syzbot


KCSAN: data-race in delete_from_page_cache_batch / page_mapping (2)

Status: auto-closed as invalid on 2020/10/17 07:02
Subsystems: fs
[Documentation on labels]
First crash: 1343d, last: 1312d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in delete_from_page_cache_batch / page_mapping (3) ext4 1 1261d 1226d 0/26 auto-closed as invalid on 2020/12/21 11:15
upstream KCSAN: data-race in delete_from_page_cache_batch / page_mapping ext4 28 1457d 1630d 0/26 auto-closed as invalid on 2020/06/18 13:43
upstream KCSAN: data-race in delete_from_page_cache_batch / page_mapping (5) block 192 897d 1030d 0/26 auto-closed as invalid on 2021/12/06 07:47
upstream KCSAN: data-race in delete_from_page_cache_batch / page_mapping (4) isofs 3 1197d 1209d 0/26 auto-closed as invalid on 2021/02/08 17:09

Sample crash report:
 loop5: p2 < > p3 p4 < >
loop5: partition table partially beyond EOD, truncated
loop5: p3 start 4276224225 is beyond EOD, truncated
==================================================================
BUG: KCSAN: data-race in delete_from_page_cache_batch / page_mapping

write to 0xffffea00023b9758 of 8 bytes by task 5086 on cpu 0:
 page_cache_delete_batch mm/filemap.c:327 [inline]
 delete_from_page_cache_batch+0x39f/0x850 mm/filemap.c:358
 truncate_inode_pages_range+0x482/0xf70 mm/truncate.c:366
 truncate_inode_pages+0x20/0x30 mm/truncate.c:476
 kill_bdev fs/block_dev.c:86 [inline]
 __blkdev_put+0x205/0x4a0 fs/block_dev.c:1778
 blkdev_put+0x1e6/0x210 fs/block_dev.c:1846
 blkdev_close+0x47/0x50 fs/block_dev.c:1853
 __fput+0x246/0x4d0 fs/file_table.c:281
 ____fput+0x11/0x20 fs/file_table.c:314
 task_work_run+0x8e/0x110 kernel/task_work.c:141
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:163 [inline]
 exit_to_user_mode_prepare+0x1b2/0x210 kernel/entry/common.c:190
 syscall_exit_to_user_mode+0x16/0x30 kernel/entry/common.c:265
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffea00023b9758 of 8 bytes by task 19181 on cpu 1:
 page_mapping+0x13b/0x200 mm/util.c:693
 page_evictable mm/internal.h:86 [inline]
 __pagevec_lru_add_fn+0xb1/0x580 mm/swap.c:1009
 pagevec_lru_move_fn+0xff/0x190 mm/swap.c:227
 __pagevec_lru_add mm/swap.c:1031 [inline]
 lru_add_drain_cpu+0x75/0x2e0 mm/swap.c:632
 lru_add_drain+0x21/0x60 mm/swap.c:736
 exit_mmap+0x199/0x3b0 mm/mmap.c:3178
 __mmput+0xa2/0x220 kernel/fork.c:1076
 mmput+0x38/0x40 kernel/fork.c:1097
 exit_mm+0x2c8/0x330 kernel/exit.c:483
 do_exit+0x40f/0x16c0 kernel/exit.c:793
 do_group_exit+0xcb/0x180 kernel/exit.c:903
 get_signal+0xe9f/0x1650 kernel/signal.c:2757
 arch_do_signal+0x25/0x270 arch/x86/kernel/signal.c:811
 exit_to_user_mode_loop kernel/entry/common.c:159 [inline]
 exit_to_user_mode_prepare+0x124/0x210 kernel/entry/common.c:190
 syscall_exit_to_user_mode+0x16/0x30 kernel/entry/common.c:265
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19181 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/12 07:01 upstream e8878ab82545 79fb24e2 .config console log report ci2-upstream-kcsan-gce
2020/08/11 23:52 upstream bb5baaa9238e bb3e5fe6 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.