syzbot


KCSAN: data-race in dec_zone_page_state / release_pages

Status: auto-closed as invalid on 2020/02/13 08:46
Subsystems: mm
[Documentation on labels]
First crash: 1597d, last: 1597d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dec_zone_page_state / release_pages (2) mm 8 1405d 1513d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in dec_zone_page_state / release_pages (3) mm 43 1242d 1230d 0/26 auto-closed as invalid on 2020/12/30 00:28

Sample crash report:
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
==================================================================
BUG: KCSAN: data-race in dec_zone_page_state / release_pages

write to 0xffffea000475ed40 of 8 bytes by task 12686 on cpu 0:
 __clear_bit include/asm-generic/bitops-instrumented.h:76 [inline]
 __ClearPageLRU include/linux/page-flags.h:320 [inline]
 release_pages+0x427/0x980 mm/swap.c:828
 __pagevec_release+0x53/0x90 mm/swap.c:862
 pagevec_release include/linux/pagevec.h:88 [inline]
 invalidate_mapping_pages+0x741/0x900 mm/truncate.c:620
 __generic_file_write_iter+0x365/0x380 mm/filemap.c:3424
 generic_file_write_iter+0x28c/0x390 mm/filemap.c:3466
 call_write_iter include/linux/fs.h:1895 [inline]
 do_iter_readv_writev+0x487/0x5b0 fs/read_write.c:693
 do_iter_write fs/read_write.c:970 [inline]
 do_iter_write+0x13b/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x4c0/0x7f0 fs/splice.c:746
 do_splice_from fs/splice.c:848 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1020
 splice_direct_to_actor+0x215/0x510 fs/splice.c:975
 do_splice_direct+0x161/0x1e0 fs/splice.c:1063
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffea000475ed40 of 8 bytes by interrupt on cpu 1:
 page_zone include/linux/mm.h:1244 [inline]
 dec_zone_page_state+0x22/0xe0 mm/vmstat.c:533
 test_clear_page_writeback+0x332/0x790 mm/page-writeback.c:2757
 end_page_writeback+0x9e/0x190 mm/filemap.c:1339
 end_buffer_async_write+0x2dc/0x3a0 fs/buffer.c:349
 end_bio_bh_io_sync+0x87/0xb0 fs/buffer.c:2978
 bio_endio+0x3a8/0x4f0 block/bio.c:1818
 req_bio_endio block/blk-core.c:242 [inline]
 blk_update_request+0x427/0x7b0 block/blk-core.c:1462
 blk_mq_end_request+0x3f/0x2b0 block/blk-mq.c:568
 lo_complete_rq+0x136/0x1a0 drivers/block/loop.c:485
 blk_done_softirq+0x1eb/0x250 block/blk-softirq.c:37
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 run_ksoftirqd+0x46/0x60 kernel/softirq.c:603
 smpboot_thread_fn+0x37d/0x4a0 kernel/smpboot.c:165
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/05 08:38 https://github.com/google/ktsan.git kcsan ef798c30ba4e b2088328 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.