syzbot


KCSAN: data-race in pipe_release / pipe_wait_readable (2)

Status: auto-closed as invalid on 2021/02/26 20:27
Subsystems: fs
[Documentation on labels]
First crash: 1467d, last: 1467d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (5) fs 1 564d 564d 0/28 auto-obsoleted due to no activity on 2023/08/18 19:43
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (7) fs 1 244d 244d 0/28 auto-obsoleted due to no activity on 2024/07/03 04:49
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (6) fs 1 469d 469d 0/28 auto-obsoleted due to no activity on 2023/11/21 12:39
upstream KCSAN: data-race in pipe_release / pipe_wait_readable fs 1 1579d 1579d 0/28 auto-closed as invalid on 2020/11/06 19:13
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (3) fs 1 1419d 1419d 0/28 auto-closed as invalid on 2021/04/15 21:34
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (4) fs 2 1169d 1176d 0/28 auto-closed as invalid on 2021/12/21 16:44
upstream KCSAN: data-race in pipe_release / pipe_wait_readable (8) fs 1 190d 190d 0/28 auto-obsoleted due to no activity on 2024/08/26 01:03

Sample crash report:
==================================================================
BUG: KCSAN: data-race in pipe_release / pipe_wait_readable

read-write to 0xffff88803745b670 of 4 bytes by task 31108 on cpu 1:
 put_pipe_info fs/pipe.c:688 [inline]
 pipe_release+0x164/0x1c0 fs/pipe.c:718
 __fput+0x24b/0x4e0 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0x8e/0x110 kernel/task_work.c:140
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
 exit_to_user_mode_prepare+0x16b/0x1a0 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88803745b670 of 4 bytes by task 31103 on cpu 0:
 pipe_lock_nested fs/pipe.c:65 [inline]
 pipe_lock fs/pipe.c:74 [inline]
 pipe_wait_readable+0x1e9/0x230 fs/pipe.c:1031
 splice_from_pipe_next+0x25e/0x3b0 fs/splice.c:499
 __splice_from_pipe+0xa7/0x4d0 fs/splice.c:560
 vmsplice_to_user fs/splice.c:1222 [inline]
 __do_sys_vmsplice fs/splice.c:1317 [inline]
 __se_sys_vmsplice+0x201/0x530 fs/splice.c:1289
 __x64_sys_vmsplice+0x51/0x60 fs/splice.c:1289
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 31103 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/01/22 20:27 upstream 83d09ad4b950 52e37319 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in pipe_release / pipe_wait_readable
* Struck through repros no longer work on HEAD.