KCSAN: data-race in __es_shrink / __es_shrink (4)

8 views
Skip to first unread message

syzbot

unread,
Dec 7, 2020, 6:38:12 AM12/7/20
to syzkaller-upst...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: a349e4c6 Merge tag 'xfs-5.10-fixes-7' of git://git.kernel...
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=16076cf5500000
kernel config: https://syzkaller.appspot.com/x/.config?x=89a86a84f1254241
dashboard link: https://syzkaller.appspot.com/bug?extid=07800a93ba2f50617862
compiler: clang version 12.0.0 (https://github.com/llvm/llvm-project.git 913f6005669cfb590c99865a90bc51ed0983d09d)
CC: [adilger...@dilger.ca linux...@vger.kernel.org linux-...@vger.kernel.org ty...@mit.edu]

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+07800a...@syzkaller.appspotmail.com

==================================================================
BUG: KCSAN: data-race in __es_shrink / __es_shrink

write to 0xffff88810393fc78 of 8 bytes by task 4882 on cpu 1:
__es_shrink+0x3a0/0x560 fs/ext4/extents_status.c:1536
ext4_es_scan+0x87/0x210 fs/ext4/extents_status.c:1580
do_shrink_slab+0x28b/0x550 mm/vmscan.c:513
shrink_slab+0xea/0x1c0 mm/vmscan.c:674
shrink_node_memcgs+0x27a/0x410 mm/vmscan.c:2656
shrink_node+0x9d2/0x11d0 mm/vmscan.c:2771
shrink_zones+0x29f/0x470 mm/vmscan.c:2974
do_try_to_free_pages+0x193/0x6e0 mm/vmscan.c:3029
try_to_free_pages+0x399/0x870 mm/vmscan.c:3268
__perform_reclaim mm/page_alloc.c:4330 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4351 [inline]
__alloc_pages_slowpath+0x52f/0x9c0 mm/page_alloc.c:4755
__alloc_pages_nodemask+0x269/0x350 mm/page_alloc.c:4965
alloc_pages_current+0x21d/0x310 mm/mempolicy.c:2271
alloc_pages include/linux/gfp.h:547 [inline]
__page_cache_alloc+0x4d/0xf0 mm/filemap.c:977
page_cache_ra_unbounded+0x1ae/0x4c0 mm/readahead.c:216
do_page_cache_ra+0xa7/0xc0 mm/readahead.c:267
do_sync_mmap_readahead mm/filemap.c:2645 [inline]
filemap_fault+0x6b8/0x12e0 mm/filemap.c:2733
ext4_filemap_fault+0x4b/0x60 fs/ext4/inode.c:6192
__do_fault mm/memory.c:3612 [inline]
do_read_fault+0x403/0x760 mm/memory.c:4006
do_fault mm/memory.c:4134 [inline]
handle_pte_fault mm/memory.c:4374 [inline]
__handle_mm_fault mm/memory.c:4509 [inline]
handle_mm_fault+0xfeb/0x1770 mm/memory.c:4607
do_user_addr_fault+0x33e/0x730 arch/x86/mm/fault.c:1372
handle_page_fault arch/x86/mm/fault.c:1429 [inline]
exc_page_fault+0x91/0x290 arch/x86/mm/fault.c:1485
asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:583

read to 0xffff88810393fc78 of 8 bytes by task 8043 on cpu 0:
__es_shrink+0x374/0x560 fs/ext4/extents_status.c:1536
ext4_es_scan+0x87/0x210 fs/ext4/extents_status.c:1580
do_shrink_slab+0x28b/0x550 mm/vmscan.c:513
shrink_slab+0xea/0x1c0 mm/vmscan.c:674
shrink_node_memcgs+0x27a/0x410 mm/vmscan.c:2656
shrink_node+0x9d2/0x11d0 mm/vmscan.c:2771
shrink_zones+0x29f/0x470 mm/vmscan.c:2974
do_try_to_free_pages+0x193/0x6e0 mm/vmscan.c:3029
try_to_free_pages+0x399/0x870 mm/vmscan.c:3268
__perform_reclaim mm/page_alloc.c:4330 [inline]
__alloc_pages_direct_reclaim mm/page_alloc.c:4351 [inline]
__alloc_pages_slowpath+0x52f/0x9c0 mm/page_alloc.c:4755
__alloc_pages_nodemask+0x269/0x350 mm/page_alloc.c:4965
alloc_pages_current+0x21d/0x310 mm/mempolicy.c:2271
alloc_pages include/linux/gfp.h:547 [inline]
__page_cache_alloc+0x4d/0xf0 mm/filemap.c:977
pagecache_get_page+0x554/0x980 mm/filemap.c:1828
filemap_fault+0xbe6/0x12e0 mm/filemap.c:2735
ext4_filemap_fault+0x4b/0x60 fs/ext4/inode.c:6192
__do_fault mm/memory.c:3612 [inline]
do_read_fault+0x403/0x760 mm/memory.c:4006
do_fault mm/memory.c:4134 [inline]
handle_pte_fault mm/memory.c:4374 [inline]
__handle_mm_fault mm/memory.c:4509 [inline]
handle_mm_fault+0xfeb/0x1770 mm/memory.c:4607
do_user_addr_fault+0x33e/0x730 arch/x86/mm/fault.c:1372
handle_page_fault arch/x86/mm/fault.c:1429 [inline]
exc_page_fault+0x91/0x290 arch/x86/mm/fault.c:1485
asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:583

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8043 Comm: in:imklog Not tainted 5.10.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Mar 12, 2021, 3:35:11 AM3/12/21
to syzkaller-upst...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages