syzbot


KCSAN: data-race in __filemap_add_folio / generic_file_direct_write (6)

Status: auto-obsoleted due to no activity on 2023/06/09 18:37
Subsystems: fs mm
[Documentation on labels]
First crash: 363d, last: 363d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __filemap_add_folio / generic_file_direct_write (5) fs mm 1 399d 399d 0/26 auto-obsoleted due to no activity on 2023/05/04 15:57
upstream KCSAN: data-race in __filemap_add_folio / generic_file_direct_write (3) fs mm 3 725d 730d 0/26 auto-closed as invalid on 2022/06/12 06:31
upstream KCSAN: data-race in __filemap_add_folio / generic_file_direct_write fs mm 1 904d 904d 0/26 auto-closed as invalid on 2021/12/15 10:13
upstream KCSAN: data-race in __filemap_add_folio / generic_file_direct_write (2) fs mm 1 784d 784d 0/26 auto-closed as invalid on 2022/04/14 05:12
upstream KCSAN: data-race in __filemap_add_folio / generic_file_direct_write (4) mm fs 1 647d 647d 0/26 auto-closed as invalid on 2022/08/29 21:55

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __filemap_add_folio / generic_file_direct_write

read-write to 0xffff88811f8d0910 of 8 bytes by task 19378 on cpu 1:
 __filemap_add_folio+0x385/0x730 mm/filemap.c:904
 filemap_add_folio+0x6f/0x150 mm/filemap.c:939
 page_cache_ra_unbounded+0x15e/0x2e0 mm/readahead.c:251
 do_page_cache_ra mm/readahead.c:300 [inline]
 page_cache_ra_order mm/readahead.c:560 [inline]
 ondemand_readahead+0x550/0x6c0 mm/readahead.c:682
 page_cache_sync_ra+0x284/0x2a0 mm/readahead.c:709
 page_cache_sync_readahead include/linux/pagemap.h:1211 [inline]
 filemap_get_pages+0x257/0xea0 mm/filemap.c:2595
 filemap_read+0x223/0x680 mm/filemap.c:2690
 generic_file_read_iter+0x76/0x320 mm/filemap.c:2837
 call_read_iter include/linux/fs.h:1862 [inline]
 generic_file_splice_read+0xe3/0x290 fs/splice.c:403
 do_splice_to fs/splice.c:886 [inline]
 splice_direct_to_actor+0x25a/0x5f0 fs/splice.c:957
 do_splice_direct+0x104/0x180 fs/splice.c:1066
 do_sendfile+0x3b8/0x950 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff88811f8d0910 of 8 bytes by task 19365 on cpu 0:
 generic_file_direct_write+0x289/0x400 mm/filemap.c:3866
 __generic_file_write_iter+0x122/0x290 mm/filemap.c:4007
 generic_file_write_iter+0x7d/0x1c0 mm/filemap.c:4083
 do_iter_write+0x4ae/0x770 fs/read_write.c:860
 vfs_iter_write+0x50/0x70 fs/read_write.c:901
 iter_file_splice_write+0x456/0x7d0 fs/splice.c:779
 do_splice_from fs/splice.c:857 [inline]
 direct_splice_actor+0x84/0xa0 fs/splice.c:1023
 splice_direct_to_actor+0x2ee/0x5f0 fs/splice.c:978
 do_splice_direct+0x104/0x180 fs/splice.c:1066
 do_sendfile+0x3b8/0x950 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x000000000000000b -> 0x000000000000000c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 19365 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller-13164-g78b421b6a7c6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
==================================================================
syz-executor.1: attempt to access beyond end of device
loop1: rw=2049, sector=2048, nr_sectors = 4 limit=2048

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/05 18:36 upstream 78b421b6a7c6 de870ca5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_add_folio / generic_file_direct_write
* Struck through repros no longer work on HEAD.