KCSAN: data-race in shmem_fallocate / shmem_writeout

Status: moderation: reported on 2026/01/17 16:35
Subsystems: mm
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+aae8bd56cc1c38d50ec4@syzkaller.appspotmail.com
First crash: 240d, last: 1d16h
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
aba51ef8 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in shmem_fallocate / shmem_writeout 2026/05/15 21:14 2026/05/15 21:14 2026/05/15 21:53 efdaf0f9
29a3eb8f repro KCSAN: data-race in shmem_fallocate / shmem_writeout 2026/03/07 16:51 2026/03/07 16:51 2026/03/07 16:53 31e9c887
138f1b16 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in shmem_fallocate / shmem_writeout 2026/01/17 16:34 2026/01/17 16:34 2026/01/17 16:45 a9d6a792

Sample crash report:
==================================================================
BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout

read-write to 0xffffc90004b97cc0 of 8 bytes by task 10512 on cpu 1:
 shmem_writeout+0x2eb/0x8f0 mm/shmem.c:1684
 pageout mm/vmscan.c:658 [inline]
 shrink_folio_list+0x1a81/0x26f0 mm/vmscan.c:1397
 evict_folios+0x1c6e/0x2830 mm/vmscan.c:4910
 try_to_shrink_lruvec+0x8fd/0xb30 mm/vmscan.c:5076
 lru_gen_shrink_lruvec mm/vmscan.c:5221 [inline]
 shrink_lruvec+0x252/0x1d40 mm/vmscan.c:5981
 shrink_node_memcgs mm/vmscan.c:6220 [inline]
 shrink_node+0x67c/0x2000 mm/vmscan.c:6264
 shrink_zones mm/vmscan.c:6503 [inline]
 do_try_to_free_pages+0x408/0xca0 mm/vmscan.c:6565
 try_to_free_mem_cgroup_pages+0x201/0x420 mm/vmscan.c:6887
 mem_cgroup_resize_max+0x13d/0x290 mm/memcontrol-v1.c:1816
 mem_cgroup_write+0x132/0x1c0 mm/memcontrol-v1.c:-1
 cgroup_file_write+0x197/0x350 kernel/cgroup/cgroup.c:4412
 kernfs_fop_write_iter+0x1d2/0x2e0 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57f/0x9a0 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffc90004b97cc0 of 8 bytes by task 10507 on cpu 0:
 shmem_fallocate+0x5cb/0x8d0 mm/shmem.c:3733
 vfs_fallocate+0x3ac/0x400 fs/open.c:338
 ioctl_preallocate fs/ioctl.c:289 [inline]
 file_ioctl+0x4e1/0x5b0 fs/ioctl.c:-1
 do_vfs_ioctl+0x7c4/0xe50 fs/ioctl.c:576
 __do_sys_ioctl fs/ioctl.c:595 [inline]
 __se_sys_ioctl+0x82/0x140 fs/ioctl.c:583
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583
 x64_sys_call+0x239d/0x2550 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000000015a -> 0x000000000000015d

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 10507 Comm: syz.5.2609 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
==================================================================

Crashes (154):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/13 04:34 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/12 15:32 upstream 5225b8eec4c9 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/12 02:48 upstream 3026c6e4f223 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/12 00:00 upstream 3026c6e4f223 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/11 03:13 upstream 08df884136f1 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/10 01:40 upstream 50d05c7c76c9 4e8b1cc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/08 10:04 upstream 28924df2a08f 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/07 15:34 upstream df2908090cda 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/07 10:43 upstream df2908090cda 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/07 05:55 upstream 88405f0ad1d5 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/05 23:00 upstream 0d9ff90a5422 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/03 04:10 upstream 940de590b839 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/09/02 12:03 upstream 89a312991dc6 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/31 13:50 upstream cee9395acd80 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/29 03:39 upstream c20313e98b04 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/28 09:53 upstream 1b78070aaef6 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/22 17:38 upstream 66fb95a52111 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/22 03:44 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/21 13:55 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/18 15:04 upstream 0f23d56f17fd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/18 01:44 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/17 17:14 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/17 00:39 upstream dcb68831eac7 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/16 11:38 upstream 3eb40771c00a 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/15 17:16 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/14 16:16 upstream 3aa1dcaa4f6f 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/13 18:40 upstream 3aa1dcaa4f6f b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/13 06:16 upstream 3d6d817622b0 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/13 06:13 upstream 3d6d817622b0 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/12 11:11 upstream f5bbbfec59b4 f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/11 19:22 upstream f5bbbfec59b4 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/10 20:25 upstream d58772d8520c 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/09 02:18 upstream a7c7074b58d2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/02 13:41 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/08/01 15:13 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/31 00:45 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/30 18:03 upstream 11028ab62899 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/29 15:19 upstream fc02acf6ac0c 6ef5c1e2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/29 04:49 upstream fc02acf6ac0c 19622d9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/28 19:42 upstream 3b5f4b83c4ab edc8a875 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/28 13:53 upstream 62cc90241548 edc8a875 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/28 05:27 upstream 62cc90241548 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/27 11:59 upstream f5098b6bae76 aae9036b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/07/27 10:42 upstream f5098b6bae76 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/05/15 00:37 upstream 66182ca873a4 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/03/07 03:51 upstream 651690480a96 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
2026/01/17 16:34 upstream d3eeb99bbc99 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in shmem_fallocate / shmem_writeout
* Struck through repros no longer work on HEAD.