KCSAN: data-race in __xa_clear_mark / xas_find

KCSAN: data-race in __xa_clear_mark / xas_find_marked (2)
Status: moderation: reported on 2021/06/26 18:58
Reported-by: syzbot+03743c59b799c7b55cd4@syzkaller.appspotmail.com
First crash: 112d, last: now

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in __xa_clear_mark / xas_find_marked				558	112d	413d	0/22	closed as invalid on 2021/06/07 13:50

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked

write to 0xffff888106355d70 of 8 bytes by task 1142 on cpu 0:
 instrument_write include/linux/instrumented.h:42 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:79 [inline]
 __test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:109 [inline]
 node_clear_mark lib/xarray.c:100 [inline]
 xas_clear_mark lib/xarray.c:911 [inline]
 __xa_clear_mark+0x1d9/0x2c0 lib/xarray.c:1917
 test_clear_page_writeback+0x25a/0x600 mm/page-writeback.c:2783
 end_page_writeback+0xd7/0x1b0 mm/filemap.c:1603
 ext4_finish_bio+0x3e2/0x430 fs/ext4/page-io.c:143
 ext4_release_io_end+0x98/0x200 fs/ext4/page-io.c:158
 ext4_end_io_end fs/ext4/page-io.c:192 [inline]
 ext4_do_flush_completed_IO fs/ext4/page-io.c:257 [inline]
 ext4_end_io_rsv_work+0x306/0x360 fs/ext4/page-io.c:271
 process_one_work+0x402/0x910 kernel/workqueue.c:2297
 worker_thread+0x636/0xae0 kernel/workqueue.c:2444
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

read to 0xffff888106355d70 of 8 bytes by task 5938 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1662 [inline]
 xas_find_marked+0x195/0x5f0 lib/xarray.c:1349
 find_get_entry mm/filemap.c:1980 [inline]
 find_get_pages_range_tag+0x102/0x3a0 mm/filemap.c:2271
 pagevec_lookup_range_tag+0x37/0x50 mm/swap.c:1114
 __filemap_fdatawait_range+0xcb/0x1d0 mm/filemap.c:528
 filemap_fdatawait_range mm/filemap.c:563 [inline]
 filemap_write_and_wait_range+0x298/0x3c0 mm/filemap.c:713
 filemap_write_and_wait include/linux/fs.h:2865 [inline]
 ext4_ioctl_setflags fs/ext4/ioctl.c:397 [inline]
 ext4_fileattr_set+0x591/0xec0 fs/ext4/ioctl.c:762
 vfs_fileattr_set+0x5b7/0x5f0 fs/ioctl.c:700
 do_vfs_ioctl+0x111b/0x14c0
 __do_sys_ioctl fs/ioctl.c:872 [inline]
 __se_sys_ioctl+0x83/0x140 fs/ioctl.c:860
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffffffffffffe000 -> 0xfffffffff0000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 5938 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (380):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/09/27 23:35	upstream	0513e464f900	78494d16	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/27 10:18	upstream	5816b3e6577e	78494d16	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/26 20:17	upstream	996148ee05d0	78494d16	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/26 07:47	upstream	a3b397b4fffb	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/25 18:38	upstream	85736168463d	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/25 00:09	upstream	7d42e9818258	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/24 09:05	upstream	f9e36107ec70	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/23 19:35	upstream	f10f0481a5b5	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/23 06:31	upstream	58e2cf5d7946	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/22 17:12	upstream	cf1d2c3e7e2f	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/22 13:59	upstream	92477dd1faa6	8cac236e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/22 02:56	upstream	92477dd1faa6	169724fe	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/21 12:47	upstream	d9fb678414c0	169724fe	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/21 11:43	upstream	d9fb678414c0	af796c18	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/20 20:19	upstream	e8f71f89236e	af796c18	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/20 07:59	upstream	e4e737bb5c17	3d9c9a2a	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/19 23:15	upstream	20621d2f27a0	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/19 10:06	upstream	d4d016caa4b8	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/18 20:31	upstream	93ff9f13be91	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/18 05:51	upstream	4357f03d6611	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/17 16:42	upstream	ddf21bd8ab98	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/17 13:58	upstream	bdb575f87217	70b76c1d	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/17 02:03	upstream	bdb575f87217	5b989942	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/17 02:02	upstream	bdb575f87217	5b989942	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/16 13:37	upstream	ff1ffd71d5f0	aae492f2	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/16 08:11	upstream	ff1ffd71d5f0	07e953c1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/15 19:07	upstream	80be5998ad63	07e953c1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/15 05:43	upstream	3ca706c189db	07e953c1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/14 16:29	upstream	1619b69edce1	07e953c1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/14 15:12	upstream	d0ee23f9d78b	07e953c1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/14 08:15	upstream	d0ee23f9d78b	58d09404	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/13 19:02	upstream	316346243be6	58d09404	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/13 17:00	upstream	6880fa6c5660	58d09404	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/13 02:03	upstream	6880fa6c5660	3ce60af8	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/12 12:52	upstream	78e709522d2c	3ce60af8	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/11 23:39	upstream	c605c39677b9	3ce60af8	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/11 10:28	upstream	926de8c4326c	3ce60af8	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/10 20:53	upstream	e99f23c5bf59	5ae8508a	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/10 09:18	upstream	bf9f243f23e6	5ae8508a	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/10 01:16	upstream	bf9f243f23e6	e2776ee4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/09 12:15	upstream	a3fa7a101dcf	e2776ee4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/08 22:57	upstream	2d338201d531	e2776ee4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/08 09:53	upstream	ac08b1c68d1b	e2776ee4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/08 09:52	upstream	ac08b1c68d1b	e2776ee4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/07 20:47	upstream	0bcfe68b8767	064c9eb7	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/07 19:01	upstream	0bcfe68b8767	6ca60148	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/06 23:13	upstream	4b93c544e90e	6ca60148	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/06 10:01	upstream	27151f177827	6ca60148	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/03 10:22	upstream	a9c9a6f741cd	d236a457	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/02 21:51	upstream	4ac6d90867a4	f62a5829	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/02 09:46	upstream	4ac6d90867a4	d0f0970b	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/09/02 07:53	upstream	4ac6d90867a4	7eb7e152	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/06/26 05:21	upstream	b7050b242430	9d2ab5df	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/06/22 18:45	upstream	0c18f29aae7c	aba2b2fb	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked
ci2-upstream-kcsan-gce	2021/06/07 18:41	upstream	614124bea77e	b718257f	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / xas_find_marked