syzbot


KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (3)

Status: auto-closed as invalid on 2021/09/14 15:09
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 345d, last: 318d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter 4 673d 696d 0/22 auto-closed as invalid on 2020/09/24 11:06
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (2) 17 402d 451d 0/22 auto-closed as invalid on 2021/06/22 00:41
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (4) 64 4h31m 68d 0/22 moderation: reported on 2022/04/17 07:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_page_from_iter / copy_page_from_iter

write to 0xffff888121d68000 of 4096 bytes by task 12313 on cpu 1:
 instrument_copy_from_user include/linux/instrumented.h:136 [inline]
 copyin lib/iov_iter.c:167 [inline]
 copy_page_from_iter_iovec lib/iov_iter.c:312 [inline]
 copy_page_from_iter+0x261/0x530 lib/iov_iter.c:851
 process_vm_rw_pages mm/process_vm_access.c:43 [inline]
 process_vm_rw_single_vec+0x294/0x460 mm/process_vm_access.c:117
 process_vm_rw_core mm/process_vm_access.c:215 [inline]
 process_vm_rw+0x347/0x4e0 mm/process_vm_access.c:283
 __do_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:298 [inline]
 __x64_sys_process_vm_writev+0x76/0x90 mm/process_vm_access.c:298
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

write to 0xffff888121d68000 of 4096 bytes by task 12331 on cpu 0:
 instrument_copy_from_user include/linux/instrumented.h:136 [inline]
 copyin lib/iov_iter.c:167 [inline]
 copy_page_from_iter_iovec lib/iov_iter.c:312 [inline]
 copy_page_from_iter+0x261/0x530 lib/iov_iter.c:851
 process_vm_rw_pages mm/process_vm_access.c:43 [inline]
 process_vm_rw_single_vec+0x294/0x460 mm/process_vm_access.c:117
 process_vm_rw_core mm/process_vm_access.c:215 [inline]
 process_vm_rw+0x347/0x4e0 mm/process_vm_access.c:283
 __do_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:298 [inline]
 __x64_sys_process_vm_writev+0x76/0x90 mm/process_vm_access.c:298
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 12331 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/08/10 15:00 upstream 9a73fa375d58 6972b106 .config log report info KCSAN: data-race in copy_page_from_iter / copy_page_from_iter
ci2-upstream-kcsan-gce 2021/08/07 17:22 upstream c9194f32bfd9 6972b106 .config log report info KCSAN: data-race in copy_page_from_iter / copy_page_from_iter
ci2-upstream-kcsan-gce 2021/08/03 12:19 upstream c500bee1c5b2 6c236867 .config log report info KCSAN: data-race in copy_page_from_iter / copy_page_from_iter
ci2-upstream-kcsan-gce 2021/07/14 07:55 upstream 40226a3d96ef 484502bd .config log report info KCSAN: data-race in copy_page_from_iter / copy_page_from_iter