syzbot


KCSAN: data-race in __neigh_event_send / neigh_resolve_output (7)

Status: fixed on 2023/06/08 14:41
Subsystems: net
[Documentation on labels]
Fix commit: b071af523579 neighbour: annotate lockless accesses to n->nud_state
First crash: 977d, last: 603d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output (6) net 2 1053d 1087d 0/28 auto-closed as invalid on 2022/02/20 22:06
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output (4) net 1 1502d 1502d 0/28 auto-closed as invalid on 2020/11/28 17:46
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output net 5 1845d 1868d 0/28 auto-closed as invalid on 2020/01/25 19:36
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output (2) net 1 1771d 1771d 0/28 auto-closed as invalid on 2020/04/08 18:47
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output (3) net 1 1630d 1630d 0/28 auto-closed as invalid on 2020/07/24 05:33
upstream KCSAN: data-race in __neigh_event_send / neigh_resolve_output (5) net 2 1400d 1427d 0/28 auto-closed as invalid on 2021/03/11 01:25

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __neigh_event_send / neigh_resolve_output

write to 0xffff88814f6b8e84 of 1 bytes by task 12863 on cpu 0:
 __neigh_event_send+0x3bd/0xa70 net/core/neighbour.c:1213
 neigh_event_send_probe include/net/neighbour.h:470 [inline]
 neigh_event_send include/net/neighbour.h:476 [inline]
 neigh_resolve_output+0x114/0x430 net/core/neighbour.c:1567
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0x9bd/0xc50 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x39a/0x4e0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0xeb/0x220 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0x64/0x80 net/ipv6/output_core.c:155
 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline]
 udp_tunnel6_xmit_skb+0x333/0x4b0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ee/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3e6/0x750 kernel/workqueue.c:2390
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2537
 kthread+0x1a6/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

read to 0xffff88814f6b8e84 of 1 bytes by task 13175 on cpu 1:
 neigh_event_send_probe include/net/neighbour.h:469 [inline]
 neigh_event_send include/net/neighbour.h:476 [inline]
 neigh_resolve_output+0x73/0x430 net/core/neighbour.c:1567
 neigh_output include/net/neighbour.h:546 [inline]
 ip6_finish_output2+0x9bd/0xc50 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline]
 ip6_finish_output+0x39a/0x4e0 net/ipv6/ip6_output.c:206
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0xeb/0x220 net/ipv6/ip6_output.c:227
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0x64/0x80 net/ipv6/output_core.c:155
 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline]
 udp_tunnel6_xmit_skb+0x333/0x4b0 net/ipv6/ip6_udp_tunnel.c:109
 send6+0x2ee/0x3a0 drivers/net/wireguard/socket.c:152
 wg_socket_send_skb_to_peer+0xbd/0x130 drivers/net/wireguard/socket.c:178
 wg_socket_send_buffer_to_peer+0xd6/0x100 drivers/net/wireguard/socket.c:200
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10c/0x150 drivers/net/wireguard/send.c:51
 process_one_work+0x3e6/0x750 kernel/workqueue.c:2390
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2537
 kthread+0x1a6/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

value changed: 0x20 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 13175 Comm: kworker/u4:33 Not tainted 6.3.0-rc6-syzkaller-00034-ge62252bc55b6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
==================================================================

Crashes (43):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/04/11 22:02 upstream e62252bc55b6 49faf98d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/30 02:31 upstream ffe78bbd5121 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/29 01:26 upstream fcd476ea6a88 fc067f05 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/22 17:37 upstream a1effab7a3a3 f94b4a29 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/19 02:46 upstream 534293368afa 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/17 03:30 upstream 0ddc84d2dd43 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/11 11:04 upstream ef5f68cc1f82 5205ef30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/03/04 14:24 upstream 0988a0ea7919 f8902b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/02/04 23:11 upstream db27c22251e7 be607b78 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/02/04 17:57 upstream 0136d86b7852 be607b78 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/02/01 18:55 upstream c0b67534c95c 9a6f477c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/27 03:24 upstream 7c46948a6e9c 9dfcf09c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/18 03:43 upstream 6e50979a9c87 42660d9e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/16 03:12 upstream 5dc4c995db9e a63719e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/12 19:33 upstream e8f60cd7db24 96166539 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/10 02:20 upstream 1fe4fd6f5cad 48bc529a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2023/01/04 09:46 upstream 69b41ac87e4a 1dac8c7a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/12/25 18:40 upstream 72a85e2b0a1e 9da18ae8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/11/29 20:37 upstream ca57f02295f1 579a3740 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/11/26 19:33 upstream 644e9524388a f4470a7b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/11/09 18:12 upstream f141df371335 bebca8b7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/29 21:38 upstream 91562cf99364 2a71366b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/28 13:15 upstream 23758867219c 8168b69e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/25 19:11 upstream 337a0a0b63f1 45645420 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/14 15:39 upstream 6d84c258e804 4954e4b2 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/08 23:56 upstream a6afa4199d3d aea5da89 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/10/06 06:06 upstream 2bca25eaeba6 2c6543ad .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/09/26 10:49 upstream f76349cf4145 d59ba983 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/08/30 07:09 upstream dcf8e5633e2e 4a380809 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/08/10 22:13 upstream f41445645ab5 a6201f11 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/08/02 23:17 upstream 7d0d3fa7339e 1c9013ac .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/07/18 14:53 upstream ff6992735ade ff988920 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/07/13 08:46 upstream b047602d579b 5d921b08 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/07/06 20:24 upstream 9f09069cde34 bff65f44 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/06/23 10:35 upstream de5c208d533a 912f5df7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/06/02 14:34 upstream d1dc87763f40 6e12f05f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/05/16 19:39 upstream 42226c989789 744a39e2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/05/10 11:38 upstream 9be9ed2612b5 8b277b8e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/05/03 03:03 upstream 9050ba3a61a4 2df221f6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/05/02 15:29 upstream 672c0c517342 2df221f6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/04/18 11:01 upstream b2d229d4ddb1 8bcc32a6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/04/15 17:49 upstream 028192fea1de 8bcc32a6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
2022/04/03 07:40 upstream be2d3ecedd99 79a2a8fc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __neigh_event_send / neigh_resolve_output
* Struck through repros no longer work on HEAD.