syzbot


KCSAN: data-race in shmem_fallocate / shmem_fault (3)

Status: auto-closed as invalid on 2021/12/11 00:12
Subsystems: mm
[Documentation on labels]
First crash: 920d, last: 902d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (6) mm 1 265d 265d 0/26 auto-obsoleted due to no activity on 2023/09/08 14:27
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (2) mm 2 1102d 1106d 0/26 auto-closed as invalid on 2021/05/24 18:53
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (4) mm 1 510d 510d 0/26 auto-obsoleted due to no activity on 2023/01/13 18:30
upstream KCSAN: data-race in shmem_fallocate / shmem_fault mm 1 1301d 1301d 0/26 auto-closed as invalid on 2020/11/07 06:23
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (5) mm 1 394d 394d 0/26 auto-obsoleted due to no activity on 2023/05/03 07:41
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (7) mm 7 121d 138d 0/26 auto-obsoleted due to no activity on 2024/01/31 00:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_fallocate / shmem_fault

write to 0xffff88812fbbc968 of 8 bytes by task 590 on cpu 0:
 shmem_fallocate+0x22a/0x880 mm/shmem.c:2671
 vfs_fallocate+0x486/0x720 fs/open.c:307
 madvise_remove+0x126/0x1e0 mm/madvise.c:925
 madvise_vma mm/madvise.c:987 [inline]
 do_madvise+0x5a5/0x1140 mm/madvise.c:1202
 __do_sys_madvise mm/madvise.c:1228 [inline]
 __se_sys_madvise mm/madvise.c:1226 [inline]
 __x64_sys_madvise+0x5d/0x70 mm/madvise.c:1226
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812fbbc968 of 8 bytes by task 603 on cpu 1:
 shmem_fault+0x90/0x3c0 mm/shmem.c:2073
 __do_fault mm/memory.c:3859 [inline]
 do_read_fault mm/memory.c:4183 [inline]
 do_fault mm/memory.c:4312 [inline]
 handle_pte_fault mm/memory.c:4570 [inline]
 __handle_mm_fault mm/memory.c:4705 [inline]
 handle_mm_fault+0xba6/0x1590 mm/memory.c:4803
 faultin_page mm/gup.c:939 [inline]
 __get_user_pages+0x388/0xc80 mm/gup.c:1160
 populate_vma_page_range mm/gup.c:1492 [inline]
 __mm_populate+0x24d/0x370 mm/gup.c:1601
 mm_populate include/linux/mm.h:2753 [inline]
 vm_mmap_pgoff+0x160/0x1f0 mm/util.c:524
 ksys_mmap_pgoff+0xcf/0x350 mm/mmap.c:1624
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000000000000 -> 0xffffc9000e637c70

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 603 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/11/06 00:12 upstream fe91c4725aee 4c1be0be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_fault
2021/10/19 05:03 upstream 519d81956ee2 24dc29db .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_fault
* Struck through repros no longer work on HEAD.