syzbot


KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic (2)

Status: moderation: reported on 2025/10/02 01:11
Subsystems: exfat
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+46fcf86d675442061f44@syzkaller.appspotmail.com
First crash: 262d, last: 1d21h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b570970e-bbab-42a1-bf14-48d4eaf8b32c assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic (2) 2026/05/17 04:46 2026/05/17 04:46 2026/05/17 04:49 de5aae85e5f28e2fa1c7deefcc24fe286abe5140

			
		
d1c15ed9-8247-40d3-872a-d1ccbd3b18a6 repro KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic (2) 2026/03/08 00:45 2026/03/08 00:45 2026/03/08 00:52 31e9c887f7dc24e04b3ca70d0d54fc34141844b0

			
		
537ae63a-cb65-4bc0-90ee-88b43d667145 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic (2) 2026/02/24 21:20 2026/02/24 21:20 2026/02/24 21:31 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9

			
		
756567b6-1d74-444f-a1cd-4602748fc355 assessment-kcsan 💥 KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic (2) 2026/01/10 03:33 2026/01/10 03:33 2026/01/10 03:33 7519916073b761ced56a7b15fdeeb4674e8dc125
Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To moni...
truncated to first 200 bytes; open job for full error
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic exfat 6 1 321d 321d 0/29 auto-obsoleted due to no activity on 2025/09/28 22:16

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic

write to 0xffff88814c941c1c of 4 bytes by task 14219 on cpu 1:
 __fat_write_inode+0x235/0x540 fs/fat/inode.c:-1
 fat_write_inode+0xbb/0xd0 fs/fat/inode.c:928
 write_inode fs/fs-writeback.c:1607 [inline]
 __writeback_single_inode+0x327/0x660 fs/fs-writeback.c:1850
 writeback_single_inode+0x16d/0x400 fs/fs-writeback.c:1906
 sync_inode_metadata+0x6e/0xa0 fs/fs-writeback.c:3080
 writeback_inode fs/fat/inode.c:1878 [inline]
 fat_flush_inodes+0x77/0x150 fs/fat/inode.c:1898
 fat_truncate_blocks+0x536/0x5b0 fs/fat/file.c:399
 fat_write_failed fs/fat/inode.c:219 [inline]
 fat_write_end+0xba/0x160 fs/fat/inode.c:247
 generic_perform_write+0x314/0x490 mm/filemap.c:4384
 __generic_file_write_iter+0x9e/0x120 mm/filemap.c:4480
 generic_file_write_iter+0x77/0x1f0 mm/filemap.c:4506
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57d/0x990 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x27e1/0x3020 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88814c941c00 of 1024 bytes by task 8387 on cpu 0:
 memcpy_from_iter lib/iov_iter.c:85 [inline]
 iterate_bvec include/linux/iov_iter.h:123 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:306 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 __copy_from_iter lib/iov_iter.c:261 [inline]
 copy_folio_from_iter_atomic+0x728/0x10a0 lib/iov_iter.c:491
 generic_perform_write+0x2c4/0x490 mm/filemap.c:4381
 shmem_file_write_iter+0xc5/0xf0 mm/shmem.c:3414
 lo_rw_aio+0x6a9/0x760 drivers/block/loop.c:-1
 do_req_filebacked drivers/block/loop.c:-1 [inline]
 loop_handle_cmd drivers/block/loop.c:1921 [inline]
 loop_process_work+0x567/0xac0 drivers/block/loop.c:1956
 loop_workfn+0x31/0x40 drivers/block/loop.c:1980
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405
 worker_thread+0x569/0x750 kernel/workqueue.c:3486
 kthread+0x221/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8387 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: loop2 loop_workfn
==================================================================

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/19 21:57 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/06/13 09:53 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/05/24 10:49 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/05/23 02:57 upstream 79bd2dded182 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/04/08 13:47 upstream 3036cd0d3328 d9b7f621 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/04/08 09:44 upstream 3036cd0d3328 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/03/23 12:10 upstream c369299895a5 4933dba2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/03/08 21:43 upstream 014441d1e4b2 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/02/04 12:18 upstream 5fd0a1df5d05 42b01fab .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/01/30 01:37 upstream 4d310797262f bfa73b7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/01/22 18:17 upstream a66191c590b3 82c9c083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2026/01/19 05:40 upstream 24d479d26b25 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2025/12/10 20:53 upstream 0048fbb4011e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2025/11/15 08:32 upstream 7a0892d2836e f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2025/10/15 16:42 upstream 1f4a222b0e33 19568248 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
2025/10/02 01:10 upstream 080ffb4bec4d 267f56c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic
* Struck through repros no longer work on HEAD.