syzbot


KCSAN: data-race in inet_peer_xrlim_allow / inet_peer_xrlim_allow

Status: auto-closed as invalid on 2022/04/14 21:03
Subsystems: net
[Documentation on labels]
First crash: 770d, last: 770d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in inet_peer_xrlim_allow / inet_peer_xrlim_allow

read to 0xffff88812f5a4138 of 8 bytes by task 31510 on cpu 0:
 inet_peer_xrlim_allow+0x57/0xe0 net/ipv4/inetpeer.c:276
 icmpv6_xrlim_allow+0x1c4/0x220 net/ipv6/icmp.c:231
 icmp6_send+0xbeb/0x1480 net/ipv6/icmp.c:581
 __icmpv6_send include/linux/icmpv6.h:28 [inline]
 icmpv6_send include/linux/icmpv6.h:49 [inline]
 ip6_pkt_drop+0x309/0x340 net/ipv6/route.c:4521
 ip6_pkt_discard+0x18/0x20 net/ipv6/route.c:4528
 dst_input include/net/dst.h:461 [inline]
 ip6_rcv_finish+0x1de/0x270 net/ipv6/ip6_input.c:76
 NF_HOOK include/linux/netfilter.h:307 [inline]
 ipv6_rcv+0x85/0x140 net/ipv6/ip6_input.c:297
 __netif_receive_skb_one_core net/core/dev.c:5351 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5465
 netif_receive_skb_internal+0x37/0x150 net/core/dev.c:5551
 netif_receive_skb+0x16/0x170 net/core/dev.c:5610
 tun_get_user+0x1ce0/0x1e40 drivers/net/tun.c:1963
 tun_chr_write_iter+0x161/0x200 drivers/net/tun.c:1993
 call_write_iter include/linux/fs.h:2074 [inline]
 new_sync_write fs/read_write.c:503 [inline]
 vfs_write+0x7f5/0x950 fs/read_write.c:590
 ksys_write+0xd9/0x190 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:652
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

write to 0xffff88812f5a4138 of 8 bytes by task 31509 on cpu 1:
 inet_peer_xrlim_allow+0x6a/0xe0 net/ipv4/inetpeer.c:277
 icmpv6_xrlim_allow+0x1c4/0x220 net/ipv6/icmp.c:231
 icmp6_send+0xbeb/0x1480 net/ipv6/icmp.c:581
 __icmpv6_send include/linux/icmpv6.h:28 [inline]
 icmpv6_send include/linux/icmpv6.h:49 [inline]
 ip6_pkt_drop+0x309/0x340 net/ipv6/route.c:4521
 ip6_pkt_discard+0x18/0x20 net/ipv6/route.c:4528
 dst_input include/net/dst.h:461 [inline]
 ip6_rcv_finish+0x1de/0x270 net/ipv6/ip6_input.c:76
 NF_HOOK include/linux/netfilter.h:307 [inline]
 ipv6_rcv+0x85/0x140 net/ipv6/ip6_input.c:297
 __netif_receive_skb_one_core net/core/dev.c:5351 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5465
 netif_receive_skb_internal+0x37/0x150 net/core/dev.c:5551
 netif_receive_skb+0x16/0x170 net/core/dev.c:5610
 tun_get_user+0x1ce0/0x1e40 drivers/net/tun.c:1963
 tun_chr_write_iter+0x161/0x200 drivers/net/tun.c:1993
 call_write_iter include/linux/fs.h:2074 [inline]
 new_sync_write fs/read_write.c:503 [inline]
 vfs_write+0x7f5/0x950 fs/read_write.c:590
 ksys_write+0xd9/0x190 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:652
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000100001b95 -> 0x0000000100001b9a

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 31509 Comm: syz-executor.5 Not tainted 5.17.0-rc7-syzkaller-00105-g1db333d9a51f-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/10 20:55 upstream 1db333d9a51f 9e8eaa75 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in inet_peer_xrlim_allow / inet_peer_xrlim_allow
* Struck through repros no longer work on HEAD.