syzbot


KCSAN: data-race in fuse_get_req / fuse_set_initialized

Status: auto-closed as invalid on 2020/03/20 23:57
Subsystems: fuse
[Documentation on labels]
First crash: 1642d, last: 1566d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fuse_get_req / fuse_set_initialized (3) fuse 4 1111d 1133d 0/26 auto-closed as invalid on 2021/05/14 08:29
upstream KCSAN: data-race in fuse_get_req / fuse_set_initialized (2) fuse 10 1172d 1234d 0/26 auto-closed as invalid on 2021/03/14 23:46

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fuse_get_req / fuse_set_initialized

read to 0xffff8880a0109b04 of 4 bytes by task 24351 on cpu 1:
 fuse_block_alloc fs/fuse/dev.c:86 [inline]
 fuse_get_req+0xb6/0x450 fs/fuse/dev.c:113
 fuse_simple_request+0x7f/0x6d0 fs/fuse/dev.c:492
 fuse_lookup_name+0x20a/0x3d0 fs/fuse/dir.c:352
 fuse_lookup+0x7c/0x210 fs/fuse/dir.c:390
 fuse_atomic_open+0x194/0x230 fs/fuse/dir.c:533
 atomic_open fs/namei.c:3079 [inline]
 lookup_open fs/namei.c:3211 [inline]
 do_last fs/namei.c:3331 [inline]
 path_openat+0x2386/0x3580 fs/namei.c:3537
 do_filp_open+0x11e/0x1b0 fs/namei.c:3567
 do_sys_open+0x3b3/0x4f0 fs/open.c:1097
 __do_sys_openat fs/open.c:1124 [inline]
 __se_sys_openat fs/open.c:1118 [inline]
 __x64_sys_openat+0x62/0x80 fs/open.c:1118
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff8880a0109b04 of 4 bytes by task 24350 on cpu 0:
 fuse_set_initialized+0x22/0x40 fs/fuse/dev.c:81
 process_init_reply+0x96/0xb90 fs/fuse/inode.c:969
 fuse_request_end+0x324/0x530 fs/fuse/dev.c:328
 end_requests+0x100/0x160 fs/fuse/dev.c:2056
 fuse_abort_conn+0x737/0x7d0 fs/fuse/dev.c:2151
 fuse_dev_release+0x26b/0x290 fs/fuse/dev.c:2186
 __fput+0x1e1/0x520 fs/file_table.c:280
 ____fput+0x1f/0x30 fs/file_table.c:313
 task_work_run+0xf6/0x130 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x2b4/0x2c0 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:278 [inline]
 do_syscall_64+0x384/0x3a0 arch/x86/entry/common.c:304
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 24350 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/10 23:53 https://github.com/google/ktsan.git kcsan 245a43005292 532ec44e .config console log report ci2-upstream-kcsan-gce
2020/01/02 14:55 https://github.com/google/ktsan.git kcsan 245a43005292 25a0186e .config console log report ci2-upstream-kcsan-gce
2019/12/24 09:46 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/12 18:50 https://github.com/google/ktsan.git kcsan ef798c30ba4e 08003f64 .config console log report ci2-upstream-kcsan-gce
2019/12/11 12:35 https://github.com/google/ktsan.git kcsan ef798c30ba4e 101194eb .config console log report ci2-upstream-kcsan-gce
2019/12/06 12:19 https://github.com/google/ktsan.git kcsan ef798c30ba4e 12c3b6cd .config console log report ci2-upstream-kcsan-gce
2019/11/19 05:24 https://github.com/google/ktsan.git kcsan 5863cc791e4c d5696d51 .config console log report ci2-upstream-kcsan-gce
2019/10/27 00:02 https://github.com/google/ktsan.git kcsan 05f2236801fe 25bb509e .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.