KCSAN: data-race in xas_clear_mark / xas_find_marked (2)

Status: moderation: reported on 2019/12/10 21:55
Subsystems: fs mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+6b653cb0a28eee8c400a@syzkaller.appspotmail.com
First crash: 2505d, last: 3d09h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision
17d15640 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/05/18 06:10 2026/05/18 06:10 2026/05/18 06:48 de5aae85
7d0095a6 repro KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/03/08 10:38 2026/03/08 10:38 2026/03/08 10:41 31e9c887
f45266b7 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/02/24 23:23 2026/02/24 23:23 2026/02/24 23:26 305c0ec5
20dbd26a assessment-kcsan 💥 KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/01/10 06:45 2026/01/10 06:45 2026/01/10 07:03 75199160
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in xas_clear_mark / xas_find_marked mm 6 3 2510d 2516d 0/29 closed as invalid on 2019/10/18 14:11

Sample crash report:
EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
==================================================================
BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked

write to 0xffff888105de825c of 4 bytes by task 5236 on cpu 1:
 xa_mark_clear lib/xarray.c:77 [inline]
 xas_clear_mark+0x16b/0x180 lib/xarray.c:932
 __folio_start_writeback+0x23f/0x370 mm/page-writeback.c:3026
 ext4_bio_write_folio+0x5a2/0xa10 fs/ext4/page-io.c:541
 mpage_submit_folio fs/ext4/inode.c:2094 [inline]
 mpage_process_page_bufs+0x484/0x5e0 fs/ext4/inode.c:2201
 mpage_prepare_extent_to_map+0x83e/0xca0 fs/ext4/inode.c:2743
 ext4_do_writepages+0x70f/0x2870 fs/ext4/inode.c:2884
 ext4_writepages+0x191/0x300 fs/ext4/inode.c:3032
 do_writepages+0x1b9/0x300 mm/page-writeback.c:2560
 filemap_writeback mm/filemap.c:387 [inline]
 filemap_fdatawrite_range mm/filemap.c:412 [inline]
 file_write_and_wait_range+0x178/0x2f0 mm/filemap.c:786
 ext4_sync_file+0x114/0x5c0 fs/ext4/fsync.c:145
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2686 [inline]
 ext4_buffered_write_iter+0x427/0x480 fs/ext4/file.c:360
 ext4_file_write_iter+0x36e/0x1020 fs/ext4/file.c:-1
 iter_file_splice_write+0x6a0/0xa60 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x158/0x280 fs/splice.c:1159
 splice_direct_to_actor+0x2f9/0x680 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888105de825c of 4 bytes by task 5221 on cpu 0:
 xa_marked include/linux/xarray.h:424 [inline]
 xas_find_marked+0x602/0x650 lib/xarray.c:1486
 find_get_entry mm/filemap.c:2087 [inline]
 filemap_get_folios_tag+0xf7/0x400 mm/filemap.c:2353
 __filemap_fdatawait_range mm/filemap.c:523 [inline]
 filemap_fdatawait_range+0x88/0x1e0 mm/filemap.c:558
 filemap_fdatawait include/linux/pagemap.h:51 [inline]
 __writeback_single_inode+0xd9/0x790 fs/fs-writeback.c:1798
 writeback_single_inode+0x16d/0x410 fs/fs-writeback.c:1926
 sync_inode_metadata+0x6e/0xa0 fs/fs-writeback.c:3100
 ext4_fsync_nojournal fs/ext4/fsync.c:85 [inline]
 ext4_sync_file+0x214/0x5c0 fs/ext4/fsync.c:150
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2686 [inline]
 ext4_buffered_write_iter+0x427/0x480 fs/ext4/file.c:360
 ext4_file_write_iter+0x36e/0x1020 fs/ext4/file.c:-1
 iter_file_splice_write+0x6a0/0xa60 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x158/0x280 fs/splice.c:1159
 splice_direct_to_actor+0x2f9/0x680 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x07000021 -> 0x02000021

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 5221 Comm: syz.5.532 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (4162):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/28 09:23 upstream 1b78070aaef6 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/08/10 17:30 upstream db2ddb871435 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/07/27 04:04 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/29 02:30 upstream dc59e4fea9d8 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/22 11:56 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/11 11:57 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/08 01:52 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/06 14:52 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/06/01 21:17 upstream e43ffb69e043 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/31 00:09 upstream 9d87d0fc8c8e 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/20 00:13 upstream 27fa82620cba 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/13 09:42 upstream 1d5dcaa3bd65 fec2a7ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/12 18:35 upstream c21b90f77687 07aeade5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/10 23:20 upstream 5d6919055dec 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/09 22:52 upstream e92b2872d0b1 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/07 17:28 upstream 8ab992f815d6 cbf9e0fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/06 13:20 upstream 74fe02ce122a 1dddfd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/05 23:19 upstream 9207d47f966b 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 22:08 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 18:36 upstream 6d35786de281 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 07:26 upstream 6d35786de281 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/03 18:07 upstream f377d0025eb0 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/03 10:31 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/01 19:47 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/01 11:22 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/30 05:05 upstream 57b8e2d666a3 005438fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/27 20:50 upstream 254f49634ee1 0f700595 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/19 11:11 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/12 13:41 upstream f5459048c38a 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/10 12:10 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/09 17:49 upstream 8b02520ec5f7 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/09 04:40 upstream 7f87a5ea75f0 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/05 01:55 upstream 7ca6d1cfec80 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/29 02:41 upstream cbfffcca2bf0 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/28 06:15 upstream 7df48e363130 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/28 00:02 upstream 7df48e363130 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/26 04:03 upstream d2a43e7f89da c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/17 05:11 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/08 10:26 upstream c23719abc330 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/02 06:55 upstream 39c633261414 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/26 16:45 upstream f4d0ec0aa20d ffa54287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/21 12:02 upstream d79526b89571 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/21 04:45 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/20 21:12 upstream 8bf22c33e7a1 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/10 04:43 upstream 8a5203c630c6 4ab09a02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/01 02:20 upstream ad9a728a3388 6b8752f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/01/03 15:10 upstream 805f9a061372 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2021/01/17 10:22 upstream 0da0a8a0a0e1 813be542 .config console log report info ci2-upstream-kcsan-gce
2019/10/22 14:09 https://github.com/google/ktsan.git kcsan 05f2236801fe 4ee855e7 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.