syzbot


KCSAN: data-race in __xa_set_mark / xas_find_marked

Status: moderation: reported on 2020/09/25 08:57
Subsystems: fs mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+f512479ce46e8f0a9370@syzkaller.appspotmail.com
First crash: 2170d, last: 1d05h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
f4a882f3-09a4-42bf-a672-cd65286a86df assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/05/17 13:23 2026/05/17 13:23 2026/05/17 13:26 de5aae85e5f28e2fa1c7deefcc24fe286abe5140
dca34e09-b1bb-4091-a592-9faab6b057e4 repro KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/03/08 04:19 2026/03/08 04:19 2026/03/08 04:25 31e9c887f7dc24e04b3ca70d0d54fc34141844b0
2f4b1bb0-eb4c-441e-8a13-51b8fa90d17e assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/02/24 22:19 2026/02/24 22:19 2026/02/24 22:23 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
f306fa6c-1f35-4ebd-840a-3b17ae41ed5a assessment-kcsan 💥 KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/01/10 05:26 2026/01/10 05:26 2026/01/10 05:26 7519916073b761ced56a7b15fdeeb4674e8dc125 Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0, Status: RESOURCE_EXHAUSTED, Details: [map[@type:type.googleapis.com/google.rpc.Help links:[map[description:Learn more about Gemini API quotas url:https://ai.google.dev/gemini-api/docs/rate-limits]]] map[@type:type.googleapis.com/google.rpc.QuotaFailure violations:[map[quotaId:GenerateRequestsPerDayPerProjectPerModel quotaMetric:generativelanguage.googleapis.com/generate_requests_per_model_per_day]]] map[@type:type.googleapis.com/google.rpc.DebugInfo detail:[ORIGINAL ERROR] generic::resource_exhausted: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0 [google.rpc.error_details_ext] { message: "You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. \n* Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0" details { type_url: "type.googleapis.com/language_labs.genai.debug.GeminiApiDebugInfo" value: "RM\nK\nEgenerativelanguage.googleapis.com/generate_requests_per_model_per_day\030\000\"\000" } details { [type.googleapis.com/google.rpc.Help] { links { description: "Learn more about Gemini API quotas" url: "https://ai.google.dev/gemini-api/docs/rate-limits" } } } details { [type.googleapis.com/google.rpc.QuotaFailure] { violations { quota_metric: "generativelanguage.googleapis.com/generate_requests_per_model_per_day" quota_id: "GenerateRequestsPerDayPerProjectPerModel" } } } }]]

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked

read-write to 0xffff88810818cfd8 of 8 bytes by task 4695 on cpu 0:
 instrument_read_write include/linux/instrumented.h:56 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:84 [inline]
 ___test_and_set_bit include/asm-generic/bitops/instrumented-non-atomic.h:99 [inline]
 node_set_mark lib/xarray.c:95 [inline]
 xas_set_mark lib/xarray.c:893 [inline]
 __xa_set_mark+0xd2/0x1a0 lib/xarray.c:2082
 ref_tracker_debugfs_mark lib/ref_tracker.c:56 [inline]
 ref_tracker_dir_exit+0x5e/0x360 lib/ref_tracker.c:230
 free_netdev+0x305/0x460 net/core/dev.c:12198
 netdev_run_todo+0x7a8/0x8b0 net/core/dev.c:11725
 rtnl_unlock+0xe/0x20 net/core/rtnetlink.c:157
 default_device_exit_batch+0x5db/0x630 net/core/dev.c:13077
 ops_exit_list net/core/net_namespace.c:205 [inline]
 ops_undo_list+0x2ca/0x420 net/core/net_namespace.c:252
 cleanup_net+0x37c/0x5b0 net/core/net_namespace.c:702
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff88810818cfd8 of 8 bytes by task 17928 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1752 [inline]
 xas_find_marked+0x213/0x620 lib/xarray.c:1510
 xa_find_after+0xc6/0x1e0 lib/xarray.c:2251
 debugfs_reap_work+0x18c/0x1d0 lib/ref_tracker.c:510
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x4000020024000000 -> 0x4008020026000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 17928 Comm: kworker/1:8 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: events debugfs_reap_work
==================================================================

Crashes (1665):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/30 19:21 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/29 00:11 upstream 8fde5d1d47f6 4624854e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/24 10:46 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/18 04:41 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/17 00:33 upstream 6916d5703ddf de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/11 17:49 upstream 5d6919055dec 845acb1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/06 01:37 upstream 9207d47f966b 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/30 14:47 upstream e75a43c7cec4 a7464baf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/28 15:22 upstream 3b3bea6d4b9c ce741359 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/24 18:29 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/23 09:07 upstream 2a4c0c11c019 b10da5ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/17 01:12 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/13 03:04 upstream 028ef9c96e96 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/05 03:43 upstream 3aae9383f42f 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/04 05:49 upstream 631919fb12fe 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/31 09:42 upstream d0c3bcd5b897 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/28 16:37 upstream 7df48e363130 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/25 23:12 upstream d2a43e7f89da c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/23 22:57 upstream c369299895a5 4933dba2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/19 06:29 upstream 8a30aeb0d1b4 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/18 16:29 upstream a989fde763f4 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/08 05:47 upstream c23719abc330 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/04 19:24 upstream 0031c06807cf e6b6b96b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/02 19:49 upstream 11439c4635ed b9dd6534 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/26 15:25 upstream f4d0ec0aa20d ffa54287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/24 20:19 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/24 07:20 upstream 7dff99b35460 41d2fa6a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/21 08:35 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/20 20:24 upstream 8bf22c33e7a1 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/20 07:35 upstream 8bf22c33e7a1 17d780d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/17 04:40 upstream 970296997869 e439b951 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/14 09:33 upstream 770aaedb461a 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/13 09:00 upstream 37a93dd5c49b 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/02 10:17 upstream 18f7fcd5e69a 018ebef2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/31 03:00 upstream 283073725700 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/28 20:21 upstream 8dfce8991b95 004c195c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/27 12:32 upstream fcb70a56f4d8 9a514c2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/26 12:40 upstream 63804fed149a a4c52dd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/26 02:27 upstream 023777797472 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/25 04:10 upstream 5dbeeb268b63 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/20 10:14 upstream 24d479d26b25 06648d9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/19 00:01 upstream e84d960149e7 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/18 03:00 upstream d12453c7e281 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/17 00:03 upstream b62ce2547fe8 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/12 18:00 upstream 0f61b1860cc3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/10 08:43 upstream b6151c4e60e5 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/06 19:20 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/06 02:52 upstream 7f98ab9da046 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/02 19:01 upstream 9b0436804460 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2021/01/17 11:08 upstream 0da0a8a0a0e1 813be542 .config console log report info ci2-upstream-kcsan-gce
2020/09/24 17:40 upstream 171d4ff79f96 54289b08 .config console log report info ci2-upstream-kcsan-gce
2020/06/21 17:45 upstream 64677779e896 4f2acff9 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.