KCSAN: data-race in __xa_clear_mark / xas_find

KCSAN: data-race in __xa_clear_mark / xas_find_marked
Status: upstream: reported on 2020/08/10 12:41
Reported-by: syzbot+0d4522639ba75b02bf19@syzkaller.appspotmail.com
First crash: 209d, last: 13h28m

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked

write to 0xffff88810db57b30 of 8 bytes by interrupt on cpu 1:
 instrument_write include/linux/instrumented.h:42 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:79 [inline]
 __test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:109 [inline]
 node_clear_mark lib/xarray.c:100 [inline]
 xas_clear_mark lib/xarray.c:911 [inline]
 __xa_clear_mark+0xff/0x1e0 lib/xarray.c:1916
 test_clear_page_writeback+0x321/0x520 mm/page-writeback.c:2739
 end_page_writeback+0xd7/0x260 mm/filemap.c:1494
 end_buffer_async_write+0x1b0/0x250 fs/buffer.c:375
 end_bio_bh_io_sync+0x6f/0x90 fs/buffer.c:3005
 bio_endio+0x285/0x350 block/bio.c:1450
 req_bio_endio block/blk-core.c:264 [inline]
 blk_update_request+0x4e5/0xb00 block/blk-core.c:1462
 scsi_end_request+0x51/0x470 drivers/scsi/scsi_lib.c:570
 scsi_io_completion+0x104/0xfb0 drivers/scsi/scsi_lib.c:969
 scsi_finish_command+0x263/0x2b0 drivers/scsi/scsi.c:214
 scsi_softirq_done+0xdf/0x440 drivers/scsi/scsi_lib.c:1449
 blk_done_softirq+0x145/0x190 block/blk-mq.c:588
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:343
 asm_call_irq_on_stack+0xf/0x20
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0x32/0x40 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:226 [inline]
 __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:420
 common_interrupt+0xb5/0x130 arch/x86/kernel/irq.c:239
 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:619
 kcsan_atomic_next+0x0/0x40 kernel/kcsan/core.c:726
 hrtimer_active kernel/time/hrtimer.c:1445 [inline]
 hrtimer_try_to_cancel+0x9f/0x1f0 kernel/time/hrtimer.c:1162
 hrtimer_cancel kernel/time/hrtimer.c:1277 [inline]
 do_nanosleep+0x14e/0x3c0 kernel/time/hrtimer.c:1880
 hrtimer_nanosleep kernel/time/hrtimer.c:1931 [inline]
 __do_sys_nanosleep kernel/time/hrtimer.c:1965 [inline]
 __se_sys_nanosleep+0x20b/0x2a0 kernel/time/hrtimer.c:1952
 __x64_sys_nanosleep+0x2d/0x40 kernel/time/hrtimer.c:1952
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88810db57b30 of 8 bytes by task 8456 on cpu 0:
 xas_find_chunk include/linux/xarray.h:1660 [inline]
 xas_find_marked+0x22f/0x6b0 lib/xarray.c:1348
 xas_next_marked include/linux/xarray.h:1696 [inline]
 find_get_pages_range_tag+0x406/0x600 mm/filemap.c:2103
 pagevec_lookup_range_tag+0x37/0x50 mm/swap.c:1122
 __filemap_fdatawait_range+0xab/0x1b0 mm/filemap.c:519
 filemap_fdatawait_range mm/filemap.c:554 [inline]
 filemap_write_and_wait_range+0x119/0x2a0 mm/filemap.c:664
 filemap_write_and_wait include/linux/fs.h:2647 [inline]
 __sync_blockdev+0x51/0x70 fs/block_dev.c:505
 __sync_filesystem fs/sync.c:40 [inline]
 sync_filesystem+0x135/0x160 fs/sync.c:67
 ovl_sync_fs+0x94/0xc0 fs/overlayfs/super.c:286
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0x112/0x160 fs/sync.c:67
 generic_shutdown_super+0x3c/0x1f0 fs/super.c:448
 kill_anon_super+0x23/0x40 fs/super.c:1055
 deactivate_locked_super+0x6a/0xb0 fs/super.c:335
 deactivate_super+0x85/0x90 fs/super.c:366
 cleanup_mnt+0x277/0x2e0 fs/namespace.c:1118
 __cleanup_mnt+0x15/0x20 fs/namespace.c:1125
 task_work_run+0x8e/0x110 kernel/task_work.c:140
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
 exit_to_user_mode_prepare+0x16b/0x1a0 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8456 Comm: syz-executor.5 Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (261):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Maintainers
ci2-upstream-kcsan-gce	2021/01/18 22:04	upstream	1e2a199f	63631df1	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/17 10:02	upstream	0da0a8a0	813be542	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/16 20:40	upstream	54c6247d	65a7a854	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/16 06:58	upstream	1d94330a	65a7a854	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/15 17:32	upstream	5ee88057	65a7a854	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/13 23:32	upstream	65f0d241	269d24e8	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/13 20:48	upstream	65f0d241	a945f0a3	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/13 11:12	upstream	e609571b	a945f0a3	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/10 20:46	upstream	0653161f	2c1f2513	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/06 11:01	upstream	9f1abbe9	fff20c29	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/04 03:48	upstream	e71ba945	79264ae3	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2021/01/02 00:10	upstream	eda809ae	79264ae3	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/31 01:48	upstream	f6e1ea19	5cc121d6	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 13:24	upstream	dea8dcf2	80910769	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 12:07	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 10:29	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 09:27	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 08:25	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 07:31	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 06:28	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 04:10	upstream	dea8dcf2	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 02:51	upstream	c76e02c5	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/29 01:10	upstream	c76e02c5	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 23:49	upstream	c76e02c5	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 22:18	upstream	c76e02c5	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 21:09	upstream	c76e02c5	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 19:06	upstream	5c8fe583	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 17:26	upstream	5c8fe583	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 16:06	upstream	5c8fe583	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 15:56	upstream	5c8fe583	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/28 14:25	upstream	5c8fe583	8259d56c	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/26 12:30	upstream	40f78232	821e0b09	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/25 22:23	upstream	5814bc2d	821e0b09	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/24 22:40	upstream	3913d00a	c2c1d1dd	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/23 23:59	upstream	58cf05f5	c2c1d1dd	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/21 08:54	upstream	e37b12e4	04201c06	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/18 11:37	upstream	a409ed15	04201c06	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/16 19:53	upstream	5e60366d	04201c06	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/15 09:48	upstream	148842c9	97183ed7	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/14 18:51	upstream	2c85ebc5	97183ed7	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/13 18:27	upstream	6bff9bb8	8f160dd5	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/12/11 23:37	upstream	7f376f19	bca53db9	.config	log	report	info	akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/08/10 10:40	upstream	fc80c51f	7adc7b65	.config	log	report		akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/07/07 22:01	upstream	aa27b32b	08fc4ef1	.config	log	report		akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org
ci2-upstream-kcsan-gce	2020/06/23 17:16	upstream	3e08a952	6930bbef	.config	log	report		akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org