syzbot


KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event (2)

Status: moderation: reported on 2024/10/13 04:50
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+b843bae81ed3042a49b9@syzkaller.appspotmail.com
First crash: 120d, last: 4d04h
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event fs 242 167d 430d 0/28 auto-obsoleted due to no activity on 2024/10/01 14:35

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event

write to 0xffff8881304a4404 of 4 bytes by task 20408 on cpu 1:
 fsnotify_detach_mark+0xba/0x160 fs/notify/mark.c:547
 fsnotify_clear_marks_by_group+0x30c/0x4d0 fs/notify/mark.c:913
 fsnotify_destroy_group+0x55/0x190 fs/notify/group.c:61
 inotify_release+0x1f/0x30 fs/notify/inotify/inotify_user.c:308
 __fput+0x2ac/0x640 fs/file_table.c:448
 ____fput+0x1c/0x30 fs/file_table.c:476
 task_work_run+0x13a/0x1a0 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xa8/0x120 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881304a4404 of 4 bytes by task 20409 on cpu 0:
 inotify_handle_inode_event+0x2d8/0x320 fs/notify/inotify/inotify_fsnotify.c:132
 fsnotify_handle_inode_event+0x1bd/0x220 fs/notify/fsnotify.c:316
 fsnotify_handle_event fs/notify/fsnotify.c:345 [inline]
 send_to_group fs/notify/fsnotify.c:419 [inline]
 fsnotify+0x105a/0x1260 fs/notify/fsnotify.c:628
 __fsnotify_parent+0x2aa/0x340 fs/notify/fsnotify.c:282
 fsnotify_parent include/linux/fsnotify.h:96 [inline]
 fsnotify_path include/linux/fsnotify.h:113 [inline]
 fsnotify_file include/linux/fsnotify.h:127 [inline]
 fsnotify_open include/linux/fsnotify.h:445 [inline]
 vfs_open+0x1a0/0x1e0 fs/open.c:1092
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1ae0/0x1fc0 fs/namei.c:3989
 do_filp_open+0x107/0x230 fs/namei.c:4016
 do_sys_openat2+0xab/0x120 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1453
 x64_sys_call+0x2b30/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000033 -> 0x00000030

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 20409 Comm: syz.5.5977 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
==================================================================

Crashes (17):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/06 15:16 upstream 92514ef226f5 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/25 04:15 upstream b46c89c08f41 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/18 18:23 upstream 595523945be0 f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/11 09:51 upstream 77a903cd8e5a 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/06 15:34 upstream 9d89551994a4 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/29 23:46 upstream 4099a71718b0 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/23 06:18 upstream bcde95ce32b6 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/20 20:42 upstream e9b8ffafd20a 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/12 09:10 upstream 231825b2e1ff 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/07 00:11 upstream 9a6e8c7c3a02 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/26 05:34 upstream 2c22dc1ee3a1 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/16 14:42 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/03 19:27 upstream a33ab3f94f51 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/22 16:45 upstream d12937763990 a93682b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/20 17:46 upstream 715ca9dd687f cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/16 14:19 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/13 04:49 upstream 7234e2ea0edd 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
* Struck through repros no longer work on HEAD.