syzbot


KCSAN: data-race in find_get_block_common / has_bh_in_lru

Status: moderation: reported on 2025/04/26 16:25
Subsystems: ext4
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+a4a07f98f629cf636e9e@syzkaller.appspotmail.com
First crash: 442d, last: 2h38m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
36fe2ccc-f18f-4803-bf55-c0bbce5a1b1f assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in find_get_block_common / has_bh_in_lru 2026/05/25 09:44 2026/05/25 09:44 2026/05/25 09:46 c69befb30ac10e158cc9d1557b508ee3f0eca1de

			
		
128f25fd-1282-4377-92a5-96cbe8babeef assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in find_get_block_common / has_bh_in_lru 2026/01/15 18:44 2026/01/15 18:44 2026/01/15 18:49 a9d6a79219801d2130df3b1a792c57f0e5428e9f

			
		

Sample crash report:
loop4: detected capacity change from 0 to 512
EXT4-fs: Ignoring removed nobh option
==================================================================
BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru

read-write to 0xffff888237c275e0 of 8 bytes by task 31612 on cpu 0:
 bh_lru_install fs/buffer.c:1323 [inline]
 find_get_block_common+0x45c/0x870 fs/buffer.c:1388
 __getblk_slow fs/buffer.c:-1 [inline]
 bdev_getblk+0x310/0x3c0 fs/buffer.c:1439
 ext4_sb_breadahead_unmovable+0x45/0x170 fs/ext4/super.c:280
 ext4_group_desc_init+0x5e4/0x1560 fs/ext4/super.c:4929
 __ext4_fill_super fs/ext4/super.c:5445 [inline]
 ext4_fill_super+0x1eb8/0x3760 fs/ext4/super.c:5828
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1634
 get_tree_bdev+0x1f/0x30 fs/super.c:1657
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5860
 vfs_get_tree+0x57/0x1d0 fs/super.c:1694
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3765 [inline]
 do_new_mount+0x288/0x8d0 fs/namespace.c:3841
 path_mount+0x4ad/0xb90 fs/namespace.c:4161
 do_mount fs/namespace.c:4174 [inline]
 __do_sys_mount fs/namespace.c:4390 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4367
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4367
 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c275e0 of 8 bytes by task 31614 on cpu 1:
 has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1529
 smp_call_function_many_cond+0x297/0xb60 kernel/smp.c:836
 on_each_cpu_cond_mask+0x3c/0x80 kernel/smp.c:1057
 on_each_cpu_cond include/linux/smp.h:106 [inline]
 invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1538
 kill_bdev block/bdev.c:90 [inline]
 set_blocksize+0x1e3/0x270 block/bdev.c:207
 sb_set_blocksize+0x93/0x170 block/bdev.c:240
 sb_min_blocksize+0x53/0x60 block/bdev.c:255
 ext4_load_super fs/ext4/super.c:5137 [inline]
 __ext4_fill_super fs/ext4/super.c:5358 [inline]
 ext4_fill_super+0x39c/0x3760 fs/ext4/super.c:5828
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1634
 get_tree_bdev+0x1f/0x30 fs/super.c:1657
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5860
 vfs_get_tree+0x57/0x1d0 fs/super.c:1694
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3765 [inline]
 do_new_mount+0x288/0x8d0 fs/namespace.c:3841
 path_mount+0x4ad/0xb90 fs/namespace.c:4161
 do_mount fs/namespace.c:4174 [inline]
 __do_sys_mount fs/namespace.c:4390 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4367
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4367
 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff88811acd97e0 -> 0xffff88811acba2a0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 31614 Comm: syz.4.7210 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================
EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
EXT4-fs (loop4): 1 truncate cleaned up
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.

Crashes (310):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/12 16:02 upstream 44696aa3a489 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/11 11:43 upstream 61c03dfde854 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/08 13:48 upstream 0e35b9b6ec0f 88a4b44c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/05 03:58 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/03 11:43 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/30 22:20 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/27 04:20 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/25 02:29 upstream ab9de95c9cf9 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/22 08:05 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/07 15:12 upstream 979c294509f9 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/06 19:59 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/02 16:02 upstream 6f3ed7fec72f 62fe1528 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/01 05:07 upstream e43ffb69e043 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/30 14:23 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/28 04:16 upstream eb3f4b7426cf 4c36e7e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/27 20:29 upstream eb3f4b7426cf 8777bdc3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/24 09:21 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/23 21:40 upstream eed108edc117 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/19 04:41 upstream 4d3a2a466b8d 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/08 17:07 upstream 917719c412c4 b2988c17 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/08 07:57 upstream fcee7d82f27d 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/05 14:11 upstream a293ec25d59d 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/05 02:28 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/01 18:40 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/27 02:26 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/25 20:35 upstream 897d54018cc9 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/24 07:36 upstream 45dcf5e28813 9cfb3ca7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/22 01:30 upstream 4ee64205ffaa 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/21 00:06 upstream a5d1079c28a5 e65da4ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/16 10:43 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/14 13:37 upstream d60bc1401583 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/12 13:26 upstream f5459048c38a 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/08 12:54 upstream 3036cd0d3328 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/05 05:59 upstream 3aae9383f42f 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/02 18:15 upstream 5619b098e2fb 91bc79b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/04/01 01:31 upstream dbf00d8d23b4 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/30 11:54 upstream 7aaa8047eafd dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/21 06:47 upstream 42bddab0563f 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/20 06:54 upstream 8a30aeb0d1b4 2f245add .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/11 09:22 upstream b4f0dd314b39 86914af9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/09 21:55 upstream 1f318b96cc84 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/05 20:33 upstream c107785c7e8d d20b04c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/04 20:58 upstream 0031c06807cf e6b6b96b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/02 06:41 upstream 39c633261414 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/28 22:10 upstream 2f9339c052bd 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/26 09:43 upstream d9d32e5bd5a4 e0f78d93 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/24 20:38 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/23 18:18 upstream 6de23f81a5e0 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/17 19:36 upstream d295082ea672 06ec4f7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/17 07:53 upstream 970296997869 e439b951 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/15 11:09 upstream ca4ee40bf13d 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/14 14:34 upstream 770aaedb461a 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/02/14 04:25 upstream cee73b1e840c 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/01/13 10:56 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/04/26 16:25 upstream f1a3944c860b c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
* Struck through repros no longer work on HEAD.