syzbot


KCSAN: data-race in fuse_abort_conn / fuse_get_req (3)

Status: closed as invalid on 2020/06/18 14:13
Subsystems: fuse
[Documentation on labels]
First crash: 1901d, last: 1901d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fuse_abort_conn / fuse_get_req (5) fuse 6 5 1590d 1641d 0/29 auto-closed as invalid on 2021/05/19 23:44
upstream KCSAN: data-race in fuse_abort_conn / fuse_get_req (2) fuse 6 1 2031d 2031d 0/29 auto-closed as invalid on 2020/04/09 06:28
upstream KCSAN: data-race in fuse_abort_conn / fuse_get_req (4) fuse 6 1 1764d 1764d 0/29 auto-closed as invalid on 2020/11/26 12:35
upstream KCSAN: data-race in fuse_abort_conn / fuse_get_req fuse 6 1 2114d 2114d 0/29 closed as invalid on 2019/11/19 14:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fuse_abort_conn / fuse_get_req

write to 0xffff8880b2ab3128 of 4 bytes by task 15583 on cpu 1:
 fuse_abort_conn+0xb3/0x7c0 fs/fuse/dev.c:2106
 fuse_dev_release+0x286/0x2b0 fs/fuse/dev.c:2186
 __fput+0x1e9/0x500 fs/file_table.c:280
 ____fput+0x1b/0x30 fs/file_table.c:313
 task_work_run+0xba/0x120 kernel/task_work.c:123
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x2ae/0x2c0 arch/x86/entry/common.c:165
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:279 [inline]
 do_syscall_64+0x38b/0x3b0 arch/x86/entry/common.c:305
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880b2ab3128 of 4 bytes by task 15593 on cpu 0:
 fuse_get_req+0x17f/0x430 fs/fuse/dev.c:121
 fuse_simple_request+0x76/0x6e0 fs/fuse/dev.c:492
 fuse_send_open.isra.0+0x159/0x190 fs/fuse/file.c:53
 fuse_do_open+0x1d3/0x310 fs/fuse/file.c:149
 fuse_open_common+0xdd/0x1e0 fs/fuse/file.c:233
 fuse_dir_open+0x28/0x40 fs/fuse/dir.c:1284
 do_dentry_open+0x306/0x970 fs/open.c:797
 vfs_open+0x62/0x80 fs/open.c:911
 do_open fs/namei.c:3229 [inline]
 path_openat+0x1ff4/0x23d0 fs/namei.c:3346
 do_filp_open+0x11e/0x1b0 fs/namei.c:3373
 do_sys_openat2+0x52e/0x680 fs/open.c:1148
 do_sys_open+0xa2/0x110 fs/open.c:1164
 ksys_open include/linux/syscalls.h:1386 [inline]
 __do_sys_open fs/open.c:1170 [inline]
 __se_sys_open fs/open.c:1168 [inline]
 __x64_sys_open+0x50/0x60 fs/open.c:1168
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 15593 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/07 22:06 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 7751efd0 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.