syzbot


KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra (3)

Status: moderation: reported on 2025/08/10 06:19
Subsystems: mm ext4
[Documentation on labels]
Reported-by: syzbot+304b197a7d8f4ed89c75@syzkaller.appspotmail.com
First crash: 78d, last: 25d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra (2) ext4 6 1 212d 212d 0/29 auto-obsoleted due to no activity on 2025/05/24 13:53
upstream KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra fs mm 6 3 418d 447d 0/29 auto-obsoleted due to no activity on 2024/10/09 07:18

Sample crash report:
EXT4-fs: Ignoring removed nomblk_io_submit option
EXT4-fs: Ignoring removed nobh option
EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
==================================================================
BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra

write to 0xffff88810881fe10 of 8 bytes by task 6532 on cpu 1:
 page_cache_sync_ra+0x434/0x6c0 mm/readahead.c:584
 filemap_get_pages+0x2d0/0x1150 mm/filemap.c:2603
 filemap_splice_read+0x3a9/0x740 mm/filemap.c:2991
 ext4_file_splice_read+0x8f/0xb0 fs/ext4/file.c:158
 do_splice_read fs/splice.c:982 [inline]
 splice_direct_to_actor+0x26c/0x680 fs/splice.c:1086
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0xda/0x150 fs/splice.c:1230
 do_sendfile+0x380/0x650 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417
 x64_sys_call+0x2bb4/0x3000 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff88810881fe10 of 8 bytes by task 6528 on cpu 0:
 page_cache_sync_ra+0x434/0x6c0 mm/readahead.c:584
 filemap_get_pages+0x2d0/0x1150 mm/filemap.c:2603
 filemap_splice_read+0x3a9/0x740 mm/filemap.c:2991
 ext4_file_splice_read+0x8f/0xb0 fs/ext4/file.c:158
 do_splice_read fs/splice.c:982 [inline]
 splice_direct_to_actor+0x26c/0x680 fs/splice.c:1086
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0xda/0x150 fs/splice.c:1230
 do_sendfile+0x380/0x650 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417
 x64_sys_call+0x2bb4/0x3000 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000005 -> 0x0000000000000006

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 6528 Comm: syz.1.1058 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================
EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1058: Allocating blocks 1-17 which overlap fs metadata

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/02 21:37 upstream 7f7072574127 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/10/02 21:36 upstream 7f7072574127 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/30 03:23 upstream 1896ce8eb6c6 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/29 20:50 upstream e5f0a698b34e 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/28 03:16 upstream 51a24b7deaae 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/27 07:26 upstream 083fc6d7fa0d 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/25 06:05 upstream 4ea5af085908 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/18 07:38 upstream d4b779985a6c e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/09 00:04 upstream f777d1112ee5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/06 22:49 upstream b236920731dd d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/06 02:59 upstream c8ed9b5c02a5 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/05 10:20 upstream d69eb204c255 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/04 12:50 upstream b9a10f876409 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/09/02 14:15 upstream b320789d6883 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/08/17 20:47 upstream 99bade344cfa 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
2025/08/10 06:18 upstream 561c80369df0 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
* Struck through repros no longer work on HEAD.