syzbot


KCSAN: data-race in inc_node_page_state / release_pages

Status: auto-closed as invalid on 2020/04/18 00:14
Subsystems: mm
[Documentation on labels]
First crash: 1595d, last: 1537d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in inc_node_page_state / release_pages (2) mm 2 1445d 1455d 0/26 auto-closed as invalid on 2020/06/18 14:03
upstream KCSAN: data-race in inc_node_page_state / release_pages (3) mm 45 1247d 1234d 0/26 auto-closed as invalid on 2020/12/29 16:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in inc_node_page_state / release_pages

write to 0xffffea000456e600 of 8 bytes by task 9708 on cpu 1:
 instrument_write include/linux/instrumented.h:42 [inline]
 __clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:42 [inline]
 __ClearPageLRU include/linux/page-flags.h:320 [inline]
 release_pages+0x427/0x980 mm/swap.c:847
 __pagevec_release+0x53/0x90 mm/swap.c:881
 pagevec_release include/linux/pagevec.h:88 [inline]
 invalidate_mapping_pages+0x741/0x900 mm/truncate.c:620
 __generic_file_write_iter+0x365/0x380 mm/filemap.c:3428
 generic_file_write_iter+0x28c/0x38c mm/filemap.c:3470
 call_write_iter include/linux/fs.h:1902 [inline]
 do_iter_readv_writev+0x487/0x5b0 fs/read_write.c:693
 do_iter_write fs/read_write.c:970 [inline]
 do_iter_write+0x13b/0x3c0 fs/read_write.c:951
 vfs_iter_write+0x5c/0x80 fs/read_write.c:983
 iter_file_splice_write+0x530/0x840 fs/splice.c:760
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1037
 splice_direct_to_actor+0x22b/0x540 fs/splice.c:992
 do_splice_direct+0x161/0x1e0 fs/splice.c:1080
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffea000456e600 of 8 bytes by interrupt on cpu 0:
 page_pgdat include/linux/mm.h:1234 [inline]
 inc_node_page_state+0x1d/0xc0 mm/vmstat.c:589
 test_clear_page_writeback+0x33f/0x790 mm/page-writeback.c:2758
 end_page_writeback+0x9e/0x190 mm/filemap.c:1339
 end_buffer_async_write+0x2dc/0x3a0 fs/buffer.c:389
 end_bio_bh_io_sync+0x87/0xb0 fs/buffer.c:3018
 bio_endio+0x2fa/0x400 block/bio.c:1821
 req_bio_endio block/blk-core.c:245 [inline]
 blk_update_request+0x427/0x7b0 block/blk-core.c:1464
 blk_mq_end_request+0x52/0x300 block/blk-mq.c:546
 lo_complete_rq+0x136/0x1a0 drivers/block/loop.c:487
 blk_done_softirq+0x1eb/0x250 block/blk-softirq.c:37
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 run_ksoftirqd+0x46/0x60 kernel/softirq.c:603
 smpboot_thread_fn+0x37d/0x4a0 kernel/smpboot.c:165
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/08 00:06 https://github.com/google/ktsan.git kcsan 6cccb8ba35bd 06150bf1 .config console log report ci2-upstream-kcsan-gce
2019/12/28 08:17 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/12 01:03 https://github.com/google/ktsan.git kcsan ef798c30ba4e 0d368675 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.