syzbot


KCSAN: data-race in shrink_dentry_list / step_into (7)

Status: moderation: reported on 2024/03/24 15:55
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+fc3368134afd31deb75f@syzkaller.appspotmail.com
First crash: 42d, last: 8d02h
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in shrink_dentry_list / step_into (6) fs 1 99d 99d 0/26 auto-obsoleted due to no activity on 2024/03/03 06:03
upstream KCSAN: data-race in shrink_dentry_list / step_into fs 1 922d 922d 0/26 auto-closed as invalid on 2021/12/01 04:11
upstream KCSAN: data-race in shrink_dentry_list / step_into (5) fs 3 216d 256d 0/26 auto-obsoleted due to no activity on 2023/11/06 20:19
upstream KCSAN: data-race in shrink_dentry_list / step_into (2) fs 3 601d 627d 0/26 auto-obsoleted due to no activity on 2022/10/17 16:38
upstream KCSAN: data-race in shrink_dentry_list / step_into (3) fs 1 559d 559d 0/26 auto-obsoleted due to no activity on 2022/11/29 05:37
upstream KCSAN: data-race in shrink_dentry_list / step_into (4) fs 1 496d 496d 0/26 auto-obsoleted due to no activity on 2023/02/06 16:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shrink_dentry_list / step_into

read-write to 0xffff8881065550c0 of 4 bytes by task 6727 on cpu 0:
 d_shrink_del fs/dcache.c:449 [inline]
 shrink_dentry_list+0x19f/0x3e0 fs/dcache.c:1074
 shrink_dcache_sb+0x165/0x2a0 fs/dcache.c:1195
 reconfigure_super+0x3fe/0x5a0 fs/super.c:1049
 do_remount fs/namespace.c:2892 [inline]
 path_mount+0x96e/0xb30 fs/namespace.c:3671
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3875
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3875
 x64_sys_call+0x2591/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881065550c0 of 4 bytes by task 5725 on cpu 1:
 __follow_mount_rcu fs/namei.c:1485 [inline]
 handle_mounts fs/namei.c:1536 [inline]
 step_into+0xe7/0x810 fs/namei.c:1842
 walk_component+0x169/0x230 fs/namei.c:2010
 lookup_last fs/namei.c:2461 [inline]
 path_lookupat+0x10a/0x2b0 fs/namei.c:2485
 filename_lookup+0x127/0x300 fs/namei.c:2514
 vfs_statx+0xa2/0x320 fs/stat.c:244
 vfs_fstatat+0xcd/0x100 fs/stat.c:304
 __do_sys_newfstatat fs/stat.c:468 [inline]
 __se_sys_newfstatat+0x58/0x260 fs/stat.c:462
 __x64_sys_newfstatat+0x55/0x70 fs/stat.c:462
 x64_sys_call+0x25ff/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00680440 -> 0x00008040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 5725 Comm: syz-executor.3 Tainted: G        W          6.9.0-rc5-syzkaller-00355-g2c8159388952 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/28 08:36 upstream 2c8159388952 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shrink_dentry_list / step_into
2024/03/24 15:54 upstream 70293240c5ce 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shrink_dentry_list / step_into
* Struck through repros no longer work on HEAD.