syzbot


KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

Status: moderation: reported on 2023/12/09 00:01
Subsystems: mm
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+706dde8a3e5ef992fcad@syzkaller.appspotmail.com
First crash: 1068d, last: 5h12m
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b0384c36-8501-4524-a9d1-a0253d5f5415 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/05/21 02:41 2026/05/21 02:41 2026/05/21 03:22 cf874a1cf36318c06202027159ddac14acf00db7
6bd39b22-15c8-4e79-b1a3-ff9c2ad13335 repro 💥 KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/03/10 12:22 2026/03/10 12:22 2026/03/10 12:22 5c03941b7fba0fd3b0326afc981322c89fe9ba52+ unexpected git log output: "warning: unable to access '/root/.config/git/attributes': Permission denied\nwarning: unable to access '/root/.config/git/attributes': Permission denied\n1f318b96cc84d7c2ab792fcc0bfd42a7ca890681\nLinux 7.0-rc3\ntorvalds@linux-foundation.org\nLinus Torvalds\nSun Mar 8 16:56:54 2026 -0700\nfc9f248d8c591454e257edd54ac4085d84f11e6a\nSun Mar 8 16:56:54 2026 -0700\n"
71db9653-a631-44dd-b50f-639baab5d8f4 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/01/14 13:13 2026/01/14 13:13 2026/01/14 13:16 a9d6a79219801d2130df3b1a792c57f0e5428e9f

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

write to 0xffff88814bfa4d60 of 8 bytes by task 21230 on cpu 1:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3627
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff88814bfa4d60 of 8 bytes by task 21234 on cpu 0:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3627
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000f40 -> 0x0000000000000f43

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 21234 Comm: syz.0.5416 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (2762):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/13 07:49 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/12 17:07 upstream 1dadb7e7eb5a 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/12 02:54 upstream 2b414a95b8f7 e93da63e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 22:35 upstream 2b414a95b8f7 d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 14:00 upstream 9716c086c8e8 d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 02:17 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/10 13:44 upstream acb7500801e9 f79bac11 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/10 01:51 upstream 685441a6d3f1 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 23:56 upstream 2d3090a8aeb5 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 11:52 upstream 2d3090a8aeb5 c36c07f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 11:51 upstream 2d3090a8aeb5 c36c07f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 17:17 upstream 2d3090a8aeb5 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 15:17 upstream 4549871118cf 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 06:56 upstream 4549871118cf cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/07 17:46 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/07 04:13 upstream 979c294509f9 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/06 15:13 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/06 01:54 upstream c10130c234c8 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/05 11:58 upstream ddd664bbff63 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/05 09:56 upstream ddd664bbff63 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 20:35 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 20:34 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 02:03 upstream ba3e43a9e601 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/03 12:41 upstream ba3e43a9e601 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/03 00:37 upstream ba3e43a9e601 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/02 06:58 upstream 6f3ed7fec72f 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/01 21:07 upstream e43ffb69e043 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/01 08:50 upstream e43ffb69e043 8d8eeb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/01 03:13 upstream e43ffb69e043 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/31 13:47 upstream 174914ea5513 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/31 00:27 upstream 9d87d0fc8c8e 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/30 11:09 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/29 21:52 upstream 9215e74f228f 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/29 12:30 upstream 8fde5d1d47f6 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/29 00:15 upstream 8fde5d1d47f6 4624854e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/28 11:53 upstream eb3f4b7426cf 681715f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/27 23:36 upstream eb3f4b7426cf 4c36e7e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/27 11:20 upstream eb3f4b7426cf 8777bdc3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/26 21:29 upstream d60ec36cab33 2b01f00e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/26 17:37 upstream d60ec36cab33 a3e47276 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/26 08:58 upstream e8c2f9fdadee a3e47276 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/26 00:36 upstream e8c2f9fdadee c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/20 18:08 upstream df685633c3db 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/03/10 03:44 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/01/14 08:34 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/12/08 12:55 upstream 5e3f5b81de80 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/11/23 22:26 upstream d3fa86b1a7b4 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
* Struck through repros no longer work on HEAD.