syzbot


KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (11)

Status: moderation: reported on 2026/03/17 03:00
Subsystems: fs mm
[Documentation on labels]
Reported-by: syzbot+44d083df850d93aad28d@syzkaller.appspotmail.com
First crash: 5d09h, last: 5d09h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
bd351746-8ab3-436e-be59-ab64de8332b3 assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (11) 2026/03/17 02:59 2026/03/17 02:59 2026/03/17 03:10 f84caa2f84dea47b51a188e8d6267f295e89bbcb
Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (3) mm fs 6 2 1917d 1931d 0/29 auto-closed as invalid on 2021/01/24 22:24
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (7) fs mm 6 295 628d 836d 0/29 auto-obsoleted due to no activity on 2024/08/05 19:12
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (9) fs mm 6 5 338d 454d 0/29 auto-obsoleted due to no activity on 2025/06/13 09:22
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (10) fs mm 6 12 66d 272d 0/29 auto-obsoleted due to no activity on 2026/03/11 12:48
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (5) fs mm 6 3 1694d 1728d 0/29 auto-closed as invalid on 2021/09/04 14:56
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (4) fs mm 6 6 1773d 1872d 0/29 auto-closed as invalid on 2021/06/18 08:34
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (6) fs mm 6 17 1579d 1655d 0/29 auto-closed as invalid on 2021/12/29 06:33
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (8) fs mm 6 4 549d 591d 0/29 auto-obsoleted due to no activity on 2024/10/23 14:01
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch (2) fs mm 6 3 1995d 2033d 0/29 auto-closed as invalid on 2020/11/08 10:33
upstream KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch fs mm 6 9 2137d 2296d 0/29 closed as invalid on 2020/06/18 14:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch

read-write to 0xffff888101c20148 of 8 bytes by task 6120 on cpu 0:
 percpu_counter_add_batch+0x105/0x130 lib/percpu_counter.c:107
 wb_stat_mod include/linux/backing-dev.h:66 [inline]
 __wb_writeout_add+0x42/0x1b0 mm/page-writeback.c:577
 __folio_end_writeback+0x14b/0x360 mm/page-writeback.c:2953
 folio_end_writeback_no_dropbehind+0x6d/0x1d0 mm/filemap.c:1666
 folio_end_writeback+0x1c/0x70 mm/filemap.c:1692
 mpage_write_end_io+0x270/0x630 fs/mpage.c:65
 bio_endio+0x38a/0x420 block/bio.c:1792
 submit_bio_noacct+0x76f/0x9b0 block/blk-core.c:891
 submit_bio+0x2a4/0x2c0 block/blk-core.c:926
 mpage_bio_submit_write fs/mpage.c:83 [inline]
 mpage_write_folio fs/mpage.c:614 [inline]
 mpage_writepages+0xaae/0x1310 fs/mpage.c:670
 fat_writepages+0x24/0x30 fs/fat/inode.c:200
 do_writepages+0x1c6/0x310 mm/page-writeback.c:2554
 __writeback_single_inode+0x80/0x860 fs/fs-writeback.c:1750
 writeback_sb_inodes+0x4fe/0xaf0 fs/fs-writeback.c:2042
 wb_writeback+0x25f/0x5d0 fs/fs-writeback.c:2227
 wb_do_writeback fs/fs-writeback.c:2374 [inline]
 wb_workfn+0x1a5/0x970 fs/fs-writeback.c:2414
 process_one_work kernel/workqueue.c:3276 [inline]
 process_scheduled_works+0x513/0xa10 kernel/workqueue.c:3359
 worker_thread+0x58a/0x780 kernel/workqueue.c:3440
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff888101c20148 of 8 bytes by task 6001 on cpu 1:
 percpu_counter_read include/linux/percpu_counter.h:110 [inline]
 __wb_update_bandwidth+0x98/0x5d0 mm/page-writeback.c:1501
 wb_update_bandwidth+0x54/0x80 mm/page-writeback.c:1528
 wb_update_bandwidth_workfn+0x1c/0x30 mm/backing-dev.c:507
 process_one_work kernel/workqueue.c:3276 [inline]
 process_scheduled_works+0x513/0xa10 kernel/workqueue.c:3359
 worker_thread+0x58a/0x780 kernel/workqueue.c:3440
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x00000000000006b0 -> 0x00000000000006d0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6001 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: writeback wb_update_bandwidth_workfn
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/17 02:59 upstream 2d1373e4246d 0737c18f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch
* Struck through repros no longer work on HEAD.