syzbot


KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (10)

Status: auto-obsoleted due to no activity on 2024/08/16 03:23
Subsystems: block
[Documentation on labels]
Reported-by: syzbot+540424cf2117642cb3be@syzkaller.appspotmail.com
First crash: 67d, last: 67d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (5) block 1 706d 706d 0/28 auto-obsoleted due to no activity on 2022/11/15 22:27
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (9) block 10 203d 285d 0/28 auto-obsoleted due to no activity on 2024/04/02 12:09
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue block 1 1038d 1038d 0/28 auto-closed as invalid on 2021/12/18 22:19
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (6) block 2 653d 671d 0/28 auto-obsoleted due to no activity on 2023/01/16 12:50
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (7) block 1 505d 505d 0/28 auto-obsoleted due to no activity on 2023/06/05 14:18
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (3) block 1 919d 919d 0/28 auto-closed as invalid on 2022/04/17 09:14
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (8) block 7 369d 433d 0/28 auto-obsoleted due to no activity on 2023/10/19 10:00
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (11) block 1 32d 32d 0/28 moderation: reported on 2024/08/16 19:07
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (4) block 11 757d 878d 0/28 auto-closed as invalid on 2022/09/26 17:17
upstream KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue (2) block 4 969d 979d 0/28 auto-closed as invalid on 2022/02/26 09:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue

read-write to 0xffff888101248a24 of 4 bytes by task 10351 on cpu 1:
 __blk_mq_unfreeze_queue block/blk-mq.c:184 [inline]
 blk_mq_unfreeze_queue+0x38/0xc0 block/blk-mq.c:195
 loop_set_status+0x414/0x550 drivers/block/loop.c:1329
 lo_ioctl+0x892/0x1330
 blkdev_ioctl+0x35f/0x450 block/ioctl.c:676
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xd3/0x150 fs/ioctl.c:893
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:893
 x64_sys_call+0x1581/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888101248a24 of 4 bytes by task 10360 on cpu 0:
 __bio_queue_enter+0x164/0x500 block/blk-core.c:359
 bio_queue_enter block/blk.h:73 [inline]
 blk_mq_submit_bio+0x1a5/0xd90 block/blk-mq.c:2965
 __submit_bio+0xf2/0x470 block/blk-core.c:627
 __submit_bio_noacct_mq block/blk-core.c:708 [inline]
 submit_bio_noacct_nocheck+0x295/0x6e0 block/blk-core.c:737
 submit_bio_noacct+0x6b9/0x870 block/blk-core.c:848
 submit_bio+0x218/0x230 block/blk-core.c:890
 submit_bh_wbc+0x2de/0x320 fs/buffer.c:2827
 submit_bh+0x1e/0x30 fs/buffer.c:2832
 __ext4_read_bh fs/ext4/super.c:175 [inline]
 ext4_read_bh_nowait fs/ext4/super.c:187 [inline]
 ext4_sb_breadahead_unmovable+0x169/0x190 fs/ext4/super.c:269
 __ext4_get_inode_loc+0x6d4/0x910 fs/ext4/inode.c:4445
 ext4_get_inode_loc+0x65/0xe0 fs/ext4/inode.c:4490
 ext4_xattr_ibody_get+0x99/0x430 fs/ext4/xattr.c:647
 ext4_xattr_get+0xd4/0x580 fs/ext4/xattr.c:711
 ext4_xattr_security_get+0x32/0x40 fs/ext4/xattr_security.c:20
 __vfs_getxattr+0x29f/0x2b0 fs/xattr.c:423
 cap_inode_need_killpriv+0x2e/0x50 security/commoncap.c:302
 security_inode_need_killpriv+0x3a/0x70 security/security.c:2504
 dentry_needs_remove_privs fs/inode.c:2015 [inline]
 file_remove_privs_flags+0x144/0x340 fs/inode.c:2046
 file_modified_flags+0x38/0x340 fs/inode.c:2167
 file_modified+0x17/0x20 fs/inode.c:2196
 ext4_write_checks fs/ext4/file.c:279 [inline]
 ext4_buffered_write_iter+0x1d8/0x380 fs/ext4/file.c:295
 ext4_file_write_iter+0x29f/0xe30
 new_sync_write fs/read_write.c:497 [inline]
 vfs_write+0x78f/0x900 fs/read_write.c:590
 ksys_write+0xeb/0x1b0 fs/read_write.c:643
 __do_sys_write fs/read_write.c:655 [inline]
 __se_sys_write fs/read_write.c:652 [inline]
 __x64_sys_write+0x42/0x50 fs/read_write.c:652
 x64_sys_call+0x27ef/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000001 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10360 Comm: syz.2.2073 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
==================================================================
EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #18: comm syz.2.2073: corrupted in-inode xattr: bad magic number in in-inode xattr

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/12 03:22 upstream 8a18fda0febb eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue
* Struck through repros no longer work on HEAD.