syzbot


KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (9)

Status: moderation: reported on 2025/10/23 00:44
Subsystems: kernfs
[Documentation on labels]
Reported-by: syzbot+aa6f6995d1fff4b3826f@syzkaller.appspotmail.com
First crash: 19d, last: 19d
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission kernfs 6 1 697d 697d 0/29 auto-obsoleted due to no activity on 2024/01/18 07:18
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (2) kernfs 6 1 639d 639d 0/29 auto-obsoleted due to no activity on 2024/03/16 21:17
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (8) kernfs 6 1 129d 129d 0/29 auto-obsoleted due to no activity on 2025/08/29 19:17
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (4) kernfs 6 3 473d 494d 0/29 auto-obsoleted due to no activity on 2024/08/29 19:56
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (3) kernfs 6 1 548d 548d 0/29 auto-obsoleted due to no activity on 2024/06/15 22:09
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (6) kernfs 6 1 358d 358d 0/29 auto-obsoleted due to no activity on 2025/01/13 01:11
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (7) kernfs 6 2 241d 245d 0/29 auto-obsoleted due to no activity on 2025/05/09 14:22
upstream KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission (5) kernfs 6 1 418d 418d 0/29 auto-obsoleted due to no activity on 2024/10/23 06:46

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission

write to 0xffff8881006c2070 of 4 bytes by task 20072 on cpu 1:
 inode_set_atime_to_ts include/linux/fs.h:1805 [inline]
 set_inode_attr fs/kernfs/inode.c:163 [inline]
 kernfs_refresh_inode fs/kernfs/inode.c:179 [inline]
 kernfs_iop_permission+0x12b/0x220 fs/kernfs/inode.c:290
 do_inode_permission fs/namei.c:526 [inline]
 inode_permission+0x1ca/0x310 fs/namei.c:593
 may_lookup fs/namei.c:1873 [inline]
 link_path_walk+0x63c/0x900 fs/namei.c:2467
 path_parentat fs/namei.c:2723 [inline]
 __filename_parentat+0x15c/0x3f0 fs/namei.c:2747
 filename_parentat fs/namei.c:2765 [inline]
 do_unlinkat+0x99/0x480 fs/namei.c:4712
 __do_sys_unlink fs/namei.c:4783 [inline]
 __se_sys_unlink fs/namei.c:4781 [inline]
 __x64_sys_unlink+0x2e/0x40 fs/namei.c:4781
 x64_sys_call+0x2dcf/0x3000 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff8881006c2070 of 4 bytes by task 13947 on cpu 0:
 inode_set_atime_to_ts include/linux/fs.h:1805 [inline]
 set_inode_attr fs/kernfs/inode.c:163 [inline]
 kernfs_refresh_inode fs/kernfs/inode.c:179 [inline]
 kernfs_iop_permission+0x12b/0x220 fs/kernfs/inode.c:290
 do_inode_permission fs/namei.c:526 [inline]
 inode_permission+0x1ca/0x310 fs/namei.c:593
 may_lookup fs/namei.c:1873 [inline]
 link_path_walk+0x63c/0x900 fs/namei.c:2467
 path_lookupat+0x63/0x2a0 fs/namei.c:2675
 filename_lookup+0x147/0x340 fs/namei.c:2705
 user_path_at+0x3e/0x130 fs/namei.c:3215
 ksys_umount fs/namespace.c:2061 [inline]
 __do_sys_umount fs/namespace.c:2069 [inline]
 __se_sys_umount fs/namespace.c:2067 [inline]
 __x64_sys_umount+0x85/0xe0 fs/namespace.c:2067
 x64_sys_call+0xdd2/0x3000 arch/x86/include/generated/asm/syscalls_64.h:167
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x32f93ca6 -> 0x08a77da5

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 13947 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/23 00:43 upstream dd72c8fcf6d3 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in kernfs_iop_permission / kernfs_iop_permission
* Struck through repros no longer work on HEAD.