syzbot


KCSAN: data-race in __dentry_kill / d_set_d_op (8)

Status: auto-closed as invalid on 2022/02/01 06:29
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 497d, last: 339d
similar bugs (11):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (9) 1 301d 301d 0/24 auto-closed as invalid on 2022/03/12 00:21
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (7) 2 536d 570d 0/24 auto-closed as invalid on 2021/07/19 11:09
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (3) 6 908d 949d 0/24 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (2) 9 1038d 1107d 0/24 auto-closed as invalid on 2020/04/08 20:57
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (5) 1 757d 725d 0/24 auto-closed as invalid on 2020/12/21 11:58
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (10) 5 200d 262d 0/24 auto-closed as invalid on 2022/06/20 15:46
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (4) 3 837d 856d 0/24 auto-closed as invalid on 2020/09/21 06:01
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (11) 1 160d 160d 0/24 auto-closed as invalid on 2022/07/30 10:14
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (6) 1 628d 628d 0/24 auto-closed as invalid on 2021/04/18 21:16
upstream KCSAN: data-race in __dentry_kill / d_set_d_op (12) 3 65d 110d 0/24 auto-obsoleted due to no activity on 2022/11/02 16:09
upstream KCSAN: data-race in __dentry_kill / d_set_d_op 3 1118d 1125d 0/24 closed as invalid on 2019/11/19 14:14

Sample crash report:
loop4: detected capacity change from 0 to 4
==================================================================
BUG: KCSAN: data-race in __dentry_kill / d_set_d_op

write to 0xffff88811b09c480 of 4 bytes by task 29920 on cpu 0:
 d_set_d_op+0x17f/0x220 fs/dcache.c:1910
 simple_lookup+0x78/0x90 fs/libfs.c:74
 __lookup_slow+0x182/0x250 fs/namei.c:1657
 lookup_slow fs/namei.c:1674 [inline]
 walk_component+0x2b6/0x360 fs/namei.c:1970
 lookup_last fs/namei.c:2425 [inline]
 path_lookupat+0x12d/0x3d0 fs/namei.c:2449
 filename_lookup+0x130/0x310 fs/namei.c:2478
 user_path_at_empty+0x3e/0x110 fs/namei.c:2801
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0xa9/0x2a0 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 vfs_stat include/linux/fs.h:3353 [inline]
 __do_sys_newstat fs/stat.c:385 [inline]
 __se_sys_newstat+0x5d/0x250 fs/stat.c:381
 __x64_sys_newstat+0x2d/0x40 fs/stat.c:381
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88811b09c480 of 4 bytes by task 29918 on cpu 1:
 dentry_unlist fs/dcache.c:547 [inline]
 __dentry_kill+0x1ef/0x450 fs/dcache.c:578
 dput+0x218/0x430 fs/dcache.c:888
 handle_mounts fs/namei.c:1502 [inline]
 step_into+0x468/0xee0 fs/namei.c:1800
 walk_component+0x1a1/0x360 fs/namei.c:1976
 lookup_last fs/namei.c:2425 [inline]
 path_lookupat+0x12d/0x3d0 fs/namei.c:2449
 filename_lookup+0x130/0x310 fs/namei.c:2478
 user_path_at_empty+0x3e/0x110 fs/namei.c:2801
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0xa9/0x2a0 fs/stat.c:221
 vfs_fstatat fs/stat.c:243 [inline]
 vfs_stat include/linux/fs.h:3353 [inline]
 __do_sys_newstat fs/stat.c:385 [inline]
 __se_sys_newstat+0x5d/0x250 fs/stat.c:381
 __x64_sys_newstat+0x2d/0x40 fs/stat.c:381
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x10000000 -> 0x00000008

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29918 Comm: syz-executor.4 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (13):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/28 06:19 upstream a8ad9a2434dc 6b3c5e64 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/12/19 03:21 upstream 9eaa88c7036e 44068e19 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/12/12 10:45 upstream a763d5a5abd6 49ca1f59 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/12/10 21:55 upstream c741e49150db fc17c959 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/11/28 22:45 upstream d06c942efea4 63eeac02 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/11/08 09:54 upstream 6b75d88fa81b 4c1be0be .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/10/12 19:59 upstream fa5878760579 08362356 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/10/07 23:04 upstream 4a16df549d23 efe0f24d .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/09/12 18:46 upstream 78e709522d2c 3ce60af8 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/09/01 12:34 upstream b91db6a0b52e 7eb7e152 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/08/11 10:18 upstream 9e723c5380c6 6972b106 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/07/30 13:24 upstream 764a5bc89b12 c585c7b0 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
ci2-upstream-kcsan-gce 2021/07/24 03:10 upstream 8baef6386baa bc5f1d88 .config log report info KCSAN: data-race in __dentry_kill / d_set_d_op
* Struck through repros no longer work on HEAD.