KCSAN: data-race in __filemap_remove_folio / folio_mapping (2)

Status: upstream: reported on 2023/04/24 07:19
Subsystems: mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+606f94dfeaaa45124c90@syzkaller.appspotmail.com
First crash: 1407d, last: 2h08m
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
5b1f07d4 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in __filemap_remove_folio / folio_mapping (2) 2026/05/21 19:03 2026/05/21 19:03 2026/05/21 19:30 d5742584
25562d31 repro KCSAN: data-race in __filemap_remove_folio / folio_mapping (2) 2026/03/10 13:50 2026/03/12 16:01 2026/03/12 16:15 86914af9
10ce9772 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __filemap_remove_folio / folio_mapping (2) 2026/01/14 20:44 2026/01/14 20:44 2026/01/14 20:47 a9d6a792
Discussions (21)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (May 2026) 0 (1) 2026/05/23 12:32
[syzbot] Monthly mm report (Apr 2026) 0 (1) 2026/04/22 09:08
[PATCH] mm: fix data race in __filemap_remove_folio / folio_mapping 3 (3) 2026/03/23 10:47
[syzbot] Monthly mm report (Mar 2026) 0 (1) 2026/03/23 08:58
[syzbot] Monthly mm report (Feb 2026) 0 (1) 2026/02/18 13:20
[syzbot] Monthly mm report (Jan 2026) 0 (1) 2026/01/19 08:18
[syzbot] Monthly mm report (Dec 2025) 0 (1) 2025/12/18 10:06
[syzbot] Monthly mm report (Sep 2025) 0 (1) 2025/09/15 06:54
[syzbot] Monthly mm report (Aug 2025) 0 (1) 2025/08/14 12:42
[syzbot] Monthly mm report (Jul 2025) 0 (1) 2025/07/14 07:23
[syzbot] Monthly mm report (Jun 2025) 0 (1) 2025/06/13 12:25
[syzbot] Monthly mm report (May 2025) 0 (1) 2025/05/12 13:34
[syzbot] Monthly mm report (Apr 2025) 0 (1) 2025/04/09 07:11
[syzbot] Monthly mm report (Oct 2024) 0 (1) 2024/10/03 09:02
[syzbot] Monthly mm report (Sep 2024) 0 (1) 2024/09/02 08:17
[syzbot] [fs?] [mm?] KCSAN: data-race in __filemap_remove_folio / folio_mapping (2) 6 (8) 2024/04/18 04:27
[syzbot] Monthly mm report (Feb 2024) 0 (1) 2024/02/17 20:23
[syzbot] Monthly mm report (Nov 2023) 0 (1) 2023/11/15 03:00
[syzbot] Monthly mm report (Sep 2023) 0 (1) 2023/09/11 10:07
[syzbot] Monthly xfs report (Aug 2023) 0 (1) 2023/08/07 08:36
[syzbot] Monthly xfs report (Jun 2023) 0 (1) 2023/06/07 09:24
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __filemap_remove_folio / folio_mapping block 6 42 1615d 1679d 0/29 auto-closed as invalid on 2022/04/21 14:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping

write to 0xffffea0004d27ad8 of 8 bytes by task 31722 on cpu 1:
 page_cache_delete mm/filemap.c:145 [inline]
 __filemap_remove_folio+0x201/0x2e0 mm/filemap.c:227
 filemap_remove_folio+0x6d/0x1d0 mm/filemap.c:257
 truncate_inode_folio+0x42/0x50 mm/truncate.c:176
 shmem_undo_range+0x27f/0xb60 mm/shmem.c:1155
 shmem_truncate_range mm/shmem.c:1287 [inline]
 shmem_evict_inode+0x132/0x520 mm/shmem.c:1417
 evict+0x2a5/0x510 fs/inode.c:822
 iput_final fs/inode.c:2015 [inline]
 iput+0x430/0x5a0 fs/inode.c:2064
 dentry_unlink_inode+0x24a/0x260 fs/dcache.c:479
 dentry_kill+0x184/0x500 fs/dcache.c:826
 finish_dput+0x16/0x1d0 fs/dcache.c:1001
 dput+0x48/0x50 fs/dcache.c:1042
 __fput+0x43e/0x630 fs/file_table.c:520
 ____fput+0x1c/0x30 fs/file_table.c:540
 task_work_run+0x130/0x1a0 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x4a4/0x1510 kernel/exit.c:1009
 do_group_exit+0xfe/0x140 kernel/exit.c:1152
 get_signal+0xe07/0xf10 kernel/signal.c:3046
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x14d/0x610 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595

read to 0xffffea0004d27ad8 of 8 bytes by task 31727 on cpu 0:
 folio_mapping+0xa1/0xe0 mm/util.c:732
 folio_evictable mm/internal.h:575 [inline]
 sort_folio mm/vmscan.c:4589 [inline]
 scan_folios mm/vmscan.c:4692 [inline]
 isolate_folios mm/vmscan.c:4780 [inline]
 evict_folios+0xdc7/0x2d60 mm/vmscan.c:4822
 try_to_shrink_lruvec+0x74d/0x8b0 mm/vmscan.c:4983
 lru_gen_shrink_lruvec mm/vmscan.c:5128 [inline]
 shrink_lruvec+0x25e/0x1b60 mm/vmscan.c:5888
 shrink_node_memcgs mm/vmscan.c:6127 [inline]
 shrink_node+0x67c/0x1e30 mm/vmscan.c:6171
 shrink_zones mm/vmscan.c:6410 [inline]
 do_try_to_free_pages+0x408/0xc90 mm/vmscan.c:6472
 try_to_free_mem_cgroup_pages+0x201/0x420 mm/vmscan.c:6794
 mem_cgroup_resize_max+0x1cd/0x240 mm/memcontrol-v1.c:1522
 mem_cgroup_write+0x1ad/0x250 mm/memcontrol-v1.c:-1
 cgroup_file_write+0x197/0x350 kernel/cgroup/cgroup.c:4337
 kernfs_fop_write_iter+0x1d2/0x2e0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57f/0x9a0 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff888120503848 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 31727 Comm: syz.7.8512 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1093):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/19 05:10 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/17 12:38 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/17 05:00 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/15 09:40 upstream dac3e89a2c90 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/14 13:40 upstream 3aa1dcaa4f6f 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/12 19:26 upstream 3d6d817622b0 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/12 04:36 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/10 15:41 upstream db2ddb871435 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/07 15:22 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/06 10:50 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/04 06:44 upstream 848acc8ffe1b 9451e17e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/03 11:46 upstream 075b74841bd0 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/02 13:47 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/08/01 11:15 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/31 19:03 upstream 8ba098e6b6ff 7664cf44 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/31 01:43 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/30 14:55 upstream 11028ab62899 2377cd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/28 14:22 upstream 62cc90241548 edc8a875 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/28 05:27 upstream 62cc90241548 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/27 06:34 upstream 4235cb24ec1e 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/22 11:05 upstream 248951ddc14d 4a865b71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/22 03:17 upstream 248951ddc14d b561ce9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/21 16:45 upstream b95f03f04d47 7c5de9c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/20 10:43 upstream 1590cf032971 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/20 01:49 upstream 82a47586c0b9 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/18 09:34 upstream 94515f3a7d42 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/17 14:38 upstream fce2dfa773ce 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/16 05:12 upstream 58717b2a1365 27a8bd60 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/13 15:50 upstream a13c140cc289 cc4833d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/12 07:23 upstream 44696aa3a489 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/11 17:34 upstream dd3210c47e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/10 05:03 upstream a635d6748234 4167ee25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/07 19:59 upstream 0e35b9b6ec0f 76cdc0c0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/06 11:38 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/04 19:56 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/07/04 03:20 upstream 71dfdfb0209b fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/30 02:46 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/29 04:18 upstream dc59e4fea9d8 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/28 02:57 upstream 780d569e6c4b fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/27 15:41 upstream 5a66900afbd6 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/26 14:46 upstream 4edcdefd4083 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/25 19:38 upstream a142da0b2d32 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/06/25 09:12 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/05/20 00:42 upstream 27fa82620cba 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/03/10 03:34 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2026/01/14 08:56 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2023/04/23 07:32 upstream 622322f53c6d 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2023/04/16 16:53 upstream 3e7bb4f24617 ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2023/04/10 04:10 upstream 09a9639e56c0 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
2022/10/11 17:24 upstream 60bb8154d1d7 02b6492e .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_remove_folio / folio_mapping
* Struck through repros no longer work on HEAD.