syzbot


KCSAN: data-race in d_walk / shrink_dentry_list (2)

Status: moderation: reported on 2025/03/07 22:31
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+a15a9e97deae95e587ca@syzkaller.appspotmail.com
First crash: 4d07h, last: 4d07h
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in d_walk / shrink_dentry_list fs 1 1128d 1128d 0/28 auto-closed as invalid on 2022/03/14 13:07

Sample crash report:
==================================================================
BUG: KCSAN: data-race in d_walk / shrink_dentry_list

read-write to 0xffff88810f9eaf00 of 4 bytes by task 4829 on cpu 1:
 d_shrink_del fs/dcache.c:489 [inline]
 shrink_dentry_list+0x19f/0x3e0 fs/dcache.c:1114
 shrink_dcache_parent+0x43/0x1b0
 d_invalidate+0xa9/0x1c0 fs/dcache.c:1632
 proc_invalidate_siblings_dcache+0x1db/0x2b0 fs/proc/inode.c:142
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3491
 release_task+0xb7f/0xc20 kernel/exit.c:279
 exit_notify kernel/exit.c:775 [inline]
 do_exit+0xf5d/0x17f0 kernel/exit.c:958
 do_group_exit+0x102/0x150 kernel/exit.c:1087
 get_signal+0xeb9/0x1000 kernel/signal.c:3036
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810f9eaf00 of 4 bytes by task 4235 on cpu 0:
 d_walk+0x24a/0x4a0 fs/dcache.c:1290
 shrink_dcache_parent+0x84/0x1b0 fs/dcache.c:1527
 d_invalidate+0xa9/0x1c0 fs/dcache.c:1632
 proc_invalidate_siblings_dcache+0x1db/0x2b0 fs/proc/inode.c:142
 proc_flush_pid+0x1d/0x30 fs/proc/base.c:3491
 release_task+0xad9/0xc20 kernel/exit.c:279
 wait_task_zombie kernel/exit.c:1249 [inline]
 wait_consider_task+0x116e/0x1680 kernel/exit.c:1476
 do_wait_thread kernel/exit.c:1539 [inline]
 __do_wait+0x100/0x500 kernel/exit.c:1657
 do_wait+0xaf/0x270 kernel/exit.c:1691
 kernel_wait4+0x164/0x1d0 kernel/exit.c:1850
 __do_sys_wait4 kernel/exit.c:1878 [inline]
 __se_sys_wait4 kernel/exit.c:1874 [inline]
 __x64_sys_wait4+0x94/0x120 kernel/exit.c:1874
 x64_sys_call+0x25a2/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:62
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0028044c -> 0x0000004c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 4235 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/03/07 22:30 upstream 00a7d39898c8 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_walk / shrink_dentry_list
* Struck through repros no longer work on HEAD.