syzbot


KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag (3)

Status: auto-closed as invalid on 2022/03/23 06:48
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 323d, last: 292d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag (2) 3 406d 436d 0/24 auto-closed as invalid on 2021/11/29 04:22
upstream KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag 1 599d 599d 0/24 auto-closed as invalid on 2021/05/20 02:15

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag

write to 0xffff88811f27a408 of 4 bytes by task 7969 on cpu 0:
 tty_insert_flip_string_fixed_flag+0x15c/0x1c0 drivers/tty/tty_buffer.c:329
 tty_insert_flip_string include/linux/tty_flip.h:41 [inline]
 pty_write+0xbc/0x120 drivers/tty/pty.c:122
 tty_send_xchar+0x1ce/0x290 drivers/tty/tty_io.c:1168
 n_tty_ioctl_helper+0x2d8/0x450
 n_tty_ioctl+0xfc/0x1f0 drivers/tty/n_tty.c:2383
 tty_ioctl+0xaf7/0x1130 drivers/tty/tty_io.c:2787
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88811f27a408 of 4 bytes by task 33 on cpu 1:
 tty_flip_buffer_push+0x28/0x60 drivers/tty/tty_buffer.c:552
 pty_write+0xfe/0x120 drivers/tty/pty.c:126
 tty_put_char+0x7f/0xa0 drivers/tty/tty_io.c:3144
 __process_echoes+0x3ad/0x660 drivers/tty/n_tty.c:711
 flush_echoes drivers/tty/n_tty.c:812 [inline]
 __receive_buf drivers/tty/n_tty.c:1551 [inline]
 n_tty_receive_buf_common+0x4c38/0x4e70 drivers/tty/n_tty.c:1645
 n_tty_receive_buf2+0x2e/0x40 drivers/tty/n_tty.c:1680
 tty_ldisc_receive_buf+0x5b/0xf0 drivers/tty/tty_buffer.c:451
 tty_port_default_receive_buf+0x54/0x80 drivers/tty/tty_port.c:39
 receive_buf drivers/tty/tty_buffer.c:471 [inline]
 flush_to_ldisc+0x1c5/0x300 drivers/tty/tty_buffer.c:521
 process_one_work+0x3f6/0x960 kernel/workqueue.c:2307
 worker_thread+0x616/0xa70 kernel/workqueue.c:2454
 kthread+0x1bf/0x1e0 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30

value changed: 0x00000061 -> 0x00000062

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 33 Comm: kworker/u4:1 Not tainted 5.17.0-rc4-syzkaller-00051-gc5d9ae265b10-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound flush_to_ldisc
==================================================================
FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/02/16 06:44 upstream c5d9ae265b10 8b9ca619 .config log report info KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag
ci2-upstream-kcsan-gce 2022/02/13 07:46 upstream b81b1829e7e3 8b9ca619 .config log report info KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag
ci2-upstream-kcsan-gce 2022/01/25 22:29 upstream 49d766f3a0e4 2cbffd88 .config log report info KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag
ci2-upstream-kcsan-gce 2022/01/15 20:33 upstream a33f5c380c4b 723cfaf0 .config log report info KCSAN: data-race in tty_flip_buffer_push / tty_insert_flip_string_fixed_flag
* Struck through repros no longer work on HEAD.