syzbot


KCSAN: data-race in lookup_fast / shrink_dentry_list (7)

Status: auto-closed as invalid on 2022/09/24 23:48
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 99d, last: 99d
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (6) 1 137d 137d 0/24 auto-closed as invalid on 2022/08/18 12:57
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (4) 1 608d 608d 0/24 auto-closed as invalid on 2021/05/04 09:30
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (2) 1 758d 758d 0/24 auto-closed as invalid on 2020/12/05 11:21
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (3) 2 665d 694d 0/24 auto-closed as invalid on 2021/03/08 10:39
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list (5) 1 458d 458d 0/24 auto-closed as invalid on 2021/10/01 10:16
upstream KCSAN: data-race in lookup_fast / shrink_dentry_list 3 816d 841d 0/24 auto-closed as invalid on 2020/10/08 14:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in lookup_fast / shrink_dentry_list

read-write to 0xffff88813132df00 of 4 bytes by task 1830 on cpu 1:
 d_shrink_del fs/dcache.c:448 [inline]
 shrink_dentry_list+0x16f/0x380 fs/dcache.c:1197
 prune_dcache_sb+0x72/0xa0 fs/dcache.c:1282
 super_cache_scan+0x24e/0x300 fs/super.c:104
 do_shrink_slab+0x2ad/0x600 mm/vmscan.c:831
 shrink_slab_memcg+0x1b9/0x440 mm/vmscan.c:900
 shrink_slab+0x5c/0x1c0 mm/vmscan.c:979
 shrink_node_memcgs+0x28a/0x470 mm/vmscan.c:3182
 shrink_node+0x8d5/0x1180 mm/vmscan.c:3304
 shrink_zones+0x2c1/0x5d0 mm/vmscan.c:3542
 do_try_to_free_pages+0x195/0x740 mm/vmscan.c:3601
 try_to_free_mem_cgroup_pages+0x1d1/0x420 mm/vmscan.c:3916
 reclaim_high+0xcd/0x110 mm/memcontrol.c:2335
 mem_cgroup_handle_over_high+0x75/0x120 mm/memcontrol.c:2520
 resume_user_mode_work include/linux/resume_user_mode.h:58 [inline]
 exit_to_user_mode_loop+0xa5/0x130 kernel/entry/common.c:169
 exit_to_user_mode_prepare kernel/entry/common.c:201 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x6a/0x90 kernel/entry/common.c:294
 do_syscall_64+0x37/0x70 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff88813132df00 of 4 bytes by task 18392 on cpu 0:
 d_revalidate fs/namei.c:855 [inline]
 lookup_fast+0xca/0x270 fs/namei.c:1634
 walk_component+0x3f/0x230 fs/namei.c:1989
 lookup_last fs/namei.c:2450 [inline]
 path_lookupat+0x11d/0x2b0 fs/namei.c:2474
 filename_lookup+0x133/0x310 fs/namei.c:2503
 user_path_at_empty+0x3e/0x110 fs/namei.c:2876
 user_path_at include/linux/namei.h:57 [inline]
 __do_sys_chdir fs/open.c:514 [inline]
 __se_sys_chdir+0x56/0x150 fs/open.c:508
 __x64_sys_chdir+0x1b/0x20 fs/open.c:508
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00280400 -> 0x00008000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 18392 Comm: syz-executor.2 Not tainted 6.0.0-rc1-syzkaller-00368-gf31c32efd57c-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/08/20 23:37 upstream f31c32efd57c 26a13b38 .config log report info KCSAN: data-race in lookup_fast / shrink_dentry_list
* Struck through repros no longer work on HEAD.