syzbot


KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (5)

Status: auto-closed as invalid on 2021/06/28 10:29
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 513d, last: 452d
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (4) 4 560d 618d 0/23 auto-closed as invalid on 2021/03/12 12:46
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (2) 1 749d 749d 0/23 auto-closed as invalid on 2020/09/03 19:58
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (3) 1 694d 694d 0/23 auto-closed as invalid on 2020/10/29 03:12
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (6) 4 379d 397d 0/23 auto-closed as invalid on 2021/09/09 17:02
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma 1 827d 827d 0/23 closed as invalid on 2020/06/18 14:13
upstream KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma (7) 1 179d 179d 0/23 auto-closed as invalid on 2022/03/28 08:47

Sample crash report:
==================================================================
BUG: KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma

write to 0xffffea0004d32358 of 8 bytes by task 22446 on cpu 1:
 page_cache_delete_batch mm/filemap.c:318 [inline]
 delete_from_page_cache_batch+0x2fc/0x690 mm/filemap.c:349
 truncate_inode_pages_range+0x1a5/0xa80 mm/truncate.c:329
 truncate_inode_pages mm/truncate.c:427 [inline]
 truncate_pagecache+0x4f/0x70 mm/truncate.c:741
 ext4_setattr+0xa21/0xec0 fs/ext4/inode.c:5498
 notify_change+0x8a3/0xa80 fs/attr.c:398
 do_truncate+0xe8/0x130 fs/open.c:64
 handle_truncate fs/namei.c:3017 [inline]
 do_open fs/namei.c:3365 [inline]
 path_openat+0x1a79/0x20b0 fs/namei.c:3494
 do_filp_open+0xd9/0x1f0 fs/namei.c:3521
 do_sys_openat2+0xa3/0x250 fs/open.c:1187
 do_sys_open fs/open.c:1203 [inline]
 __do_sys_openat fs/open.c:1219 [inline]
 __se_sys_openat fs/open.c:1214 [inline]
 __x64_sys_openat+0xef/0x110 fs/open.c:1214
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffffea0004d32358 of 8 bytes by task 22465 on cpu 0:
 PageAnon include/linux/page-flags.h:484 [inline]
 page_address_in_vma+0x48/0x220 mm/rmap.c:711
 new_page+0x4b/0x170 mm/mempolicy.c:1233
 unmap_and_move mm/migrate.c:1169 [inline]
 migrate_pages+0x3b3/0x1540 mm/migrate.c:1447
 do_mbind+0xdcc/0xfd0 mm/mempolicy.c:1359
 kernel_mbind mm/mempolicy.c:1482 [inline]
 __do_sys_mbind mm/mempolicy.c:1489 [inline]
 __se_sys_mbind mm/mempolicy.c:1485 [inline]
 __x64_sys_mbind+0x142/0x170 mm/mempolicy.c:1485
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 22465 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/05/24 10:19 upstream 6ebb6814a1ef 3c7fef33 .config log report info KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma
ci2-upstream-kcsan-gce 2021/05/15 10:30 upstream 25a1298726e9 93f844de .config log report info KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma
ci2-upstream-kcsan-gce 2021/03/24 00:58 upstream 7acac4b3196c e613994b .config log report info KCSAN: data-race in delete_from_page_cache_batch / page_address_in_vma