syzbot


KCSAN: data-race in shmem_getattr / shmem_recalc_inode

Status: moderation: reported on 2024/07/04 23:41
Subsystems: mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+dfb578404df369f6599b@syzkaller.appspotmail.com
First crash: 717d, last: 1d06h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
ab196f67-4d14-4061-965e-2ee9d243cf53 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in shmem_getattr / shmem_recalc_inode 2026/05/31 09:00 2026/05/31 09:00 2026/05/31 09:37 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
69ec73dc-cab8-4c4f-95f9-068b29bbe70e assessment-security 💥 KCSAN: data-race in shmem_getattr / shmem_recalc_inode 2026/05/14 15:08 2026/05/14 15:08 2026/05/14 15:09 6ccb967e465e832a7bfd7a116ad00d52a0923a5d
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/45776d348471d68a01...
truncated to first 200 bytes; open job for full error
6982ee97-e35c-4b0a-a509-b41346231f94 repro KCSAN: data-race in shmem_getattr / shmem_recalc_inode 2026/03/06 22:56 2026/03/06 22:56 2026/03/06 23:06 31e9c887f7dc24e04b3ca70d0d54fc34141844b0

			
		
39553156-2251-4447-9c6e-31cc67641b91 assessment-kcsan Benign: ✅ KCSAN: data-race in shmem_getattr / shmem_recalc_inode 2026/01/09 21:28 2026/01/09 21:28 2026/01/09 21:31 7519916073b761ced56a7b15fdeeb4674e8dc125

			
		

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode

read-write to 0xffff88811b77ddf8 of 8 bytes by task 32338 on cpu 0:
 shmem_recalc_inode+0x3a/0x1f0 mm/shmem.c:444
 shmem_alloc_and_add_folio mm/shmem.c:2007 [inline]
 shmem_get_folio_gfp+0x7c4/0xd90 mm/shmem.c:2502
 shmem_get_folio mm/shmem.c:2608 [inline]
 shmem_write_begin+0xfc/0x1f0 mm/shmem.c:3239
 generic_perform_write+0x186/0x490 mm/filemap.c:4363
 shmem_file_write_iter+0xc5/0xf0 mm/shmem.c:3414
 __kernel_write_iter+0x30f/0x590 fs/read_write.c:621
 dump_emit_page fs/coredump.c:1298 [inline]
 dump_user_range+0xa73/0xd00 fs/coredump.c:1372
 elf_core_dump+0x21c0/0x2340 fs/binfmt_elf.c:2109
 coredump_write+0xaf9/0xdd0 fs/coredump.c:1052
 do_coredump fs/coredump.c:1131 [inline]
 vfs_coredump+0x2770/0x3290 fs/coredump.c:1200
 get_signal+0xd33/0xf10 kernel/signal.c:3023
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x14d/0x610 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595

read to 0xffff88811b77ddf8 of 8 bytes by task 24643 on cpu 1:
 shmem_getattr+0x41/0x200 mm/shmem.c:1290
 vfs_getattr_nosec+0x146/0x1e0 fs/stat.c:213
 vfs_getattr+0x48/0x60 fs/stat.c:262
 vfs_statx_path+0x28/0x140 fs/stat.c:299
 vfs_statx+0xc4/0x170 fs/stat.c:356
 vfs_fstatat+0x118/0x170 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat+0x55/0x3e0 fs/stat.c:532
 __x64_sys_newfstatat+0x55/0x70 fs/stat.c:532
 x64_sys_call+0x2c64/0x3020 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000001b5b -> 0x0000000000001b5c

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 24643 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (214):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/21 07:47 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/06/15 09:42 upstream 95e56f0f293e 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/06/11 03:13 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/28 09:14 upstream eb3f4b7426cf 4c36e7e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/11 18:11 upstream 5d6919055dec 845acb1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/09 20:53 upstream e92b2872d0b1 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/08 05:40 upstream fcee7d82f27d 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/07 22:10 upstream 8ab992f815d6 cbf9e0fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/04 22:25 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/05/02 05:33 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/30 18:59 upstream e75a43c7cec4 a7464baf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/30 08:09 upstream 57b8e2d666a3 005438fc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/27 15:54 upstream 254f49634ee1 0f700595 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/24 05:37 upstream 45dcf5e28813 9cfb3ca7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/22 23:52 upstream 2a4c0c11c019 b10da5ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/18 22:24 upstream eb5249b12507 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/18 05:00 upstream 8541d8f725c6 5be7a9de .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/16 07:59 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/03 07:19 upstream 5619b098e2fb 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/02 12:23 upstream 9147566d8016 91bc79b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/04/01 02:58 upstream dbf00d8d23b4 fb8b2c26 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/30 16:21 upstream 7aaa8047eafd dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/19 21:02 upstream 8a30aeb0d1b4 bd6dcb30 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/18 16:24 upstream a989fde763f4 0199f9a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/11 19:30 upstream b29fb8829bff 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/07 15:16 upstream 4ae12d8bd9a8 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/06 02:47 upstream 5ee8dbf54602 31e9c887 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/03 02:06 upstream af4e9ef3d784 28b83e23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/02 14:40 upstream 11439c4635ed b9dd6534 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/03/02 01:42 upstream 39c633261414 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/27 16:38 upstream a75cb869a8cc 2cf092b8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/25 15:02 upstream 7dff99b35460 94a9671e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/23 17:47 upstream 6de23f81a5e0 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/22 11:10 upstream fa5c82f4d2bb 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/16 01:44 upstream 26a4cfaff82a 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/14 16:56 upstream 770aaedb461a 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/11 14:03 upstream 192c0159402e 75707236 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/10 18:11 upstream 72c395024dac 91d776d3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/09 01:22 upstream e98f34af6116 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/07 02:09 upstream 2687c848e578 f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/06 21:49 upstream b7ff7151e653 97745f52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/02/03 03:48 upstream dee65f79364c d78927dd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/30 15:15 upstream 4d310797262f ae7dc18c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/28 02:27 upstream 1f97d9dcf536 3029c699 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/25 22:55 upstream 023777797472 55756628 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/19 13:41 upstream 24d479d26b25 a9fc5226 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/18 13:16 upstream d12453c7e281 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2026/01/09 18:56 upstream 623fb9912f6a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
2024/07/04 23:41 upstream 661e504db04c 3f2748a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_getattr / shmem_recalc_inode
* Struck through repros no longer work on HEAD.