KCSAN: data-race in file_write_and_wait_range / xas_set_mark (2)

Status: moderation: reported on 2024/11/19 00:36
Subsystems: fs mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+cb409795b9a50c807ea2@syzkaller.appspotmail.com
First crash: 724d, last: 13h54m
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
daada18d assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in file_write_and_wait_range / xas_set_mark (2) 2026/05/22 20:36 2026/05/22 20:36 2026/05/22 21:00 df8ac09c
e81b29e8 assessment-kcsan Benign: ✅ Confident: ✅ ❓ KCSAN: data-race in file_write_and_wait_range / xas_set_mark (2) 2026/02/25 01:37 2026/02/25 01:37 2026/02/25 01:42 305c0ec5
b2b070ce assessment-kcsan 💥 KCSAN: data-race in file_write_and_wait_range / xas_set_mark (2) 2026/01/15 02:21 2026/01/15 02:21 2026/01/15 02:28 a9d6a792
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in file_write_and_wait_range / xas_set_mark fs mm 6 183 1683d 1907d 0/29 auto-closed as invalid on 2022/05/10 17:35

Sample crash report:
EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
==================================================================
BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark

write to 0xffff8881073c5ecc of 4 bytes by task 5975 on cpu 1:
 xa_mark_set lib/xarray.c:71 [inline]
 xas_set_mark+0x12b/0x140 lib/xarray.c:900
 __folio_start_writeback+0x16b/0x370 mm/page-writeback.c:3013
 ext4_bio_write_folio+0x5a2/0xa10 fs/ext4/page-io.c:544
 mpage_submit_folio fs/ext4/inode.c:2215 [inline]
 mpage_process_page_bufs+0x484/0x5e0 fs/ext4/inode.c:2322
 mpage_prepare_extent_to_map+0x836/0xc90 fs/ext4/inode.c:2870
 ext4_do_writepages+0xa69/0x2740 fs/ext4/inode.c:3070
 ext4_writepages+0x18c/0x300 fs/ext4/inode.c:3166
 do_writepages+0x1b9/0x300 mm/page-writeback.c:2562
 filemap_writeback mm/filemap.c:386 [inline]
 filemap_fdatawrite_range mm/filemap.c:411 [inline]
 file_write_and_wait_range+0x186/0x300 mm/filemap.c:785
 ext4_sync_file+0x114/0x5c0 fs/ext4/fsync.c:145
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2698 [inline]
 ext4_buffered_write_iter+0x518/0x580 fs/ext4/file.c:378
 ext4_file_write_iter+0x36e/0x1020 fs/ext4/file.c:-1
 iter_file_splice_write+0x6a6/0xa80 fs/splice.c:660
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x153/0x270 fs/splice.c:1114
 splice_direct_to_actor+0x2f5/0x680 fs/splice.c:1023
 do_splice_direct_actor fs/splice.c:1157 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1183
 do_sendfile+0x37d/0x640 fs/read_write.c:1351
 __do_sys_sendfile64 fs/read_write.c:1412 [inline]
 __se_sys_sendfile64 fs/read_write.c:1398 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1398
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x116/0x380 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881073c5ecc of 4 bytes by task 5970 on cpu 0:
 xa_marked include/linux/xarray.h:424 [inline]
 mapping_tagged include/linux/fs.h:503 [inline]
 filemap_writeback mm/filemap.c:382 [inline]
 filemap_fdatawrite_range mm/filemap.c:411 [inline]
 file_write_and_wait_range+0x139/0x300 mm/filemap.c:785
 ext4_sync_file+0x114/0x5c0 fs/ext4/fsync.c:145
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2698 [inline]
 ext4_buffered_write_iter+0x518/0x580 fs/ext4/file.c:378
 ext4_file_write_iter+0x36e/0x1020 fs/ext4/file.c:-1
 iter_file_splice_write+0x6a6/0xa80 fs/splice.c:660
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x153/0x270 fs/splice.c:1114
 splice_direct_to_actor+0x2f5/0x680 fs/splice.c:1023
 do_splice_direct_actor fs/splice.c:1157 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1183
 do_sendfile+0x37d/0x640 fs/read_write.c:1351
 __do_sys_sendfile64 fs/read_write.c:1412 [inline]
 __se_sys_sendfile64 fs/read_write.c:1398 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1398
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x116/0x380 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x05000021 -> 0x02000021

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 5970 Comm: syz.1.633 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
==================================================================

Crashes (998):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/11/13 06:55 upstream 7e1392a42ea2 26b2fee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/11/10 15:40 upstream b3dfbde62cf1 d3056657 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/11/07 11:08 upstream d48723711bae 5cecaf1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/11/06 12:58 upstream f66469d9905b 5cecaf1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/11/02 12:46 upstream 6628e7d4c6b2 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/11/01 16:21 upstream cbbddb6b08cc 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/30 22:04 upstream bd5c762ac051 0ec395f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/21 01:32 upstream 4cbdd58dfa7a df8746fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/20 19:21 upstream f47d223627f8 df8746fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/20 03:39 upstream c03c1a14507d 72cdc28d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/18 08:53 upstream 32c52ec87d62 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/09 02:51 upstream 6c377d19d4a5 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/07 19:47 upstream 602042bf29f6 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/06 04:26 upstream 2c3418fffa9d f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/10/02 22:40 upstream 5e0f8396d480 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/25 10:31 upstream f49a343b305c f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/23 10:13 upstream fe2ec83746e5 5207b90e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/21 05:16 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/09 02:12 upstream 893e11787f78 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/08 07:45 upstream 28924df2a08f 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/06 02:52 upstream 0d9ff90a5422 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/05 01:44 upstream bc35965f6940 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/02 05:58 upstream 89a312991dc6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/09/01 19:41 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/29 23:00 upstream 08dbfad3f504 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/29 18:02 upstream c20313e98b04 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/28 09:21 upstream 1b78070aaef6 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/28 01:55 upstream 1b78070aaef6 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/27 01:47 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/26 08:01 upstream 73ae59e97596 6a91adb4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/25 10:32 upstream 66498c75b4f8 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/23 11:29 upstream 2709dd5ae32f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/22 17:53 upstream 66fb95a52111 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/22 00:51 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/20 21:32 upstream cf62c7084acf 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/19 11:03 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/18 22:26 upstream 0f23d56f17fd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/17 18:25 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/09 09:35 upstream 06cf61899d64 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/08/01 12:12 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/07/25 02:23 upstream 48a5a7ab8d6a 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/07/06 17:23 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/25 19:20 upstream a142da0b2d32 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/22 11:57 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/18 05:28 upstream e771677c937d b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/17 01:39 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/16 12:16 upstream b1cbabe84ca1 a3998659 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/06/15 19:57 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/05/22 13:38 upstream 6779b50faa56 5f091fcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/03/10 04:28 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/02/24 23:26 upstream 7dff99b35460 787dfb7c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2026/01/14 22:05 upstream e0d4140e8043 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
2024/11/19 00:35 upstream 23acd177540d 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in file_write_and_wait_range / xas_set_mark
* Struck through repros no longer work on HEAD.