard/send.c:103
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:161 [inline]
 wg_packet_handshake_receive_worker+0x2b8/0x450 drivers/net/wireguard/receive.c:220
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3649 Comm: kworker/0:2 Not tainted 5.12.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
==================================================================
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
Bluetooth: hci0: command 0x0419 tx timeout
Bluetooth: hci1: command 0x0419 tx timeout

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/14 03:10 upstream eebe426d32e1 a184b83e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node
2021/04/13 20:45 upstream 89698becf06d a184b83e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node
2021/04/08 07:27 upstream 3a22981230f9 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node
2021/03/29 19:11 upstream a5e13c6df0e4 a8529b82 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in dst_cache_set_ip6 / fib6_clean_node
* Struck through repros no longer work on HEAD.