syzbot


KCSAN: data-race in ext4_writepages / xas_clear_mark (3)

Status: auto-closed as invalid on 2020/06/18 13:43
Subsystems: fs mm
[Documentation on labels]
First crash: 1419d, last: 1419d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark (6) fs mm 1 956d 956d 0/26 auto-closed as invalid on 2021/09/19 19:45
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark (5) fs mm 14 1084d 1207d 0/26 auto-closed as invalid on 2021/05/14 11:29
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark (4) fs mm 5 1286d 1353d 0/26 auto-closed as invalid on 2020/10/24 01:56
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark (7) fs mm 2 909d 913d 0/26 auto-closed as invalid on 2021/11/05 05:01
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark ext4 3 1611d 1617d 0/26 closed as invalid on 2019/11/19 13:24
upstream KCSAN: data-race in ext4_writepages / xas_clear_mark (2) ext4 1 1562d 1562d 0/26 auto-closed as invalid on 2020/02/26 13:18

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ext4_writepages / xas_clear_mark

write to 0xffff8880bb7386ec of 4 bytes by task 398 on cpu 0:
 xa_mark_clear lib/xarray.c:75 [inline]
 xas_clear_mark lib/xarray.c:918 [inline]
 xas_clear_mark+0x160/0x170 lib/xarray.c:899
 __test_set_page_writeback+0x5e5/0x7c0 mm/page-writeback.c:2800
 set_page_writeback include/linux/page-flags.h:558 [inline]
 ext4_bio_write_page+0x160/0xba5 fs/ext4/page-io.c:456
 mpage_submit_page+0xd5/0x190 fs/ext4/inode.c:2073
 mpage_process_page_bufs+0x3df/0x400 fs/ext4/inode.c:2187
 mpage_prepare_extent_to_map+0x43b/0x6e0 fs/ext4/inode.c:2595
 ext4_writepages+0x5a1/0x1e10 fs/ext4/inode.c:2723
 do_writepages+0x6b/0x170 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x1bb/0x220 mm/filemap.c:421
 file_write_and_wait_range+0xfb/0x160 mm/filemap.c:760
 ext4_sync_file+0x26e/0x8b0 fs/ext4/fsync.c:153
 vfs_fsync_range+0x7c/0x150 fs/sync.c:197
 generic_write_sync include/linux/fs.h:2872 [inline]
 ext4_buffered_write_iter+0x211/0x280 fs/ext4/file.c:277
 ext4_file_write_iter+0xf4/0xd30 fs/ext4/file.c:642
 call_write_iter include/linux/fs.h:1907 [inline]
 do_iter_readv_writev+0x4a7/0x5d0 fs/read_write.c:694
 do_iter_write fs/read_write.c:999 [inline]
 do_iter_write+0x137/0x3a0 fs/read_write.c:980
 vfs_iter_write+0x56/0x80 fs/read_write.c:1040
 iter_file_splice_write+0x530/0x830 fs/splice.c:760
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x97/0xb0 fs/splice.c:1037
 splice_direct_to_actor+0x22f/0x540 fs/splice.c:992
 do_splice_direct+0x152/0x1d0 fs/splice.c:1080
 do_sendfile+0x380/0x800 fs/read_write.c:1521
 __do_sys_sendfile64 fs/read_write.c:1576 [inline]
 __se_sys_sendfile64 fs/read_write.c:1568 [inline]
 __x64_sys_sendfile64+0xb8/0x140 fs/read_write.c:1568
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880bb7386ec of 4 bytes by task 391 on cpu 1:
 mapping_tagged include/linux/fs.h:521 [inline]
 ext4_writepages+0x1b2/0x1e10 fs/ext4/inode.c:2637
 do_writepages+0x6b/0x170 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x1bb/0x220 mm/filemap.c:421
 filemap_write_and_wait_range mm/filemap.c:654 [inline]
 filemap_write_and_wait_range+0xad/0x140 mm/filemap.c:648
 iomap_dio_rw+0x3a2/0x9a0 fs/iomap/direct-io.c:471
 ext4_dio_write_iter fs/ext4/file.c:532 [inline]
 ext4_file_write_iter+0xb84/0xd30 fs/ext4/file.c:640
 call_write_iter include/linux/fs.h:1907 [inline]
 do_iter_readv_writev+0x4a7/0x5d0 fs/read_write.c:694
 do_iter_write fs/read_write.c:999 [inline]
 do_iter_write+0x137/0x3a0 fs/read_write.c:980
 vfs_iter_write+0x56/0x80 fs/read_write.c:1040
 iter_file_splice_write+0x530/0x830 fs/splice.c:760
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x97/0xb0 fs/splice.c:1037
 splice_direct_to_actor+0x22f/0x540 fs/splice.c:992
 do_splice_direct+0x152/0x1d0 fs/splice.c:1080
 do_sendfile+0x380/0x800 fs/read_write.c:1521
 __do_sys_sendfile64 fs/read_write.c:1582 [inline]
 __se_sys_sendfile64 fs/read_write.c:1568 [inline]
 __x64_sys_sendfile64+0x121/0x140 fs/read_write.c:1568
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 391 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/09 00:24 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 e97b06d3 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.