syzbot


KCSAN: data-race in __filemap_remove_folio / page_remove_rmap (2)

Status: auto-obsoleted due to no activity on 2023/11/25 14:34
Subsystems: iomap
[Documentation on labels]
First crash: 747d, last: 721d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __filemap_remove_folio / page_remove_rmap iomap 6 2 826d 827d 0/29 auto-obsoleted due to no activity on 2023/08/12 06:26
upstream KCSAN: data-race in __filemap_remove_folio / page_remove_rmap (3) iomap 6 6 645d 674d 0/29 auto-obsoleted due to no activity on 2024/02/08 19:56

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __filemap_remove_folio / page_remove_rmap

write to 0xffffea0004e564d8 of 8 bytes by task 4868 on cpu 1:
 page_cache_delete mm/filemap.c:145 [inline]
 __filemap_remove_folio+0x224/0x330 mm/filemap.c:225
 invalidate_complete_folio2 mm/truncate.c:584 [inline]
 invalidate_inode_pages2_range+0x404/0x720 mm/truncate.c:671
 kiocb_invalidate_pages+0x1b1/0x1e0 mm/filemap.c:2764
 __iomap_dio_rw+0x5a7/0x1080 fs/iomap/direct-io.c:638
 iomap_dio_rw+0x40/0x90 fs/iomap/direct-io.c:748
 ext4_dio_write_iter fs/ext4/file.c:605 [inline]
 ext4_file_write_iter+0xaaa/0x1200 fs/ext4/file.c:715
 do_iter_write+0x4b4/0x7b0 fs/read_write.c:860
 vfs_iter_write+0x56/0x70 fs/read_write.c:901
 iter_file_splice_write+0x462/0x7e0 fs/splice.c:736
 do_splice_from fs/splice.c:933 [inline]
 direct_splice_actor+0x8a/0xb0 fs/splice.c:1142
 splice_direct_to_actor+0x31d/0x690 fs/splice.c:1088
 do_splice_direct+0x10d/0x190 fs/splice.c:1194
 do_sendfile+0x3b6/0x9a0 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffea0004e564d8 of 8 bytes by task 4863 on cpu 0:
 folio_test_anon include/linux/page-flags.h:652 [inline]
 page_remove_rmap+0x135/0x2b0 mm/rmap.c:1445
 zap_pte_range mm/memory.c:1456 [inline]
 zap_pmd_range mm/memory.c:1573 [inline]
 zap_pud_range mm/memory.c:1602 [inline]
 zap_p4d_range mm/memory.c:1623 [inline]
 unmap_page_range+0xd3f/0x1db0 mm/memory.c:1644
 unmap_single_vma+0x142/0x1d0 mm/memory.c:1690
 zap_page_range_single+0x219/0x2b0 mm/memory.c:1766
 unmap_mapping_range_vma mm/memory.c:3456 [inline]
 unmap_mapping_range_tree+0xa6/0xe0 mm/memory.c:3473
 unmap_mapping_pages+0xc0/0xd0 mm/memory.c:3539
 invalidate_inode_pages2_range+0x203/0x720 mm/truncate.c:652
 kiocb_invalidate_pages+0x1b1/0x1e0 mm/filemap.c:2764
 __iomap_dio_rw+0x5a7/0x1080 fs/iomap/direct-io.c:638
 iomap_dio_rw+0x40/0x90 fs/iomap/direct-io.c:748
 ext4_dio_write_iter fs/ext4/file.c:605 [inline]
 ext4_file_write_iter+0xaaa/0x1200 fs/ext4/file.c:715
 do_iter_write+0x4b4/0x7b0 fs/read_write.c:860
 vfs_iter_write+0x56/0x70 fs/read_write.c:901
 iter_file_splice_write+0x462/0x7e0 fs/splice.c:736
 do_splice_from fs/splice.c:933 [inline]
 direct_splice_actor+0x8a/0xb0 fs/splice.c:1142
 splice_direct_to_actor+0x31d/0x690 fs/splice.c:1088
 do_splice_direct+0x10d/0x190 fs/splice.c:1194
 do_sendfile+0x3b6/0x9a0 fs/read_write.c:1254
 __do_sys_sendfile64 fs/read_write.c:1322 [inline]
 __se_sys_sendfile64 fs/read_write.c:1308 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1308
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0xffff88810646b960 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 4863 Comm: syz-executor.2 Not tainted 6.6.0-rc6-syzkaller-00285-g9c5d00cb7b6b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/21 14:31 upstream 9c5d00cb7b6b 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / page_remove_rmap
2023/10/03 01:17 upstream ce36c8b14987 65faba36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / page_remove_rmap
2023/09/25 07:32 upstream 8a511e7efc5a 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / page_remove_rmap
* Struck through repros no longer work on HEAD.