syzbot


KCSAN: data-race in __filemap_remove_folio / page_remove_rmap

Status: auto-obsoleted due to no activity on 2023/08/12 06:26
Subsystems: iomap
[Documentation on labels]
First crash: 788d, last: 787d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __filemap_remove_folio / page_remove_rmap (2) iomap 6 3 681d 708d 0/29 auto-obsoleted due to no activity on 2023/11/25 14:34
upstream KCSAN: data-race in __filemap_remove_folio / page_remove_rmap (3) iomap 6 6 606d 634d 0/29 auto-obsoleted due to no activity on 2024/02/08 19:56

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __filemap_remove_folio / page_remove_rmap

write to 0xffffea0004697018 of 8 bytes by task 8114 on cpu 0:
 page_cache_delete mm/filemap.c:148 [inline]
 __filemap_remove_folio+0x205/0x320 mm/filemap.c:228
 invalidate_complete_folio2 mm/truncate.c:586 [inline]
 invalidate_inode_pages2_range+0x506/0x790 mm/truncate.c:673
 kiocb_invalidate_pages+0x1b1/0x1e0 mm/filemap.c:2770
 __iomap_dio_rw+0x576/0x10a0 fs/iomap/direct-io.c:554
 iomap_dio_rw+0x40/0x90 fs/iomap/direct-io.c:665
 ext4_dio_write_iter fs/ext4/file.c:609 [inline]
 ext4_file_write_iter+0xab3/0x1230 fs/ext4/file.c:720
 do_iter_write+0x4b4/0x7b0 fs/read_write.c:860
 vfs_iter_write+0x56/0x70 fs/read_write.c:901
 iter_file_splice_write+0x462/0x7e0 fs/splice.c:739
 do_splice_from fs/splice.c:934 [inline]
 direct_splice_actor+0x8a/0xb0 fs/splice.c:1143
 splice_direct_to_actor+0x31d/0x690 fs/splice.c:1089
 do_splice_direct+0x10d/0x190 fs/splice.c:1195
 do_sendfile+0x3b6/0x9a0 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffea0004697018 of 8 bytes by task 8123 on cpu 1:
 folio_test_anon include/linux/page-flags.h:650 [inline]
 page_remove_rmap+0xef/0x270 mm/rmap.c:1425
 zap_pte_range mm/memory.c:1453 [inline]
 zap_pmd_range mm/memory.c:1570 [inline]
 zap_pud_range mm/memory.c:1599 [inline]
 zap_p4d_range mm/memory.c:1620 [inline]
 unmap_page_range+0xd25/0x1da0 mm/memory.c:1641
 unmap_single_vma+0x142/0x1d0 mm/memory.c:1687
 zap_page_range_single+0x219/0x2b0 mm/memory.c:1761
 unmap_mapping_range_vma mm/memory.c:3453 [inline]
 unmap_mapping_range_tree+0xa6/0xe0 mm/memory.c:3470
 unmap_mapping_pages+0xc0/0xd0 mm/memory.c:3536
 invalidate_inode_pages2_range+0x213/0x790 mm/truncate.c:654
 kiocb_invalidate_pages+0x1b1/0x1e0 mm/filemap.c:2770
 __iomap_dio_rw+0x576/0x10a0 fs/iomap/direct-io.c:554
 iomap_dio_rw+0x40/0x90 fs/iomap/direct-io.c:665
 ext4_dio_write_iter fs/ext4/file.c:609 [inline]
 ext4_file_write_iter+0xab3/0x1230 fs/ext4/file.c:720
 do_iter_write+0x4b4/0x7b0 fs/read_write.c:860
 vfs_iter_write+0x56/0x70 fs/read_write.c:901
 iter_file_splice_write+0x462/0x7e0 fs/splice.c:739
 do_splice_from fs/splice.c:934 [inline]
 direct_splice_actor+0x8a/0xb0 fs/splice.c:1143
 splice_direct_to_actor+0x31d/0x690 fs/splice.c:1089
 do_splice_direct+0x10d/0x190 fs/splice.c:1195
 do_sendfile+0x3b6/0x9a0 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0xffff8881004a7960 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8123 Comm: syz-executor.1 Not tainted 6.4.0-syzkaller-12365-g8689f4f2ea56 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
==================================================================
syz-executor.1 (8123) used greatest stack depth: 9496 bytes left

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/08 06:21 upstream 8689f4f2ea56 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / page_remove_rmap
2023/07/06 22:24 upstream c17414a273b8 1a2f6297 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / page_remove_rmap
* Struck through repros no longer work on HEAD.