syzbot


KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail

Status: auto-closed as invalid on 2020/09/07 17:18
Subsystems: net
[Documentation on labels]
First crash: 1354d, last: 1354d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (6) net 13 388d 527d 0/26 auto-obsoleted due to no activity on 2023/05/01 12:30
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (3) net 4 814d 890d 0/26 auto-closed as invalid on 2022/02/28 22:53
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (4) net 5 725d 723d 0/26 auto-closed as invalid on 2022/05/29 17:16
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (5) net 2 613d 620d 0/26 auto-closed as invalid on 2022/09/18 05:49
upstream KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail (2) net 1 1125d 1125d 0/26 auto-closed as invalid on 2021/04/24 14:25

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail

write to 0xffff888095f56285 of 1 bytes by task 7 on cpu 1:
 __neigh_event_send+0x403/0xb10 net/core/neighbour.c:1126
 neigh_event_send include/net/neighbour.h:443 [inline]
 neigh_resolve_output+0x104/0x400 net/core/neighbour.c:1473
 neigh_output include/net/neighbour.h:509 [inline]
 ip6_finish_output2+0x97f/0xb20 net/ipv6/ip6_output.c:117
 __ip6_finish_output+0x302/0x330 net/ipv6/ip6_output.c:143
 ip6_finish_output+0x39/0x160 net/ipv6/ip6_output.c:153
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:176
 dst_output include/net/dst.h:443 [inline]
 ip6_local_out+0x60/0x80 net/ipv6/output_core.c:179
 ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline]
 udp_tunnel6_xmit_skb+0x2f9/0x4b0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2d7/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer drivers/net/wireguard/socket.c:177 [inline]
 wg_socket_send_buffer_to_peer+0x186/0x210 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0xf9/0x140 drivers/net/wireguard/send.c:51
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:291
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293

read to 0xffff888095f56285 of 1 bytes by task 3179 on cpu 0:
 ip6_dst_lookup_tail+0x58c/0x9b0 net/ipv6/ip6_output.c:1072
 ip6_dst_lookup_flow+0x44/0xc0 net/ipv6/ip6_output.c:1154
 send6+0x22b/0x3a0 drivers/net/wireguard/socket.c:139
 wg_socket_send_skb_to_peer drivers/net/wireguard/socket.c:177 [inline]
 wg_socket_send_buffer_to_peer+0x186/0x210 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0xf9/0x140 drivers/net/wireguard/send.c:51
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:291
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3179 Comm: kworker/u4:3 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/03 17:17 upstream bcf876870b95 96dd3623 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.