================================================================== BUG: KCSAN: data-race in icmp_global_allow / icmp_global_allow read to 0xffffffff861a4a54 of 4 bytes by interrupt on cpu 1: icmp_global_allow+0x36/0x1b0 net/ipv4/icmp.c:254 icmpv6_global_allow net/ipv6/icmp.c:184 [inline] icmpv6_global_allow net/ipv6/icmp.c:179 [inline] icmp6_send+0x493/0x1140 net/ipv6/icmp.c:514 icmpv6_send+0x71/0xb0 net/ipv6/ip6_icmp.c:43 ip6_link_failure+0x43/0x180 net/ipv6/route.c:2644 dst_link_failure include/net/dst.h:419 [inline] ip6_tnl_xmit+0x296/0x1780 net/ipv6/ip6_tunnel.c:1222 ip6ip6_tnl_xmit net/ipv6/ip6_tunnel.c:1376 [inline] ip6_tnl_start_xmit+0xead/0x1160 net/ipv6/ip6_tunnel.c:1402 __netdev_start_xmit include/linux/netdevice.h:4413 [inline] netdev_start_xmit include/linux/netdevice.h:4427 [inline] xmit_one net/core/dev.c:3199 [inline] dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3215 __dev_queue_xmit+0x14ab/0x1b40 net/core/dev.c:3792 dev_queue_xmit+0x21/0x30 net/core/dev.c:3825 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530 neigh_output include/net/neighbour.h:511 [inline] ip6_finish_output2+0x7a2/0xec0 net/ipv6/ip6_output.c:116 __ip6_finish_output net/ipv6/ip6_output.c:142 [inline] __ip6_finish_output+0x2d7/0x330 net/ipv6/ip6_output.c:127 ip6_finish_output+0x41/0x160 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip6_output+0xf2/0x280 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] NF_HOOK include/linux/netfilter.h:299 [inline] ip6_xmit+0x6cb/0xcd0 net/ipv6/ip6_output.c:279 inet6_csk_xmit+0x170/0x1f0 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0xe81/0x1d60 net/ipv4/tcp_output.c:1169 tcp_transmit_skb net/ipv4/tcp_output.c:1185 [inline] tcp_xmit_probe_skb+0x19b/0x1d0 net/ipv4/tcp_output.c:3735 tcp_write_wakeup+0x12e/0x3b0 net/ipv4/tcp_output.c:3788 tcp_send_probe0+0x3a/0x286 net/ipv4/tcp_output.c:3803 tcp_probe_timer net/ipv4/tcp_timer.c:381 [inline] tcp_write_timer_handler+0x48e/0x510 net/ipv4/tcp_timer.c:603 tcp_write_timer+0xd1/0xf0 net/ipv4/tcp_timer.c:619 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786 __do_softirq+0x115/0x33f kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0xbb/0xe0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:571 default_idle_call+0x1e/0x40 kernel/sched/idle.c:94 cpuidle_idle_call kernel/sched/idle.c:154 [inline] do_idle+0x1af/0x280 kernel/sched/idle.c:263 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:355 start_secondary+0x168/0x1b0 arch/x86/kernel/smpboot.c:264 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241 write to 0xffffffff861a4a54 of 4 bytes by interrupt on cpu 0: icmp_global_allow+0x174/0x1b0 net/ipv4/icmp.c:272 icmpv6_global_allow net/ipv6/icmp.c:184 [inline] icmpv6_global_allow net/ipv6/icmp.c:179 [inline] icmp6_send+0x493/0x1140 net/ipv6/icmp.c:514 icmpv6_send+0x71/0xb0 net/ipv6/ip6_icmp.c:43 ip6_link_failure+0x43/0x180 net/ipv6/route.c:2644 dst_link_failure include/net/dst.h:419 [inline] ip6_tnl_xmit+0x296/0x1780 net/ipv6/ip6_tunnel.c:1222 ip6ip6_tnl_xmit net/ipv6/ip6_tunnel.c:1376 [inline] ip6_tnl_start_xmit+0xead/0x1160 net/ipv6/ip6_tunnel.c:1402 __netdev_start_xmit include/linux/netdevice.h:4413 [inline] netdev_start_xmit include/linux/netdevice.h:4427 [inline] xmit_one net/core/dev.c:3199 [inline] dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3215 __dev_queue_xmit+0x14ab/0x1b40 net/core/dev.c:3792 dev_queue_xmit+0x21/0x30 net/core/dev.c:3825 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530 neigh_output include/net/neighbour.h:511 [inline] ip6_finish_output2+0x7a2/0xec0 net/ipv6/ip6_output.c:116 __ip6_finish_output net/ipv6/ip6_output.c:142 [inline] __ip6_finish_output+0x2d7/0x330 net/ipv6/ip6_output.c:127 ip6_finish_output+0x41/0x160 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip6_output+0xf2/0x280 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:305 [inline] NF_HOOK include/linux/netfilter.h:299 [inline] ip6_xmit+0x6cb/0xcd0 net/ipv6/ip6_output.c:279 inet6_csk_xmit+0x170/0x1f0 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0xe81/0x1d60 net/ipv4/tcp_output.c:1169 tcp_transmit_skb net/ipv4/tcp_output.c:1185 [inline] tcp_xmit_probe_skb+0x19b/0x1d0 net/ipv4/tcp_output.c:3735 tcp_write_wakeup+0x12e/0x3b0 net/ipv4/tcp_output.c:3788 tcp_send_probe0+0x3a/0x286 net/ipv4/tcp_output.c:3803 tcp_probe_timer net/ipv4/tcp_timer.c:381 [inline] tcp_write_timer_handler+0x48e/0x510 net/ipv4/tcp_timer.c:603 tcp_write_timer+0xd1/0xf0 net/ipv4/tcp_timer.c:619 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786 __do_softirq+0x115/0x33f kernel/softirq.c:292 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1082 do_softirq.part.0+0x6b/0x80 kernel/softirq.c:337 do_softirq kernel/softirq.c:329 [inline] __local_bh_enable_ip+0x76/0x80 kernel/softirq.c:189 local_bh_enable include/linux/bottom_half.h:32 [inline] get_next_corpse net/netfilter/nf_conntrack_core.c:2013 [inline] nf_ct_iterate_cleanup+0x129/0x2e0 net/netfilter/nf_conntrack_core.c:2036 nf_ct_iterate_cleanup_net net/netfilter/nf_conntrack_core.c:2121 [inline] nf_ct_iterate_cleanup_net+0xe2/0xf0 net/netfilter/nf_conntrack_core.c:2106 masq_device_event+0x8a/0x90 net/netfilter/nf_nat_masquerade.c:88 notifier_call_chain+0xd7/0x160 kernel/notifier.c:95 __raw_notifier_call_chain kernel/notifier.c:396 [inline] raw_notifier_call_chain+0x37/0x50 kernel/notifier.c:403 call_netdevice_notifiers_info+0x48/0xc0 net/core/dev.c:1668 call_netdevice_notifiers_extack net/core/dev.c:1680 [inline] call_netdevice_notifiers net/core/dev.c:1694 [inline] dev_close_many+0x264/0x3a0 net/core/dev.c:1437 rollback_registered_many+0x2fb/0xa00 net/core/dev.c:8499 unregister_netdevice_many net/core/dev.c:9675 [inline] unregister_netdevice_many+0x62/0x240 net/core/dev.c:9670 default_device_exit_batch+0x234/0x270 net/core/dev.c:10146 ops_exit_list.isra.0+0xa2/0xc0 net/core/net_namespace.c:175 cleanup_net+0x405/0x6b0 net/core/net_namespace.c:597 process_one_work+0x3d4/0x890 kernel/workqueue.c:2269 worker_thread+0xa0/0x800 kernel/workqueue.c:2415 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 10369 Comm: kworker/u4:7 Not tainted 5.4.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net ==================================================================