syzbot


KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64

Status: auto-closed as invalid on 2022/06/07 09:14
Subsystems: kernel
[Documentation on labels]
First crash: 946d, last: 946d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64 (5) kernel 1 13d 13d 0/28 moderation: reported on 2024/11/22 00:23
upstream KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64 (2) kernel 1 840d 840d 0/28 auto-closed as invalid on 2022/09/21 17:08
upstream KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64 (4) kernel 1 62d 62d 0/28 auto-obsoleted due to no activity on 2024/11/07 19:03
upstream KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64 (3) kernel 1 97d 97d 0/28 auto-obsoleted due to no activity on 2024/10/03 14:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64

read-write to 0xffffffff85a07980 of 8 bytes by interrupt on cpu 1:
 tick_do_update_jiffies64+0x112/0x1b0 kernel/time/tick-sched.c:118
 tick_sched_do_timer kernel/time/tick-sched.c:199 [inline]
 tick_sched_timer+0x7e/0x2d0 kernel/time/tick-sched.c:1466
 __run_hrtimer+0x132/0x420 kernel/time/hrtimer.c:1685
 __hrtimer_run_queues kernel/time/hrtimer.c:1749 [inline]
 hrtimer_interrupt+0x36e/0xa70 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0xa3/0x250 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x88/0xb0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 find_watchpoint kernel/kcsan/core.c:118 [inline]
 check_access kernel/kcsan/core.c:726 [inline]
 __tsan_unaligned_write8+0x19/0x180 kernel/kcsan/core.c:1014
 net_rx_action+0xaa/0x650 net/core/dev.c:6551
 __do_softirq+0x158/0x2e3 kernel/softirq.c:558
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:921
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read to 0xffffffff85a07980 of 8 bytes by task 13264 on cpu 0:
 __mem_cgroup_flush_stats mm/memcontrol.c:643 [inline]
 flush_memcg_stats_dwork+0x55/0x110 mm/memcontrol.c:663
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x000000010003ed79 -> 0x000000010003ed7a

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13264 Comm: kworker/u4:10 Not tainted 5.18.0-rc5-syzkaller-00006-g9050ba3a61a4-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound flush_memcg_stats_dwork
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/03 09:07 upstream 9050ba3a61a4 2df221f6 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in flush_memcg_stats_dwork / tick_do_update_jiffies64
* Struck through repros no longer work on HEAD.