syzbot

 sign-in | mailing list | source | docs
🐞 Open [1002] ≡ Subsystems 🐞 Fixed [5246] 🐞 Invalid [12540] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KCSAN: data-race in fifo_open / wait_for_partner (5)

Status: moderation: reported on 2024/04/01 04:07
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+6f8fb953e2a2f8a0a8ff@syzkaller.appspotmail.com
First crash: 29d, last: 17d
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fifo_open / wait_for_partner (3) fs 3 250d 295d 0/26 auto-obsoleted due to no activity on 2023/09/28 09:43
upstream KCSAN: data-race in fifo_open / wait_for_partner (4) fs 8 83d 142d 0/26 auto-obsoleted due to no activity on 2024/03/13 09:11
upstream KCSAN: data-race in fifo_open / wait_for_partner (2) fs 54 333d 731d 0/26 auto-obsoleted due to no activity on 2023/07/06 11:38
upstream KCSAN: data-race in fifo_open / wait_for_partner fs 66 778d 1239d 0/26 auto-closed as invalid on 2022/04/18 09:31

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fifo_open / wait_for_partner

read-write to 0xffff888112708dec of 4 bytes by task 6482 on cpu 0:
 put_pipe_info fs/pipe.c:712 [inline]
 fifo_open+0x2a6/0x5e0 fs/pipe.c:1226
 do_dentry_open+0x63c/0xbe0 fs/open.c:955
 vfs_open+0x4a/0x60 fs/open.c:1089
 do_open fs/namei.c:3642 [inline]
 path_openat+0x18ba/0x1d80 fs/namei.c:3799
 do_filp_open+0xf7/0x200 fs/namei.c:3826
 do_sys_openat2+0xab/0x120 fs/open.c:1406
 do_sys_open fs/open.c:1421 [inline]
 __do_sys_openat fs/open.c:1437 [inline]
 __se_sys_openat fs/open.c:1432 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1432
 x64_sys_call+0x2cad/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888112708dec of 4 bytes by task 6486 on cpu 1:
 pipe_lock fs/pipe.c:91 [inline]
 wait_for_partner+0x106/0x1e0 fs/pipe.c:1093
 fifo_open+0x483/0x5e0 fs/pipe.c:1160
 do_dentry_open+0x63c/0xbe0 fs/open.c:955
 vfs_open+0x4a/0x60 fs/open.c:1089
 do_open fs/namei.c:3642 [inline]
 path_openat+0x18ba/0x1d80 fs/namei.c:3799
 do_filp_open+0xf7/0x200 fs/namei.c:3826
 do_sys_openat2+0xab/0x120 fs/open.c:1406
 do_sys_open fs/open.c:1421 [inline]
 __do_sys_openat fs/open.c:1437 [inline]
 __se_sys_openat fs/open.c:1432 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1432
 x64_sys_call+0x2cad/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000002 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6486 Comm: syz-executor.4 Tainted: G        W          6.9.0-rc3-syzkaller-00208-g586b5dfb51b9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/12 11:16 upstream 586b5dfb51b9 27de0a5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fifo_open / wait_for_partner
2024/04/03 09:15 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fifo_open / wait_for_partner
2024/04/01 04:06 upstream 18737353cca0 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fifo_open / wait_for_partner
* Struck through repros no longer work on HEAD.