syzbot


KCSAN: data-race in __dentry_kill / vfs_unlink (2)

Status: auto-closed as invalid on 2021/08/12 00:21
Subsystems: fs
[Documentation on labels]
First crash: 1040d, last: 1037d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __dentry_kill / vfs_unlink (4) fs 3 888d 920d 0/26 auto-closed as invalid on 2022/01/07 13:09
upstream KCSAN: data-race in __dentry_kill / vfs_unlink fs 1 1204d 1204d 0/26 auto-closed as invalid on 2021/02/25 10:07
upstream KCSAN: data-race in __dentry_kill / vfs_unlink (3) fs 2 970d 979d 0/26 auto-closed as invalid on 2021/10/17 10:47
upstream KCSAN: data-race in __dentry_kill / vfs_unlink (5) fs 3 789d 814d 0/26 auto-closed as invalid on 2022/04/16 18:57

Sample crash report:
loop5: p3 start 225 is beyond EOD, truncated
loop5: p4 size 3657465856 extends beyond EOD, truncated
==================================================================
BUG: KCSAN: data-race in __dentry_kill / vfs_unlink

write to 0xffff88814a0a5480 of 4 bytes by task 19 on cpu 0:
 dont_mount include/linux/dcache.h:358 [inline]
 vfs_unlink+0x289/0x400 fs/namei.c:4027
 handle_remove drivers/base/devtmpfs.c:335 [inline]
 handle drivers/base/devtmpfs.c:382 [inline]
 devtmpfs_work_loop+0x7bf/0x8d0 drivers/base/devtmpfs.c:395
 devtmpfsd+0x3f/0x40 drivers/base/devtmpfs.c:437
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295

read to 0xffff88814a0a5480 of 4 bytes by task 9945 on cpu 1:
 dentry_unlist fs/dcache.c:547 [inline]
 __dentry_kill+0x1ef/0x4e0 fs/dcache.c:578
 dentry_kill fs/dcache.c:695 [inline]
 dput+0xc6/0x360 fs/dcache.c:888
 handle_mounts fs/namei.c:1474 [inline]
 step_into+0x442/0xec0 fs/namei.c:1772
 walk_component+0x190/0x350 fs/namei.c:1948
 lookup_last fs/namei.c:2397 [inline]
 path_lookupat+0x12d/0x570 fs/namei.c:2421
 filename_lookup+0xff/0x390 fs/namei.c:2454
 user_path_at_empty+0x3b/0x50 fs/namei.c:2734
 user_path_at include/linux/namei.h:60 [inline]
 vfs_statx+0x98/0x290 fs/stat.c:203
 vfs_fstatat fs/stat.c:225 [inline]
 vfs_stat include/linux/fs.h:3379 [inline]
 __do_sys_newstat fs/stat.c:367 [inline]
 __se_sys_newstat+0x46/0x250 fs/stat.c:363
 __x64_sys_newstat+0x2d/0x40 fs/stat.c:363
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00500008 -> 0x00000008

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 9945 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
loop5: detected capacity change from 0 to 1
 loop5: p1 p2 p3 p4
loop5: p1 start 10 is beyond EOD, truncated
loop5: p2 size 1073872896 extends beyond EOD, truncated
loop5: p3 start 225 is beyond EOD, truncated
loop5: p4 size 3657465856 extends beyond EOD, truncated

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/08 00:18 upstream 3dbdb38e2869 95793bce .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / vfs_unlink
2021/07/04 21:10 upstream 3dbdb38e2869 55aa55c2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __dentry_kill / vfs_unlink
* Struck through repros no longer work on HEAD.