syzbot


KCSAN: data-race in __nf_conntrack_alloc / gc_worker (2)

Status: auto-closed as invalid on 2020/12/25 11:25
Subsystems: netfilter
[Documentation on labels]
Reported-by: syzbot+2f0a462aeb224afed04c@syzkaller.appspotmail.com
First crash: 1263d, last: 1263d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __nf_conntrack_alloc / gc_worker netfilter 1 1324d 1324d 0/26 auto-closed as invalid on 2020/10/14 23:41

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __nf_conntrack_alloc / gc_worker

write to 0xffff88802c2b3b08 of 4 bytes by task 13019 on cpu 1:
 __nf_conntrack_alloc+0x147/0x270 net/netfilter/nf_conntrack_core.c:1508
 init_conntrack+0x178/0xa90 net/netfilter/nf_conntrack_core.c:1576
 resolve_normal_ct net/netfilter/nf_conntrack_core.c:1674 [inline]
 nf_conntrack_in+0x37f/0xad4 net/netfilter/nf_conntrack_core.c:1829
 ipv4_conntrack_local+0xc2/0x120 net/netfilter/nf_conntrack_proto.c:200
 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline]
 nf_hook_slow+0x72/0x170 net/netfilter/core.c:589
 nf_hook include/linux/netfilter.h:256 [inline]
 __ip_local_out+0x282/0x2a0 net/ipv4/ip_output.c:115
 ip_local_out net/ipv4/ip_output.c:124 [inline]
 __ip_queue_xmit+0x98d/0x9f0 net/ipv4/ip_output.c:532
 ip_queue_xmit+0x34/0x40 net/ipv4/ip_output.c:546
 __tcp_transmit_skb+0x1250/0x1860 net/ipv4/tcp_output.c:1404
 tcp_transmit_skb net/ipv4/tcp_output.c:1422 [inline]
 tcp_connect+0x56a/0xff0 net/ipv4/tcp_output.c:3849
 tcp_v4_connect+0xac7/0xba0 net/ipv4/tcp_ipv4.c:312
 __inet_stream_connect+0x586/0x690 net/ipv4/af_inet.c:661
 inet_stream_connect+0x44/0x70 net/ipv4/af_inet.c:725
 rds_tcp_conn_path_connect+0x360/0x430 net/rds/tcp_connect.c:172
 rds_connect_worker+0x125/0x1a0 net/rds/threads.c:176
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2272
 worker_thread+0x635/0xb90 kernel/workqueue.c:2418
 kthread+0x1fa/0x220 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

read to 0xffff88802c2b3b08 of 4 bytes by task 29212 on cpu 0:
 gc_worker+0x240/0x870 arch/x86/include/asm/bitops.h:207
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2272
 worker_thread+0x635/0xb90 kernel/workqueue.c:2418
 kthread+0x1fa/0x220 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 29212 Comm: kworker/0:3 Not tainted 5.10.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_power_efficient gc_worker
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/10 15:05 upstream 407ab579637c cca87986 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.