syzbot


KCSAN: data-race in __d_instantiate / lookup_fast (8)

Status: moderation: reported on 2024/10/07 02:07
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+5851a71d4b8edd2f0f95@syzkaller.appspotmail.com
First crash: 8d22h, last: 8d22h
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __d_instantiate / lookup_fast (6) ext4 53 156d 312d 0/28 auto-obsoleted due to no activity on 2024/06/16 23:52
upstream KCSAN: data-race in __d_instantiate / lookup_fast ext4 6 1633d 1758d 0/28 auto-closed as invalid on 2020/06/18 13:33
upstream KCSAN: data-race in __d_instantiate / lookup_fast (4) ext4 16 801d 916d 0/28 auto-closed as invalid on 2022/09/10 18:37
upstream KCSAN: data-race in __d_instantiate / lookup_fast (5) ext4 7 709d 762d 0/28 auto-obsoleted due to no activity on 2022/12/11 12:03
upstream KCSAN: data-race in __d_instantiate / lookup_fast (2) fs 1 1342d 1342d 0/28 auto-closed as invalid on 2021/03/18 02:49
upstream KCSAN: data-race in __d_instantiate / lookup_fast (3) ext4 1 1190d 1190d 0/28 auto-closed as invalid on 2021/08/17 22:04
upstream KCSAN: data-race in __d_instantiate / lookup_fast (7) ext4 1 117d 117d 0/28 auto-obsoleted due to no activity on 2024/07/25 04:38

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __d_instantiate / lookup_fast

read-write to 0xffff8881065a3b40 of 4 bytes by task 3255 on cpu 1:
 __d_instantiate+0x2d5/0x3c0 fs/dcache.c:1869
 d_instantiate+0x59/0x80 fs/dcache.c:1894
 shmem_symlink+0x36a/0x3a0 mm/shmem.c:3847
 vfs_symlink+0xca/0x1d0 fs/namei.c:4615
 do_symlinkat+0xe3/0x350 fs/namei.c:4641
 __do_sys_symlink fs/namei.c:4662 [inline]
 __se_sys_symlink fs/namei.c:4660 [inline]
 __x64_sys_symlink+0x50/0x60 fs/namei.c:4660
 x64_sys_call+0x2819/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881065a3b40 of 4 bytes by task 2966 on cpu 0:
 d_revalidate fs/namei.c:867 [inline]
 lookup_fast+0xd9/0x2a0 fs/namei.c:1681
 walk_component+0x3f/0x230 fs/namei.c:2049
 lookup_last fs/namei.c:2556 [inline]
 path_lookupat+0x10a/0x2b0 fs/namei.c:2580
 filename_lookup+0x127/0x300 fs/namei.c:2609
 do_readlinkat+0x89/0x210 fs/stat.c:537
 __do_sys_readlink fs/stat.c:574 [inline]
 __se_sys_readlink fs/stat.c:571 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:571
 x64_sys_call+0x13c3/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000008 -> 0x00600008

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 2966 Comm: udevd Not tainted 6.12.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/07 02:06 upstream 8cf0b93919e1 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / lookup_fast
* Struck through repros no longer work on HEAD.