syzbot


KCSAN: data-race in fsnotify_perm / shrink_dentry_list (2)

Status: auto-closed as invalid on 2022/01/20 15:48
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 362d, last: 354d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fsnotify_perm / shrink_dentry_list 1 421d 421d 0/24 auto-closed as invalid on 2021/11/15 10:17

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fsnotify_perm / shrink_dentry_list

write to 0xffff888105bd7cc0 of 4 bytes by task 30659 on cpu 0:
 shrink_dentry_list+0x127/0x300 fs/dcache.c:423
 shrink_dcache_sb+0x188/0x2d0 fs/dcache.c:1296
 reconfigure_super+0x146/0x540 fs/super.c:891
 do_remount fs/namespace.c:2650 [inline]
 path_mount+0x13f9/0x1c40 fs/namespace.c:3310
 do_mount fs/namespace.c:3331 [inline]
 __do_sys_mount fs/namespace.c:3539 [inline]
 __se_sys_mount+0x24b/0x2f0 fs/namespace.c:3516
 __x64_sys_mount+0x63/0x70 fs/namespace.c:3516
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888105bd7cc0 of 4 bytes by task 30656 on cpu 1:
 fsnotify_parent include/linux/fsnotify.h:69 [inline]
 fsnotify_file include/linux/fsnotify.h:99 [inline]
 fsnotify_perm+0x2ce/0x370 include/linux/fsnotify.h:124
 security_file_open+0x85/0x90 security/security.c:1639
 do_dentry_open+0x232/0x860 fs/open.c:809
 vfs_open+0x43/0x50 fs/open.c:957
 do_open fs/namei.c:3426 [inline]
 path_openat+0x17b8/0x1eb0 fs/namei.c:3559
 do_filp_open+0x105/0x220 fs/namei.c:3586
 do_sys_openat2+0xb5/0x2b0 fs/open.c:1212
 do_sys_open fs/open.c:1228 [inline]
 __do_sys_open fs/open.c:1236 [inline]
 __se_sys_open fs/open.c:1232 [inline]
 __x64_sys_open+0xe2/0x110 fs/open.c:1232
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00290400 -> 0x00210000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 30656 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/16 15:43 upstream 2b14864acbaa 8dd6a5e3 .config log report info KCSAN: data-race in fsnotify_perm / shrink_dentry_list
ci2-upstream-kcsan-gce 2021/12/09 13:59 upstream 2a987e65025e b54aa474 .config log report info KCSAN: data-race in fsnotify_perm / shrink_dentry_list
* Struck through repros no longer work on HEAD.