syzbot


KCSAN: data-race in list_lru_count_one / list_lru_isolate_move (2)

Status: auto-closed as invalid on 2020/08/16 12:11
Subsystems: mm
[Documentation on labels]
First crash: 1376d, last: 1376d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in list_lru_count_one / list_lru_isolate_move mm 91 1465d 1589d 0/26 auto-closed as invalid on 2020/06/18 13:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in list_lru_count_one / list_lru_isolate_move

write to 0xffff888126554698 of 8 bytes by task 2461 on cpu 0:
 list_lru_isolate_move+0xd6/0xf0 mm/list_lru.c:170
 d_lru_shrink_move fs/dcache.c:456 [inline]
 dentry_lru_isolate+0x1a8/0x200 fs/dcache.c:1197
 __list_lru_walk_one+0xfb/0x320 mm/list_lru.c:222
 list_lru_walk_one+0x75/0x90 mm/list_lru.c:266
 list_lru_shrink_walk include/linux/list_lru.h:195 [inline]
 prune_dcache_sb+0x67/0xa0 fs/dcache.c:1220
 super_cache_scan+0x23b/0x2d0 fs/super.c:105
 do_shrink_slab+0x286/0x5c0 mm/vmscan.c:518
 shrink_slab+0xea/0x1c0 mm/vmscan.c:679
 shrink_node_memcgs+0x1f9/0x360 mm/vmscan.c:2658
 shrink_node+0x94e/0x1170 mm/vmscan.c:2770
 kswapd_shrink_node mm/vmscan.c:3517 [inline]
 balance_pgdat+0x675/0xbb0 mm/vmscan.c:3675
 kswapd+0x1ef/0x370 mm/vmscan.c:3932
 kthread+0x20d/0x230 kernel/kthread.c:291
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293

read to 0xffff888126554698 of 8 bytes by task 32612 on cpu 1:
 list_lru_count_one+0xb6/0xd0 mm/list_lru.c:183
 list_lru_shrink_count include/linux/list_lru.h:123 [inline]
 super_cache_count+0xd1/0x190 fs/super.c:147
 do_shrink_slab+0x86/0x5c0 mm/vmscan.c:436
 shrink_slab+0xea/0x1c0 mm/vmscan.c:679
 shrink_node_memcgs+0x1f9/0x360 mm/vmscan.c:2658
 shrink_node+0x94e/0x1170 mm/vmscan.c:2770
 shrink_zones+0x2af/0x490 mm/vmscan.c:2973
 do_try_to_free_pages+0x1b4/0x6c0 mm/vmscan.c:3026
 try_to_free_pages+0x38d/0x8d0 mm/vmscan.c:3265
 __perform_reclaim mm/page_alloc.c:4223 [inline]
 __alloc_pages_direct_reclaim mm/page_alloc.c:4244 [inline]
 __alloc_pages_slowpath+0x50a/0x970 mm/page_alloc.c:4650
 __alloc_pages_nodemask+0x235/0x390 mm/page_alloc.c:4863
 alloc_pages_current+0x21d/0x310 mm/mempolicy.c:2292
 alloc_pages include/linux/gfp.h:545 [inline]
 __vmalloc_area_node mm/vmalloc.c:2475 [inline]
 __vmalloc_node_range+0x2bf/0x530 mm/vmalloc.c:2541
 vmalloc_user+0x55/0x60 mm/vmalloc.c:2653
 vb2_vmalloc_alloc+0x8f/0x120 drivers/media/common/videobuf2/videobuf2-vmalloc.c:48
 __vb2_buf_mem_alloc drivers/media/common/videobuf2/videobuf2-core.c:215 [inline]
 __vb2_queue_alloc+0x4fe/0xaf0 drivers/media/common/videobuf2/videobuf2-core.c:370
 vb2_core_create_bufs+0x334/0x570 drivers/media/common/videobuf2/videobuf2-core.c:849
 vb2_create_bufs+0x419/0x560 drivers/media/common/videobuf2/videobuf2-v4l2.c:750
 vb2_ioctl_create_bufs+0x2b3/0x310 drivers/media/common/videobuf2/videobuf2-v4l2.c:955
 v4l_create_bufs+0x15e/0x1b0 drivers/media/v4l2-core/v4l2-ioctl.c:2087
 __video_do_ioctl+0x65b/0x870 drivers/media/v4l2-core/v4l2-ioctl.c:2986
 video_usercopy+0x6da/0xfc0 drivers/media/v4l2-core/v4l2-ioctl.c:3298
 video_ioctl2+0x25/0x30 drivers/media/v4l2-core/v4l2-ioctl.c:3335
 v4l2_ioctl+0xc2/0xd0 drivers/media/v4l2-core/v4l2-dev.c:360
 vfs_ioctl fs/ioctl.c:48 [inline]
 ksys_ioctl fs/ioctl.c:753 [inline]
 __do_sys_ioctl fs/ioctl.c:762 [inline]
 __se_sys_ioctl+0xc9/0x130 fs/ioctl.c:760
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:760
 do_syscall_64+0x51/0xb0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 32612 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/12 12:02 upstream 0aea6d5c5be3 115e1930 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.