KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage

KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
Status: upstream: reported on 2020/10/06 16:59
Reported-by: syzbot+e32fbb814c880bd90628@syzkaller.appspotmail.com
First crash: 300d, last: 4d09h

Sample crash report:

==================================================================
BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp

write to 0xffff8880286a9348 of 8 bytes by task 27878 on cpu 1:
 shmem_add_to_page_cache+0x5cd/0x6e0 mm/shmem.c:718
 shmem_getpage_gfp+0x86a/0x1980 mm/shmem.c:1929
 shmem_fault+0x16c/0x450 mm/shmem.c:2116
 __do_fault mm/memory.c:3637 [inline]
 do_read_fault+0x2e1/0x530 mm/memory.c:3939
 do_fault mm/memory.c:4067 [inline]
 handle_pte_fault mm/memory.c:4318 [inline]
 __handle_mm_fault mm/memory.c:4453 [inline]
 handle_mm_fault+0x1019/0x1840 mm/memory.c:4551
 do_user_addr_fault+0x60c/0xc00 arch/x86/mm/fault.c:1390
 handle_page_fault arch/x86/mm/fault.c:1475 [inline]
 exc_page_fault+0x94/0x2a0 arch/x86/mm/fault.c:1531
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:577
 __get_user_nocheck_1+0x6/0x10 arch/x86/lib/getuser.S:103
 fault_in_pages_readable include/linux/pagemap.h:746 [inline]
 iov_iter_fault_in_readable+0x155/0x3a0 lib/iov_iter.c:436
 generic_perform_write+0xd2/0x3a0 mm/filemap.c:3565
 ext4_buffered_write_iter+0x2e5/0x3e0 fs/ext4/file.c:269
 ext4_file_write_iter+0x48a/0x10b0 fs/ext4/file.c:502
 call_write_iter include/linux/fs.h:1977 [inline]
 aio_write+0x2b9/0x3a0 fs/aio.c:1581
 __io_submit_one fs/aio.c:1840 [inline]
 io_submit_one+0x814/0x1280 fs/aio.c:1883
 __do_sys_io_submit fs/aio.c:1942 [inline]
 __se_sys_io_submit+0xf5/0x270 fs/aio.c:1912
 __x64_sys_io_submit+0x3f/0x50 fs/aio.c:1912
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8880286a9348 of 8 bytes by task 27889 on cpu 0:
 shmem_recalc_inode mm/shmem.c:367 [inline]
 shmem_getpage_gfp+0xba0/0x1980 mm/shmem.c:1939
 shmem_fault+0x16c/0x450 mm/shmem.c:2116
 __do_fault mm/memory.c:3637 [inline]
 do_read_fault+0x2e1/0x530 mm/memory.c:3939
 do_fault mm/memory.c:4067 [inline]
 handle_pte_fault mm/memory.c:4318 [inline]
 __handle_mm_fault mm/memory.c:4453 [inline]
 handle_mm_fault+0x1019/0x1840 mm/memory.c:4551
 faultin_page mm/gup.c:850 [inline]
 __get_user_pages+0xa47/0x1000 mm/gup.c:1069
 populate_vma_page_range mm/gup.c:1402 [inline]
 __mm_populate+0x24d/0x380 mm/gup.c:1450
 mm_populate include/linux/mm.h:2582 [inline]
 vm_mmap_pgoff+0x14c/0x1d0 mm/util.c:524
 ksys_mmap_pgoff+0xe1/0x380 mm/mmap.c:1632
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27889 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (182):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/04/10 22:18	upstream	d4961772	6a81331a	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/31 08:55	upstream	5e46d1b7	6a81331a	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/26 15:31	upstream	db24726b	a8529b82	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/24 19:35	upstream	4ee998b0	607e3baf	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/23 21:00	upstream	7acac4b3	e613994b	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/23 11:42	upstream	84196390	8092f30d	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/20 22:36	upstream	812da4d3	17810eae	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/16 19:43	upstream	1df27313	fdb2bb2c	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/16 05:56	upstream	1a4431a5	fdb2bb2c	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/13 11:10	upstream	f296bfd5	4a003785	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/13 00:28	upstream	f296bfd5	429d8a6b	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/08 02:06	upstream	144c79ef	09fbf400	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/03/06 17:10	upstream	a38fd874	e4b4d570	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/24 06:14	upstream	c03c21ba	fcc6d71b	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/23 06:54	upstream	b12b4724	fcc6d71b	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/22 15:37	upstream	31caf8b2	c26fb06b	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/21 05:28	upstream	e767b353	3e5ed8b4	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/18 07:43	upstream	f40ddce8	14052202	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/16 21:18	upstream	f40ddce8	98682e5e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/15 00:22	upstream	358fecee	98682e5e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/14 01:48	upstream	ac30d8ce	98682e5e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/12 21:29	upstream	dcc0b490	98682e5e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/12 16:02	upstream	dcc0b490	a5f86b15	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/10 16:54	upstream	e0756cfc	9c8b8541	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/07 12:31	upstream	825b5991	2ce644fc	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/06 17:23	upstream	1e0d27fc	0655e081	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/06 04:46	upstream	1e0d27fc	23a562df	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/05 17:24	upstream	dd86e7fa	23a562df	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/01 14:57	upstream	1048ba83	e6b95f32	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/02/01 02:49	upstream	1048ba83	fc9fd31e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/31 12:41	upstream	6642d600	fc9fd31e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/30 10:12	upstream	0e9bcda5	fc9fd31e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/29 22:04	upstream	bec4c296	fc9fd31e	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/28 09:07	upstream	76c057c8	eefc07f2	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/26 21:14	upstream	13391c60	55a7d4df	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/26 08:37	upstream	f8ad8187	52e37319	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/24 21:34	upstream	e6806137	52e37319	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/24 01:27	upstream	e1ae4b0b	52e37319	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/23 10:25	upstream	fe75a218	52e37319	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/22 06:01	upstream	83d09ad4	d4f4eca5	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/21 20:22	upstream	9791581c	d4f4eca5	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/21 04:29	upstream	75439bc4	d4f4eca5	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/20 12:28	upstream	45dfb8a5	d4f4eca5	.config	log	report	info	KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp
ci2-upstream-kcsan-gce	2021/01/17 12:15	upstream	0da0a8a0	813be542	.config	log	report	info
ci2-upstream-kcsan-gce	2020/10/06 05:33	upstream	7575fdda	1880b4a9	.config	log	report	info
ci2-upstream-kcsan-gce	2020/10/01 23:56	upstream	fcadab74	9602ddf4	.config	log	report	info
ci2-upstream-kcsan-gce	2020/06/19 03:27	upstream	5e857ce6	bc258b50	.config	log	report