syzbot


KCSAN: data-race in __xa_clear_mark / xas_find_marked (2)

Status: moderation: reported on 2021/06/26 18:58
Subsystems: mm fs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+03743c59b799c7b55cd4@syzkaller.appspotmail.com
First crash: 1859d, last: 9h28m
✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision Error
5ddf1a8e-9d92-436f-9ac9-b27d549c610d assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/05/31 20:53 2026/05/31 20:53 2026/05/31 21:09 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
72fecced-8864-4f9f-aa9a-8feff775cf9c assessment-security 💥 KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/05/15 06:56 2026/05/15 06:56 2026/05/15 06:57 6ccb967e465e832a7bfd7a116ad00d52a0923a5d
failed to run ["git" "pull" "origin" "HEAD" "--depth=1" "--allow-unrelated-histories"]: exit status 128
From /app/workdir/repo/linux
 * branch                HEAD       -> FETCH_HEAD
Updating files:  ...
truncated to first 200 bytes; open job for full error
a0741bf4-ef63-405e-93ee-97475b6df3b8 repro KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/03/07 06:26 2026/03/07 06:26 2026/03/07 06:28 31e9c887f7dc24e04b3ca70d0d54fc34141844b0

			
		
be28beee-490e-4e38-957e-44e33e42eab1 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/02/24 18:46 2026/02/24 18:46 2026/02/24 18:48 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9

			
		
f2b43e1e-7b62-4577-8484-accbf9317c08 assessment-kcsan 💥 KCSAN: data-race in __xa_clear_mark / xas_find_marked (2) 2026/01/09 22:47 2026/01/09 22:47 2026/01/09 23:06 7519916073b761ced56a7b15fdeeb4674e8dc125
Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To moni...
truncated to first 200 bytes; open job for full error
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __xa_clear_mark / xas_find_marked fs mm 6 558 1859d 2160d 0/29 closed as invalid on 2021/06/07 13:50

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked

read-write to 0xffff888106d54478 of 8 bytes by task 12 on cpu 0:
 instrument_read_write include/linux/instrumented.h:56 [inline]
 __instrument_read_write_bitop include/asm-generic/bitops/instrumented-non-atomic.h:84 [inline]
 ___test_and_clear_bit include/asm-generic/bitops/instrumented-non-atomic.h:114 [inline]
 node_clear_mark lib/xarray.c:102 [inline]
 xas_clear_mark lib/xarray.c:922 [inline]
 __xa_clear_mark+0xf5/0x1e0 lib/xarray.c:2100
 __folio_end_writeback+0xf4/0x360 mm/page-writeback.c:2971
 folio_end_writeback_no_dropbehind+0x6d/0x1d0 mm/filemap.c:1666
 folio_end_writeback+0x1c/0x70 mm/filemap.c:1692
 ext4_finish_bio+0x454/0x770 fs/ext4/page-io.c:144
 ext4_release_io_end+0x9f/0x1f0 fs/ext4/page-io.c:159
 ext4_end_io_end+0x18d/0x240 fs/ext4/page-io.c:210
 ext4_do_flush_completed_IO fs/ext4/page-io.c:290 [inline]
 ext4_end_io_rsv_work+0x15b/0x1f0 fs/ext4/page-io.c:305
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405
 worker_thread+0x569/0x750 kernel/workqueue.c:3486
 kthread+0x221/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff888106d54478 of 8 bytes by task 3819 on cpu 1:
 xas_find_chunk include/linux/xarray.h:1752 [inline]
 xas_find_marked+0x211/0x650 lib/xarray.c:1510
 find_get_entry mm/filemap.c:2081 [inline]
 filemap_get_folios_tag+0xf7/0x400 mm/filemap.c:2348
 __filemap_fdatawait_range mm/filemap.c:523 [inline]
 filemap_fdatawait_keep_errors+0x6c/0x190 mm/filemap.c:626
 wait_sb_inodes fs/fs-writeback.c:2900 [inline]
 sync_inodes_sb+0x41e/0x4d0 fs/fs-writeback.c:3033
 sync_inodes_one_sb+0x3d/0x50 fs/sync.c:77
 __iterate_supers+0x110/0x1f0 fs/super.c:867
 iterate_supers+0x1f/0x30 fs/super.c:882
 ksys_sync fs/sync.c:102 [inline]
 __ia32_sys_sync+0x5c/0xb0 fs/sync.c:111
 x64_sys_call+0x2f3a/0x3020 arch/x86/include/generated/asm/syscalls_64.h:163
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffc0000000000000 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3819 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (5429):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/10 18:14 upstream d96fcfe1b7f9 99e64375 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/10 02:56 upstream a635d6748234 4167ee25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/09 21:15 upstream 2c7c88a412aa a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/09 13:21 upstream 0e35b9b6ec0f a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/08 10:52 upstream 0e35b9b6ec0f 88a4b44c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/07 17:34 upstream 0e35b9b6ec0f 76cdc0c0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/07 05:41 upstream 0e35b9b6ec0f 8e71ce95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/07 00:15 upstream 8cdeaa50eae8 8e71ce95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/06 16:17 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/06 07:14 upstream 8cdeaa50eae8 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/05 17:03 upstream f105f3631d51 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/05 00:11 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/04 10:49 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/03 19:51 upstream 71dfdfb0209b 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/03 06:53 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/02 19:27 upstream 4a50a141f05a 2b70b115 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/02 01:21 upstream 4a50a141f05a 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/01 17:26 upstream 665159e24674 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/07/01 05:38 upstream 665159e24674 00a5cf1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/30 17:58 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/30 01:57 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/29 14:02 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/29 03:02 upstream dc59e4fea9d8 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/28 14:11 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/27 09:26 upstream 5a66900afbd6 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/26 20:17 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/26 15:37 upstream 4edcdefd4083 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/25 18:23 upstream a142da0b2d32 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/25 04:59 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/23 11:42 upstream 502d801f0ab0 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/23 07:30 upstream 1dc18801be29 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/22 09:53 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/21 19:56 upstream 8cd8cf7a07e5 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/21 07:14 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/20 12:57 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/19 21:43 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/19 08:33 upstream 9ecfb2f7287a 570c59ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/18 23:44 upstream 83f1454877cc a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/18 09:48 upstream e771677c937d a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/18 07:14 upstream e771677c937d b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/17 14:17 upstream 66affa37cfac 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/17 02:32 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/16 12:56 upstream b1cbabe84ca1 a3998659 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/16 03:52 upstream a87bbc4578fd 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/14 18:09 upstream 8cd9520d35a6 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/14 02:07 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/13 10:59 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/06/13 06:48 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/05/31 13:28 upstream 174914ea5513 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/05/14 17:50 upstream 66182ca873a4 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/03/07 00:29 upstream 651690480a96 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/02/24 10:41 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2026/01/09 20:12 upstream 372800cb95a3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/26 05:21 upstream b7050b242430 9d2ab5df .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/22 18:45 upstream 0c18f29aae7c aba2b2fb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
2021/06/07 18:41 upstream 614124bea77e b718257f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __xa_clear_mark / xas_find_marked
* Struck through repros no longer work on HEAD.