syzbot


KCSAN: data-race in fsnotify / fsnotify (2)

Status: auto-closed as invalid on 2020/04/11 15:20
Subsystems: fs
[Documentation on labels]
First crash: 1596d, last: 1538d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fsnotify / fsnotify fs 20 1614d 1645d 0/26 closed as invalid on 2019/11/19 14:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fsnotify / fsnotify

read to 0xffff8880a69a1430 of 4 bytes by task 26977 on cpu 0:
 send_to_group fs/notify/fsnotify.c:218 [inline]
 fsnotify+0x4c1/0x7d0 fs/notify/fsnotify.c:368
 fsnotify_path include/linux/fsnotify.h:54 [inline]
 fsnotify_open include/linux/fsnotify.h:273 [inline]
 do_open_execat+0x3b9/0x3d0 fs/exec.c:872
 open_exec+0x50/0x80 fs/exec.c:888
 load_elf_binary+0x3be/0x2ef0 fs/binfmt_elf.c:759
 search_binary_handler fs/exec.c:1658 [inline]
 search_binary_handler+0x127/0x420 fs/exec.c:1635
 exec_binprm fs/exec.c:1701 [inline]
 __do_execve_file.isra.0+0xb6a/0x1140 fs/exec.c:1821
 do_execveat_common fs/exec.c:1867 [inline]
 do_execve fs/exec.c:1884 [inline]
 __do_sys_execve fs/exec.c:1960 [inline]
 __se_sys_execve fs/exec.c:1955 [inline]
 __x64_sys_execve+0x62/0x80 fs/exec.c:1955
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff8880a69a1430 of 4 bytes by task 26967 on cpu 1:
 send_to_group fs/notify/fsnotify.c:206 [inline]
 fsnotify+0x41e/0x7d0 fs/notify/fsnotify.c:368
 fsnotify_path include/linux/fsnotify.h:54 [inline]
 fsnotify_path include/linux/fsnotify.h:47 [inline]
 fsnotify_modify include/linux/fsnotify.h:256 [inline]
 do_iter_write fs/read_write.c:974 [inline]
 do_iter_write+0x218/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x530/0x840 fs/splice.c:760
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1037
 splice_direct_to_actor+0x22b/0x540 fs/splice.c:992
 do_splice_direct+0x161/0x1e0 fs/splice.c:1080
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1519 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0xbe/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 26967 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/01 15:13 https://github.com/google/ktsan.git kcsan 245a43005292 326d4c78 .config console log report ci2-upstream-kcsan-gce
2020/01/30 21:59 https://github.com/google/ktsan.git kcsan 245a43005292 5ed23f9a .config console log report ci2-upstream-kcsan-gce
2020/01/28 13:49 https://github.com/google/ktsan.git kcsan 245a43005292 56cd6c9b .config console log report ci2-upstream-kcsan-gce
2020/01/25 20:11 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/18 10:46 https://github.com/google/ktsan.git kcsan 245a43005292 3de7aabb .config console log report ci2-upstream-kcsan-gce
2020/01/13 19:33 https://github.com/google/ktsan.git kcsan 245a43005292 99565c1a .config console log report ci2-upstream-kcsan-gce
2020/01/12 21:01 https://github.com/google/ktsan.git kcsan 245a43005292 31290a45 .config console log report ci2-upstream-kcsan-gce
2019/12/18 05:53 https://github.com/google/ktsan.git kcsan 245a43005292 64ca0a37 .config console log report ci2-upstream-kcsan-gce
2019/12/06 01:12 https://github.com/google/ktsan.git kcsan ef798c30ba4e 98b4ef2d .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.