syzbot


KCSAN: data-race in copy_mm / vma_complete (2)

Status: moderation: reported on 2025/10/15 03:21
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+93b9f9203fe921d1b0b1@syzkaller.appspotmail.com
First crash: 52d, last: 37d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_mm / vma_complete mm 6 1 149d 149d 0/29 auto-obsoleted due to no activity on 2025/09/04 07:42

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_mm / vma_complete

read-write to 0xffff88810425bff0 of 4 bytes by task 6880 on cpu 1:
 vma_complete+0x13f/0x580 mm/vma.c:355
 __split_vma+0x5d9/0x650 mm/vma.c:568
 split_vma mm/vma.c:598 [inline]
 vma_modify+0x3f2/0xc80 mm/vma.c:1631
 vma_modify_flags+0x101/0x130 mm/vma.c:1649
 mprotect_fixup+0x2cc/0x570 mm/mprotect.c:816
 do_mprotect_pkey+0x6d6/0x980 mm/mprotect.c:990
 __do_sys_mprotect mm/mprotect.c:1011 [inline]
 __se_sys_mprotect mm/mprotect.c:1008 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:1008
 x64_sys_call+0x2752/0x3000 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810425bf40 of 1408 bytes by task 6881 on cpu 0:
 dup_mm kernel/fork.c:1483 [inline]
 copy_mm+0xe2/0x370 kernel/fork.c:1541
 copy_process+0xd08/0x2000 kernel/fork.c:2181
 kernel_clone+0x16c/0x5c0 kernel/fork.c:2609
 __do_sys_clone3 kernel/fork.c:2911 [inline]
 __se_sys_clone3+0x1c2/0x200 kernel/fork.c:2890
 __x64_sys_clone3+0x31/0x40 kernel/fork.c:2890
 x64_sys_call+0x1fc9/0x3000 arch/x86/include/generated/asm/syscalls_64.h:436
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 6881 Comm: syz.2.908 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/30 08:41 upstream e53642b87a4f fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_mm / vma_complete
2025/10/15 03:20 upstream 9b332cece987 b6605ba8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_mm / vma_complete
* Struck through repros no longer work on HEAD.