KCSAN: data-race in __xa_clear_mark / find_get_pages_range

KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
Status: moderation: reported on 2020/07/01 11:02
Reported-by: syzbot+ef472c87cd23676ef6fe@syzkaller.appspotmail.com
First crash: 261d, last: 10d

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag

write to 0xffff88810e746d70 of 8 bytes by interrupt on cpu 0:
 instrument_write include/linux/instrumented.h:42 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:79 [inline]
 __test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:109 [inline]
 node_clear_mark lib/xarray.c:100 [inline]
 xas_clear_mark lib/xarray.c:911 [inline]
 __xa_clear_mark+0xff/0x1e0 lib/xarray.c:1916
 test_clear_page_writeback+0x321/0x530 mm/page-writeback.c:2739
 end_page_writeback+0xd7/0x260 mm/filemap.c:1500
 page_endio+0x1be/0x200 mm/filemap.c:1532
 mpage_end_io+0x186/0x1d0 fs/mpage.c:54
 bio_endio+0x2b0/0x370 block/bio.c:1436
 req_bio_endio block/blk-core.c:264 [inline]
 blk_update_request+0x4f5/0xb40 block/blk-core.c:1455
 blk_mq_end_request+0x22/0x50 block/blk-mq.c:564
 lo_complete_rq+0xca/0x180 drivers/block/loop.c:497
 blk_complete_reqs block/blk-mq.c:576 [inline]
 blk_done_softirq+0x69/0x90 block/blk-mq.c:581
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:343
 run_ksoftirqd+0x13/0x20 kernel/softirq.c:650
 smpboot_thread_fn+0x34f/0x520 kernel/smpboot.c:165
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff88810e746d70 of 8 bytes by task 9997 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1660 [inline]
 xas_next_marked include/linux/xarray.h:1691 [inline]
 find_get_pages_range_tag+0x35c/0x600 mm/filemap.c:2109
 pagevec_lookup_range_tag+0x37/0x50 mm/swap.c:1122
 __filemap_fdatawait_range+0xab/0x1b0 mm/filemap.c:521
 filemap_fdatawait_range mm/filemap.c:556 [inline]
 filemap_write_and_wait_range+0x119/0x2a0 mm/filemap.c:666
 __generic_file_write_iter+0x261/0x340 mm/filemap.c:3618
 generic_file_write_iter+0x75/0x130 mm/filemap.c:3664
 call_write_iter include/linux/fs.h:1977 [inline]
 do_iter_readv_writev+0x2cb/0x360 fs/read_write.c:740
 do_iter_write+0x112/0x4c0 fs/read_write.c:866
 vfs_iter_write+0x4c/0x70 fs/read_write.c:907
 iter_file_splice_write+0x40a/0x750 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0xf5/0x170 fs/splice.c:979
 do_sendfile+0x7a6/0xe20 fs/read_write.c:1260
 __do_sys_sendfile64 fs/read_write.c:1325 [inline]
 __se_sys_sendfile64 fs/read_write.c:1311 [inline]
 __x64_sys_sendfile64+0xf2/0x130 fs/read_write.c:1311
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 9997 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (871):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/02/24 05:41	upstream	c03c21ba	fcc6d71b	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/23 02:39	upstream	b12b4724	fcc6d71b	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/22 13:30	upstream	31caf8b2	c26fb06b	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/22 07:32	upstream	31caf8b2	a659b3f1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/21 18:13	upstream	55f62bc8	a659b3f1	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/21 04:44	upstream	e767b353	3e5ed8b4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/20 09:51	upstream	f40ddce8	3e5ed8b4	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/19 14:52	upstream	f40ddce8	f689d40a	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/17 19:06	upstream	f40ddce8	14052202	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/17 07:07	upstream	f40ddce8	052f8d9f	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/15 01:17	upstream	f40ddce8	98682e5e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/13 22:15	upstream	ac30d8ce	98682e5e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/13 08:50	upstream	c6d8570e	98682e5e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/12 19:05	upstream	dcc0b490	98682e5e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/12 07:12	upstream	dcc0b490	a5f86b15	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/11 17:51	upstream	291009f6	a5f86b15	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/10 21:45	upstream	291009f6	a52ee10a	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/10 08:20	upstream	e0756cfc	9c8b8541	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/08 21:22	upstream	e0756cfc	2bd9619f	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/08 11:06	upstream	92bf2261	2ce644fc	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/07 08:30	upstream	825b5991	2ce644fc	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/06 23:13	upstream	964d069f	0655e081	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/06 11:52	upstream	1e0d27fc	0655e081	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/06 02:23	upstream	1e0d27fc	23a562df	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/05 12:42	upstream	dd86e7fa	23a562df	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/05 01:11	upstream	5c279c4c	23a562df	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/04 10:19	upstream	61556703	624dad51	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/02 22:46	upstream	3aaf0a27	624dad51	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/01 19:48	upstream	88bb507a	e6b95f32	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/01 13:09	upstream	1048ba83	e6b95f32	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/02/01 01:06	upstream	1048ba83	fc9fd31e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/31 11:54	upstream	6642d600	fc9fd31e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/30 22:32	upstream	8c947645	fc9fd31e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/30 08:44	upstream	0e9bcda5	fc9fd31e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/29 19:25	upstream	bec4c296	fc9fd31e	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/29 08:28	upstream	bec4c296	6593fd32	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/28 18:22	upstream	76c057c8	7df34f59	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/28 06:19	upstream	76c057c8	eefc07f2	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/27 19:45	upstream	76c057c8	a57db36f	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/27 18:04	upstream	2ab38c17	a57db36f	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/27 06:58	upstream	2ab38c17	a0ebf917	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/26 12:07	upstream	13391c60	52e37319	.config	log	report	info	KCSAN: data-race in __xa_clear_mark / find_get_pages_range_tag
ci2-upstream-kcsan-gce	2021/01/17 09:53	upstream	0da0a8a0	65a7a854	.config	log	report	info
ci2-upstream-kcsan-gce	2020/07/01 10:44	upstream	7c30b859	090d8f7b	.config	log	report
ci2-upstream-kcsan-gce	2020/06/27 10:51	upstream	1590a2e1	032b4239	.config	log	report
ci2-upstream-kcsan-gce	2020/06/18 14:11	upstream	1b504402	3ea11d3f	.config	log	report