KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (11)

Status: moderation: reported on 2026/10/08 11:41
Subsystems: mm
Labels: race:benign
[Documentation on labels]
Reported-by: syzbot+18a47cfd5595accbfbc0@syzkaller.appspotmail.com
First crash: 2h55m, last: 2h55m
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
333acdef assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (11) 2026/10/08 11:41 2026/10/08 11:41 2026/10/08 12:10 4f6a9fcf
▶ ▼ Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (7) mm 6 10 780d 762d 0/29 auto-obsoleted due to no activity on 2024/09/23 07:15
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (8) mm ext4 6 3 459d 528d 0/29 auto-obsoleted due to no activity on 2025/08/30 17:27
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (5) mm 6 8 1102d 1198d 0/29 auto-obsoleted due to no activity on 2023/11/06 01:09
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (3) mm fs 6 3 1296d 1313d 0/29 auto-obsoleted due to no activity on 2023/04/29 19:41
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead fs 6 7 1716d 1790d 0/29 auto-closed as invalid on 2022/03/01 21:22
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (9) mm 6 1 393d 393d 0/29 auto-obsoleted due to no activity on 2025/11/05 13:57
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (2) fs 6 1 1501d 1501d 0/29 auto-closed as invalid on 2022/10/02 20:33
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (6) fs mm 6 5 918d 1012d 0/29 auto-obsoleted due to no activity on 2024/05/08 09:54
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (10) mm 6 5 221d 298d 0/29 auto-obsoleted due to no activity on 2026/04/25 22:41
upstream KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead (4) fs 6 1 1255d 1255d 0/29 auto-obsoleted due to no activity on 2023/06/06 03:32

Sample crash report:
loop7: detected capacity change from 0 to 512
EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
EXT4-fs (loop7): 1 truncate cleaned up
==================================================================
BUG: KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead

write to 0xffff88812937bbc8 of 8 bytes by task 11057 on cpu 1:
 do_sync_mmap_readahead+0x329/0x380 mm/filemap.c:3435
 filemap_fault+0x369/0xb60 mm/filemap.c:3597
 __do_fault mm/memory.c:5565 [inline]
 do_read_fault mm/memory.c:6000 [inline]
 do_fault mm/memory.c:6134 [inline]
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault mm/memory.c:6707 [inline]
 handle_mm_fault+0x2310/0x3bb0 mm/memory.c:6876
 faultin_page mm/gup.c:1126 [inline]
 __get_user_pages+0x12e9/0x1eb0 mm/gup.c:1428
 populate_vma_page_range mm/gup.c:1860 [inline]
 __mm_populate+0x242/0x390 mm/gup.c:1963
 mm_populate include/linux/mm.h:4288 [inline]
 vm_mmap_pgoff+0x23b/0x2d0 mm/util.c:586
 ksys_mmap_pgoff+0x250/0x310 mm/mmap.c:619
 x64_sys_call+0x23b3/0x2550 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88812937bbc8 of 8 bytes by task 11052 on cpu 0:
 do_sync_mmap_readahead+0x2a3/0x380 mm/filemap.c:3442
 filemap_fault+0x369/0xb60 mm/filemap.c:3597
 __do_fault mm/memory.c:5565 [inline]
 do_shared_fault mm/memory.c:6064 [inline]
 do_fault mm/memory.c:6138 [inline]
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault mm/memory.c:6707 [inline]
 handle_mm_fault+0x2672/0x3bb0 mm/memory.c:6876
 do_user_addr_fault+0x404/0x1060 arch/x86/mm/fault.c:1394
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x62/0xa0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
 __put_user_4+0xd/0x30 arch/x86/lib/putuser.S:92
 __sys_sendmmsg+0x1a8/0x320 net/socket.c:2861
 __do_sys_sendmmsg net/socket.c:2883 [inline]
 __se_sys_sendmmsg net/socket.c:2880 [inline]
 __x64_sys_sendmmsg+0x57/0x70 net/socket.c:2880
 x64_sys_call+0x1fb4/0x2550 arch/x86/include/generated/asm/syscalls_64.h:308
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000006 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 11052 Comm: syz.7.1672 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/08 11:41 upstream 7b63ef2d55f2 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead
* Struck through repros no longer work on HEAD.