syzbot


KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (8)

Status: auto-obsoleted due to no activity on 2024/03/30 16:35
Subsystems: exfat
[Documentation on labels]
Reported-by: syzbot+c49185e537e35e5dd6d9@syzkaller.appspotmail.com
First crash: 115d, last: 115d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (4) ext4 5 1277d 1289d 0/27 auto-closed as invalid on 2021/01/23 11:44
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers exfat 8 1602d 1671d 0/27 auto-closed as invalid on 2020/04/08 22:27
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (3) exfat 10 1363d 1455d 0/27 auto-closed as invalid on 2020/10/29 18:32
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (7) exfat 42 164d 193d 0/27 auto-obsoleted due to no activity on 2024/02/03 09:04
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (2) exfat 1 1492d 1492d 0/27 closed as invalid on 2020/06/18 14:13
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (9) exfat 3 5d12h 7d12h 0/27 moderation: reported on 2024/06/11 17:26
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (6) exfat 174 286d 927d 0/27 auto-obsoleted due to no activity on 2023/10/11 19:19
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (5) exfat 32 967d 1195d 0/27 auto-closed as invalid on 2021/11/29 11:14

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers

write to 0xffff88813e747948 of 8 bytes by task 14150 on cpu 0:
 __remove_assoc_queue fs/buffer.c:516 [inline]
 fsync_buffers_list fs/buffer.c:784 [inline]
 sync_mapping_buffers+0x165/0x7e0 fs/buffer.c:577
 fat_file_fsync+0xad/0x100 fs/fat/file.c:195
 vfs_fsync_range+0x111/0x120 fs/sync.c:188
 generic_write_sync include/linux/fs.h:2734 [inline]
 generic_file_write_iter+0x191/0x1c0 mm/filemap.c:4055
 call_write_iter include/linux/fs.h:2087 [inline]
 iter_file_splice_write+0x5de/0x950 fs/splice.c:743
 do_splice_from fs/splice.c:941 [inline]
 direct_splice_actor+0x167/0x2c0 fs/splice.c:1164
 splice_direct_to_actor+0x2fb/0x660 fs/splice.c:1108
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x3b9/0x960 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0xbd/0x150 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff88813e747948 of 8 bytes by task 14117 on cpu 1:
 mark_buffer_dirty_inode+0x96/0x1c0 fs/buffer.c:680
 fat16_ent_put+0x4f/0x60 fs/fat/fatent.c:184
 fat_alloc_clusters+0x4b5/0xa60 fs/fat/fatent.c:503
 fat_add_cluster fs/fat/inode.c:108 [inline]
 __fat_get_block fs/fat/inode.c:155 [inline]
 fat_get_block+0x25c/0x5e0 fs/fat/inode.c:190
 __block_write_begin_int+0x40b/0xf80 fs/buffer.c:2103
 __block_write_begin fs/buffer.c:2152 [inline]
 block_write_begin+0x7b/0x170 fs/buffer.c:2211
 cont_write_begin+0x479/0x690 fs/buffer.c:2565
 fat_write_begin+0x61/0xf0 fs/fat/inode.c:230
 generic_perform_write+0x1c9/0x410 mm/filemap.c:3930
 __generic_file_write_iter+0xa1/0x120 mm/filemap.c:4025
 generic_file_write_iter+0x7d/0x1c0 mm/filemap.c:4051
 call_write_iter include/linux/fs.h:2087 [inline]
 new_sync_write fs/read_write.c:497 [inline]
 vfs_write+0x760/0x8d0 fs/read_write.c:590
 ksys_write+0xeb/0x1a0 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0x42/0x50 fs/read_write.c:652
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0xffff8881057f0210 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 14117 Comm: syz-executor.0 Not tainted 6.8.0-rc5-syzkaller-00278-g603c04e27c3e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/02/24 16:34 upstream 603c04e27c3e 8d446f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
* Struck through repros no longer work on HEAD.