KCSAN: data-race in __filemap_add_folio / invalidate_bdev (12)

Status: moderation: reported on 2026/07/26 09:52
Subsystems: mm fs
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+e0624b5bf72b99131402@syzkaller.appspotmail.com
First crash: 1d16h, last: 1d16h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
d064820b assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in __filemap_add_folio / invalidate_bdev (12) 2026/07/28 00:55 2026/07/28 00:55 2026/07/28 01:12 4cb2b096

			
		
7b2d2691 assessment-kcsan Benign: ✅ KCSAN: data-race in __filemap_add_folio / invalidate_bdev (12) 2026/07/26 09:52 2026/07/26 09:52 2026/07/26 10:20 492bab15

			
		
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev mm fs 6 3 1496d 1531d 0/29 auto-closed as invalid on 2022/07/28 00:49
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (4) fs mm 6 4 1072d 1103d 0/29 auto-obsoleted due to no activity on 2023/09/24 05:15
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (5) fs mm 6 4 938d 959d 0/29 auto-obsoleted due to no activity on 2024/02/05 20:23
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (3) block 6 1 1198d 1190d 0/29 auto-obsoleted due to no activity on 2023/05/21 22:53
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (10) fs mm 6 4 244d 331d 0/29 auto-obsoleted due to no activity on 2026/01/20 06:58
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (11) prio:low fs mm 6 3 82d 160d 0/29 auto-obsoleted due to no activity on 2026/07/01 21:20
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (2) mm fs 6 2 1399d 1426d 0/29 auto-obsoleted due to no activity on 2022/11/01 13:37
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (8) fs mm 6 2 500d 504d 0/29 auto-obsoleted due to no activity on 2025/05/09 19:21
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (9) fs mm 6 1 397d 397d 0/29 auto-obsoleted due to no activity on 2025/08/20 03:26
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (6) fs mm 6 1 855d 855d 0/29 auto-obsoleted due to no activity on 2024/04/28 09:19
upstream KCSAN: data-race in __filemap_add_folio / invalidate_bdev (7) mm fs 6 1 607d 607d 0/29 auto-obsoleted due to no activity on 2025/01/22 09:36

Sample crash report:
loop5: detected capacity change from 0 to 8192
==================================================================
BUG: KCSAN: data-race in __filemap_add_folio / invalidate_bdev

read-write to 0xffff88810048a378 of 8 bytes by task 4649 on cpu 0:
 __filemap_add_folio+0x66e/0x880 mm/filemap.c:919
 filemap_add_folio+0x1d3/0x350 mm/filemap.c:966
 page_cache_ra_unbounded+0x1a4/0x3a0 mm/readahead.c:293
 do_page_cache_ra mm/readahead.c:348 [inline]
 force_page_cache_ra+0x190/0x1d0 mm/readahead.c:378
 page_cache_sync_ra+0x107/0x510 mm/readahead.c:602
 filemap_get_pages+0x2f2/0x1360 mm/filemap.c:2704
 filemap_read+0x219/0xa20 mm/filemap.c:2814
 blkdev_read_iter+0x21e/0x2d0 block/fops.c:830
 new_sync_read fs/read_write.c:493 [inline]
 vfs_read+0x699/0x7c0 fs/read_write.c:574
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2886/0x3020 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810048a378 of 8 bytes by task 19925 on cpu 1:
 invalidate_bdev+0x25/0x70 block/bdev.c:99
 bdev_disk_changed+0xe8/0xe20 block/partitions/core.c:659
 loop_reread_partitions drivers/block/loop.c:443 [inline]
 loop_set_status+0x5af/0x670 drivers/block/loop.c:1268
 loop_set_status64 drivers/block/loop.c:1364 [inline]
 lo_ioctl+0x66d/0x1390 drivers/block/loop.c:1550
 blkdev_ioctl+0x387/0x460 block/ioctl.c:797
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583
 x64_sys_call+0x1563/0x3020 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0x0000000000000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 19925 Comm: syz.5.3651 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
==================================================================
 loop5: p1 < > p3 < > p4
loop5: partition table partially beyond EOD, truncated
loop5: p1 start 4294967040 is beyond EOD, truncated
loop5: p4 size 851974 extends beyond EOD, truncated

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/26 09:52 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __filemap_add_folio / invalidate_bdev
* Struck through repros no longer work on HEAD.