syzbot


KCSAN: data-race in __zone_watermark_ok / free_pcppages_bulk

Status: closed as invalid on 2019/10/15 15:50
Subsystems: sctp
[Documentation on labels]
First crash: 1633d, last: 1633d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __zone_watermark_ok / free_pcppages_bulk

read to 0xffff88812fffce88 of 8 bytes by task 7440 on cpu 1:
 __zone_watermark_ok+0x106/0x240 mm/page_alloc.c:3444
 zone_watermark_fast mm/page_alloc.c:3494 [inline]
 get_page_from_freelist+0x629/0x2300 mm/page_alloc.c:3635
 __alloc_pages_nodemask+0x255/0x4d0 mm/page_alloc.c:4714
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1366 [inline]
 cache_grow_begin+0x76/0x670 mm/slab.c:2599
 cache_alloc_refill mm/slab.c:2971 [inline]
 ____cache_alloc mm/slab.c:3054 [inline]
 ____cache_alloc mm/slab.c:3037 [inline]
 slab_alloc_node mm/slab.c:3249 [inline]
 kmem_cache_alloc_node_trace+0x580/0x670 mm/slab.c:3592
 __do_kmalloc_node mm/slab.c:3614 [inline]
 __kmalloc_node_track_caller+0x38/0x50 mm/slab.c:3629
 __kmalloc_reserve.isra.0+0x49/0xd0 net/core/skbuff.c:141
 __alloc_skb+0xc2/0x350 net/core/skbuff.c:209
 skb_copy_expand+0x85/0x210 net/core/skbuff.c:1745
 sctp_ulpevent_make_send_failed+0x71/0x3e0 net/sctp/ulpevent.c:423
 sctp_datamsg_destroy net/sctp/chunk.c:107 [inline]
 sctp_datamsg_put+0x12e/0x300 net/sctp/chunk.c:130
 sctp_sendmsg_to_asoc+0xb7f/0x11c0 net/sctp/socket.c:1953
 sctp_sendmsg+0xc81/0x1090 net/sctp/socket.c:2103
 inet_sendmsg+0x6d/0x90 net/ipv4/af_inet.c:807

write to 0xffff88812fffce88 of 8 bytes by task 7292 on cpu 0:
 del_page_from_free_area include/linux/mmzone.h:151 [inline]
 __free_one_page mm/page_alloc.c:947 [inline]
 free_pcppages_bulk+0x8e9/0xc10 mm/page_alloc.c:1320
 free_unref_page_commit+0x1e8/0x220 mm/page_alloc.c:3044
 free_unref_page_list+0x235/0x3a0 mm/page_alloc.c:3087
 release_pages+0x271/0xa90 mm/swap.c:800
 __pagevec_release+0x53/0x90 mm/swap.c:820
 pagevec_release include/linux/pagevec.h:88 [inline]
 truncate_inode_pages_range+0x774/0x1110 mm/truncate.c:370
 truncate_inode_pages mm/truncate.c:476 [inline]
 truncate_inode_pages_final+0x64/0x90 mm/truncate.c:527
 ext4_evict_inode+0x30c/0xdb0 fs/ext4/inode.c:244
 evict+0x244/0x410 fs/inode.c:571
 iput_final fs/inode.c:1560 [inline]
 iput+0x362/0x4a0 fs/inode.c:1586
 do_unlinkat+0x378/0x530 fs/namei.c:4069
 __do_sys_unlink fs/namei.c:4110 [inline]
 __se_sys_unlink fs/namei.c:4108 [inline]
 __x64_sys_unlink+0x3b/0x50 fs/namei.c:4108
 do_syscall_64+0xcf/0x2f0 arch/x86/entry/common.c:296

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7292 Comm: syz-executor.5 Not tainted 5.3.0+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/09 07:27 https://github.com/google/ktsan.git kcsan d724f94f63de 312c6a5a .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.