syzbot


KCSAN: data-race in do_tee / pipe_write

Status: moderation: reported on 2024/09/21 13:14
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+d1135e1e3385f00d41d9@syzkaller.appspotmail.com
First crash: 24d, last: 24d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in do_tee / pipe_write

write to 0xffff8881124b0410 of 4 bytes by task 4691 on cpu 1:
 pipe_write+0x377/0xd20 fs/pipe.c:526
 new_sync_write fs/read_write.c:590 [inline]
 vfs_write+0x76a/0x910 fs/read_write.c:683
 ksys_write+0xeb/0x1b0 fs/read_write.c:736
 __do_sys_write fs/read_write.c:748 [inline]
 __se_sys_write fs/read_write.c:745 [inline]
 __x64_sys_write+0x42/0x50 fs/read_write.c:745
 x64_sys_call+0x27dd/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881124b0410 of 4 bytes by task 4685 on cpu 0:
 ipipe_prep fs/splice.c:1673 [inline]
 do_tee+0x104/0x960 fs/splice.c:1990
 __do_sys_tee fs/splice.c:2022 [inline]
 __se_sys_tee fs/splice.c:2006 [inline]
 __x64_sys_tee+0xc5/0x160 fs/splice.c:2006
 x64_sys_call+0x16d3/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:277
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 4685 Comm: syz.4.373 Tainted: G        W          6.11.0-syzkaller-07462-g1868f9d0260e #0
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/21 13:14 upstream 1868f9d0260e 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_tee / pipe_write
* Struck through repros no longer work on HEAD.