KCSAN: data-race in iput / writeback_single

KCSAN: data-race in iput / writeback_single_inode
Status: auto-closed as invalid on 2020/09/15 05:18
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 354d, last: 354d

similar bugs (2):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in iput / writeback_single_inode (3)				4	99d	107d	0/22	auto-closed as invalid on 2021/05/28 21:32
upstream	KCSAN: data-race in iput / writeback_single_inode (2)				1	295d	295d	0/22	auto-closed as invalid on 2020/11/13 23:11

Sample crash report:

==================================================================
BUG: KCSAN: data-race in iput / writeback_single_inode

write to 0xffff888097173ac0 of 8 bytes by task 24384 on cpu 1:
 inode_sync_complete fs/fs-writeback.c:1197 [inline]
 writeback_single_inode+0x4a4/0x530 fs/fs-writeback.c:1578
 sync_inode fs/fs-writeback.c:2602 [inline]
 sync_inode_metadata+0x52/0x70 fs/fs-writeback.c:2622
 ext4_fsync_nojournal fs/ext4/fsync.c:92 [inline]
 ext4_sync_file+0x335/0x6e0 fs/ext4/fsync.c:170
 vfs_fsync_range+0x107/0x120 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2734 [inline]
 ext4_buffered_write_iter+0x369/0x3b0 fs/ext4/file.c:277
 ext4_file_write_iter+0x57b/0x1000 fs/ext4/file.c:498
 call_write_iter include/linux/fs.h:1872 [inline]
 do_iter_readv_writev+0x32e/0x3d0 fs/read_write.c:713
 do_iter_write+0x112/0x4b0 fs/read_write.c:1018
 vfs_iter_write+0x4c/0x70 fs/read_write.c:1059
 iter_file_splice_write+0x41a/0x770 fs/splice.c:750
 do_splice_from fs/splice.c:846 [inline]
 direct_splice_actor+0x95/0x160 fs/splice.c:1016
 splice_direct_to_actor+0x365/0x660 fs/splice.c:971
 do_splice_direct+0xf2/0x170 fs/splice.c:1059
 do_sendfile+0x56a/0xba0 fs/read_write.c:1540
 __do_sys_sendfile64 fs/read_write.c:1595 [inline]
 __se_sys_sendfile64 fs/read_write.c:1587 [inline]
 __x64_sys_sendfile64+0xa9/0x130 fs/read_write.c:1587
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888097173ac0 of 8 bytes by task 24383 on cpu 0:
 iput+0x2e/0x550 fs/inode.c:1668
 fsnotify_drop_object fs/notify/mark.c:222 [inline]
 fsnotify_put_mark+0x437/0x5e0 fs/notify/mark.c:258
 fsnotify_clear_marks_by_group+0x348/0x3e0 fs/notify/mark.c:764
 fsnotify_destroy_group+0x51/0x170 fs/notify/group.c:61
 fanotify_release+0x2c5/0x2e0 fs/notify/fanotify/fanotify_user.c:623
 __fput+0x246/0x4d0 fs/file_table.c:281
 ____fput+0x11/0x20 fs/file_table.c:314
 task_work_run+0x8e/0x110 kernel/task_work.c:135
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:139 [inline]
 exit_to_user_mode_prepare+0x1bb/0x220 kernel/entry/common.c:166
 syscall_exit_to_user_mode+0x16/0x30 kernel/entry/common.c:241
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 24383 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-kcsan-gce	2020/08/11 05:15	upstream	4bcf69e57063	d3694ffb	.config	log	report