KCSAN: data-race in __filemap_fdatawrite_range / xas_clear

KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark (4)
Status: moderation: reported on 2020/12/07 11:36
Reported-by: syzbot+ce27d633852d92b68327@syzkaller.appspotmail.com
First crash: 292d, last: 27d

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark (3)	3	300d	335d	0/22	closed as invalid on 2020/06/18 14:13
upstream	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark (2)	4	412d	431d	0/22	auto-closed as invalid on 2020/05/07 21:06
upstream	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark	1	539d	539d	0/22	closed as invalid on 2019/11/19 13:44

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark

write to 0xffff88810eeeb3c4 of 4 bytes by task 12380 on cpu 0:
 xa_mark_clear lib/xarray.c:75 [inline]
 xas_clear_mark+0x16c/0x180 lib/xarray.c:921
 __test_set_page_writeback+0x3db/0x4f0 mm/page-writeback.c:2802
 ext4_bio_write_page+0xfe/0xe60 fs/ext4/page-io.c:450
 mpage_submit_page fs/ext4/inode.c:2102 [inline]
 mpage_process_page_bufs+0x4db/0x5f0 fs/ext4/inode.c:2216
 mpage_prepare_extent_to_map+0x4e6/0x640 fs/ext4/inode.c:2628
 ext4_writepages+0x674/0x1e70 fs/ext4/inode.c:2756
 do_writepages+0x7b/0x150 mm/page-writeback.c:2352
 __filemap_fdatawrite_range+0x19d/0x1d0 mm/filemap.c:424
 file_write_and_wait_range+0x9f/0x120 mm/filemap.c:763
 ext4_sync_file+0x105/0x6e0 fs/ext4/fsync.c:151
 vfs_fsync_range+0x107/0x120 fs/sync.c:200
 generic_write_sync include/linux/fs.h:2843 [inline]
 ext4_buffered_write_iter+0x38f/0x3e0 fs/ext4/file.c:277
 ext4_file_write_iter+0x48a/0x10b0 fs/ext4/file.c:502
 call_write_iter include/linux/fs.h:1977 [inline]
 do_iter_readv_writev+0x2cb/0x360 fs/read_write.c:740
 do_iter_write+0x112/0x4c0 fs/read_write.c:866
 vfs_iter_write+0x4c/0x70 fs/read_write.c:907
 iter_file_splice_write+0x40a/0x750 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0xf5/0x170 fs/splice.c:979
 do_sendfile+0x7a6/0xe20 fs/read_write.c:1260
 __do_sys_sendfile64 fs/read_write.c:1319 [inline]
 __se_sys_sendfile64 fs/read_write.c:1311 [inline]
 __x64_sys_sendfile64+0xa9/0x130 fs/read_write.c:1311
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88810eeeb3c4 of 4 bytes by task 12375 on cpu 1:
 xa_marked include/linux/xarray.h:416 [inline]
 mapping_tagged include/linux/fs.h:490 [inline]
 __filemap_fdatawrite_range+0x11c/0x1d0 mm/filemap.c:420
 filemap_write_and_wait_range+0x8b/0x2a0 mm/filemap.c:657
 __iomap_dio_rw+0x40a/0xa30 fs/iomap/direct-io.c:525
 iomap_dio_rw+0x30/0x70 fs/iomap/direct-io.c:641
 ext4_dio_write_iter fs/ext4/file.c:551 [inline]
 ext4_file_write_iter+0xe5d/0x10b0 fs/ext4/file.c:661
 call_write_iter include/linux/fs.h:1977 [inline]
 do_iter_readv_writev+0x2cb/0x360 fs/read_write.c:740
 do_iter_write+0x112/0x4c0 fs/read_write.c:866
 vfs_iter_write+0x4c/0x70 fs/read_write.c:907
 iter_file_splice_write+0x40a/0x750 fs/splice.c:689
 do_splice_from fs/splice.c:767 [inline]
 direct_splice_actor+0x80/0xa0 fs/splice.c:936
 splice_direct_to_actor+0x345/0x650 fs/splice.c:891
 do_splice_direct+0xf5/0x170 fs/splice.c:979
 do_sendfile+0x7a6/0xe20 fs/read_write.c:1260
 __do_sys_sendfile64 fs/read_write.c:1325 [inline]
 __se_sys_sendfile64 fs/read_write.c:1311 [inline]
 __x64_sys_sendfile64+0xf2/0x130 fs/read_write.c:1311
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 12375 Comm: syz-executor.4 Not tainted 5.12.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (29):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/03/18 20:49	upstream	bf152b0b	380dcc3e	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/03/14 19:50	upstream	88fe4924	cc1cff8f	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/03/13 01:29	upstream	f296bfd5	429d8a6b	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/02/23 06:05	upstream	b12b4724	fcc6d71b	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/02/17 19:35	upstream	f40ddce8	14052202	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/01/26 12:38	upstream	13391c60	52e37319	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/01/20 05:34	upstream	45dfb8a5	63631df1	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/01/18 05:04	upstream	19c329f6	fd103621	.config	log	report	info	KCSAN: data-race in __filemap_fdatawrite_range / xas_clear_mark
ci2-upstream-kcsan-gce	2021/01/12 19:27	upstream	e609571b	0cdd6185	.config	log	report	info
ci2-upstream-kcsan-gce	2020/12/29 13:44	upstream	dea8dcf2	80910769	.config	log	report	info
ci2-upstream-kcsan-gce	2020/12/25 22:37	upstream	5814bc2d	821e0b09	.config	log	report	info
ci2-upstream-kcsan-gce	2020/12/21 09:08	upstream	e37b12e4	04201c06	.config	log	report	info
ci2-upstream-kcsan-gce	2020/12/08 22:23	upstream	7d8761ba	40cc414d	.config	log	report	info
ci2-upstream-kcsan-gce	2020/11/09 22:00	upstream	3552c370	cba33199	.config	log	report	info
ci2-upstream-kcsan-gce	2020/11/08 21:05	upstream	9dbc1c03	cba33199	.config	log	report	info
ci2-upstream-kcsan-gce	2020/10/15 20:18	upstream	726eb70e	6e262c73	.config	log	report	info
ci2-upstream-kcsan-gce	2020/10/03 03:40	upstream	d3d45f82	2653fa43	.config	log	report	info
ci2-upstream-kcsan-gce	2020/09/18 13:47	upstream	10b82d51	38962c8b	.config	log	report	info
ci2-upstream-kcsan-gce	2020/09/15 21:40	upstream	fc4f28bb	18d7d030	.config	log	report	info
ci2-upstream-kcsan-gce	2020/09/13 22:28	upstream	84b13499	2d3cdd63	.config	log	report
ci2-upstream-kcsan-gce	2020/09/12 11:27	upstream	729e3d09	21d289c2	.config	log	report
ci2-upstream-kcsan-gce	2020/09/10 10:08	upstream	7fe10096	ac7ca78e	.config	log	report
ci2-upstream-kcsan-gce	2020/09/07 01:01	upstream	a8205e31	abf9ba4f	.config	log	report
ci2-upstream-kcsan-gce	2020/08/23 21:34	upstream	cb957121	a6d5f3ad	.config	log	report
ci2-upstream-kcsan-gce	2020/08/21 03:19	upstream	da2968ff	70160577	.config	log	report
ci2-upstream-kcsan-gce	2020/08/20 19:15	upstream	7eac66d0	70160577	.config	log	report
ci2-upstream-kcsan-gce	2020/08/04 12:45	upstream	c0842fbc	80a06902	.config	log	report
ci2-upstream-kcsan-gce	2020/07/26 09:34	upstream	04300d66	51265195	.config	log	report
ci2-upstream-kcsan-gce	2020/06/27 05:41	upstream	1590a2e1	ffec44b5	.config	log	report