KCSAN: data-race in pfkey_send_acquire / xfrm_probe

KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs (2)
Status: auto-closed as invalid on 2021/03/31 08:16
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 150d, last: 150d

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs				1	208d	208d	0/22	auto-closed as invalid on 2021/01/31 19:05

Sample crash report:

==================================================================
BUG: KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs

write to 0xffffffff87ad7f80 of 1 bytes by task 10498 on cpu 1:
 xfrm_probe_algs+0xa8/0x2c0 net/xfrm/xfrm_algo.c:785
 pfkey_register+0xc7/0x400 net/key/af_key.c:1704
 pfkey_process net/key/af_key.c:2841 [inline]
 pfkey_sendmsg+0x6aa/0x8c0 net/key/af_key.c:3680
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg net/socket.c:674 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2350
 ___sys_sendmsg net/socket.c:2404 [inline]
 __sys_sendmsg+0x1ed/0x270 net/socket.c:2437
 __do_sys_sendmsg net/socket.c:2446 [inline]
 __se_sys_sendmsg net/socket.c:2444 [inline]
 __x64_sys_sendmsg+0x42/0x50 net/socket.c:2444
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffffffff87ad7f80 of 1 bytes by task 10513 on cpu 0:
 count_esp_combs net/key/af_key.c:2931 [inline]
 pfkey_send_acquire+0x2b9/0xff0 net/key/af_key.c:3163
 km_query net/xfrm/xfrm_state.c:2205 [inline]
 xfrm_state_find+0x1db9/0x25e0 net/xfrm/xfrm_state.c:1141
 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2394 [inline]
 xfrm_tmpl_resolve net/xfrm/xfrm_policy.c:2439 [inline]
 xfrm_resolve_and_create_bundle+0x4c5/0x1b80 net/xfrm/xfrm_policy.c:2729
 xfrm_lookup_with_ifid+0x184/0x15a0 net/xfrm/xfrm_policy.c:3063
 xfrm_lookup net/xfrm/xfrm_policy.c:3187 [inline]
 xfrm_lookup_route+0x37/0x100 net/xfrm/xfrm_policy.c:3198
 ip_route_output_flow+0x125/0x160 net/ipv4/route.c:2780
 udp_sendmsg+0x100a/0x1560 net/ipv4/udp.c:1206
 inet_sendmsg+0x5f/0x80 net/ipv4/af_inet.c:821
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg net/socket.c:674 [inline]
 ____sys_sendmsg+0x360/0x4d0 net/socket.c:2350
 ___sys_sendmsg net/socket.c:2404 [inline]
 __sys_sendmmsg+0x315/0x4b0 net/socket.c:2494
 __do_sys_sendmmsg net/socket.c:2523 [inline]
 __se_sys_sendmmsg net/socket.c:2520 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2520
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10513 Comm: syz-executor.1 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-kcsan-gce	2021/02/24 08:15	upstream	c03c21ba6f4e	fcc6d71b	.config	log	report			info	KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs