syzbot


KCSAN: data-race in link_path_walk / shrink_dentry_list (8)

Status: auto-obsoleted due to no activity on 2023/04/09 05:58
Subsystems: fs
[Documentation on labels]
First crash: 443d, last: 443d
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (5) fs 1 778d 778d 0/26 auto-closed as invalid on 2022/04/17 20:20
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (6) fs 1 717d 717d 0/26 auto-closed as invalid on 2022/06/18 02:44
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (4) fs 10 814d 950d 0/26 auto-closed as invalid on 2022/03/12 22:14
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (2) fs 3 1072d 1107d 0/26 auto-closed as invalid on 2021/06/27 19:17
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (7) fs 1 640d 640d 0/26 auto-closed as invalid on 2022/09/03 00:29
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (3) fs 2 986d 990d 0/26 auto-closed as invalid on 2021/09/22 09:34
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (9) fs 1 210d 210d 0/26 auto-obsoleted due to no activity on 2023/11/07 05:43
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list (10) fs 3 119d 141d 0/26 auto-obsoleted due to no activity on 2024/02/06 05:32
upstream KCSAN: data-race in link_path_walk / shrink_dentry_list fs 1 1381d 1381d 0/26 auto-closed as invalid on 2020/08/23 06:27

Sample crash report:
==================================================================
BUG: KCSAN: data-race in link_path_walk / shrink_dentry_list

read-write to 0xffff88810ad80840 of 4 bytes by task 27842 on cpu 0:
 d_shrink_del fs/dcache.c:448 [inline]
 shrink_dentry_list+0x169/0x380 fs/dcache.c:1197
 prune_dcache_sb+0x81/0xb0 fs/dcache.c:1282
 super_cache_scan+0x26c/0x310 fs/super.c:104
 do_shrink_slab+0x2a0/0x640 mm/vmscan.c:843
 shrink_slab_memcg mm/vmscan.c:912 [inline]
 shrink_slab+0x2bc/0x520 mm/vmscan.c:991
 shrink_node_memcgs mm/vmscan.c:6143 [inline]
 shrink_node+0xaf5/0x14f0 mm/vmscan.c:6172
 shrink_zones mm/vmscan.c:6410 [inline]
 do_try_to_free_pages+0x40d/0xc80 mm/vmscan.c:6472
 try_to_free_mem_cgroup_pages+0x1e2/0x480 mm/vmscan.c:6787
 reclaim_high+0xca/0x110 mm/memcontrol.c:2393
 mem_cgroup_handle_over_high+0x8c/0x1a0 mm/memcontrol.c:2578
 resume_user_mode_work include/linux/resume_user_mode.h:58 [inline]
 exit_to_user_mode_loop+0x99/0xe0 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x6a/0xa0 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:296
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff88810ad80840 of 4 bytes by task 27847 on cpu 1:
 __d_entry_type include/linux/dcache.h:385 [inline]
 d_can_lookup include/linux/dcache.h:400 [inline]
 link_path_walk+0x50e/0x860 fs/namei.c:2330
 path_openat+0x19c/0x1b70 fs/namei.c:3710
 do_filp_open+0xf6/0x200 fs/namei.c:3741
 do_sys_openat2+0xb5/0x2a0 fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_sys_openat fs/open.c:1342 [inline]
 __se_sys_openat fs/open.c:1337 [inline]
 __x64_sys_openat+0xf3/0x120 fs/open.c:1337
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0028040c -> 0x0000800c

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 27847 Comm: syz-executor.3 Tainted: G        W          6.2.0-rc7-syzkaller-00213-g47e9aa14ce5a-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/02/12 05:33 upstream 47e9aa14ce5a 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in link_path_walk / shrink_dentry_list
* Struck through repros no longer work on HEAD.