syzbot


BUG: Dentry still in use [unmount of binder binder]

Status: upstream: reported C repro on 2021/01/09 11:52
Reported-by: syzbot+0b725b3fdff59540827d@syzkaller.appspotmail.com
First crash: 696d, last: 407d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: Dentry still in use [unmount of ext4 loop0] C error 63 370d 409d 0/2 closed as dup on 2021/10/28 13:08

Sample crash report:
incfs: Can't find or create .index dir in ./file0
BUG: Dentry 0000000012b47a3e{i=0,n=.index}  still in use (1) [unmount of binder binder]
------------[ cut here ]------------
WARNING: CPU: 0 PID: 361 at fs/dcache.c:1597 umount_check+0x179/0x1c0 fs/dcache.c:1588
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 361 Comm: syz-executor075 Not tainted 5.4.87-syzkaller-00101-g47494776db44 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1dd/0x24e lib/dump_stack.c:118
 panic+0x285/0x750 kernel/panic.c:221
 __warn+0x1fd/0x200 kernel/panic.c:582
 report_bug+0x390/0x4d0 lib/bug.c:195
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 do_error_trap arch/x86/kernel/traps.c:272 [inline]
 do_invalid_op+0x6e/0x110 arch/x86/kernel/traps.c:291
 invalid_op+0x1e/0x30 arch/x86/entry/entry_64.S:1029
RIP: 0010:umount_check+0x179/0x1c0 fs/dcache.c:1588
Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 83 49 1d 85 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 67 4e b0 ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff
RSP: 0018:ffff8881e85e76f0 EFLAGS: 00010296
RAX: 0000000000000057 RBX: ffffffff85538880 RCX: 03bd283c53216a00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff8881e8b75420 R08: ffffffff814e3ed1 R09: ffffed103ee05e08
R10: ffffed103ee05e08 R11: 0000000000000000 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881eff02bb0
 d_walk+0x2e9/0x570 fs/dcache.c:1307
 do_one_tree fs/dcache.c:1604 [inline]
 shrink_dcache_for_umount+0x8a/0x1b0 fs/dcache.c:1620
 generic_shutdown_super+0x63/0x2a0 fs/super.c:447
 kill_anon_super fs/super.c:1108 [inline]
 kill_litter_super+0x71/0xa0 fs/super.c:1117
 binderfs_kill_super+0x3d/0x50 drivers/android/binderfs.c:750
 deactivate_locked_super+0xaf/0x100 fs/super.c:335
 deactivate_super+0x1b8/0x280 fs/super.c:366
 cleanup_mnt+0x432/0x4e0 fs/namespace.c:1102
 task_work_run+0x176/0x1a0 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0xcc2/0x2830 kernel/exit.c:811
 do_group_exit+0x155/0x2b0 kernel/exit.c:909
 get_signal+0x13ec/0x1f00 kernel/signal.c:2745
 do_signal+0x92/0x5d0 arch/x86/kernel/signal.c:815
 exit_to_usermode_loop arch/x86/entry/common.c:159 [inline]
 prepare_exit_to_usermode+0x207/0x310 arch/x86/entry/common.c:194
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x44a159
Code: Bad RIP value.
RSP: 002b:00007f85eaf1ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00000000006dbc38 RCX: 000000000044a159
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000006dbc38
RBP: 00000000006dbc30 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc3c
R13: 00007fffe2a586ef R14: 00007f85eaf1f9c0 R15: 00000000006dbc3c
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-android-5-4-kasan 2021/01/09 12:05 android12-5.4 47494776db44 a6c52263 .config log report syz C
ci2-android-5-4-kasan 2021/10/25 05:30 android12-5.4 eb4a5a5dbd5b 4f0000ee .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/10/24 11:24 android12-5.4 eb4a5a5dbd5b 282f03fb .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/09/29 07:08 android12-5.4 d5fa5fb1ccb2 d82cb927 .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/08/23 15:10 android12-5.4 3ce13296e72d b599f2fc .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/08/01 09:20 android12-5.4 e7e1f9adf836 6c236867 .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/05/26 15:41 android12-5.4 54f14b62ffed 750ce164 .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/01/19 14:28 android12-5.4 445b69a6f3d9 63631df1 .config log report info BUG: Dentry still in use [unmount of binder binder]
ci2-android-5-4-kasan 2021/01/11 22:52 android12-5.4 62ec51519fa1 2c1f2513 .config log report info
ci2-android-5-4-kasan 2021/01/09 11:51 android12-5.4 47494776db44 a6c52263 .config log report info
* Struck through repros no longer work on HEAD.