syzbot


KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (9)

Status: moderation: reported on 2025/06/13 20:17
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+c9f29e4bc33c9ee2f4f4@syzkaller.appspotmail.com
First crash: 19h49m, last: 19h49m
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (3) exfat 1 1297d 1297d 0/28 auto-closed as invalid on 2021/12/29 19:13
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (8) exfat ext4 2 78d 91d 0/28 auto-obsoleted due to no activity on 2025/05/22 16:37
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (6) ext4 1 265d 265d 0/28 auto-obsoleted due to no activity on 2024/10/27 07:39
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (2) ext4 1 1348d 1348d 0/28 auto-closed as invalid on 2021/11/09 15:48
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (5) ext4 1 804d 804d 0/28 auto-obsoleted due to no activity on 2023/05/07 10:14
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (4) ext4 1 1117d 1117d 0/28 auto-closed as invalid on 2022/06/28 09:48
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached (7) ext4 1 211d 211d 0/28 auto-obsoleted due to no activity on 2025/01/10 12:23
upstream KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached ext4 1 1383d 1383d 0/28 auto-closed as invalid on 2021/10/05 03:36

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached

write to 0xffff888106e36d10 of 4 bytes by task 3427 on cpu 0:
 inode_cgwb_move_to_attached+0x9b/0x310 fs/fs-writeback.c:309
 requeue_inode fs/fs-writeback.c:-1 [inline]
 writeback_sb_inodes+0x6d9/0xa20 fs/fs-writeback.c:2005
 __writeback_inodes_wb+0x94/0x1a0 fs/fs-writeback.c:2047
 wb_writeback+0x266/0x5c0 fs/fs-writeback.c:2158
 wb_check_start_all fs/fs-writeback.c:2284 [inline]
 wb_do_writeback fs/fs-writeback.c:2310 [inline]
 wb_workfn+0x4c9/0x910 fs/fs-writeback.c:2343
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3321
 worker_thread+0x582/0x770 kernel/workqueue.c:3402
 kthread+0x486/0x510 kernel/kthread.c:464
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff888106e36d10 of 4 bytes by task 10260 on cpu 1:
 __mark_inode_dirty+0x18e/0x760 fs/fs-writeback.c:2549
 generic_update_time fs/inode.c:2064 [inline]
 inode_update_time fs/inode.c:2077 [inline]
 __file_update_time fs/inode.c:2305 [inline]
 file_update_time+0x288/0x2b0 fs/inode.c:2335
 ext4_page_mkwrite+0x18b/0xba0 fs/ext4/inode.c:6577
 do_page_mkwrite mm/memory.c:3378 [inline]
 wp_page_shared mm/memory.c:3779 [inline]
 do_wp_page+0xe5a/0x2400 mm/memory.c:3998
 handle_pte_fault mm/memory.c:6105 [inline]
 __handle_mm_fault mm/memory.c:6232 [inline]
 handle_mm_fault+0x77d/0x2be0 mm/memory.c:6401
 do_user_addr_fault+0x636/0x1090 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x62/0xa0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x00010002 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 10260 Comm: syz.0.2636 Tainted: G        W           6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/13 20:16 upstream 02adc1490e6d 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __mark_inode_dirty / inode_cgwb_move_to_attached
* Struck through repros no longer work on HEAD.