syzbot


KCSAN: data-race in _find_next_bit.constprop.0 / ext4_free_inode

Status: auto-closed as invalid on 2020/07/16 13:10
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+b43f633eb9f85e0a8ec4@syzkaller.appspotmail.com
First crash: 1533d, last: 1408d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in _find_next_bit.constprop.0 / ext4_free_inode

write to 0xffff8881247023b0 of 8 bytes by task 9344 on cpu 0:
 instrument_write include/linux/instrumented.h:42 [inline]
 __test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:85 [inline]
 __test_and_clear_bit_le include/asm-generic/bitops/le.h:95 [inline]
 ext4_free_inode+0x610/0xaa0 fs/ext4/ialloc.c:310
 ext4_evict_inode+0x869/0xa30 fs/ext4/inode.c:314
 evict+0x238/0x3f0 fs/inode.c:576
 iput_final fs/inode.c:1572 [inline]
 iput+0x36a/0x4d0 fs/inode.c:1598
 dentry_unlink_inode+0x272/0x2e0 fs/dcache.c:374
 d_delete fs/dcache.c:2451 [inline]
 d_delete+0xca/0xe0 fs/dcache.c:2440
 vfs_rmdir fs/namei.c:3702 [inline]
 vfs_rmdir+0x2f1/0x310 fs/namei.c:3667
 do_rmdir+0x2e9/0x320 fs/namei.c:3750
 __do_sys_rmdir fs/namei.c:3768 [inline]
 __se_sys_rmdir fs/namei.c:3766 [inline]
 __x64_sys_rmdir+0x2c/0x40 fs/namei.c:3766
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8881247023b0 of 8 bytes by task 8921 on cpu 1:
 _find_next_bit.constprop.0+0x61/0x160 lib/find_bit.c:39
 find_next_zero_bit+0x35/0x50 lib/find_bit.c:87
 find_next_zero_bit_le include/asm-generic/bitops/le.h:15 [inline]
 find_inode_bit.isra.0+0xa1/0x330 fs/ext4/ialloc.c:718
 __ext4_new_inode+0xd7b/0x3020 fs/ext4/ialloc.c:927
 ext4_mkdir+0x271/0x850 fs/ext4/namei.c:2790
 vfs_mkdir+0x281/0x3b0 fs/namei.c:3625
 do_mkdirat+0x1b5/0x200 fs/namei.c:3648
 __do_sys_mkdir fs/namei.c:3664 [inline]
 __se_sys_mkdir fs/namei.c:3662 [inline]
 __x64_sys_mkdir+0x3d/0x50 fs/namei.c:3662
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8921 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (6881):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/18 13:09 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3ea11d3f .config console log report ci2-upstream-kcsan-gce
2020/06/18 11:53 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 10:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 09:24 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 08:08 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 06:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 05:34 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 04:33 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 03:18 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 01:51 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/18 00:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/17 23:47 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 d45a4d69 .config console log report ci2-upstream-kcsan-gce
2020/06/17 22:34 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 21:55 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 20:52 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 19:51 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 18:17 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 16:05 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 14:51 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 13:30 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 12:07 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/06/17 10:27 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 08:50 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 07:44 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 05:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 04:40 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 03:17 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 01:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/17 00:22 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/16 23:45 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b9f3810b .config console log report ci2-upstream-kcsan-gce
2020/06/16 22:44 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 21:26 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 20:15 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 18:10 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 16:58 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 15:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 14:48 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 13:47 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 12:39 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 11:09 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4ea9d964 .config console log report ci2-upstream-kcsan-gce
2020/06/16 10:04 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 baca2611 .config console log report ci2-upstream-kcsan-gce
2020/02/18 14:56 https://github.com/google/ktsan.git kcsan b12d66a6c34f 012fbc32 .config console log report ci2-upstream-kcsan-gce
2020/02/14 15:02 https://github.com/google/ktsan.git kcsan b12d66a6c34f 5d7b90f1 .config console log report ci2-upstream-kcsan-gce
2020/02/14 01:48 https://github.com/google/ktsan.git kcsan b12d66a6c34f 5d7b90f1 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.