syzbot


KCSAN: data-race in __dentry_kill / shrink_dentry_list (5)

Status: moderation: reported on 2024/11/17 19:59
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+835ae1cec160516001fd@syzkaller.appspotmail.com
First crash: 67d, last: 5d20h
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list fs 1 1620d 1620d 0/28 auto-closed as invalid on 2020/09/22 04:21
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list (3) fs 10 251d 365d 0/28 auto-obsoleted due to no activity on 2024/06/21 18:39
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list (2) fs 1 1348d 1348d 0/28 auto-closed as invalid on 2021/06/20 12:41
upstream KCSAN: data-race in __dentry_kill / shrink_dentry_list (4) fs 1 148d 148d 0/28 auto-obsoleted due to no activity on 2024/10/02 04:40

Sample crash report:
RAX: ffffffffffffffda RBX: 00007efc0cf95fa0 RCX: 00007efc0cda5d29
RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000007
RBP: 00007efc0b411090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 00007efc0cf95fa0 R15: 00007ffc863319b8
 </TASK>
==================================================================
BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list

read-write to 0xffff88810686acc0 of 4 bytes by task 3299 on cpu 1:
 d_shrink_del fs/dcache.c:471 [inline]
 shrink_dentry_list+0x19f/0x3e0 fs/dcache.c:1096
 shrink_dcache_parent+0x43/0x1b0
 d_invalidate+0xa9/0x1c0 fs/dcache.c:1614
 proc_invalidate_siblings_dcache+0x1db/0x2b0 fs/proc/inode.c:142
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3478
 release_task+0xad9/0xc20 kernel/exit.c:279
 wait_task_zombie kernel/exit.c:1249 [inline]
 wait_consider_task+0x116e/0x1680 kernel/exit.c:1476
 do_wait_thread kernel/exit.c:1539 [inline]
 __do_wait+0x100/0x500 kernel/exit.c:1657
 do_wait+0xaf/0x270 kernel/exit.c:1691
 kernel_wait4+0x164/0x1d0 kernel/exit.c:1850
 __do_sys_wait4 kernel/exit.c:1878 [inline]
 __se_sys_wait4 kernel/exit.c:1874 [inline]
 __x64_sys_wait4+0x94/0x120 kernel/exit.c:1874
 x64_sys_call+0x25a2/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:62
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810686acc0 of 4 bytes by task 8257 on cpu 0:
 dentry_unlist fs/dcache.c:595 [inline]
 __dentry_kill+0x2af/0x4c0 fs/dcache.c:639
 dput+0x5c/0xd0 fs/dcache.c:867
 proc_invalidate_siblings_dcache+0x1e3/0x2b0 fs/proc/inode.c:143
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3478
 release_task+0xb7f/0xc20 kernel/exit.c:279
 exit_notify kernel/exit.c:775 [inline]
 do_exit+0xf5d/0x17f0 kernel/exit.c:958
 do_group_exit+0x102/0x150 kernel/exit.c:1087
 get_signal+0xeb9/0x1000 kernel/signal.c:3017
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0048040c -> 0x0000000c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8257 Comm: syz.0.1949 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/01/18 08:08 upstream 595523945be0 f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/12/16 09:04 upstream 78d4f34e2115 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/11/21 00:19 upstream 8f7c8b88bda4 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
2024/11/17 19:59 upstream 4a5df3796467 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / shrink_dentry_list
* Struck through repros no longer work on HEAD.