syzbot

==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked

read-write to 0xffff88811a618b50 of 8 bytes by interrupt on cpu 0:
 instrument_read_write include/linux/instrumented.h:55 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:84 [inline]
 ___test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:114 [inline]
 node_clear_mark lib/xarray.c:102 [inline]
 xas_clear_mark lib/xarray.c:922 [inline]
 __xa_clear_mark+0xf5/0x1e0 lib/xarray.c:2100
 __folio_end_writeback+0xf7/0x3b0 mm/page-writeback.c:2992
 folio_end_writeback_no_dropbehind+0x6d/0x1b0 mm/filemap.c:1655
 folio_end_writeback+0x1c/0x70 mm/filemap.c:1681
 mpage_write_end_io+0x274/0x390 fs/mpage.c:65
 bio_endio+0x37e/0x420 block/bio.c:1672
 blk_update_request+0x336/0x730 block/blk-mq.c:998
 blk_mq_end_request+0x26/0x50 block/blk-mq.c:1160
 lo_complete_rq+0x98/0x140 drivers/block/loop.c:314
 blk_complete_reqs block/blk-mq.c:1235 [inline]
 blk_done_softirq+0x77/0xb0 block/blk-mq.c:1240
 handle_softirqs+0xba/0x290 kernel/softirq.c:622
 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063
 smpboot_thread_fn+0x32b/0x530 kernel/smpboot.c:160
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

read to 0xffff88811a618b50 of 8 bytes by task 6365 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1752 [inline]
 xas_find_marked+0x218/0x620 lib/xarray.c:1510
 find_get_entry+0x5d/0x380 mm/filemap.c:2057
 filemap_get_folios_tag+0x13b/0x210 mm/filemap.c:2325
 __filemap_fdatawait_range mm/filemap.c:522 [inline]
 file_write_and_wait_range+0x1ea/0x2c0 mm/filemap.c:788
 __generic_file_fsync+0x46/0x160 fs/libfs.c:1540
 fat_file_fsync+0x49/0x100 fs/fat/file.c:191
 vfs_fsync_range+0x10d/0x130 fs/sync.c:188
 generic_write_sync include/linux/fs.h:2617 [inline]
 generic_file_write_iter+0x1b8/0x2f0 mm/filemap.c:4447
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x52a/0x960 fs/read_write.c:686
 ksys_pwrite64 fs/read_write.c:793 [inline]
 __do_sys_pwrite64 fs/read_write.c:801 [inline]
 __se_sys_pwrite64 fs/read_write.c:798 [inline]
 __x64_sys_pwrite64+0xfd/0x150 fs/read_write.c:798
 x64_sys_call+0x9f7/0x3000 arch/x86/include/generated/asm/syscalls_64.h:19
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd8/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000001fffe -> 0x000000000001ff00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6365 Comm: syz.2.16376 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================