syzbot


KCSAN: data-race in __lookup_mnt / umount_tree (5)

Status: auto-obsoleted due to no activity on 2023/10/10 19:57
Subsystems: fs
[Documentation on labels]
First crash: 395d, last: 395d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __lookup_mnt / umount_tree (4) fs 1 761d 761d 0/28 auto-obsoleted due to no activity on 2022/10/10 17:50
upstream KCSAN: data-race in __lookup_mnt / umount_tree (3) fs 1 915d 915d 0/28 auto-closed as invalid on 2022/05/09 13:18
upstream KCSAN: data-race in __lookup_mnt / umount_tree (2) fs 1 1062d 1062d 0/28 auto-closed as invalid on 2021/12/13 12:07
upstream KCSAN: data-race in __lookup_mnt / umount_tree fs 1 1233d 1233d 0/28 auto-closed as invalid on 2021/06/25 00:51
upstream KCSAN: data-race in __lookup_mnt / umount_tree (8) fs 1 93d 93d 0/28 auto-obsoleted due to no activity on 2024/08/08 15:13
upstream KCSAN: data-race in __lookup_mnt / umount_tree (7) fs 1 179d 179d 0/28 auto-obsoleted due to no activity on 2024/05/14 04:41
upstream KCSAN: data-race in __lookup_mnt / umount_tree (6) fs 3 317d 300d 0/28 auto-obsoleted due to no activity on 2023/12/27 23:51

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __lookup_mnt / umount_tree

write to 0xffff88815e6b2290 of 8 bytes by task 29950 on cpu 0:
 unhash_mnt fs/namespace.c:903 [inline]
 umount_mnt fs/namespace.c:918 [inline]
 umount_tree+0x574/0x860 fs/namespace.c:1673
 path_umount+0x928/0x9a0 fs/namespace.c:1894
 ksys_umount fs/namespace.c:1917 [inline]
 __do_sys_umount fs/namespace.c:1922 [inline]
 __se_sys_umount fs/namespace.c:1920 [inline]
 __x64_sys_umount+0xb9/0xe0 fs/namespace.c:1920
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff88815e6b2290 of 8 bytes by task 29947 on cpu 1:
 __lookup_mnt+0x83/0xf0 fs/namespace.c:694
 __follow_mount_rcu fs/namei.c:1507 [inline]
 handle_mounts fs/namei.c:1537 [inline]
 step_into+0x430/0x800 fs/namei.c:1839
 walk_component+0x164/0x230 fs/namei.c:2007
 lookup_last fs/namei.c:2458 [inline]
 path_lookupat+0x10a/0x2a0 fs/namei.c:2482
 filename_lookup+0x126/0x300 fs/namei.c:2511
 user_path_at_empty+0x42/0x110 fs/namei.c:2910
 user_path_at include/linux/namei.h:57 [inline]
 do_mount fs/namespace.c:3672 [inline]
 __do_sys_mount fs/namespace.c:3884 [inline]
 __se_sys_mount+0x24b/0x2d0 fs/namespace.c:3861
 __x64_sys_mount+0x67/0x80 fs/namespace.c:3861
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0xffff88815e6b2000 -> 0xffff88815e6b2280

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29947 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/05 19:46 upstream 3f86ed6ec0b3 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __lookup_mnt / umount_tree
* Struck through repros no longer work on HEAD.