KCSAN: data-race in find_get_block_common / has_bh_in_lru

Status: moderation: reported on 2025/04/26 16:25
Subsystems: ext4 exfat
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+a4a07f98f629cf636e9e@syzkaller.appspotmail.com
First crash: 562d, last: 1d02h
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
36fe2ccc assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in find_get_block_common / has_bh_in_lru 2026/05/25 09:44 2026/05/25 09:44 2026/05/25 09:46 c69befb3
128f25fd assessment-kcsan Benign: ✅ Confident: ✅ ❓ KCSAN: data-race in find_get_block_common / has_bh_in_lru 2026/01/15 18:44 2026/01/15 18:44 2026/01/15 18:49 a9d6a792

Sample crash report:
==================================================================
BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru

read-write to 0xffff888237d27ce0 of 8 bytes by task 3532 on cpu 1:
 bh_lru_install fs/buffer.c:1234 [inline]
 find_get_block_common+0x457/0x870 fs/buffer.c:1299
 bdev_getblk+0x4b/0x370 fs/buffer.c:-1
 __bread_gfp+0x51/0x230 fs/buffer.c:1404
 sb_bread include/linux/buffer_head.h:377 [inline]
 fat_ent_bread+0xbe/0x1a0 fs/fat/fatent.c:109
 fat_ent_read+0x3b6/0x5c0 fs/fat/fatent.c:372
 fat_get_cluster+0x4f8/0x830 fs/fat/cache.c:261
 fat_bmap_cluster fs/fat/cache.c:294 [inline]
 fat_get_mapped_cluster+0xea/0x250 fs/fat/cache.c:315
 fat_bmap+0x250/0x280 fs/fat/cache.c:379
 __fat_get_block fs/fat/inode.c:130 [inline]
 fat_get_block+0xd3/0x5e0 fs/fat/inode.c:191
 block_read_full_folio+0x1eb/0x680 fs/buffer.c:2309
 do_mpage_readpage+0x29f/0xe80 fs/mpage.c:313
 mpage_read_folio+0xbd/0x130 fs/mpage.c:394
 fat_read_folio+0x1c/0x30 fs/fat/inode.c:206
 filemap_read_folio+0x2e/0x110 mm/filemap.c:2549
 filemap_fault+0x5a0/0xbd0 mm/filemap.c:3706
 __do_fault mm/memory.c:5677 [inline]
 do_read_fault mm/memory.c:6112 [inline]
 do_fault mm/memory.c:6246 [inline]
 do_pte_missing mm/memory.c:4778 [inline]
 handle_pte_fault mm/memory.c:6665 [inline]
 __handle_mm_fault mm/memory.c:6817 [inline]
 handle_mm_fault+0x19eb/0x3bd0 mm/memory.c:6984
 faultin_page mm/gup.c:1130 [inline]
 __get_user_pages+0xeaf/0x1930 mm/gup.c:1432
 populate_vma_page_range mm/gup.c:1868 [inline]
 __mm_populate+0x2a0/0x3c0 mm/gup.c:1971
 mm_populate include/linux/mm.h:4451 [inline]
 vm_mmap_pgoff+0x260/0x310 mm/util.c:586
 ksys_mmap_pgoff+0x250/0x310 mm/mmap.c:619
 x64_sys_call+0x23b3/0x2550 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237d27ce0 of 8 bytes by task 3543 on cpu 0:
 has_bh_in_lru+0x35/0x1f0 fs/buffer.c:1440
 smp_call_function_many_cond+0x2d1/0xbc0 kernel/smp.c:962
 on_each_cpu_cond_mask+0x35/0x50 kernel/smp.c:1195
 on_each_cpu_cond include/linux/smp.h:105 [inline]
 invalidate_bh_lrus+0x2a/0x30 fs/buffer.c:1449
 __buffer_migrate_folio+0x304/0x4c0 mm/migrate.c:991
 buffer_migrate_folio_norefs+0x31/0x40 mm/migrate.c:1058
 move_to_new_folio+0x90/0x350 mm/migrate.c:1125
 migrate_folio_move mm/migrate.c:1391 [inline]
 migrate_folios_move mm/migrate.c:1748 [inline]
 migrate_pages_batch+0x1175/0x1c90 mm/migrate.c:2004
 migrate_pages_sync mm/migrate.c:2061 [inline]
 migrate_pages+0x135b/0x1880 mm/migrate.c:2143
 compact_zone+0x1df4/0x2980 mm/compaction.c:2698
 compact_node mm/compaction.c:2945 [inline]
 compact_nodes mm/compaction.c:2967 [inline]
 sysctl_compaction_handler+0x39d/0x550 mm/compaction.c:3018
 proc_sys_call_handler+0x2ec/0x4a0 fs/proc/proc_sysctl.c:600
 proc_sys_write+0x22/0x30 fs/proc/proc_sysctl.c:626
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57a/0x990 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff888106f88ae0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3543 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
==================================================================
syz.3.14 (3543) used greatest stack depth: 10552 bytes left

Crashes (347):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/11/08 14:44 upstream fa4ad798f6f6 5cecaf1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/11/06 18:26 upstream f66469d9905b 5cecaf1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/11/04 10:25 upstream 05441d697f7f 5af5b6c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/30 11:03 upstream d89e1d186ec9 b498adee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/29 16:27 upstream c339f4010dea b1d00f76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/27 08:34 upstream d135ab453a74 168cb7a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/24 06:48 upstream 734bef548a96 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/18 15:27 upstream 32c52ec87d62 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/14 04:28 upstream ca3e345926b0 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/13 07:30 upstream 24a19b953e2a 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/09 09:36 upstream af32da41b032 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/06 12:53 upstream 2c3418fffa9d f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/03 12:44 upstream e767a4ea70a3 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/10/01 20:44 upstream d24e8ac715de f5cdae2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/28 14:56 upstream 72d3fcf802c4 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/22 23:33 upstream c4e9f74da438 5207b90e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/19 15:57 upstream 40288c9206c1 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/16 11:55 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/15 19:39 upstream f6e7b42bf05b 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/11 14:21 upstream 08df884136f1 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/07 02:28 upstream 88405f0ad1d5 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/09/01 14:38 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/30 15:55 upstream 08dbfad3f504 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/25 14:31 upstream 66498c75b4f8 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/18 03:14 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/17 05:51 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/14 05:51 upstream 3aa1dcaa4f6f b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/12 04:35 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/11 16:46 upstream f5bbbfec59b4 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/11 13:05 upstream d58772d8520c 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/08 06:00 upstream bcc44b6785f2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/08 02:15 upstream bcc44b6785f2 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/05 21:16 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/08/02 04:57 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/29 17:55 upstream fc02acf6ac0c 6ef5c1e2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/25 20:07 upstream 0ce37745d4bf 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/15 23:04 upstream 58717b2a1365 27a8bd60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/12 16:02 upstream 44696aa3a489 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/11 11:43 upstream 61c03dfde854 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/08 13:48 upstream 0e35b9b6ec0f 88a4b44c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/05 03:58 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/07/03 11:43 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/30 22:20 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/27 04:20 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/25 02:29 upstream ab9de95c9cf9 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/22 08:05 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/07 15:12 upstream 979c294509f9 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/06/06 19:59 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/05/24 09:21 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/03/09 21:55 upstream 1f318b96cc84 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2026/01/13 10:56 upstream b71e635feefc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
2025/04/26 16:25 upstream f1a3944c860b c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in find_get_block_common / has_bh_in_lru
* Struck through repros no longer work on HEAD.