KCSAN: data-race in __xa_clear_mark / xas_find_marked (2)

Status: moderation: reported on 2021/06/26 18:58
Subsystems: fs mm
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+03743c59b799c7b55cd4@syzkaller.appspotmail.com
First crash: 1920d, last: 15h28m
✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision
5ddf1a8e assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/05/31 20:53 2026/05/31 20:53 2026/05/31 21:09 6b4a8443
72fecced assessment-security 💥 KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/05/15 06:56 2026/05/15 06:56 2026/05/15 06:57 6ccb967e
a0741bf4 repro KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/03/07 06:26 2026/03/07 06:26 2026/03/07 06:28 31e9c887
be28beee assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/02/24 18:46 2026/02/24 18:46 2026/02/24 18:48 305c0ec5
f2b43e1e assessment-kcsan 💥 KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/01/09 22:47 2026/01/09 22:47 2026/01/09 23:06 75199160
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __xa_clear_mark / xas_find_marked fs mm 6 558 1921d 2221d 0/29 closed as invalid on 2021/06/07 13:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked

read-write to 0xffff888109966b50 of 8 bytes by task 51 on cpu 1:
 instrument_read_write include/linux/instrumented.h:56 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:84 [inline]
 ___test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:114 [inline]
 node_clear_mark lib/xarray.c:102 [inline]
 xas_clear_mark lib/xarray.c:922 [inline]
 __xa_clear_mark+0xf5/0x1e0 lib/xarray.c:2103
 __folio_end_writeback+0xe7/0x530 mm/page-writeback.c:2965
 folio_end_writeback_no_dropbehind+0x6d/0x200 mm/filemap.c:1672
 folio_end_writeback+0x1c/0x70 mm/filemap.c:1698
 ext4_finish_bio+0x454/0x770 fs/ext4/page-io.c:137
 ext4_release_io_end+0x9f/0x1f0 fs/ext4/page-io.c:151
 ext4_end_io_end+0x18d/0x240 fs/ext4/page-io.c:202
 ext4_do_flush_completed_IO fs/ext4/page-io.c:282 [inline]
 ext4_end_io_rsv_work+0x15b/0x1f0 fs/ext4/page-io.c:297
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 worker_thread+0x569/0x750 kernel/workqueue.c:3560
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff888109966b50 of 8 bytes by task 3623 on cpu 0:
 xas_find_chunk include/linux/xarray.h:1752 [inline]
 xas_find_marked+0x211/0x650 lib/xarray.c:1513
 find_get_entry mm/filemap.c:2087 [inline]
 filemap_get_folios_tag+0xf7/0x400 mm/filemap.c:2353
 __filemap_fdatawait_range mm/filemap.c:523 [inline]
 filemap_fdatawait_keep_errors+0x6c/0x190 mm/filemap.c:626
 wait_sb_inodes fs/fs-writeback.c:2920 [inline]
 sync_inodes_sb+0x424/0x4d0 fs/fs-writeback.c:3053
 sync_inodes_one_sb+0x3d/0x50 fs/sync.c:77
 __iterate_supers+0x205/0x360 fs/super.c:995
 iterate_supers+0x1f/0x30 fs/super.c:1011
 ksys_sync fs/sync.c:102 [inline]
 __ia32_sys_sync+0x5c/0xb0 fs/sync.c:111
 x64_sys_call+0x1e8b/0x2550 arch/x86/include/generated/asm/syscalls_64.h:163
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffffffffffe00000 -> 0xffffffffff800000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3623 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (5541):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/09 19:53 upstream 50d05c7c76c9 4e8b1cc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/09 17:35 upstream 893e11787f78 4e8b1cc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/09 01:10 upstream 893e11787f78 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/08 15:47 upstream 28924df2a08f 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/08 03:22 upstream 28924df2a08f 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/07 23:35 upstream df2908090cda 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/06 09:05 upstream 1fc5a74b108f 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/05 05:11 upstream bc35965f6940 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/04 10:50 upstream bc35965f6940 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/03 03:58 upstream 940de590b839 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/03 01:55 upstream 940de590b839 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/02 13:52 upstream 89a312991dc6 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/02 03:52 upstream 89a312991dc6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/09/01 02:09 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/31 08:13 upstream cee9395acd80 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/30 18:26 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/28 21:39 upstream c20313e98b04 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/28 04:17 upstream 1b78070aaef6 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/27 13:08 upstream 73e3f0710014 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/26 22:17 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/26 16:25 upstream 73ae59e97596 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/26 00:30 upstream 73ae59e97596 6a91adb4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/25 12:06 upstream 66498c75b4f8 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/25 00:47 upstream 66498c75b4f8 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/23 23:33 upstream 388b607d107c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/22 03:30 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/21 14:08 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/20 20:50 upstream cf62c7084acf 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/20 14:16 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/19 20:46 upstream e8bf40d15402 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/19 04:19 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/18 01:53 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/17 11:18 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/16 19:12 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/15 15:51 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/15 01:25 upstream dac3e89a2c90 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/14 17:14 upstream ad8d485e6658 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/14 15:55 upstream 3aa1dcaa4f6f 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/12 03:40 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/10 20:23 upstream d58772d8520c 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/10 10:41 upstream db2ddb871435 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/08/09 20:31 upstream b9b3e33b70b7 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/05/31 13:28 upstream 174914ea5513 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/05/14 17:50 upstream 66182ca873a4 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/03/07 00:29 upstream 651690480a96 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/02/24 10:41 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/01/09 20:12 upstream 372800cb95a3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/26 05:21 upstream b7050b242430 9d2ab5df .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/22 18:45 upstream 0c18f29aae7c aba2b2fb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/07 18:41 upstream 614124bea77e b718257f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
* Struck through repros no longer work on HEAD.