syzbot


KCSAN: data-race in shmem_fallocate / shmem_fault (2)

Status: auto-closed as invalid on 2021/05/24 18:53
Subsystems: mm
[Documentation on labels]
First crash: 1524d, last: 1520d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (6) mm 1 683d 683d 0/28 auto-obsoleted due to no activity on 2023/09/08 14:27
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (3) mm 2 1320d 1338d 0/28 auto-closed as invalid on 2021/12/11 00:12
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (4) mm 1 928d 928d 0/28 auto-obsoleted due to no activity on 2023/01/13 18:30
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (9) mm 50 2h47m 244d 0/28 moderation: reported on 2024/10/17 04:10
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (8) mm 7 283d 321d 0/28 auto-obsoleted due to no activity on 2024/10/13 06:13
upstream KCSAN: data-race in shmem_fallocate / shmem_fault mm 1 1719d 1719d 0/28 auto-closed as invalid on 2020/11/07 06:23
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (5) mm 1 811d 811d 0/28 auto-obsoleted due to no activity on 2023/05/03 07:41
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (7) mm 7 539d 556d 0/28 auto-obsoleted due to no activity on 2024/01/31 00:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_fallocate / shmem_fault

write to 0xffff88812c50e2a0 of 8 bytes by task 7787 on cpu 0:
 shmem_fallocate+0x1de/0x840 mm/shmem.c:2730
 vfs_fallocate+0x463/0x660 fs/open.c:311
 madvise_remove+0x129/0x1e0 mm/madvise.c:866
 madvise_vma mm/madvise.c:928 [inline]
 do_madvise+0x509/0x1050 mm/madvise.c:1133
 __do_sys_madvise mm/madvise.c:1159 [inline]
 __se_sys_madvise mm/madvise.c:1157 [inline]
 __x64_sys_madvise+0x5d/0x70 mm/madvise.c:1157
 do_syscall_64+0x34/0x50 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812c50e2a0 of 8 bytes by task 7786 on cpu 1:
 shmem_fault+0x90/0x500 mm/shmem.c:2066
 __do_fault mm/memory.c:3637 [inline]
 do_read_fault mm/memory.c:3939 [inline]
 do_fault mm/memory.c:4067 [inline]
 handle_pte_fault mm/memory.c:4318 [inline]
 __handle_mm_fault mm/memory.c:4453 [inline]
 handle_mm_fault+0xe8d/0x1a70 mm/memory.c:4551
 faultin_page mm/gup.c:850 [inline]
 __get_user_pages+0x947/0xee0 mm/gup.c:1069
 populate_vma_page_range mm/gup.c:1402 [inline]
 __mm_populate+0x24d/0x380 mm/gup.c:1450
 mm_populate include/linux/mm.h:2582 [inline]
 vm_mmap_pgoff+0x145/0x1d0 mm/util.c:524
 ksys_mmap_pgoff+0xe1/0x380 mm/mmap.c:1632
 do_syscall_64+0x34/0x50 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 7786 Comm: syz-executor.1 Not tainted 5.12.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/19 18:35 upstream bf05bf16c76b 50f523d7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_fault
2021/04/15 15:46 upstream 7f75285ca572 fcdb12ba .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_fault
* Struck through repros no longer work on HEAD.