syzbot


KCSAN: data-race in d_alloc_parallel / d_set_d_op (9)

Status: moderation: reported on 2024/02/01 22:34
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+dbe6eb55737b9f0f18bb@syzkaller.appspotmail.com
First crash: 85d, last: 11d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (4) fs 1 1181d 1181d 0/26 auto-closed as invalid on 2021/03/08 01:09
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op fs 23 1478d 1641d 0/26 auto-closed as invalid on 2020/06/18 13:33
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (7) fs 4 674d 730d 0/26 auto-closed as invalid on 2022/07/28 05:03
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (2) fs 1 1341d 1341d 0/26 auto-closed as invalid on 2020/09/29 03:57
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (8) fs 43 123d 140d 0/26 auto-obsoleted due to no activity on 2024/01/30 06:40
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (6) fs 3 767d 813d 0/26 auto-closed as invalid on 2022/04/26 06:41
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (3) fs 2 1244d 1237d 0/26 auto-closed as invalid on 2021/01/03 18:19
upstream KCSAN: data-race in d_alloc_parallel / d_set_d_op (5) fs 13 1051d 1140d 0/26 auto-closed as invalid on 2021/07/16 11:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in d_alloc_parallel / d_set_d_op

read-write to 0xffff88810e241e40 of 4 bytes by task 16844 on cpu 1:
 d_set_d_op+0xfb/0x1f0 fs/dcache.c:1792
 proc_ns_instantiate fs/proc/namespaces.c:114 [inline]
 proc_ns_dir_lookup+0x180/0x220 fs/proc/namespaces.c:172
 lookup_open fs/namei.c:3475 [inline]
 open_last_lookups fs/namei.c:3566 [inline]
 path_openat+0xc85/0x1d80 fs/namei.c:3796
 do_filp_open+0xf7/0x200 fs/namei.c:3826
 do_sys_openat2+0xab/0x120 fs/open.c:1406
 do_sys_open fs/open.c:1421 [inline]
 __do_sys_openat fs/open.c:1437 [inline]
 __se_sys_openat fs/open.c:1432 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1432
 x64_sys_call+0x2cad/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810e241e40 of 4 bytes by task 16847 on cpu 0:
 d_in_lookup include/linux/dcache.h:371 [inline]
 d_wait_lookup fs/dcache.c:2443 [inline]
 d_alloc_parallel+0x5ff/0xc70 fs/dcache.c:2531
 lookup_open fs/namei.c:3422 [inline]
 open_last_lookups fs/namei.c:3566 [inline]
 path_openat+0x65e/0x1d80 fs/namei.c:3796
 do_filp_open+0xf7/0x200 fs/namei.c:3826
 do_sys_openat2+0xab/0x120 fs/open.c:1406
 do_sys_open fs/open.c:1421 [inline]
 __do_sys_openat fs/open.c:1437 [inline]
 __se_sys_openat fs/open.c:1432 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1432
 x64_sys_call+0x2cad/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x10000000 -> 0x1000000c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 16847 Comm: syz-executor.4 Not tainted 6.9.0-rc4-syzkaller-00031-g96fca68c4fbf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/16 07:04 upstream 96fca68c4fbf 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/04/14 12:12 upstream 7efd0a74039f c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/04/05 06:24 upstream c88b9b4cde17 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/03/25 20:47 upstream 4cece7649650 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/03/25 08:05 upstream 5e74df2f8f15 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/03/11 15:49 upstream e8f897f4afef 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/03/02 19:08 upstream 5ad3cb0ed525 25905f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/02/29 02:23 upstream e326df53af00 352ab904 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/02/18 11:11 upstream c02197fc9076 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/02/18 04:34 upstream ced590523156 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/02/13 21:20 upstream c664e16bb1ba e66542d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
2024/02/01 22:33 upstream 5c24e4e9e708 81024119 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_alloc_parallel / d_set_d_op
* Struck through repros no longer work on HEAD.