syzbot


KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (3)

Status: auto-closed as invalid on 2020/10/21 02:12
Subsystems: mm
[Documentation on labels]
First crash: 1361d, last: 1312d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (2) fs 1 1440d 1440d 0/26 auto-closed as invalid on 2020/06/18 13:13
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (6) iomap 1 1042d 1042d 0/26 auto-closed as invalid on 2021/07/17 19:01
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (4) iomap 1 1157d 1157d 0/26 auto-closed as invalid on 2021/03/24 09:14
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range ext4 1 1638d 1638d 0/26 closed as invalid on 2019/11/19 13:44
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (7) mm 1 917d 917d 0/26 auto-closed as invalid on 2021/11/19 18:15
upstream KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range (5) mm 1 1077d 1077d 0/26 auto-closed as invalid on 2021/06/12 11:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __delete_from_page_cache / filemap_write_and_wait_range

write to 0xffff88811e811930 of 8 bytes by task 30845 on cpu 0:
 page_cache_delete mm/filemap.c:154 [inline]
 __delete_from_page_cache+0x282/0x380 mm/filemap.c:239
 __remove_mapping+0x3e2/0x490 mm/vmscan.c:928
 remove_mapping+0x22/0x60 mm/vmscan.c:950
 invalidate_complete_page mm/truncate.c:215 [inline]
 invalidate_inode_page+0x15d/0x190 mm/truncate.c:264
 invalidate_mapping_pages+0x3eb/0x720 mm/truncate.c:607
 __generic_file_write_iter+0x2e1/0x330 mm/filemap.c:3522
 generic_file_write_iter+0x2f3/0x3e0 mm/filemap.c:3564
 call_write_iter include/linux/fs.h:1882 [inline]
 do_iter_readv_writev+0x32e/0x3d0 fs/read_write.c:713
 do_iter_write+0x112/0x4b0 fs/read_write.c:1018
 vfs_iter_write+0x4c/0x70 fs/read_write.c:1059
 iter_file_splice_write+0x41a/0x770 fs/splice.c:750
 do_splice_from fs/splice.c:846 [inline]
 direct_splice_actor+0x95/0x160 fs/splice.c:1016
 splice_direct_to_actor+0x365/0x660 fs/splice.c:971
 do_splice_direct+0xf2/0x170 fs/splice.c:1059
 do_sendfile+0x56a/0xba0 fs/read_write.c:1540
 __do_sys_sendfile64 fs/read_write.c:1601 [inline]
 __se_sys_sendfile64 fs/read_write.c:1587 [inline]
 __x64_sys_sendfile64+0xf2/0x130 fs/read_write.c:1587
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811e811930 of 8 bytes by task 30847 on cpu 1:
 mapping_needs_writeback mm/filemap.c:630 [inline]
 filemap_write_and_wait_range+0x65/0x2a0 mm/filemap.c:654
 generic_file_read_iter+0x11d/0x3e0 mm/filemap.c:2375
 call_read_iter include/linux/fs.h:1876 [inline]
 generic_file_splice_read+0x22b/0x310 fs/splice.c:312
 do_splice_to fs/splice.c:870 [inline]
 splice_direct_to_actor+0x2a8/0x660 fs/splice.c:950
 do_splice_direct+0xf2/0x170 fs/splice.c:1059
 do_sendfile+0x56a/0xba0 fs/read_write.c:1540
 __do_sys_sendfile64 fs/read_write.c:1601 [inline]
 __se_sys_sendfile64 fs/read_write.c:1587 [inline]
 __x64_sys_sendfile64+0xf2/0x130 fs/read_write.c:1587
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 30847 Comm: syz-executor.2 Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/16 02:12 upstream fc4f28bb3daf 18d7d030 .config console log report info ci2-upstream-kcsan-gce
2020/09/01 01:15 upstream b51594df17d0 d5a3ae1f .config console log report ci2-upstream-kcsan-gce
2020/07/29 02:13 upstream 6ba1b005ffc3 cb93dc6a .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.