syzbot


KCSAN: data-race in drop_nlink / vfs_getattr_nosec (2)

Status: auto-closed as invalid on 2021/07/03 10:04
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 649d, last: 613d
similar bugs (5):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in drop_nlink / vfs_getattr_nosec (6) 1 385d 385d 0/24 auto-closed as invalid on 2022/02/16 06:56
upstream KCSAN: data-race in drop_nlink / vfs_getattr_nosec (3) 2 547d 565d 0/24 auto-closed as invalid on 2021/09/07 16:42
upstream KCSAN: data-race in drop_nlink / vfs_getattr_nosec 1 686d 686d 0/24 auto-closed as invalid on 2021/04/21 10:41
upstream KCSAN: data-race in drop_nlink / vfs_getattr_nosec (5) 1 448d 448d 0/24 auto-closed as invalid on 2021/12/15 06:52
upstream KCSAN: data-race in drop_nlink / vfs_getattr_nosec (4) 1 492d 492d 0/24 auto-closed as invalid on 2021/11/01 05:59

Sample crash report:
==================================================================
BUG: KCSAN: data-race in drop_nlink / vfs_getattr_nosec

write to 0xffff88812eb22898 of 4 bytes by task 31031 on cpu 0:
 drop_nlink+0x37/0x90 fs/inode.c:305
 shmem_unlink+0x1ab/0x1d0 mm/shmem.c:2967
 shmem_rename2+0x2fd/0x440 mm/shmem.c:3063
 vfs_rename+0xa03/0xfb0 fs/namei.c:4541
 do_renameat2+0x59e/0x9b0 fs/namei.c:4696
 __do_sys_rename fs/namei.c:4745 [inline]
 __se_sys_rename fs/namei.c:4743 [inline]
 __x64_sys_rename+0x58/0x60 fs/namei.c:4743
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812eb22898 of 4 bytes by task 31022 on cpu 1:
 generic_fillattr fs/stat.c:49 [inline]
 vfs_getattr_nosec+0x1c1/0x2f0 fs/stat.c:108
 vfs_getattr fs/stat.c:142 [inline]
 vfs_statx+0x128/0x290 fs/stat.c:207
 vfs_fstatat fs/stat.c:225 [inline]
 vfs_lstat include/linux/fs.h:3384 [inline]
 __do_sys_newlstat fs/stat.c:380 [inline]
 __se_sys_newlstat+0x46/0x250 fs/stat.c:374
 __x64_sys_newlstat+0x2d/0x40 fs/stat.c:374
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000001 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 31022 Comm: systemd-udevd Not tainted 5.13.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (6):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci2-upstream-kcsan-gce 2021/05/29 10:04 upstream 6799d4f2da49 858ea628 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
ci2-upstream-kcsan-gce 2021/05/28 11:50 upstream 97e5bf604b7a 858ea628 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
ci2-upstream-kcsan-gce 2021/05/26 14:57 upstream ad9f25d33860 750ce164 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
ci2-upstream-kcsan-gce 2021/05/14 23:41 upstream bd3c9cdb21a2 8bdd5343 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
ci2-upstream-kcsan-gce 2021/05/06 20:40 upstream 8404c9fbc84b 06585184 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
ci2-upstream-kcsan-gce 2021/04/23 07:53 upstream 90c911ad7445 590921a5 .config console log report info KCSAN: data-race in drop_nlink / vfs_getattr_nosec
* Struck through repros no longer work on HEAD.