syzbot


KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64 (2)

Status: auto-obsoleted due to no activity on 2023/01/03 10:47
Subsystems: kernel
[Documentation on labels]
First crash: 607d, last: 520d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64 (4) kernel 3 363d 375d 0/26 auto-obsoleted due to no activity on 2023/06/01 19:11
upstream KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64 (3) kernel 2 443d 470d 0/26 auto-obsoleted due to no activity on 2023/04/04 17:35
upstream KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64 kernel 7 649d 725d 0/26 auto-closed as invalid on 2022/08/20 02:16

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64

read-write to 0xffffffff85c079c0 of 8 bytes by interrupt on cpu 1:
 tick_do_update_jiffies64+0x112/0x1b0 kernel/time/tick-sched.c:118
 tick_sched_do_timer kernel/time/tick-sched.c:199 [inline]
 tick_sched_timer+0x7e/0x2d0 kernel/time/tick-sched.c:1473
 __run_hrtimer+0x132/0x420 kernel/time/hrtimer.c:1685
 __hrtimer_run_queues kernel/time/hrtimer.c:1749 [inline]
 hrtimer_interrupt+0x36e/0xa70 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0xa3/0x250 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x88/0xb0 arch/x86/kernel/apic/apic.c:1107
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
 in_lock_functions+0x0/0x20
 get_lock_parent_ip include/linux/ftrace.h:950 [inline]
 preempt_latency_start kernel/sched/core.c:5651 [inline]
 preempt_count_add+0x51/0xa0 kernel/sched/core.c:5676
 folio_add_lru+0x1f/0x140 mm/swap.c:532
 filemap_add_folio+0xf8/0x150 mm/filemap.c:949
 __filemap_get_folio+0x510/0x6d0 mm/filemap.c:1976
 pagecache_get_page+0x26/0xe0 mm/folio-compat.c:110
 grab_cache_page_write_begin+0x2a/0x30 mm/folio-compat.c:122
 ext4_da_write_begin+0x2dd/0x5f0 fs/ext4/inode.c:2995
 generic_perform_write+0x1d4/0x3f0 mm/filemap.c:3753
 ext4_buffered_write_iter+0x235/0x3e0 fs/ext4/file.c:285
 ext4_file_write_iter+0x2c7/0x1170
 call_write_iter include/linux/fs.h:2191 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x468/0x760 fs/read_write.c:584
 ksys_write+0xe8/0x1a0 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:646
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffffff85c079c0 of 8 bytes by task 21724 on cpu 0:
 mem_cgroup_flush_stats_delayed+0x34/0x140 mm/memcontrol.c:648
 workingset_refault+0x2ba/0x750 mm/workingset.c:464
 filemap_add_folio+0xe2/0x150 mm/filemap.c:948
 page_cache_ra_unbounded+0x1a0/0x320 mm/readahead.c:251
 do_page_cache_ra mm/readahead.c:300 [inline]
 page_cache_ra_order mm/readahead.c:560 [inline]
 ondemand_readahead+0x541/0x6d0 mm/readahead.c:682
 page_cache_async_ra+0x8b/0xa0 mm/readahead.c:731
 do_async_mmap_readahead+0x206/0x240 mm/filemap.c:3071
 filemap_fault+0xf6/0x6a0 mm/filemap.c:3125
 __do_fault mm/memory.c:4203 [inline]
 do_shared_fault mm/memory.c:4609 [inline]
 do_fault+0x5c7/0xaf0 mm/memory.c:4687
 handle_pte_fault mm/memory.c:4955 [inline]
 __handle_mm_fault mm/memory.c:5097 [inline]
 handle_mm_fault+0x877/0xa80 mm/memory.c:5218
 faultin_page mm/gup.c:1009 [inline]
 __get_user_pages+0x32a/0xbf0 mm/gup.c:1230
 __get_user_pages_locked mm/gup.c:1434 [inline]
 __get_user_pages_remote+0x431/0x600 mm/gup.c:2187
 pin_user_pages_remote+0x5d/0x90 mm/gup.c:3245
 process_vm_rw_single_vec+0x168/0x440 mm/process_vm_access.c:105
 process_vm_rw_core mm/process_vm_access.c:215 [inline]
 process_vm_rw+0x3e1/0x570 mm/process_vm_access.c:283
 __do_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:298 [inline]
 __x64_sys_process_vm_writev+0x76/0x90 mm/process_vm_access.c:298
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0000000100004fc7 -> 0x0000000100004fc8

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 21724 Comm: syz-executor.0 Not tainted 6.1.0-rc6-syzkaller-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
==================================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/21 13:34 upstream eb7081409f94 5bb70014 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/10/17 23:17 upstream 9abf2313adc1 94744d21 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/10/05 22:48 upstream 2bca25eaeba6 2c6543ad .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/09/29 16:42 upstream c3e0e1e23c70 45fd7169 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/09/24 12:01 upstream a63f2e7cb110 0042f2b4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/09/12 03:52 upstream 4ed9c1e971b1 356d8217 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
2022/08/26 18:13 upstream 4c612826bec1 e5a303f1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_flush_stats_delayed / tick_do_update_jiffies64
* Struck through repros no longer work on HEAD.