syzbot


KCSAN: data-race in list_lru_add / list_lru_count_node (11)

Status: moderation: reported on 2024/06/22 08:53
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+1f5216c46a9fa405a593@syzkaller.appspotmail.com
First crash: 21d, last: 21d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (3) mm 3 1265d 1291d 0/27 auto-closed as invalid on 2021/02/28 22:07
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (6) mm 15 906d 1040d 0/27 auto-closed as invalid on 2022/02/23 08:49
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (2) mm 1 1483d 1483d 0/27 auto-closed as invalid on 2020/07/25 12:43
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (9) mm 1 229d 214d 0/27 auto-obsoleted due to no activity on 2023/12/31 11:14
upstream KCSAN: data-race in list_lru_add / list_lru_count_node mm 1 1554d 1554d 0/27 auto-closed as invalid on 2020/06/18 13:43
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (4) mm 5 1153d 1166d 0/27 auto-closed as invalid on 2021/06/20 16:41
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (7) mm 1 729d 729d 0/27 auto-closed as invalid on 2022/08/18 15:43
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (5) mm 3 1084d 1105d 0/27 auto-closed as invalid on 2021/09/03 02:37
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (8) mm 1 666d 666d 0/27 auto-obsoleted due to no activity on 2022/10/21 06:23
upstream KCSAN: data-race in list_lru_add / list_lru_count_node (10) mm 2 98d 102d 0/27 auto-obsoleted due to no activity on 2024/05/11 04:16

Sample crash report:
==================================================================
BUG: KCSAN: data-race in list_lru_add / list_lru_count_node

read-write to 0xffff8881028568e0 of 8 bytes by task 3118 on cpu 1:
 list_lru_add+0x1f4/0x230 mm/list_lru.c:101
 list_lru_add_obj+0xbb/0xd0 mm/list_lru.c:116
 d_lru_add+0xa8/0xe0 fs/dcache.c:430
 retain_dentry fs/dcache.c:712 [inline]
 fast_dput+0x26b/0x2b0 fs/dcache.c:799
 dput+0x24/0xd0 fs/dcache.c:839
 path_put fs/namei.c:561 [inline]
 put_link fs/namei.c:1027 [inline]
 open_last_lookups fs/namei.c:3596 [inline]
 path_openat+0x10ec/0x1da0 fs/namei.c:3804
 do_filp_open+0xf7/0x200 fs/namei.c:3834
 do_sys_openat2+0xab/0x120 fs/open.c:1405
 do_sys_open fs/open.c:1420 [inline]
 __do_sys_openat fs/open.c:1436 [inline]
 __se_sys_openat fs/open.c:1431 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1431
 x64_sys_call+0x1057/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881028568e0 of 8 bytes by task 6587 on cpu 0:
 list_lru_count_node+0x2c/0x40 mm/list_lru.c:188
 list_lru_count include/linux/list_lru.h:165 [inline]
 shrink_dcache_sb+0x1a4/0x280 fs/dcache.c:1196
 reconfigure_super+0x474/0x5b0 fs/super.c:1050
 do_remount fs/namespace.c:2892 [inline]
 path_mount+0x967/0xb30 fs/namespace.c:3671
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3875
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3875
 x64_sys_call+0x25c9/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0x0000000000000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 6587 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
==================================================================
EXT4-fs: error -4 creating inode table initialization thread
EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/22 08:52 upstream 35bb670d65fc edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in list_lru_add / list_lru_count_node
* Struck through repros no longer work on HEAD.