syzbot


KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs

Status: auto-closed as invalid on 2021/01/31 19:05
Subsystems: net
[Documentation on labels]
First crash: 1212d, last: 1212d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs (3) net 1 718d 718d 0/26 auto-closed as invalid on 2022/06/09 14:13
upstream KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs (2) net 1 1154d 1154d 0/26 auto-closed as invalid on 2021/03/31 08:16

Sample crash report:
==================================================================
BUG: KCSAN: data-race in pfkey_send_acquire / xfrm_probe_algs

write to 0xffffffff86ed58a0 of 1 bytes by task 24802 on cpu 0:
 xfrm_probe_algs+0x138/0x2c0 net/xfrm/xfrm_algo.c:791
 pfkey_register+0xc7/0x3f0 net/key/af_key.c:1704
 pfkey_process net/key/af_key.c:2841 [inline]
 pfkey_sendmsg+0x6aa/0x8c0 net/key/af_key.c:3680
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x352/0x4c0 net/socket.c:2345
 ___sys_sendmsg net/socket.c:2399 [inline]
 __sys_sendmsg+0x1ed/0x270 net/socket.c:2432
 __do_sys_sendmsg net/socket.c:2441 [inline]
 __se_sys_sendmsg net/socket.c:2439 [inline]
 __x64_sys_sendmsg+0x42/0x50 net/socket.c:2439
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffffff86ed58a0 of 1 bytes by task 24813 on cpu 1:
 dump_esp_combs net/key/af_key.c:2991 [inline]
 pfkey_send_acquire+0xbb9/0x1030 net/key/af_key.c:3227
 km_query net/xfrm/xfrm_state.c:2205 [inline]
 xfrm_state_find+0x1db9/0x25d0 net/xfrm/xfrm_state.c:1141
 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2384 [inline]
 xfrm_tmpl_resolve net/xfrm/xfrm_policy.c:2429 [inline]
 xfrm_resolve_and_create_bundle+0x4c5/0x1b80 net/xfrm/xfrm_policy.c:2719
 xfrm_lookup_with_ifid+0x177/0x1590 net/xfrm/xfrm_policy.c:3053
 xfrm_lookup net/xfrm/xfrm_policy.c:3177 [inline]
 xfrm_lookup_route+0x37/0x100 net/xfrm/xfrm_policy.c:3188
 ip_route_output_flow+0x125/0x160 net/ipv4/route.c:2775
 udp_sendmsg+0xfc5/0x15e0 net/ipv4/udp.c:1200
 inet_sendmsg+0x5f/0x80 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 ____sys_sendmsg+0x352/0x4c0 net/socket.c:2345
 ___sys_sendmsg net/socket.c:2399 [inline]
 __sys_sendmmsg+0x335/0x4b0 net/socket.c:2489
 __do_sys_sendmmsg net/socket.c:2518 [inline]
 __se_sys_sendmmsg net/socket.c:2515 [inline]
 __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2515
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 24813 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/27 19:00 upstream f838f8d2b694 2242f77f .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.