KCSAN: data-race in __xa_set_mark / xas_find_marked

Status: moderation: reported on 2020/09/25 08:57
Subsystems: fs mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+f512479ce46e8f0a9370@syzkaller.appspotmail.com
First crash: 2308d, last: 1d18h
▶ ▼ ✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision
b6e7ed1e repro-c Reproduced: ✅ ❓ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/10/03 22:25 2026/10/03 22:25 2026/10/03 22:57 57bbd979
f4a882f3 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/05/17 13:23 2026/05/17 13:23 2026/05/17 13:26 de5aae85
dca34e09 repro ❓ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/03/08 04:19 2026/03/08 04:19 2026/03/08 04:25 31e9c887
2f4b1bb0 assessment-kcsan Benign: ✅ Confident: ✅ ❓ KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/02/24 22:19 2026/02/24 22:19 2026/02/24 22:23 305c0ec5
f306fa6c assessment-kcsan 💥 KCSAN: data-race in __xa_set_mark / xas_find_marked 2026/01/10 05:26 2026/01/10 05:26 2026/01/10 05:26 75199160
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/10/04 01:23 10m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git a74306e2e676f9775457366fc047a660fbf02f26 report job log log

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked

write to 0xffff88811bd4ff2c of 4 bytes by task 4034 on cpu 1:
 xa_mark_set lib/xarray.c:71 [inline]
 xas_set_mark lib/xarray.c:900 [inline]
 __xa_set_mark+0x172/0x1a0 lib/xarray.c:2085
 __folio_mark_dirty+0x43f/0x520 mm/page-writeback.c:2678
 mark_buffer_dirty+0x120/0x1f0 fs/buffer.c:1014
 block_commit_write+0x120/0x1d0 fs/buffer.c:2104
 block_write_end fs/buffer.c:2182 [inline]
 generic_write_end+0x90/0x1e0 fs/buffer.c:2196
 fat_write_end+0x4f/0x160 fs/fat/inode.c:245
 generic_perform_write+0x314/0x490 mm/filemap.c:4395
 __generic_file_write_iter+0x9e/0x120 mm/filemap.c:4491
 generic_file_write_iter+0x77/0x1f0 mm/filemap.c:4517
 iter_file_splice_write+0x6a0/0xa60 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x158/0x280 fs/splice.c:1159
 splice_direct_to_actor+0x2f9/0x680 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811bd4ff2c of 4 bytes by task 4030 on cpu 0:
 xa_marked include/linux/xarray.h:424 [inline]
 xas_find_marked+0x602/0x650 lib/xarray.c:1486
 find_get_entry mm/filemap.c:2087 [inline]
 filemap_get_folios_tag+0xf7/0x400 mm/filemap.c:2353
 __filemap_fdatawait_range mm/filemap.c:523 [inline]
 file_write_and_wait_range+0x20c/0x2f0 mm/filemap.c:789
 simple_fsync_noflush+0x42/0x120 fs/libfs.c:1558
 fat_file_fsync+0x7e/0x100 fs/fat/file.c:193
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2689 [inline]
 generic_file_write_iter+0x1a3/0x1f0 mm/filemap.c:4521
 iter_file_splice_write+0x6a0/0xa60 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x158/0x280 fs/splice.c:1159
 splice_direct_to_actor+0x2f9/0x680 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x02000021 -> 0x07000021

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 4030 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================

Crashes (1692):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/15 18:02 upstream 9aa622dbaab8 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/09/30 23:10 upstream 551c722f4080 38f7f0d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/09/11 07:42 upstream 08df884136f1 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/09/06 16:40 upstream 1fc5a74b108f 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/09/03 12:56 upstream 940de590b839 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/08/22 00:30 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/08/09 04:05 upstream a7c7074b58d2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/08/08 06:34 upstream bcc44b6785f2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/08/05 14:21 upstream c21bb4193868 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/08/03 06:17 upstream bd1dde877520 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/31 09:05 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/26 20:14 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/20 13:18 upstream 1590cf032971 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/18 23:10 upstream 1229e2e57a5c 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/06 11:54 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/06 02:33 upstream f105f3631d51 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/05 04:31 upstream 7404ce516372 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/07/02 01:31 upstream 4a50a141f05a 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/30 05:45 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/24 04:45 upstream 558ef39aeb9a 042555ff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/21 08:51 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/17 14:06 upstream 66affa37cfac 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/16 12:25 upstream b1cbabe84ca1 a3998659 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/13 21:34 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/13 10:13 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/08 10:35 upstream 4549871118cf cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/06/05 02:29 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/30 19:21 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/29 00:11 upstream 8fde5d1d47f6 4624854e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/24 10:46 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/18 04:41 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/17 00:33 upstream 6916d5703ddf de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/11 17:49 upstream 5d6919055dec 845acb1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/05/06 01:37 upstream 9207d47f966b 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/30 14:47 upstream e75a43c7cec4 a7464baf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/28 15:22 upstream 3b3bea6d4b9c ce741359 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/24 18:29 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/23 09:07 upstream 2a4c0c11c019 b10da5ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/17 01:12 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/13 03:04 upstream 028ef9c96e96 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/05 03:43 upstream 3aae9383f42f 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/04/04 05:49 upstream 631919fb12fe 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/31 09:42 upstream d0c3bcd5b897 aeea1c72 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/28 16:37 upstream 7df48e363130 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/03/04 19:24 upstream 0031c06807cf e6b6b96b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/02/24 20:19 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2026/01/06 19:20 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __xa_set_mark / xas_find_marked
2021/01/17 11:08 upstream 0da0a8a0a0e1 813be542 .config console log report info ci2-upstream-kcsan-gce
2020/09/24 17:40 upstream 171d4ff79f96 54289b08 .config console log report info ci2-upstream-kcsan-gce
2020/06/21 17:45 upstream 64677779e896 4f2acff9 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.