syzbot


KCSAN: data-race in shmem_fallocate / shmem_fault (3)

Status: auto-closed as invalid on 2021/12/11 00:12
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 410d, last: 392d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in shmem_fallocate / shmem_fault (2) 2 592d 596d 0/24 auto-closed as invalid on 2021/05/24 18:53
upstream KCSAN: data-race in shmem_fallocate / shmem_fault 1 791d 791d 0/24 auto-closed as invalid on 2020/11/07 06:23

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_fallocate / shmem_fault

write to 0xffff88812fbbc968 of 8 bytes by task 590 on cpu 0:
 shmem_fallocate+0x22a/0x880 mm/shmem.c:2671
 vfs_fallocate+0x486/0x720 fs/open.c:307
 madvise_remove+0x126/0x1e0 mm/madvise.c:925
 madvise_vma mm/madvise.c:987 [inline]
 do_madvise+0x5a5/0x1140 mm/madvise.c:1202
 __do_sys_madvise mm/madvise.c:1228 [inline]
 __se_sys_madvise mm/madvise.c:1226 [inline]
 __x64_sys_madvise+0x5d/0x70 mm/madvise.c:1226
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812fbbc968 of 8 bytes by task 603 on cpu 1:
 shmem_fault+0x90/0x3c0 mm/shmem.c:2073
 __do_fault mm/memory.c:3859 [inline]
 do_read_fault mm/memory.c:4183 [inline]
 do_fault mm/memory.c:4312 [inline]
 handle_pte_fault mm/memory.c:4570 [inline]
 __handle_mm_fault mm/memory.c:4705 [inline]
 handle_mm_fault+0xba6/0x1590 mm/memory.c:4803
 faultin_page mm/gup.c:939 [inline]
 __get_user_pages+0x388/0xc80 mm/gup.c:1160
 populate_vma_page_range mm/gup.c:1492 [inline]
 __mm_populate+0x24d/0x370 mm/gup.c:1601
 mm_populate include/linux/mm.h:2753 [inline]
 vm_mmap_pgoff+0x160/0x1f0 mm/util.c:524
 ksys_mmap_pgoff+0xcf/0x350 mm/mmap.c:1624
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000000000000 -> 0xffffc9000e637c70

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 603 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/11/06 00:12 upstream fe91c4725aee 4c1be0be .config log report info KCSAN: data-race in shmem_fallocate / shmem_fault
ci2-upstream-kcsan-gce 2021/10/19 05:03 upstream 519d81956ee2 24dc29db .config log report info KCSAN: data-race in shmem_fallocate / shmem_fault
* Struck through repros no longer work on HEAD.