syzbot


KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp

Status: auto-closed as invalid on 2022/02/04 20:05
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+4ab6a7ba6ca59b59a36f@syzkaller.appspotmail.com
First crash: 1369d, last: 808d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp

write to 0xffff888103e12940 of 8 bytes by task 6977 on cpu 0:
 page_cache_delete mm/filemap.c:146 [inline]
 __delete_from_page_cache+0x1e1/0x2c0 mm/filemap.c:231
 __remove_mapping+0x494/0x5f0 mm/vmscan.c:1276
 shrink_page_list+0x1508/0x2620 mm/vmscan.c:1851
 reclaim_pages+0x478/0x640 mm/vmscan.c:2595
 madvise_cold_or_pageout_pte_range+0x63f/0x680 mm/madvise.c:475
 walk_pmd_range mm/pagewalk.c:128 [inline]
 walk_pud_range mm/pagewalk.c:205 [inline]
 walk_p4d_range mm/pagewalk.c:240 [inline]
 walk_pgd_range mm/pagewalk.c:277 [inline]
 __walk_page_range+0x981/0x1160 mm/pagewalk.c:379
 walk_page_range+0x131/0x300 mm/pagewalk.c:475
 madvise_pageout_page_range mm/madvise.c:528 [inline]
 madvise_pageout mm/madvise.c:565 [inline]
 madvise_vma mm/madvise.c:993 [inline]
 do_madvise+0xa0b/0x1140 mm/madvise.c:1202
 __do_sys_madvise mm/madvise.c:1228 [inline]
 __se_sys_madvise mm/madvise.c:1226 [inline]
 __x64_sys_madvise+0x5d/0x70 mm/madvise.c:1226
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888103e12940 of 8 bytes by task 6967 on cpu 1:
 shmem_recalc_inode mm/shmem.c:363 [inline]
 shmem_getpage_gfp+0xf23/0x12c0 mm/shmem.c:1946
 shmem_fault+0xd1/0x3c0 mm/shmem.c:2114
 __do_fault mm/memory.c:3849 [inline]
 do_shared_fault mm/memory.c:4219 [inline]
 do_fault mm/memory.c:4297 [inline]
 handle_pte_fault mm/memory.c:4551 [inline]
 __handle_mm_fault mm/memory.c:4686 [inline]
 handle_mm_fault+0xc78/0x1590 mm/memory.c:4784
 do_user_addr_fault+0x609/0xbe0 arch/x86/mm/fault.c:1397
 handle_page_fault arch/x86/mm/fault.c:1485 [inline]
 exc_page_fault+0x91/0x290 arch/x86/mm/fault.c:1541
 asm_exc_page_fault+0x1e/0x30
 copy_user_enhanced_fast_string+0xe/0x30
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:58 [inline]
 _copy_to_user+0x77/0x90 lib/usercopy.c:33
 copy_to_user include/linux/uaccess.h:200 [inline]
 extract_crng_user drivers/char/random.c:1074 [inline]
 urandom_read_nowarn+0x1f5/0x3a0 drivers/char/random.c:1811
 __do_sys_getrandom drivers/char/random.c:2008 [inline]
 __se_sys_getrandom drivers/char/random.c:1983 [inline]
 __x64_sys_getrandom+0xd6/0x130 drivers/char/random.c:1983
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000000000af8 -> 0x0000000000000af7

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6967 Comm: syz-executor.4 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (161):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/31 20:04 upstream 4f3d93c6eaff 36bd2e48 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/12/30 03:32 upstream eec4df26e24e 6cc879d4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/12/27 19:11 upstream a8ad9a2434dc 5140bd58 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/12/25 09:06 upstream b927dfc67d05 6caa12e4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/12/13 15:46 upstream 2585cf9dfaad 0304899b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/20 03:32 upstream a90af8f15bdc 4eb20a4e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/19 15:32 upstream 4c388a8e740d 3a9d0024 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/19 12:53 upstream 4c388a8e740d 31a30fc0 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/13 09:04 upstream 66f4beaa6c1d 75b04091 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/09 20:46 upstream d2f38a3c6507 59bcaf9a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/11/05 20:19 upstream fe91c4725aee 4c1be0be .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/30 00:53 upstream a379fbbcb88b 098b5d53 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/27 17:31 upstream d25f27432f80 be531bb4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/25 18:38 upstream 87066fdd2e30 c1132b49 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/23 06:34 upstream 9c0c4d24ac00 282f03fb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/21 19:34 upstream 2f111a6fd5b5 55f90bc6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/21 13:52 upstream 2f111a6fd5b5 c5cb7da8 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/21 09:40 upstream 2f111a6fd5b5 f111d03b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/14 22:47 upstream 26d657410983 7aa5fe41 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/14 15:40 upstream 26d657410983 5462d470 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/13 20:16 upstream 348949d9a444 5462d470 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/12 22:33 upstream f4d0cc426f77 08362356 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/10/06 01:08 upstream 60a9483534ed 0a63fd36 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/24 02:47 upstream f10f0481a5b5 8cac236e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/23 10:10 upstream 58e2cf5d7946 8cac236e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/16 09:44 upstream ff1ffd71d5f0 07e953c1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/15 19:25 upstream 80be5998ad63 07e953c1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/13 17:02 upstream 6880fa6c5660 58d09404 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/08 10:04 upstream ac08b1c68d1b e2776ee4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/08 00:43 upstream 0bcfe68b8767 064c9eb7 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/07 00:13 upstream 4b93c544e90e 6ca60148 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/09/03 10:54 upstream a9c9a6f741cd d236a457 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/28 20:05 upstream 3f5ad13cb012 be2c130d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/26 20:06 upstream 1a6d80ff2419 b318694d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/26 10:24 upstream 73f3af7b4611 b599f2fc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/24 17:51 upstream 6e764bcd1cf7 b599f2fc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/24 13:45 upstream d5ae8d7f85b7 b599f2fc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/19 14:17 upstream d6d09a694205 e2da378b .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/18 23:54 upstream d6d09a694205 a2fe1cb5 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/15 09:54 upstream 0aa78d17099b 2489ab88 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/14 18:17 upstream ba31f97d43be 2489ab88 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/08/05 20:18 upstream e04480920d1e d2d6e680 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __delete_from_page_cache / shmem_getpage_gfp
2021/01/16 09:49 upstream 1d94330a437a 65a7a854 .config console log report info ci2-upstream-kcsan-gce
2020/09/24 00:41 upstream c9c9e6a49f89 54289b08 .config console log report info ci2-upstream-kcsan-gce
2020/06/18 18:31 upstream 1b5044021070 3ea11d3f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.