syzbot


KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (5)

Status: auto-closed as invalid on 2021/11/29 11:14
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 629d, last: 401d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (4) 5 711d 723d 0/24 auto-closed as invalid on 2021/01/23 11:44
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers 8 1036d 1105d 0/24 auto-closed as invalid on 2020/04/08 22:27
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (3) 10 797d 889d 0/24 auto-closed as invalid on 2020/10/29 18:32
upstream KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers (2) 1 926d 926d 0/24 closed as invalid on 2020/06/18 14:13

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers

write to 0xffff888104a0f670 of 8 bytes by task 3616 on cpu 1:
 __remove_assoc_queue fs/buffer.c:481 [inline]
 fsync_buffers_list fs/buffer.c:688 [inline]
 sync_mapping_buffers+0x175/0x8d0 fs/buffer.c:548
 fat_file_fsync+0xa9/0x100 fs/fat/file.c:194
 vfs_fsync_range+0x107/0x120 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2955 [inline]
 generic_file_write_iter+0x103/0x130 mm/filemap.c:3933
 call_write_iter include/linux/fs.h:2163 [inline]
 do_iter_readv_writev+0x2de/0x380 fs/read_write.c:729
 do_iter_write+0x192/0x5c0 fs/read_write.c:855
 vfs_iter_write+0x4c/0x70 fs/read_write.c:896
 iter_file_splice_write+0x43a/0x790 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0x106/0x190 fs/splice.c:979
 do_sendfile+0x63e/0xbb0 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1314 [inline]
 __se_sys_sendfile64 fs/read_write.c:1300 [inline]
 __x64_sys_sendfile64+0x102/0x140 fs/read_write.c:1300
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888104a0f670 of 8 bytes by task 3610 on cpu 0:
 mark_buffer_dirty_inode+0x92/0x1d0 fs/buffer.c:581
 fat32_ent_put+0x79/0x90 fs/fat/fatent.c:191
 fat_alloc_clusters+0x493/0xab0 fs/fat/fatent.c:502
 fat_add_cluster fs/fat/inode.c:108 [inline]
 __fat_get_block fs/fat/inode.c:155 [inline]
 fat_get_block+0x267/0x610 fs/fat/inode.c:190
 __block_write_begin_int+0x4c5/0x1080 fs/buffer.c:2010
 __block_write_begin fs/buffer.c:2060 [inline]
 block_write_begin fs/buffer.c:2120 [inline]
 cont_write_begin+0x542/0x870 fs/buffer.c:2469
 fat_write_begin+0x61/0xf0 fs/fat/inode.c:235
 generic_perform_write+0x1b8/0x3e0 mm/filemap.c:3770
 __generic_file_write_iter+0x215/0x310 mm/filemap.c:3865
 generic_file_write_iter+0x75/0x130 mm/filemap.c:3929
 call_write_iter include/linux/fs.h:2163 [inline]
 do_iter_readv_writev+0x2de/0x380 fs/read_write.c:729
 do_iter_write+0x192/0x5c0 fs/read_write.c:855
 vfs_iter_write+0x4c/0x70 fs/read_write.c:896
 iter_file_splice_write+0x43a/0x790 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0x106/0x190 fs/splice.c:979
 do_sendfile+0x63e/0xbb0 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1314 [inline]
 __se_sys_sendfile64 fs/read_write.c:1300 [inline]
 __x64_sys_sendfile64+0x102/0x140 fs/read_write.c:1300
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff888104a8c270 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3610 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
syz-executor.0 (3610) used greatest stack depth: 10400 bytes left

Crashes (32):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/10/25 11:13 upstream 6c62666d8879 4f0000ee .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/10/10 17:06 upstream 7fd2bf83d59a 838e7e2c .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/09/08 04:57 upstream 0bcfe68b8767 064c9eb7 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/08/12 00:14 upstream 761c6d7ec820 6972b106 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/08/09 02:42 upstream 66745863ecde 6972b106 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/08/06 03:14 upstream e04480920d1e d2d6e680 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/30 18:59 upstream 4669e13cd67f 6c236867 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/30 11:42 upstream 764a5bc89b12 c585c7b0 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/29 15:27 upstream 4010a528219e b44001ce .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/26 18:31 upstream ff1176468d36 fd511809 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/26 02:14 upstream d8079fac1681 4d1b57d4 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/25 02:34 upstream 7ffca2bb9d8b 4d1b57d4 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/24 02:30 upstream 8baef6386baa bc5f1d88 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/17 18:29 upstream d980cc0620ae f115ae98 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/13 17:26 upstream 7fef2edf7cc7 70168d5c .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/08 01:54 upstream 3dbdb38e2869 95793bce .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/06 14:45 upstream 3dbdb38e2869 6c4484eb .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/07/01 12:53 upstream dbe69e433722 658ebc66 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/06/26 06:11 upstream b7050b242430 9d2ab5df .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/06/21 09:51 upstream 13311e74253f aba2b2fb .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/05/29 20:26 upstream f956cb99b938 325a8dab .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/05/22 17:47 upstream 45af60e7ced0 3c7fef33 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/05/13 15:46 upstream c06a2ba62fc4 ecb594cb .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/05/05 13:06 upstream d665ea6ea86c 06c27ff5 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/30 00:03 upstream 8ca5297e7e38 77e2b668 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/29 05:58 upstream 68a32ba14177 77e2b668 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/21 18:20 upstream 16fc44d6387e 95777977 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/15 17:01 upstream 7f75285ca572 c59079a6 .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/11 22:02 upstream 7d900724913c 6a81331a .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/04/10 15:20 upstream d4961772226d 6a81331a .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/03/19 00:35 upstream bf152b0b41dc 380dcc3e .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
ci2-upstream-kcsan-gce 2021/03/11 23:13 upstream 28806e4d9b97 429d8a6b .config log report info KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
* Struck through repros no longer work on HEAD.