syzbot


KCSAN: data-race in __dentry_kill / shrink_dentry_list (3)

Status: moderation: reported on 2024/01/24 05:45
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+7be3ff91a90b52fc32b9@syzkaller.appspotmail.com
First crash: 94d, last: 16h28m
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list fs 1 1348d 1348d 0/26 auto-closed as invalid on 2020/09/22 04:21
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list (2) fs 1 1076d 1076d 0/26 auto-closed as invalid on 2021/06/20 12:41

Sample crash report:
netlink: 'syz-executor.3': attribute type 5 has an invalid length.
netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'.
==================================================================
BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list

read-write to 0xffff888107ad4a80 of 4 bytes by task 3113 on cpu 1:
 d_shrink_del fs/dcache.c:449 [inline]
 shrink_dentry_list+0x19f/0x3e0 fs/dcache.c:1074
 shrink_dcache_parent+0x43/0x1b0
 d_invalidate+0xa6/0x1c0 fs/dcache.c:1592
 proc_invalidate_siblings_dcache+0x1db/0x2b0 fs/proc/inode.c:142
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3419
 release_task+0xae6/0xc30 kernel/exit.c:282
 wait_task_zombie kernel/exit.c:1189 [inline]
 wait_consider_task+0x116b/0x1670 kernel/exit.c:1416
 do_wait_thread kernel/exit.c:1479 [inline]
 __do_wait+0x100/0x500 kernel/exit.c:1597
 do_wait+0xaf/0x270 kernel/exit.c:1631
 kernel_wait4+0x164/0x1d0 kernel/exit.c:1790
 __do_sys_wait4 kernel/exit.c:1818 [inline]
 __se_sys_wait4 kernel/exit.c:1814 [inline]
 __x64_sys_wait4+0x94/0x120 kernel/exit.c:1814
 x64_sys_call+0x61d/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:62
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888107ad4a80 of 4 bytes by task 3844 on cpu 0:
 dentry_unlist fs/dcache.c:573 [inline]
 __dentry_kill+0x2a9/0x4b0 fs/dcache.c:617
 dput+0x5c/0xd0 fs/dcache.c:845
 proc_invalidate_siblings_dcache+0x1e3/0x2b0 fs/proc/inode.c:143
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3419
 release_task+0xb91/0xc30 kernel/exit.c:282
 exit_notify kernel/exit.c:774 [inline]
 do_exit+0xf7d/0x1740 kernel/exit.c:898
 do_group_exit+0x102/0x150 kernel/exit.c:1027
 get_signal+0xf2f/0x1080 kernel/signal.c:2911
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x59/0x130 kernel/entry/common.c:218
 do_syscall_64+0xda/0x1d0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0048040c -> 0x0000000c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3844 Comm: syz-executor.3 Not tainted 6.9.0-rc5-syzkaller-00159-gc942a0cd3603 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/26 18:27 upstream c942a0cd3603 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/04/11 22:02 upstream e8c39d0f57f3 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/03/29 04:02 upstream 317c7bc0ef03 e91187ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/03/04 21:48 upstream 90d35da658da 3717835d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/03/03 08:26 upstream 04b8076df253 25905f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/02/09 07:18 upstream 1f719a2f3fa6 7f07e9b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/02/07 07:04 upstream 99bd3cb0d12e 6404acf9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/01/24 17:22 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/01/24 05:44 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
* Struck through repros no longer work on HEAD.