syzbot


KCSAN: data-race in lookup_fast / shrink_dentry_list (10)

Status: auto-obsoleted due to no activity on 2024/02/25 15:26
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+577b1d046f4e5d6e7ca7@syzkaller.appspotmail.com
First crash: 88d, last: 86d
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (9) fs 1 335d 335d 0/26 auto-obsoleted due to no activity on 2023/06/21 20:05
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (6) fs 1 643d 643d 0/26 auto-closed as invalid on 2022/08/18 12:57
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (4) fs 1 1114d 1114d 0/26 auto-closed as invalid on 2021/05/04 09:30
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (2) fs 1 1264d 1264d 0/26 auto-closed as invalid on 2020/12/05 11:21
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (3) fs 2 1171d 1200d 0/26 auto-closed as invalid on 2021/03/08 10:39
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (8) fs 1 398d 398d 0/26 auto-obsoleted due to no activity on 2023/04/27 01:35
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (7) fs 1 605d 605d 0/26 auto-closed as invalid on 2022/09/24 23:48
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (5) fs 1 964d 964d 0/26 auto-closed as invalid on 2021/10/01 10:16
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list fs 3 1321d 1347d 0/26 auto-closed as invalid on 2020/10/08 14:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in lookup_fast / shrink_dentry_list

read-write to 0xffff888106bda480 of 4 bytes by task 561 on cpu 1:
 d_shrink_del fs/dcache.c:449 [inline]
 shrink_dentry_list+0x226/0x3d0 fs/dcache.c:1067
 shrink_dcache_sb+0x165/0x290 fs/dcache.c:1195
 reconfigure_super+0x3ef/0x580 fs/super.c:1054
 do_remount fs/namespace.c:2892 [inline]
 path_mount+0x969/0xb30 fs/namespace.c:3671
 do_mount fs/namespace.c:3692 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x27f/0x2d0 fs/namespace.c:3875
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff888106bda480 of 4 bytes by task 559 on cpu 0:
 d_revalidate fs/namei.c:861 [inline]
 lookup_fast+0xd9/0x290 fs/namei.c:1642
 walk_component+0x3f/0x230 fs/namei.c:1997
 lookup_last fs/namei.c:2458 [inline]
 path_lookupat+0x10a/0x2a0 fs/namei.c:2482
 filename_lookup+0x126/0x300 fs/namei.c:2511
 user_path_at_empty+0x42/0x110 fs/namei.c:2920
 user_path_at include/linux/namei.h:57 [inline]
 do_mount fs/namespace.c:3689 [inline]
 __do_sys_mount fs/namespace.c:3898 [inline]
 __se_sys_mount+0x24b/0x2d0 fs/namespace.c:3875
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3875
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x00290400 -> 0x00210000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 559 Comm: syz-executor.3 Tainted: G        W          6.7.0-syzkaller-12991-g7a396820222d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
==================================================================
EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none.

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/21 15:25 upstream 7a396820222d 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in lookup_fast / shrink_dentry_list
2024/01/19 14:30 upstream 9d1694dc91ce 21772ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in lookup_fast / shrink_dentry_list
* Struck through repros no longer work on HEAD.