KCSAN: data-race in clear_inode / other_inode_match

Status: auto-closed as invalid on 2020/05/24 17:33
Subsystems: ext4
[Documentation on labels]
First crash: 2546d, last: 2404d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in clear_inode / other_inode_match

write to 0xffff888129a2ecf0 of 8 bytes by task 7867 on cpu 0:
 clear_inode+0x145/0x1a0 fs/inode.c:537
 ext4_clear_inode+0x2f/0x100 fs/ext4/super.c:1218
 ext4_free_inode+0x117/0xa50 fs/ext4/ialloc.c:277
 ext4_evict_inode+0x869/0xa40 fs/ext4/inode.c:315
 evict+0x238/0x3f0 fs/inode.c:575
 iput_final fs/inode.c:1571 [inline]
 iput+0x36a/0x4d0 fs/inode.c:1597
 dentry_unlink_inode+0x272/0x2e0 fs/dcache.c:374
 d_delete fs/dcache.c:2451 [inline]
 d_delete+0xca/0xe0 fs/dcache.c:2440
 vfs_rmdir fs/namei.c:3966 [inline]
 vfs_rmdir+0x2d3/0x2f0 fs/namei.c:3931
 do_rmdir+0x2e9/0x320 fs/namei.c:4014
 __do_sys_rmdir fs/namei.c:4032 [inline]
 __se_sys_rmdir fs/namei.c:4030 [inline]
 __x64_sys_rmdir+0x2c/0x40 fs/namei.c:4030
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888129a2ecf0 of 8 bytes by task 17970 on cpu 1:
 other_inode_match+0x6a/0x570 fs/ext4/inode.c:4849
 find_inode_nowait+0x12f/0x160 fs/inode.c:1445
 ext4_update_other_inodes_time fs/ext4/inode.c:4897 [inline]
 ext4_do_update_inode fs/ext4/inode.c:5023 [inline]
 ext4_mark_iloc_dirty+0x123c/0x1500 fs/ext4/inode.c:5578
 ext4_mark_inode_dirty+0xe6/0x420 fs/ext4/inode.c:5771
 add_dirent_to_buf+0x263/0x390 fs/ext4/namei.c:2030
 ext4_add_entry+0x37c/0x8e0 fs/ext4/namei.c:2233
 ext4_add_nondir+0x59/0x170 fs/ext4/namei.c:2569
 ext4_symlink+0x63e/0x9e0 fs/ext4/namei.c:3356
 vfs_symlink fs/namei.c:4201 [inline]
 vfs_symlink+0x216/0x310 fs/namei.c:4187
 do_symlinkat+0x1ac/0x1e0 fs/namei.c:4228
 __do_sys_symlink fs/namei.c:4247 [inline]
 __se_sys_symlink fs/namei.c:4245 [inline]
 __x64_sys_symlink+0x3c/0x50 fs/namei.c:4245
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 17970 Comm: syz-executor.4 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (22):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/15 17:25 https://github.com/google/ktsan.git kcsan 941e0d917bbf 749688d2 .config console log report ci2-upstream-kcsan-gce
2020/03/07 09:51 https://github.com/google/ktsan.git kcsan 941e0d917bbf 2e9971bb .config console log report ci2-upstream-kcsan-gce
2020/03/06 13:18 https://github.com/google/ktsan.git kcsan 766d004d1b85 7fb694ef .config console log report ci2-upstream-kcsan-gce
2020/02/02 12:55 https://github.com/google/ktsan.git kcsan 245a43005292 93e5e335 .config console log report ci2-upstream-kcsan-gce
2020/02/01 10:49 https://github.com/google/ktsan.git kcsan 245a43005292 326d4c78 .config console log report ci2-upstream-kcsan-gce
2020/01/26 17:51 https://github.com/google/ktsan.git kcsan 245a43005292 dd56146d .config console log report ci2-upstream-kcsan-gce
2020/01/26 02:16 https://github.com/google/ktsan.git kcsan 245a43005292 f4e7270e .config console log report ci2-upstream-kcsan-gce
2020/01/22 20:22 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/17 23:41 https://github.com/google/ktsan.git kcsan 245a43005292 3de7aabb .config console log report ci2-upstream-kcsan-gce
2020/01/14 00:55 https://github.com/google/ktsan.git kcsan 245a43005292 32881205 .config console log report ci2-upstream-kcsan-gce
2020/01/09 17:00 https://github.com/google/ktsan.git kcsan 245a43005292 4de4e9f0 .config console log report ci2-upstream-kcsan-gce
2020/01/03 16:51 https://github.com/google/ktsan.git kcsan 245a43005292 9dcc1191 .config console log report ci2-upstream-kcsan-gce
2019/12/28 18:26 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/22 18:36 https://github.com/google/ktsan.git kcsan 245a43005292 8b967267 .config console log report ci2-upstream-kcsan-gce
2019/12/21 10:50 https://github.com/google/ktsan.git kcsan 245a43005292 bc586918 .config console log report ci2-upstream-kcsan-gce
2019/12/20 10:25 https://github.com/google/ktsan.git kcsan 245a43005292 36650b4b .config console log report ci2-upstream-kcsan-gce
2019/12/15 02:39 https://github.com/google/ktsan.git kcsan 245a43005292 eef6e580 .config console log report ci2-upstream-kcsan-gce
2019/12/07 16:36 https://github.com/google/ktsan.git kcsan ef798c30ba4e 85f26751 .config console log report ci2-upstream-kcsan-gce
2019/12/06 15:57 https://github.com/google/ktsan.git kcsan ef798c30ba4e 12c3b6cd .config console log report ci2-upstream-kcsan-gce
2019/11/29 06:18 https://github.com/google/ktsan.git kcsan ef798c30ba4e 76357d6f .config console log report ci2-upstream-kcsan-gce
2019/11/19 01:05 https://github.com/google/ktsan.git kcsan 5863cc791e4c d5696d51 .config console log report ci2-upstream-kcsan-gce
2019/10/25 08:11 https://github.com/google/ktsan.git kcsan 05f2236801fe d01bb02a .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.