KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

Status: moderation: reported on 2023/12/09 00:01
Subsystems: mm
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+706dde8a3e5ef992fcad@syzkaller.appspotmail.com
First crash: 1154d, last: 6h46m
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
b0384c36 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/05/21 02:41 2026/05/21 02:41 2026/05/21 03:22 cf874a1c
6bd39b22 repro 💥 KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/03/10 12:22 2026/03/10 12:22 2026/03/10 12:22 5c03941b
71db9653 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read 2026/01/14 13:13 2026/01/14 13:13 2026/01/14 13:16 a9d6a792

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read

write to 0xffff8881075df9a0 of 8 bytes by task 21009 on cpu 1:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3589
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff8881075df9a0 of 8 bytes by task 21005 on cpu 0:
 shmem_file_splice_read+0x401/0x590 mm/shmem.c:3589
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x1015/0x2550 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000000387a -> 0x000000000000387d

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 21005 Comm: syz.6.5751 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (3104):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/07 12:26 upstream df2908090cda 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/07 10:44 upstream df2908090cda 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/06 21:21 upstream 88405f0ad1d5 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/06 21:19 upstream 88405f0ad1d5 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/06 07:54 upstream 1fc5a74b108f 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/05 18:36 upstream 0d9ff90a5422 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/05 01:11 upstream bc35965f6940 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/04 11:42 upstream bc35965f6940 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/03 21:23 upstream 8ab1afb2eb24 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/03 18:14 upstream 8ab1afb2eb24 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/03 04:33 upstream 940de590b839 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/03 01:06 upstream 940de590b839 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/03 01:02 upstream 940de590b839 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/02 13:15 upstream 89a312991dc6 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/02 02:21 upstream 89a312991dc6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/09/01 12:46 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/31 22:48 upstream bf1079577a11 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/31 16:39 upstream cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/31 08:19 upstream cee9395acd80 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/30 18:52 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/29 20:52 upstream 08dbfad3f504 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/28 21:44 upstream c20313e98b04 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/28 19:19 upstream c20313e98b04 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/28 09:01 upstream 1b78070aaef6 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/28 02:11 upstream 1b78070aaef6 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/27 12:44 upstream 73e3f0710014 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/26 22:53 upstream 502d45774af0 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/26 14:12 upstream 73ae59e97596 a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/26 00:59 upstream 73ae59e97596 6a91adb4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/25 21:18 upstream 73ae59e97596 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/25 12:41 upstream 66498c75b4f8 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/25 01:15 upstream 66498c75b4f8 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/24 11:53 upstream 0a0d1d55dad5 b55bd4c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/24 09:52 upstream 0a0d1d55dad5 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/23 20:31 upstream 388b607d107c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/23 06:50 upstream 2709dd5ae32f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/22 17:42 upstream 66fb95a52111 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/22 00:51 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/21 10:28 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/21 10:28 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/20 21:06 upstream cf62c7084acf 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/20 08:17 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/19 18:32 upstream e8bf40d15402 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/08/19 04:24 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/05/20 18:08 upstream df685633c3db 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/03/10 03:44 upstream 1f318b96cc84 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2026/01/14 08:34 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/12/08 12:55 upstream 5e3f5b81de80 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
2023/11/23 22:26 upstream d3fa86b1a7b4 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
* Struck through repros no longer work on HEAD.