syzbot


KCSAN: data-race in data_alloc / data_push_tail (3)

Status: moderation: reported on 2024/09/08 06:11
Subsystems: block
[Documentation on labels]
Reported-by: syzbot+faa791a3223590f7f155@syzkaller.appspotmail.com
First crash: 294d, last: 6d14h
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in data_alloc / data_push_tail (2) batman 44 340d 484d 0/29 auto-obsoleted due to no activity on 2024/08/28 06:32
upstream KCSAN: data-race in data_alloc / data_push_tail ext4 94 795d 1258d 0/29 auto-obsoleted due to no activity on 2023/05/31 17:30

Sample crash report:
EXT4-fs: Ignoring removed orlov option
EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
==================================================================
BUG: KCSAN: data-race in data_alloc / data_push_tail

write to 0xffffffff88e59af0 of 8 bytes by task 8911 on cpu 0:
 data_alloc+0x203/0x2b0 kernel/printk/printk_ringbuffer.c:1082
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 tbf_change+0xb80/0xcd0 net/sched/sch_tbf.c:428
 tbf_init+0x72/0x90 net/sched/sch_tbf.c:497
 qdisc_create+0x591/0x9e0 net/sched/sch_api.c:1333
 __tc_modify_qdisc net/sched/sch_api.c:1758 [inline]
 tc_modify_qdisc+0xe2c/0x1380 net/sched/sch_api.c:1822
 rtnetlink_rcv_msg+0x65a/0x6d0 net/core/rtnetlink.c:6953
 netlink_rcv_skb+0x120/0x220 net/netlink/af_netlink.c:2534
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6971
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0x59e/0x670 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1883
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg+0x142/0x180 net/socket.c:727
 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2566
 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2620
 __sys_sendmsg net/socket.c:2652 [inline]
 __do_sys_sendmsg net/socket.c:2657 [inline]
 __se_sys_sendmsg net/socket.c:2655 [inline]
 __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2655
 x64_sys_call+0x2999/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff88e59af0 of 8 bytes by task 8907 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 __ext4_msg+0x135/0x1a0 fs/ext4/super.c:983
 ext4_check_quota_consistency fs/ext4/super.c:-1 [inline]
 ext4_check_opt_consistency+0xb05/0xb10 fs/ext4/super.c:2802
 __ext4_fill_super fs/ext4/super.c:5300 [inline]
 ext4_fill_super+0x192c/0x34e0 fs/ext4/super.c:5724
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1681
 get_tree_bdev+0x1f/0x30 fs/super.c:1704
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5756
 vfs_get_tree+0x54/0x1d0 fs/super.c:1804
 do_new_mount+0x207/0x680 fs/namespace.c:3885
 path_mount+0x4a4/0xb20 fs/namespace.c:4209
 do_mount fs/namespace.c:4222 [inline]
 __do_sys_mount fs/namespace.c:4433 [inline]
 __se_sys_mount+0x28f/0x2e0 fs/namespace.c:4410
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4410
 x64_sys_call+0xd36/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000100002186 -> 0x0000000100002dc4

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 8907 Comm: syz.2.9314 Tainted: G        W           6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================
EXT4-fs (loop2): bad geometry: block count 16777280 exceeds size of device (64 blocks)
__nla_validate_parse: 15 callbacks suppressed
netlink: 60 bytes leftover after parsing attributes in process `syz.2.9314'.
loop2: detected capacity change from 0 to 1024

Crashes (31):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/23 11:45 upstream 86731a2a651e d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/06/20 23:22 upstream 75f5f23f8787 804b3919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/05/29 06:33 upstream 90b83efa6701 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/05/21 03:08 upstream b36ddb9210e6 b47f9e02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/05/01 04:01 upstream 7a13c14ee59d ce7952f4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/04/30 09:06 upstream ca91b9500108 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/04/29 04:17 upstream f15d97df5afa aeb6ec69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/04/28 05:56 upstream b4432656b36e c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/04/18 09:31 upstream b5c6891b2c5b 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/04/10 22:11 upstream 2eb959eeecc6 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/24 15:45 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/20 03:04 upstream a7f2e10ecd8f e20d7b13 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/13 15:04 upstream b7f94fcf5546 44be8b44 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/08 04:59 upstream 21e4543a2e2f 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/06 15:50 upstream 848e07631744 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/03/02 10:46 upstream ece144f151ac c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/02/28 19:25 upstream 76544811c850 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/02/25 20:55 upstream 2a1944bff549 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/02/20 08:30 upstream 87a132e73910 50668798 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/02/12 23:24 upstream 4dc1d1bec898 b27c2402 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/02/06 19:11 upstream 92514ef226f5 8002dd28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/01/08 08:35 upstream 09a0fa92e5b4 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/01/06 00:32 upstream 9244696b34f2 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2025/01/03 10:02 upstream 0bc21e701a6f d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/12/21 04:03 upstream e9b8ffafd20a d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/12/07 14:13 upstream b5f217084ab3 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/10/31 20:58 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/09/30 07:01 upstream 9852d85ec9d4 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/09/19 04:05 upstream 4a39ac5b7d62 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/09/17 10:28 upstream a430d95c5efa c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
2024/09/08 06:10 upstream d1f2d51b711a 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / data_push_tail
* Struck through repros no longer work on HEAD.