syzbot


KCSAN: data-race in __add_to_page_cache_locked / jbd2_journal_submit_inode_data_buffers (2)

Status: auto-closed as invalid on 2021/11/25 13:53
Subsystems: fs mm
[Documentation on labels]
First crash: 928d, last: 928d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __add_to_page_cache_locked / jbd2_journal_submit_inode_data_buffers fs mm 6 1152d 1186d 0/26 auto-closed as invalid on 2021/04/15 22:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __add_to_page_cache_locked / jbd2_journal_submit_inode_data_buffers

write to 0xffff88813004a8b0 of 8 bytes by task 14658 on cpu 0:
 __add_to_page_cache_locked+0x276/0x4f0 mm/filemap.c:931
 add_to_page_cache_lru+0xa0/0x1b0 mm/filemap.c:984
 page_cache_ra_unbounded+0x274/0x430 mm/readahead.c:222
 ondemand_readahead+0x58c/0x7c0
 page_cache_sync_ra+0xaf/0xe0 mm/readahead.c:580
 page_cache_sync_readahead include/linux/pagemap.h:883 [inline]
 filemap_get_pages mm/filemap.c:2545 [inline]
 filemap_read+0x3ad/0x1220 mm/filemap.c:2628
 generic_file_read_iter+0x75/0x2c0 mm/filemap.c:2779
 ext4_file_read_iter+0x1db/0x290
 call_read_iter include/linux/fs.h:2157 [inline]
 generic_file_splice_read+0x24f/0x330 fs/splice.c:311
 do_splice_to fs/splice.c:796 [inline]
 splice_direct_to_actor+0x2aa/0x650 fs/splice.c:870
 do_splice_direct+0x106/0x190 fs/splice.c:979
 do_sendfile+0x63e/0xbb0 fs/read_write.c:1249
 __do_sys_sendfile64 fs/read_write.c:1314 [inline]
 __se_sys_sendfile64 fs/read_write.c:1300 [inline]
 __x64_sys_sendfile64+0x102/0x140 fs/read_write.c:1300
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88813004a8b0 of 8 bytes by task 345 on cpu 1:
 jbd2_journal_submit_inode_data_buffers+0x5b/0xe0 fs/jbd2/commit.c:195
 ext4_journal_submit_inode_data_buffers+0x55/0x110 fs/ext4/super.c:530
 journal_submit_data_buffers+0x109/0x260 fs/jbd2/commit.c:256
 jbd2_journal_commit_transaction+0x8e8/0x3430 fs/jbd2/commit.c:591
 kjournald2+0x268/0x490 fs/jbd2/journal.c:213
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

value changed: 0x0000000000000005 -> 0x0000000000000006

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 345 Comm: jbd2/sda1-8 Not tainted 5.15.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/10/21 13:47 upstream 2f111a6fd5b5 c5cb7da8 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __add_to_page_cache_locked / jbd2_journal_submit_inode_data_buffers
* Struck through repros no longer work on HEAD.