syzbot


KCSAN: data-race in fanotify_handle_event / fsnotify

Status: closed as invalid on 2019/11/19 14:04
Subsystems: fs
[Documentation on labels]
First crash: 1653d, last: 1632d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fanotify_handle_event / fsnotify (2) fs 2 1570d 1610d 0/26 auto-closed as invalid on 2020/03/17 09:26

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fanotify_handle_event / fsnotify

write to 0xffff8881136a9478 of 4 bytes by task 10140 on cpu 1:
 send_to_group fs/notify/fsnotify.c:206 [inline]
 fsnotify+0x41e/0x7d0 fs/notify/fsnotify.c:368
 fsnotify_path include/linux/fsnotify.h:54 [inline]
 fsnotify_path include/linux/fsnotify.h:47 [inline]
 fsnotify_modify include/linux/fsnotify.h:256 [inline]
 do_iter_write fs/read_write.c:974 [inline]
 do_iter_write+0x218/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x4c0/0x7f0 fs/splice.c:746
 do_splice_from fs/splice.c:848 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1020
 splice_direct_to_actor+0x215/0x510 fs/splice.c:975
 do_splice_direct+0x161/0x1e0 fs/splice.c:1063
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1519 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0xbe/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8881136a9478 of 4 bytes by task 10134 on cpu 0:
 fanotify_group_event_mask fs/notify/fanotify/fanotify.c:184 [inline]
 fanotify_handle_event+0x1f9/0x89f fs/notify/fanotify/fanotify.c:407
 send_to_group fs/notify/fsnotify.c:230 [inline]
 fsnotify+0x556/0x7d0 fs/notify/fsnotify.c:368
 fsnotify_path include/linux/fsnotify.h:54 [inline]
 fsnotify_path include/linux/fsnotify.h:47 [inline]
 fsnotify_modify include/linux/fsnotify.h:256 [inline]
 do_iter_write fs/read_write.c:974 [inline]
 do_iter_write+0x218/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x4c0/0x7f0 fs/splice.c:746
 do_splice_from fs/splice.c:848 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1020
 splice_direct_to_actor+0x215/0x510 fs/splice.c:975
 do_splice_direct+0x161/0x1e0 fs/splice.c:1063
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1519 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0xbe/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10134 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/07 03:24 https://github.com/google/ktsan.git kcsan 94c006602e13 d797d201 .config console log report ci2-upstream-kcsan-gce
2019/11/06 23:18 https://github.com/google/ktsan.git kcsan 94c006602e13 da505f84 .config console log report ci2-upstream-kcsan-gce
2019/11/06 03:59 https://github.com/google/ktsan.git kcsan 94c006602e13 bc2c6e45 .config console log report ci2-upstream-kcsan-gce
2019/11/05 00:23 https://github.com/google/ktsan.git kcsan 94c006602e13 76630fc9 .config console log report ci2-upstream-kcsan-gce
2019/11/04 16:34 https://github.com/google/ktsan.git kcsan 94c006602e13 18e12644 .config console log report ci2-upstream-kcsan-gce
2019/10/23 14:33 https://github.com/google/ktsan.git kcsan 05f2236801fe b602d64b .config console log report ci2-upstream-kcsan-gce
2019/10/16 19:33 https://github.com/google/ktsan.git kcsan a6311db074d9 8c88c9c1 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.