syzbot


KCSAN: data-race in _copy_from_iter / _copy_to_iter (2)

Status: auto-obsoleted due to no activity on 2024/02/11 02:25
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+adb30e9791e0d9315d66@syzkaller.appspotmail.com
First crash: 324d, last: 319d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in _copy_from_iter / _copy_to_iter mm 2 366d 346d 0/28 auto-obsoleted due to no activity on 2023/12/26 01:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in _copy_from_iter / _copy_to_iter

read to 0xffff888151498000 of 4096 bytes by task 22370 on cpu 1:
 instrument_copy_to_user include/linux/instrumented.h:113 [inline]
 copy_to_user_iter lib/iov_iter.c:24 [inline]
 iterate_iovec include/linux/iov_iter.h:51 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:247 [inline]
 iterate_and_advance include/linux/iov_iter.h:271 [inline]
 _copy_to_iter+0x2aa/0xb20 lib/iov_iter.c:186
 copy_page_to_iter+0x171/0x2b0 lib/iov_iter.c:381
 process_vm_rw_pages mm/process_vm_access.c:45 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:117 [inline]
 process_vm_rw_core mm/process_vm_access.c:215 [inline]
 process_vm_rw+0x5ed/0x8c0 mm/process_vm_access.c:283
 __do_sys_process_vm_readv mm/process_vm_access.c:295 [inline]
 __se_sys_process_vm_readv mm/process_vm_access.c:291 [inline]
 __x64_sys_process_vm_readv+0x7a/0x90 mm/process_vm_access.c:291
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

write to 0xffff888151498000 of 4096 bytes by task 22363 on cpu 0:
 instrument_copy_from_user_before include/linux/instrumented.h:130 [inline]
 copy_from_user_iter lib/iov_iter.c:54 [inline]
 iterate_iovec include/linux/iov_iter.h:51 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:247 [inline]
 iterate_and_advance include/linux/iov_iter.h:271 [inline]
 __copy_from_iter lib/iov_iter.c:268 [inline]
 _copy_from_iter+0x2e7/0xb60 lib/iov_iter.c:279
 copy_page_from_iter+0x14f/0x280 lib/iov_iter.c:441
 process_vm_rw_pages mm/process_vm_access.c:43 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:117 [inline]
 process_vm_rw_core mm/process_vm_access.c:215 [inline]
 process_vm_rw+0x5d3/0x8c0 mm/process_vm_access.c:283
 __do_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:298 [inline]
 __x64_sys_process_vm_writev+0x7a/0x90 mm/process_vm_access.c:298
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 22363 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-00177-g52b1853b080a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/07 02:24 upstream 52b1853b080a d0304e9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _copy_from_iter / _copy_to_iter
2024/01/01 16:30 upstream 610a9b8f49fb fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _copy_from_iter / _copy_to_iter
* Struck through repros no longer work on HEAD.