syzbot


KCSAN: data-race in find_get_block_common / has_bh_in_lru

Status: moderation: reported on 2025/04/26 16:25
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+a4a07f98f629cf636e9e@syzkaller.appspotmail.com
First crash: 188d, last: 5h46m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru

read-write to 0xffff888237c26fd0 of 8 bytes by task 3501 on cpu 0:
 bh_lru_install fs/buffer.c:1345 [inline]
 find_get_block_common+0x4f0/0x960 fs/buffer.c:1410
 __find_get_block_nonatomic fs/buffer.c:1429 [inline]
 bdev_getblk+0x83/0x3b0 fs/buffer.c:1453
 __bread_gfp+0x51/0x250 fs/buffer.c:1515
 sb_bread include/linux/buffer_head.h:346 [inline]
 fat12_ent_bread+0xd0/0x380 fs/fat/fatent.c:77
 fat_ent_read+0x3b3/0x5c0 fs/fat/fatent.c:368
 fat_get_cluster+0x4b2/0x7b0 fs/fat/cache.c:266
 fat_bmap_cluster fs/fat/cache.c:299 [inline]
 fat_get_mapped_cluster+0xe4/0x240 fs/fat/cache.c:320
 fat_bmap+0x254/0x280 fs/fat/cache.c:384
 __fat_get_block fs/fat/inode.c:128 [inline]
 fat_get_block+0xd3/0x5e0 fs/fat/inode.c:189
 get_more_blocks fs/direct-io.c:648 [inline]
 do_direct_IO fs/direct-io.c:936 [inline]
 __blockdev_direct_IO+0xcec/0x1d80 fs/direct-io.c:1243
 blockdev_direct_IO include/linux/fs.h:3509 [inline]
 fat_direct_IO+0x102/0x1d0 fs/fat/inode.c:283
 generic_file_read_iter+0x21b/0x330 mm/filemap.c:2917
 copy_splice_read+0x442/0x660 fs/splice.c:363
 do_splice_read fs/splice.c:981 [inline]
 splice_direct_to_actor+0x290/0x680 fs/splice.c:1086
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0xda/0x150 fs/splice.c:1230
 do_sendfile+0x380/0x650 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417
 x64_sys_call+0x2bb4/0x3000 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c26fd0 of 8 bytes by task 3502 on cpu 1:
 has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1551
 smp_call_function_many_cond+0x2a9/0xc60 kernel/smp.c:821
 on_each_cpu_cond_mask+0x3c/0x80 kernel/smp.c:1043
 on_each_cpu_cond include/linux/smp.h:105 [inline]
 invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1560
 kill_bdev block/bdev.c:90 [inline]
 set_blocksize+0x24f/0x310 block/bdev.c:207
 sb_set_blocksize+0x7a/0x100 block/bdev.c:224
 fat_fill_super+0xa09/0x1ce0 fs/fat/inode.c:1631
 vfat_fill_super+0x24/0x30 fs/fat/namei_vfat.c:1197
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1691
 get_tree_bdev+0x1f/0x30 fs/super.c:1714
 vfat_get_tree+0x1c/0x30 fs/fat/namei_vfat.c:1202
 vfs_get_tree+0x57/0x1d0 fs/super.c:1751
 fc_mount fs/namespace.c:1208 [inline]
 do_new_mount_fc fs/namespace.c:3651 [inline]
 do_new_mount+0x24d/0x660 fs/namespace.c:3727
 path_mount+0x4a5/0xb70 fs/namespace.c:4037
 do_mount fs/namespace.c:4050 [inline]
 __do_sys_mount fs/namespace.c:4238 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4215
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4215
 x64_sys_call+0x2b51/0x3000 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff8881057b8d68

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3502 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
==================================================================
FAT-fs (loop4): Directory bread(block 32) failed
FAT-fs (loop4): Directory bread(block 33) failed
FAT-fs (loop4): Directory bread(block 34) failed
FAT-fs (loop4): Directory bread(block 35) failed
FAT-fs (loop4): Directory bread(block 36) failed
FAT-fs (loop4): Directory bread(block 37) failed
FAT-fs (loop4): Directory bread(block 38) failed
FAT-fs (loop4): Directory bread(block 39) failed
FAT-fs (loop4): Directory bread(block 40) failed
FAT-fs (loop4): Directory bread(block 41) failed

Crashes (173):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/31 12:40 upstream d127176862a9 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/30 10:21 upstream e53642b87a4f fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/27 03:41 upstream dbfc6422a34d c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/25 06:34 upstream d2818517e348 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/23 22:48 upstream 266ee584e55e c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/23 10:20 upstream 43e9ad0c55a3 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/23 01:38 upstream dd72c8fcf6d3 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/22 07:22 upstream 552c50713f27 252fbbad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/20 05:54 upstream 211ddde0823f 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/19 18:53 upstream d9043c79ba68 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/18 06:49 upstream cf1ea8854e4f 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/16 19:17 upstream 98ac9cc4b445 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/16 09:37 upstream 7ea30958b305 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/15 21:12 upstream 1f4a222b0e33 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/15 06:40 upstream 9b332cece987 b6605ba8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/13 14:37 upstream 3a8660878839 b6605ba8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/13 03:39 upstream 8765f467912f ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/10 21:18 upstream 917167ed1211 ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/10 18:09 upstream 5472d60c129f ff1712fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/09 10:39 upstream cd5a0afbdf80 7e2882b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/08 16:46 upstream 0d97f2067c16 7e2882b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/06 15:57 upstream fd94619c4336 91305dbe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/05 13:28 upstream 6093a688a07d 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/04 14:58 upstream cbf33b8e0b36 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/10/01 16:38 upstream 50c19e20ed2e a1859138 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/29 15:41 upstream e5f0a698b34e 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/29 00:58 upstream 8f9736633f8c 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/27 04:22 upstream 083fc6d7fa0d 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/25 17:52 upstream bf40f4b87761 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/23 02:03 upstream cec1e6e5d1ab 0ac7291c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/22 10:07 upstream 07e27ad16399 0ac7291c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/22 04:18 upstream 2d5bd41a4505 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/20 21:20 upstream 3b08f56fbbb9 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/20 13:57 upstream cd89d487374c 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/19 05:31 upstream cbf658dd0941 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/18 08:45 upstream 8b789f2b7602 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/17 13:30 upstream 5aca7966d2a7 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/15 12:41 upstream f83ec76bf285 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/14 13:20 upstream f83a4f2a4d8c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/11 23:57 upstream 02ffd6f89c50 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/11 03:00 upstream 7aac71907bde fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/10 07:17 upstream 9dd1835ecda5 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/09 00:58 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/09/08 13:26 upstream 76eeb9b8de98 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/04/26 16:25 upstream f1a3944c860b c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
* Struck through repros no longer work on HEAD.