syzbot


KCSAN: data-race in pcpu_alloc / pcpu_free_area (2)

Status: closed as invalid on 2021/06/07 13:54
Subsystems: netfilter
[Documentation on labels]
Reported-by: syzbot+0b3bfb9cbec193033650@syzkaller.appspotmail.com
First crash: 1608d, last: 1015d
Discussions (1)
Title Replies (including bot) Last reply
KCSAN: data-race in pcpu_alloc / pcpu_free_area (2) 0 (1) 2019/11/07 18:55
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in pcpu_alloc / pcpu_free_area (3) netfilter syz 1286 2h32m 840d 0/26 moderation: reported syz repro on 2021/11/29 17:24
upstream KCSAN: data-race in pcpu_alloc / pcpu_free_area netfilter 2 1618d 1627d 0/26 closed as invalid on 2019/10/15 15:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in pcpu_alloc / pcpu_free_area

write to 0xffffffff8455f74c of 4 bytes by task 1761 on cpu 1:
 pcpu_update_empty_pages mm/percpu.c:559 [inline]
 pcpu_block_update_hint_free mm/percpu.c:994 [inline]
 pcpu_free_area+0x50c/0x5a0 mm/percpu.c:1254
 free_percpu+0x1d2/0x690 mm/percpu.c:2102
 xt_percpu_counter_free+0x5f/0x70 net/netfilter/x_tables.c:1889
 cleanup_entry+0x170/0x1a0 net/ipv6/netfilter/ip6_tables.c:672
 __do_replace+0x46e/0x590 net/ipv6/netfilter/ip6_tables.c:1101
 do_replace net/ipv6/netfilter/ip6_tables.c:1156 [inline]
 do_ip6t_set_ctl+0x6b5/0x16d0 net/ipv6/netfilter/ip6_tables.c:1638
 nf_setsockopt+0x1a6/0x1c0 net/netfilter/nf_sockopt.c:101
 ipv6_setsockopt+0x1af1/0x3410 net/ipv6/ipv6_sockglue.c:1008
 tcp_setsockopt+0x8c/0xa0 net/ipv4/tcp.c:3656
 sock_common_setsockopt+0x5d/0x70 net/core/sock.c:3265
 __sys_setsockopt+0x18f/0x200 net/socket.c:2117
 __do_sys_setsockopt net/socket.c:2128 [inline]
 __se_sys_setsockopt net/socket.c:2125 [inline]
 __x64_sys_setsockopt+0x62/0x70 net/socket.c:2125
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffffffff8455f74c of 4 bytes by task 1770 on cpu 0:
 pcpu_alloc+0xa33/0x1200 mm/percpu.c:1835
 __alloc_percpu+0x20/0x30 mm/percpu.c:1907
 xt_percpu_counter_alloc+0x6b/0x110 net/netfilter/x_tables.c:1869
 find_check_entry net/ipv6/netfilter/ip6_tables.c:546 [inline]
 translate_table+0x9f2/0x1070 net/ipv6/netfilter/ip6_tables.c:734
 do_replace net/ipv6/netfilter/ip6_tables.c:1152 [inline]
 do_ip6t_set_ctl+0x668/0x16d0 net/ipv6/netfilter/ip6_tables.c:1638
 nf_setsockopt+0x1a6/0x1c0 net/netfilter/nf_sockopt.c:101
 ipv6_setsockopt+0x1af1/0x3410 net/ipv6/ipv6_sockglue.c:1008
 tcp_setsockopt+0x8c/0xa0 net/ipv4/tcp.c:3656
 sock_common_setsockopt+0x5d/0x70 net/core/sock.c:3265
 __sys_setsockopt+0x18f/0x200 net/socket.c:2117
 __do_sys_setsockopt net/socket.c:2128 [inline]
 __se_sys_setsockopt net/socket.c:2125 [inline]
 __x64_sys_setsockopt+0x62/0x70 net/socket.c:2125
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000003 -> 0x00000004

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 1770 Comm: syz-executor.4 Not tainted 5.13.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (574):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/07 11:13 upstream 614124bea77e e59537be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/06/03 05:49 upstream 324c92e5e0ee 0740de69 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/28 08:27 upstream 97e5bf604b7a 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/25 02:54 upstream 1434a3127887 3c7fef33 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/22 07:23 upstream 45af60e7ced0 3c7fef33 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/20 23:11 upstream f01da525b3de c560a65d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/19 20:17 upstream c3d0e3fd41b7 a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/18 23:03 upstream 8ac91e6c6033 a343ba6b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/17 01:47 upstream 63d1cb53e26a f54a5c09 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/13 16:50 upstream c06a2ba62fc4 ecb594cb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/09 16:57 upstream b741596468b0 bc5434be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/08 08:46 upstream 1ad77a05cfae bc5434be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/05/04 14:35 upstream 5e321ded302d 06c27ff5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/27 01:29 upstream 9f4ad9e425a1 8ee2dea6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/26 15:18 upstream 9f4ad9e425a1 805b5003 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/22 17:57 upstream 16fc44d6387e 33c28d03 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/21 13:48 upstream 1fe5501ba1ab 95777977 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/18 02:21 upstream 194cf4825638 7e2b734b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/16 20:48 upstream 2f7b98d1e55c 7e2b734b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/15 22:55 upstream 7f75285ca572 c59079a6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/14 22:58 upstream 7f75285ca572 fcdb12ba .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/14 10:17 upstream 50987beca096 3134b37f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/13 22:18 upstream eebe426d32e1 a184b83e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/12 23:00 upstream 89698becf06d 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/12 09:47 upstream d434405aaab7 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/11 20:09 upstream 7d900724913c 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/10 15:23 upstream d4961772226d 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/10 00:54 upstream 4e04e7513b0f 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/09 15:00 upstream 17e7124aad76 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/08 09:01 upstream 454859c552da 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/07 19:24 upstream 3a22981230f9 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/06 22:26 upstream 2d743660786e 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/05 20:00 upstream 0a50438c8436 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/04 03:25 upstream 2023a53bdf41 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/03 13:54 upstream d93a0d43e3d0 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/02 23:45 upstream 0a84c2e440f7 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/04/02 07:23 upstream 1678e493d530 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/30 16:29 upstream 2bb25b3a748a 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/29 21:33 upstream 1e43c377a79f 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/29 10:29 upstream a5e13c6df0e4 a8529b82 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/28 20:19 upstream 36a14638f7c0 a8529b82 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/27 02:09 upstream 0f4498cef9f5 a8529b82 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/26 11:21 upstream db24726bfefa a8529b82 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/25 22:05 upstream 002322402daf 6a383ecf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/03/25 08:37 upstream e138138003eb 6a383ecf .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pcpu_alloc / pcpu_free_area
2021/01/15 19:19 upstream 5ee88057889b 65a7a854 .config console log report info ci2-upstream-kcsan-gce
2019/10/23 05:09 https://github.com/google/ktsan.git kcsan 05f2236801fe d0686497 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.