syzbot


KCSAN: data-race in __zone_watermark_ok / get_page_from_freelist

Status: closed as invalid on 2019/10/15 15:50
Subsystems: mm
[Documentation on labels]
First crash: 1665d, last: 1654d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __zone_watermark_ok / get_page_from_freelist (2) mm 1 1654d 1654d 0/26 closed as invalid on 2019/11/19 13:44

Sample crash report:
IPVS: ftp: loaded support on port[0] = 21
==================================================================
BUG: KCSAN: data-race in __zone_watermark_ok / get_page_from_freelist

write to 0xffff88812fffcef0 of 8 bytes by task 7285 on cpu 1:
 del_page_from_free_area include/linux/mmzone.h:151 [inline]
 __rmqueue_smallest mm/page_alloc.c:2191 [inline]
 __rmqueue mm/page_alloc.c:2711 [inline]
 rmqueue_bulk mm/page_alloc.c:2738 [inline]
 __rmqueue_pcplist mm/page_alloc.c:3209 [inline]
 rmqueue_pcplist mm/page_alloc.c:3237 [inline]
 rmqueue mm/page_alloc.c:3259 [inline]
 get_page_from_freelist+0x1217/0x2300 mm/page_alloc.c:3677
 __alloc_pages_nodemask+0x255/0x4d0 mm/page_alloc.c:4714
 alloc_pages_current+0xd1/0x170 mm/mempolicy.c:2153
 alloc_pages include/linux/gfp.h:509 [inline]
 __page_cache_alloc mm/filemap.c:972 [inline]
 __page_cache_alloc+0x183/0x1a0 mm/filemap.c:957
 __do_page_cache_readahead+0x13e/0x390 mm/readahead.c:196
 ra_submit mm/internal.h:62 [inline]
 ondemand_readahead+0x35d/0x710 mm/readahead.c:492
 page_cache_async_readahead+0x22c/0x250 mm/readahead.c:574
 generic_file_buffered_read mm/filemap.c:2079 [inline]
 generic_file_read_iter+0xffc/0x1440 mm/filemap.c:2344
 ext4_file_read_iter fs/ext4/file.c:77 [inline]
 ext4_file_read_iter+0xfa/0x240 fs/ext4/file.c:65
 call_read_iter include/linux/fs.h:1864 [inline]
 new_sync_read+0x389/0x4f0 fs/read_write.c:414
 __vfs_read+0xb1/0xc0 fs/read_write.c:427
 integrity_kernel_read+0xa1/0xe0 security/integrity/iint.c:200
 ima_calc_file_hash_tfm+0x1b5/0x260 security/integrity/ima/ima_crypto.c:352
 ima_calc_file_shash security/integrity/ima/ima_crypto.c:381 [inline]
 ima_calc_file_hash+0x158/0xf10 security/integrity/ima/ima_crypto.c:446

read to 0xffff88812fffcef0 of 8 bytes by task 7308 on cpu 0:
 __zone_watermark_ok+0x106/0x240 mm/page_alloc.c:3444
 zone_watermark_fast mm/page_alloc.c:3494 [inline]
 get_page_from_freelist+0x629/0x2300 mm/page_alloc.c:3635
 __alloc_pages_nodemask+0x255/0x4d0 mm/page_alloc.c:4714
 __alloc_pages include/linux/gfp.h:473 [inline]
 __alloc_pages_node include/linux/gfp.h:486 [inline]
 kmem_getpages mm/slab.c:1366 [inline]
 cache_grow_begin+0x76/0x670 mm/slab.c:2599
 cache_alloc_refill mm/slab.c:2971 [inline]
 ____cache_alloc mm/slab.c:3054 [inline]
 ____cache_alloc mm/slab.c:3037 [inline]
 __do_cache_alloc mm/slab.c:3276 [inline]
 slab_alloc mm/slab.c:3311 [inline]
 __do_kmalloc mm/slab.c:3653 [inline]
 __kmalloc+0x59c/0x690 mm/slab.c:3664
 kmalloc include/linux/slab.h:557 [inline]
 kzalloc include/linux/slab.h:748 [inline]
 ops_init+0xf0/0x240 net/core/net_namespace.c:127
 setup_net+0x194/0x4b0 net/core/net_namespace.c:334
 copy_net_ns+0x1dc/0x336 net/core/net_namespace.c:475
 create_new_namespaces+0x2e2/0x4b0 kernel/nsproxy.c:103
 unshare_nsproxy_namespaces+0xb9/0x170 kernel/nsproxy.c:202
 ksys_unshare+0x2dc/0x710 kernel/fork.c:2841
 __do_sys_unshare kernel/fork.c:2909 [inline]
 __se_sys_unshare kernel/fork.c:2907 [inline]
 __x64_sys_unshare+0x28/0x40 kernel/fork.c:2907
 do_syscall_64+0xcf/0x2f0 arch/x86/entry/common.c:296

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7308 Comm: syz-executor.2 Not tainted 5.3.0+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/15 12:58 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 11:06 https://github.com/google/ktsan.git kcsan 81f95ec7998e b5268b89 .config console log report ci2-upstream-kcsan-gce
2019/10/15 10:02 https://github.com/google/ktsan.git kcsan 81f95ec7998e 05ad7292 .config console log report ci2-upstream-kcsan-gce
2019/10/14 21:35 https://github.com/google/ktsan.git kcsan d724f94f63de 05ad7292 .config console log report ci2-upstream-kcsan-gce
2019/10/14 17:37 https://github.com/google/ktsan.git kcsan d724f94f63de a6aef847 .config console log report ci2-upstream-kcsan-gce
2019/10/14 10:52 https://github.com/google/ktsan.git kcsan d724f94f63de a6aef847 .config console log report ci2-upstream-kcsan-gce
2019/10/14 02:38 https://github.com/google/ktsan.git kcsan d724f94f63de 2f661ec4 .config console log report ci2-upstream-kcsan-gce
2019/10/13 10:03 https://github.com/google/ktsan.git kcsan d724f94f63de 2f661ec4 .config console log report ci2-upstream-kcsan-gce
2019/10/13 08:59 https://github.com/google/ktsan.git kcsan d724f94f63de 2f661ec4 .config console log report ci2-upstream-kcsan-gce
2019/10/11 16:30 https://github.com/google/ktsan.git kcsan d724f94f63de 426631dd .config console log report ci2-upstream-kcsan-gce
2019/10/10 08:53 https://github.com/google/ktsan.git kcsan d724f94f63de d52eff28 .config console log report ci2-upstream-kcsan-gce
2019/10/09 23:32 https://github.com/google/ktsan.git kcsan d724f94f63de c4b9981b .config console log report ci2-upstream-kcsan-gce
2019/10/09 11:14 https://github.com/google/ktsan.git kcsan d724f94f63de 312c6a5a .config console log report ci2-upstream-kcsan-gce
2019/10/09 07:48 https://github.com/google/ktsan.git kcsan d724f94f63de 312c6a5a .config console log report ci2-upstream-kcsan-gce
2019/10/08 23:31 https://github.com/google/ktsan.git kcsan d724f94f63de b1ebbfef .config console log report ci2-upstream-kcsan-gce
2019/10/08 13:30 https://github.com/google/ktsan.git kcsan 3675607974a2 137e37ca .config console log report ci2-upstream-kcsan-gce
2019/10/07 15:50 https://github.com/google/ktsan.git kcsan c1c7521f03c7 28ac6e64 .config console log report ci2-upstream-kcsan-gce
2019/10/07 07:49 https://github.com/google/ktsan.git kcsan c1c7521f03c7 28ac6e64 .config console log report ci2-upstream-kcsan-gce
2019/10/06 08:05 https://github.com/google/ktsan.git kcsan c1c7521f03c7 f3f7d9c8 .config console log report ci2-upstream-kcsan-gce
2019/10/05 03:27 https://github.com/google/ktsan.git kcsan c1c7521f03c7 f3f7d9c8 .config console log report ci2-upstream-kcsan-gce
2019/10/05 03:19 https://github.com/google/ktsan.git kcsan c1c7521f03c7 f3f7d9c8 .config console log report ci2-upstream-kcsan-gce
2019/10/04 20:18 https://github.com/google/ktsan.git kcsan b4bd934316dc c86336cf .config console log report ci2-upstream-kcsan-gce
2019/10/04 19:33 https://github.com/google/ktsan.git kcsan b4bd934316dc c86336cf .config console log report ci2-upstream-kcsan-gce
2019/10/04 18:36 https://github.com/google/ktsan.git kcsan b4bd934316dc c86336cf .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.