syzbot


KCSAN: data-race in xas_clear_mark / xas_find_marked (2)

Status: moderation: reported on 2019/12/10 21:55
Subsystems: fs mm
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+6b653cb0a28eee8c400a@syzkaller.appspotmail.com
First crash: 2402d, last: 1d02h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
17d15640-9e88-4ac2-a409-e8bfef50fb11 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/05/18 06:10 2026/05/18 06:10 2026/05/18 06:48 de5aae85e5f28e2fa1c7deefcc24fe286abe5140
7d0095a6-302a-4865-909d-c423e820d0c0 repro KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/03/08 10:38 2026/03/08 10:38 2026/03/08 10:41 31e9c887f7dc24e04b3ca70d0d54fc34141844b0
f45266b7-2b9d-40ce-a33c-eaa16a2928af assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/02/24 23:23 2026/02/24 23:23 2026/02/24 23:26 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
20dbd26a-f802-4d98-b98a-bbdc58f49319 assessment-kcsan 💥 KCSAN: data-race in xas_clear_mark / xas_find_marked (2) 2026/01/10 06:45 2026/01/10 06:45 2026/01/10 07:03 7519916073b761ced56a7b15fdeeb4674e8dc125 Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0, Status: RESOURCE_EXHAUSTED, Details: [map[@type:type.googleapis.com/google.rpc.Help links:[map[description:Learn more about Gemini API quotas url:https://ai.google.dev/gemini-api/docs/rate-limits]]] map[@type:type.googleapis.com/google.rpc.QuotaFailure violations:[map[quotaId:GenerateRequestsPerDayPerProjectPerModel quotaMetric:generativelanguage.googleapis.com/generate_requests_per_model_per_day]]] map[@type:type.googleapis.com/google.rpc.DebugInfo detail:[ORIGINAL ERROR] generic::resource_exhausted: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0 [google.rpc.error_details_ext] { message: "You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. \n* Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0" details { type_url: "type.googleapis.com/language_labs.genai.debug.GeminiApiDebugInfo" value: "RM\nK\nEgenerativelanguage.googleapis.com/generate_requests_per_model_per_day\030\000\"\000" } details { [type.googleapis.com/google.rpc.Help] { links { description: "Learn more about Gemini API quotas" url: "https://ai.google.dev/gemini-api/docs/rate-limits" } } } details { [type.googleapis.com/google.rpc.QuotaFailure] { violations { quota_metric: "generativelanguage.googleapis.com/generate_requests_per_model_per_day" quota_id: "GenerateRequestsPerDayPerProjectPerModel" } } } }]]
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in xas_clear_mark / xas_find_marked mm 6 3 2407d 2413d 0/29 closed as invalid on 2019/10/18 14:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked

read-write to 0xffff88811ad7c480 of 8 bytes by task 5807 on cpu 0:
 instrument_read_write include/linux/instrumented.h:56 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:84 [inline]
 ___test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:114 [inline]
 node_clear_mark lib/xarray.c:102 [inline]
 xas_clear_mark+0x91/0x180 lib/xarray.c:922
 __folio_start_writeback+0x270/0x370 mm/page-writeback.c:3028
 ext4_bio_write_folio+0x5a6/0xa20 fs/ext4/page-io.c:603
 mpage_submit_folio fs/ext4/inode.c:2103 [inline]
 mpage_map_and_submit_buffers fs/ext4/inode.c:2346 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2536 [inline]
 ext4_do_writepages+0x1422/0x2770 fs/ext4/inode.c:2948
 ext4_writepages+0x18f/0x320 fs/ext4/inode.c:3042
 do_writepages+0x1c6/0x310 mm/page-writeback.c:2571
 filemap_writeback mm/filemap.c:388 [inline]
 filemap_fdatawrite_range mm/filemap.c:413 [inline]
 file_write_and_wait_range+0x178/0x2f0 mm/filemap.c:787
 mmb_fsync_noflush+0x48/0x140 fs/buffer.c:645
 ext4_fsync_nojournal fs/ext4/fsync.c:92 [inline]
 ext4_sync_file+0x1f1/0x6b0 fs/ext4/fsync.c:160
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2654 [inline]
 ext4_buffered_write_iter+0x447/0x4c0 fs/ext4/file.c:322
 ext4_file_write_iter+0x380/0xfa0 fs/ext4/file.c:-1
 do_iter_readv_writev+0x4fd/0x5a0 fs/read_write.c:-1
 vfs_writev+0x2e1/0x900 fs/read_write.c:1059
 do_pwritev fs/read_write.c:1155 [inline]
 __do_sys_pwritev2 fs/read_write.c:1213 [inline]
 __se_sys_pwritev2+0xfc/0x1c0 fs/read_write.c:1204
 __x64_sys_pwritev2+0x67/0x80 fs/read_write.c:1204
 x64_sys_call+0xe07/0x3020 arch/x86/include/generated/asm/syscalls_64.h:329
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811ad7c480 of 8 bytes by task 5823 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1752 [inline]
 xas_find_marked+0x213/0x620 lib/xarray.c:1510
 find_get_entry mm/filemap.c:2070 [inline]
 filemap_get_folios_tag+0xfa/0x430 mm/filemap.c:2338
 mpage_prepare_extent_to_map+0x328/0xc50 fs/ext4/inode.c:2655
 ext4_do_writepages+0x6fe/0x2770 fs/ext4/inode.c:2894
 ext4_writepages+0x18f/0x320 fs/ext4/inode.c:3042
 do_writepages+0x1c6/0x310 mm/page-writeback.c:2571
 filemap_writeback mm/filemap.c:388 [inline]
 filemap_fdatawrite_range mm/filemap.c:413 [inline]
 file_write_and_wait_range+0x178/0x2f0 mm/filemap.c:787
 mmb_fsync_noflush+0x48/0x140 fs/buffer.c:645
 ext4_fsync_nojournal fs/ext4/fsync.c:92 [inline]
 ext4_sync_file+0x1f1/0x6b0 fs/ext4/fsync.c:160
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2654 [inline]
 ext4_buffered_write_iter+0x447/0x4c0 fs/ext4/file.c:322
 ext4_file_write_iter+0x380/0xfa0 fs/ext4/file.c:-1
 iter_file_splice_write+0x6c4/0xa80 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x156/0x2a0 fs/splice.c:1159
 splice_direct_to_actor+0x311/0x670 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffffff8007fff800 -> 0xfffff00007fff800

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 5823 Comm: syz.6.732 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (4152):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/20 00:13 upstream 27fa82620cba 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/13 09:42 upstream 1d5dcaa3bd65 fec2a7ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/12 18:35 upstream c21b90f77687 07aeade5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/10 23:20 upstream 5d6919055dec 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/09 22:52 upstream e92b2872d0b1 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/07 17:28 upstream 8ab992f815d6 cbf9e0fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/06 13:20 upstream 74fe02ce122a 1dddfd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/05 23:19 upstream 9207d47f966b 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 22:08 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 18:36 upstream 6d35786de281 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/04 07:26 upstream 6d35786de281 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/03 18:07 upstream f377d0025eb0 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/03 10:31 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/01 19:47 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/05/01 11:22 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/30 05:05 upstream 57b8e2d666a3 005438fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/27 20:50 upstream 254f49634ee1 0f700595 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/19 11:11 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/12 13:41 upstream f5459048c38a 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/10 12:10 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/09 17:49 upstream 8b02520ec5f7 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/09 04:40 upstream 7f87a5ea75f0 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/04/05 01:55 upstream 7ca6d1cfec80 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/29 02:41 upstream cbfffcca2bf0 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/28 06:15 upstream 7df48e363130 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/28 00:02 upstream 7df48e363130 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/26 04:03 upstream d2a43e7f89da c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/17 05:11 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/08 10:26 upstream c23719abc330 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/03/02 06:55 upstream 39c633261414 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/26 16:45 upstream f4d0ec0aa20d ffa54287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/21 12:02 upstream d79526b89571 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/21 04:45 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/20 21:12 upstream 8bf22c33e7a1 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/10 04:43 upstream 8a5203c630c6 4ab09a02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/02/01 02:20 upstream ad9a728a3388 6b8752f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/01/21 07:40 upstream 6c790212c588 6f1aa2f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/01/18 02:59 upstream d12453c7e281 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2026/01/03 15:10 upstream 805f9a061372 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/12/31 12:27 upstream c8ebd433459b d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/12/27 23:58 upstream d26143bb38e2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/11/24 00:12 upstream d0e88704d96c 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/11/14 09:01 upstream 6da43bbeb691 07e030de .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/11/06 13:46 upstream dc77806cf3b4 a6c9c731 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/11/02 21:02 upstream 6146a0f1dfae 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2025/10/27 19:25 upstream dcb6fa37fd7b fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in xas_clear_mark / xas_find_marked
2021/01/17 10:22 upstream 0da0a8a0a0e1 813be542 .config console log report info ci2-upstream-kcsan-gce
2019/10/22 14:09 https://github.com/google/ktsan.git kcsan 05f2236801fe 4ee855e7 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.