syzbot


KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event (3)

Status: moderation: reported on 2024/08/29 19:59
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+07ed107b248ae165aa4f@syzkaller.appspotmail.com
First crash: 210d, last: 51d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event (2) fs 3 256d 264d 0/28 auto-obsoleted due to no activity on 2024/08/19 04:23
upstream KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event fs 226 341d 476d 0/28 auto-obsoleted due to no activity on 2024/05/18 20:42

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event

write to 0xffff8881033cfae4 of 4 bytes by task 3289 on cpu 1:
 fsnotify_detach_mark+0xba/0x160 fs/notify/mark.c:547
 fsnotify_clear_marks_by_group+0x30c/0x4d0 fs/notify/mark.c:913
 fsnotify_destroy_group+0x55/0x190 fs/notify/group.c:61
 inotify_release+0x1f/0x30 fs/notify/inotify/inotify_user.c:308
 __fput+0x2ac/0x640 fs/file_table.c:448
 ____fput+0x1c/0x30 fs/file_table.c:476
 task_work_run+0x13a/0x1a0 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x5d8/0x17f0 kernel/exit.c:938
 do_group_exit+0x102/0x150 kernel/exit.c:1087
 get_signal+0xeb9/0x1000 kernel/signal.c:3036
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881033cfae4 of 4 bytes by task 3298 on cpu 0:
 fsnotify_handle_inode_event+0x126/0x220 fs/notify/fsnotify.c:308
 fsnotify_handle_event fs/notify/fsnotify.c:371 [inline]
 send_to_group fs/notify/fsnotify.c:419 [inline]
 fsnotify+0x1187/0x1260 fs/notify/fsnotify.c:628
 __fsnotify_parent+0x2f5/0x340 fs/notify/fsnotify.c:282
 fsnotify_parent include/linux/fsnotify.h:96 [inline]
 fsnotify_path include/linux/fsnotify.h:113 [inline]
 fsnotify_file include/linux/fsnotify.h:127 [inline]
 fsnotify_close include/linux/fsnotify.h:456 [inline]
 __fput+0x1e7/0x640 fs/file_table.c:434
 __fput_sync+0x96/0xc0 fs/file_table.c:534
 __do_sys_close fs/open.c:1579 [inline]
 __se_sys_close fs/open.c:1564 [inline]
 __x64_sys_close+0x55/0xe0 fs/open.c:1564
 x64_sys_call+0x266c/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:4
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000003 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
==================================================================

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/04 19:33 upstream d009de7d5428 8f267cef .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2025/02/03 17:11 upstream 2014c95afece a21a8419 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2025/01/26 21:43 upstream c2da8b3f914f 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2025/01/24 19:12 upstream 113691ce9f32 1293872d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2025/01/20 07:42 upstream ffd294d346d1 f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2025/01/15 07:47 upstream 619f0b6fad52 7315a7cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/30 22:03 upstream ccb98ccef0e5 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/29 14:37 upstream 059dd502b263 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/18 16:40 upstream aef25be35d23 a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/17 01:51 upstream f44d154d6e3d eec85da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/08 04:39 upstream 7503345ac5f5 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/12/02 13:48 upstream e70140ba0d2b b499ea68 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/11/04 18:58 upstream 557329bcecc2 509da429 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/10/30 13:15 upstream c1e939a21eb1 fb888278 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/10/12 18:46 upstream 09f6b0c8904b 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/10/03 20:04 upstream 7ec462100ef9 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/30 21:19 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/27 19:16 upstream 3630400697a3 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/23 12:29 upstream de5cb0dcb74c 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/18 10:29 upstream bdf56c7580d2 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/18 01:41 upstream 2f27fce67173 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/09/09 17:28 upstream da3ea35007d0 073f8be2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/08/31 02:08 upstream 20371ba12063 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
2024/08/29 19:58 upstream d5d547aa7b51 9bd464fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event
* Struck through repros no longer work on HEAD.