syzbot


KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma

Status: closed as invalid on 2020/06/18 14:13
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 827d, last: 827d
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (4) 4 560d 618d 0/23 auto-closed as invalid on 2021/03/12 12:46
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (2) 1 749d 749d 0/23 auto-closed as invalid on 2020/09/03 19:58
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (3) 1 694d 694d 0/23 auto-closed as invalid on 2020/10/29 03:12
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (6) 4 379d 397d 0/23 auto-closed as invalid on 2021/09/09 17:02
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (7) 1 179d 179d 0/23 auto-closed as invalid on 2022/03/28 08:47
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (5) 3 452d 513d 0/23 auto-closed as invalid on 2021/06/28 10:29

Sample crash report:
==================================================================
BUG: KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma

write to 0xffffea000401ad98 of 8 bytes by task 14218 on cpu 0:
 page_cache_delete_batch mm/filemap.c:326 [inline]
 delete_from_page_cache_batch+0x672/0x780 mm/filemap.c:357
 truncate_inode_pages_range+0x52f/0x1130 mm/truncate.c:366
 truncate_inode_pages mm/truncate.c:476 [inline]
 truncate_pagecache+0x5b/0x80 mm/truncate.c:817
 ext4_setattr+0xc32/0x1320 fs/ext4/inode.c:5382
 notify_change+0x82b/0xad0 fs/attr.c:336
 do_truncate+0xf9/0x180 fs/open.c:64
 handle_truncate fs/namei.c:2887 [inline]
 do_open fs/namei.c:3233 [inline]
 path_openat+0x1e51/0x23d0 fs/namei.c:3346
 do_filp_open+0x11e/0x1b0 fs/namei.c:3373
 do_sys_openat2+0x52e/0x680 fs/open.c:1148
 do_sys_open+0xa2/0x110 fs/open.c:1164
 __do_sys_openat fs/open.c:1178 [inline]
 __se_sys_openat fs/open.c:1173 [inline]
 __x64_sys_openat+0x5d/0x70 fs/open.c:1173
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffea000401ad98 of 8 bytes by task 14219 on cpu 1:
 PageAnon include/linux/page-flags.h:480 [inline]
 page_address_in_vma+0x7f/0x360 mm/rmap.c:704
 new_page+0x8f/0x230 mm/mempolicy.c:1244
 unmap_and_move mm/migrate.c:1202 [inline]
 migrate_pages+0x293/0x1b60 mm/migrate.c:1454
 do_mbind+0x8df/0x9f0 mm/mempolicy.c:1374
 kernel_mbind+0x10e/0x130 mm/mempolicy.c:1495
 __do_sys_mbind mm/mempolicy.c:1502 [inline]
 __se_sys_mbind mm/mempolicy.c:1498 [inline]
 __x64_sys_mbind+0x7e/0xa0 mm/mempolicy.c:1498
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 14219 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2020/05/14 14:52 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 2d572622 .config log report