syzbot


KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event (2)

Status: moderation: reported on 2024/10/13 04:50
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+b843bae81ed3042a49b9@syzkaller.appspotmail.com
First crash: 354d, last: 3d07h
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event fs 6 242 400d 664d 0/29 auto-obsoleted due to no activity on 2024/10/01 14:35

Sample crash report:
loop4: detected capacity change from 0 to 512
==================================================================
BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event

write to 0xffff8881049aea44 of 4 bytes by task 3291 on cpu 1:
 fsnotify_detach_mark+0xba/0x160 fs/notify/mark.c:554
 fsnotify_destroy_mark+0x70/0x150 fs/notify/mark.c:596
 __do_sys_inotify_rm_watch fs/notify/inotify/inotify_user.c:805 [inline]
 __se_sys_inotify_rm_watch+0xe8/0x170 fs/notify/inotify/inotify_user.c:786
 __x64_sys_inotify_rm_watch+0x31/0x40 fs/notify/inotify/inotify_user.c:786
 x64_sys_call+0x2e86/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:256
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881049aea44 of 4 bytes by task 3587 on cpu 0:
 inotify_handle_inode_event+0x34e/0x3d0 fs/notify/inotify/inotify_fsnotify.c:132
 fsnotify_handle_inode_event+0x1bd/0x220 fs/notify/fsnotify.c:321
 fsnotify_handle_event fs/notify/fsnotify.c:376 [inline]
 send_to_group fs/notify/fsnotify.c:424 [inline]
 fsnotify+0x13c9/0x14b0 fs/notify/fsnotify.c:641
 __fsnotify_parent+0x2ed/0x330 fs/notify/fsnotify.c:287
 fsnotify_parent include/linux/fsnotify.h:96 [inline]
 fsnotify_path include/linux/fsnotify.h:113 [inline]
 fsnotify_file include/linux/fsnotify.h:127 [inline]
 fsnotify_close include/linux/fsnotify.h:457 [inline]
 __fput+0x1de/0x650 fs/file_table.c:454
 fput_close_sync+0x6e/0x120 fs/file_table.c:573
 __do_sys_close fs/open.c:1587 [inline]
 __se_sys_close fs/open.c:1572 [inline]
 __x64_sys_close+0x56/0xf0 fs/open.c:1572
 x64_sys_call+0x2738/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:4
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000003 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3587 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================
EXT4-fs: Ignoring removed mblk_io_submit option
EXT4-fs: Ignoring removed nomblk_io_submit option
EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.37: Allocating blocks 41-42 which overlap fs metadata
EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.37: Allocating blocks 41-42 which overlap fs metadata
EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.37: Failed to acquire dquot type 1
EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.37: corrupted inode contents
EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.37: mark_inode_dirty error
EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.37: corrupted inode contents
EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.37: mark_inode_dirty error
EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.37: corrupted inode contents
EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.37: corrupted inode contents
EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.37: mark_inode_dirty error
EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
EXT4-fs (loop4): 1 truncate cleaned up
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
syz.4.37 (3587) used greatest stack depth: 10032 bytes left

Crashes (41):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/29 05:27 upstream 8f9736633f8c 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/09/03 03:15 upstream e6b9dce0aeeb 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/08/25 03:14 upstream 69fd6b99b8f8 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/08/22 15:31 upstream 3957a5720157 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/08/19 05:48 upstream be48bcf004f9 523f460e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/08/11 02:55 upstream 8f5ae30d69d7 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/07/21 03:13 upstream 89be9a83ccf1 7117feec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/07/20 16:21 upstream f4a40a4282f4 7117feec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/07/16 09:40 upstream 155a3c003e55 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/07/06 00:32 upstream 05df91921da6 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/06/29 10:01 upstream ded779017ad7 fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/06/13 22:06 upstream 02adc1490e6d 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/06/05 11:47 upstream 1af80d00e1e0 6b6b5f21 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/06/03 01:21 upstream fe4281644c62 a30356b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/05/19 19:39 upstream a5806cd506af b84f0537 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/05/15 16:57 upstream 088d13246a46 cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/05/10 01:36 upstream 9c69f8884904 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/04/26 22:34 upstream 5bc1018675ec c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/03/23 01:53 upstream 183601b78a9b c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/03/21 15:31 upstream b3ee1e460951 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/03/19 20:02 upstream 81e4f8d68c66 e20d7b13 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/03/17 09:12 upstream 4701f33a1070 948c34e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/03/05 10:34 upstream 48a5eed9ad58 60f5d8d9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/02/17 22:52 upstream 2408a807bfc3 429ea007 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/02/06 15:16 upstream 92514ef226f5 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/25 04:15 upstream b46c89c08f41 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/18 18:23 upstream 595523945be0 f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/11 09:51 upstream 77a903cd8e5a 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2025/01/06 15:34 upstream 9d89551994a4 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/29 23:46 upstream 4099a71718b0 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/23 06:18 upstream bcde95ce32b6 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/20 20:42 upstream e9b8ffafd20a 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/12 09:10 upstream 231825b2e1ff 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/12/07 00:11 upstream 9a6e8c7c3a02 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/26 05:34 upstream 2c22dc1ee3a1 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/16 14:42 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/11/03 19:27 upstream a33ab3f94f51 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/22 16:45 upstream d12937763990 a93682b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/20 17:46 upstream 715ca9dd687f cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/16 14:19 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
2024/10/13 04:49 upstream 7234e2ea0edd 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
* Struck through repros no longer work on HEAD.