syzbot


KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

Status: moderation: reported on 2023/12/09 00:01
Subsystems: mm
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+706dde8a3e5ef992fcad@syzkaller.appspotmail.com
First crash: 1076d, last: 2h09m
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b0384c36-8501-4524-a9d1-a0253d5f5415 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/05/21 02:41 2026/05/21 02:41 2026/05/21 03:22 cf874a1cf36318c06202027159ddac14acf00db7

			
		
6bd39b22-15c8-4e79-b1a3-ff9c2ad13335 repro 💥 KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/03/10 12:22 2026/03/10 12:22 2026/03/10 12:22 5c03941b7fba0fd3b0326afc981322c89fe9ba52+
unexpected git log output: "warning: unable to access '/root/.config/git/attributes': Permission denied\nwarning: unable to access '/root/.config/git/attributes': Permission denied\n1f318b96cc84d7c2ab...
truncated to first 200 bytes; open job for full error
71db9653-a631-44dd-b50f-639baab5d8f4 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/01/14 13:13 2026/01/14 13:13 2026/01/14 13:16 a9d6a79219801d2130df3b1a792c57f0e5428e9f

			
		

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

write to 0xffff8881019ef5e0 of 8 bytes by task 15758 on cpu 0:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3563
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff8881019ef5e0 of 8 bytes by task 15757 on cpu 1:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3563
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000003b20 -> 0x0000000000003b24

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 15757 Comm: syz.9.4859 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (2797):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/21 18:48 upstream 8cd8cf7a07e5 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/21 08:50 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/20 11:37 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/19 22:13 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/18 23:38 upstream 83f1454877cc a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/18 10:30 upstream e771677c937d a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/18 05:15 upstream e771677c937d b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/17 15:42 upstream 66affa37cfac b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/17 15:40 upstream 66affa37cfac b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/17 14:09 upstream 66affa37cfac 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/17 00:32 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/16 12:18 upstream b1cbabe84ca1 a3998659 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/16 04:19 upstream a87bbc4578fd 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/15 14:58 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/15 05:08 upstream 95e56f0f293e 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/14 16:05 upstream 8cd9520d35a6 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/13 21:24 upstream 2b07ea76fd28 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/13 07:49 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/12 17:07 upstream 1dadb7e7eb5a 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/12 02:54 upstream 2b414a95b8f7 e93da63e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 22:35 upstream 2b414a95b8f7 d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 14:00 upstream 9716c086c8e8 d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/11 02:17 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/10 13:44 upstream acb7500801e9 f79bac11 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/10 01:51 upstream 685441a6d3f1 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 23:56 upstream 2d3090a8aeb5 34dab4be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 11:52 upstream 2d3090a8aeb5 c36c07f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/09 11:51 upstream 2d3090a8aeb5 c36c07f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 17:17 upstream 2d3090a8aeb5 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 15:17 upstream 4549871118cf 656e94c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/08 06:56 upstream 4549871118cf cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/07 17:46 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/07 04:13 upstream 979c294509f9 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/06 15:13 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/06 01:54 upstream c10130c234c8 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/05 11:58 upstream ddd664bbff63 48b6c3fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/05 09:56 upstream ddd664bbff63 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 20:35 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 20:34 upstream 9154c4af7829 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/04 02:03 upstream ba3e43a9e601 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/03 12:41 upstream ba3e43a9e601 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/03 00:37 upstream ba3e43a9e601 3c0d2131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/02 06:58 upstream 6f3ed7fec72f 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/01 21:07 upstream e43ffb69e043 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/06/01 08:50 upstream e43ffb69e043 8d8eeb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/20 18:08 upstream df685633c3db 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/03/10 03:44 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/01/14 08:34 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/12/08 12:55 upstream 5e3f5b81de80 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/11/23 22:26 upstream d3fa86b1a7b4 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
* Struck through repros no longer work on HEAD.