syzbot


KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (9)

Status: moderation: reported on 2026/01/10 03:25
Subsystems: cgroups mm
[Documentation on labels]
Reported-by: syzbot+346193c9e07ec5006acd@syzkaller.appspotmail.com
First crash: 50d, last: 10d
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
ddb99f23-3b3d-490e-9ad0-707aa3e54290 assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (9) 2026/02/25 03:32 2026/02/25 03:32 2026/02/25 03:41 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
bc3a1b07-a341-4fd5-b99e-23bb986e5c4a assessment-kcsan 💥 KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (9) 2026/01/15 21:21 2026/01/15 21:21 2026/01/15 21:22 a9d6a79219801d2130df3b1a792c57f0e5428e9f unexpected reply fields ({Content:0xc2d1463a10 CitationMetadata:0xc007ce4810 FinishMessage: TokenCount:0 FinishReason:STOP AvgLogprobs:0 GroundingMetadata:<nil> Index:0 LogprobsResult:<nil> SafetyRatings:[] URLContextMetadata:<nil>})
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (5) fs mm 6 1 611d 611d 0/29 auto-obsoleted due to no activity on 2024/08/02 02:51
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (8) cgroups mm 6 1 165d 165d 0/29 auto-obsoleted due to no activity on 2025/11/12 04:56
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (3) fs mm 6 1 1330d 1330d 0/29 auto-closed as invalid on 2022/08/13 15:03
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (4) fs mm 6 128 670d 814d 0/29 auto-obsoleted due to no activity on 2024/06/03 11:30
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (2) mm fs 6 1 1408d 1408d 0/29 auto-closed as invalid on 2022/05/27 17:05
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath cgroups mm 6 1 2240d 2240d 0/29 auto-closed as invalid on 2020/03/22 09:49
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (6) fs mm 6 6 392d 529d 0/29 auto-obsoleted due to no activity on 2025/03/29 19:42
upstream KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath (7) mm 6 4 260d 334d 0/29 auto-obsoleted due to no activity on 2025/08/08 23:02

Sample crash report:
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
==================================================================
BUG: KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath

write to 0xffff88810021cd68 of 8 bytes by task 23879 on cpu 1:
 mem_cgroup_track_foreign_dirty_slowpath+0x321/0x460 mm/memcontrol.c:3525
 mem_cgroup_track_foreign_dirty include/linux/memcontrol.h:1554 [inline]
 folio_account_dirtied mm/page-writeback.c:2620 [inline]
 __folio_mark_dirty+0x3c1/0x4a0 mm/page-writeback.c:2667
 mark_buffer_dirty+0x120/0x220 fs/buffer.c:1204
 block_commit_write fs/buffer.c:2216 [inline]
 block_page_mkwrite+0x287/0x3c0 fs/buffer.c:2641
 ext4_page_mkwrite+0x859/0xb90 fs/ext4/inode.c:6637
 do_page_mkwrite mm/memory.c:3581 [inline]
 do_shared_fault mm/memory.c:5866 [inline]
 do_fault mm/memory.c:5928 [inline]
 do_pte_missing mm/memory.c:4469 [inline]
 handle_pte_fault mm/memory.c:6308 [inline]
 __handle_mm_fault mm/memory.c:6446 [inline]
 handle_mm_fault+0x18f2/0x3020 mm/memory.c:6615
 do_user_addr_fault+0x62f/0x1050 arch/x86/mm/fault.c:1334
 handle_page_fault arch/x86/mm/fault.c:1474 [inline]
 exc_page_fault+0x62/0xa0 arch/x86/mm/fault.c:1527
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618

read to 0xffff88810021cd68 of 8 bytes by task 23880 on cpu 0:
 mem_cgroup_track_foreign_dirty_slowpath+0xd5/0x460 mm/memcontrol.c:3505
 mem_cgroup_track_foreign_dirty include/linux/memcontrol.h:1554 [inline]
 folio_account_dirtied mm/page-writeback.c:2620 [inline]
 __folio_mark_dirty+0x3c1/0x4a0 mm/page-writeback.c:2667
 mark_buffer_dirty+0x120/0x220 fs/buffer.c:1204
 folio_zero_new_buffers+0x28c/0x2e0 fs/buffer.c:2030
 block_write_end+0x200/0x210 fs/buffer.c:2287
 ext4_write_end+0x133/0x750 fs/ext4/inode.c:1446
 ext4_da_write_end+0x65/0x810 fs/ext4/inode.c:3271
 generic_perform_write+0x311/0x490 mm/filemap.c:4335
 ext4_buffered_write_iter+0x1ee/0x3c0 fs/ext4/file.c:300
 ext4_file_write_iter+0x380/0xfa0 fs/ext4/file.c:-1
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x5a6/0x9f0 fs/read_write.c:688
 ksys_pwrite64 fs/read_write.c:795 [inline]
 __do_sys_pwrite64 fs/read_write.c:803 [inline]
 __se_sys_pwrite64 fs/read_write.c:800 [inline]
 __x64_sys_pwrite64+0xfd/0x150 fs/read_write.c:800
 x64_sys_call+0xa2a/0x3020 arch/x86/include/generated/asm/syscalls_64.h:19
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000010000cc59 -> 0x000000010000ccfb

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 23880 Comm: syz.0.6348 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/19 07:41 upstream 956b9cbd7f15 746545b8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath
2026/01/10 03:24 upstream 372800cb95a3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath
* Struck through repros no longer work on HEAD.