syzbot

 sign-in | mailing list | source | docs
🐞 Open [994] ≡ Subsystems 🐞 Fixed [5242] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KCSAN: data-race in copy_page_from_iter / copy_page_from_iter

Status: auto-closed as invalid on 2020/09/24 11:06
Subsystems: mm
[Documentation on labels]
First crash: 1368d, last: 1345d
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (3) mm 4 990d 1017d 0/26 auto-closed as invalid on 2021/09/14 15:09
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (2) mm 17 1074d 1123d 0/26 auto-closed as invalid on 2021/06/22 00:41
upstream KCSAN: data-race in copy_page_from_iter / copy_page_from_iter (4) mm 69 634d 740d 0/26 auto-obsoleted due to no activity on 2022/09/05 09:34

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_page_from_iter / copy_page_from_iter

write to 0xffff88802bfcb000 of 4096 bytes by task 9195 on cpu 1:
 instrument_copy_from_user include/linux/instrumented.h:106 [inline]
 copyin lib/iov_iter.c:152 [inline]
 copy_page_from_iter_iovec lib/iov_iter.c:297 [inline]
 copy_page_from_iter+0x31f/0x5a0 lib/iov_iter.c:943
 process_vm_rw_pages mm/process_vm_access.c:46 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:120 [inline]
 process_vm_rw_core+0x478/0x760 mm/process_vm_access.c:218
 process_vm_rw+0x14e/0x1d0 mm/process_vm_access.c:286
 __do_sys_process_vm_writev mm/process_vm_access.c:308 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __x64_sys_process_vm_writev+0x76/0x90 mm/process_vm_access.c:303
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88802bfcb000 of 4096 bytes by task 9185 on cpu 0:
 instrument_copy_from_user include/linux/instrumented.h:106 [inline]
 copyin lib/iov_iter.c:152 [inline]
 copy_page_from_iter_iovec lib/iov_iter.c:297 [inline]
 copy_page_from_iter+0x31f/0x5a0 lib/iov_iter.c:943
 process_vm_rw_pages mm/process_vm_access.c:46 [inline]
 process_vm_rw_single_vec mm/process_vm_access.c:120 [inline]
 process_vm_rw_core+0x478/0x760 mm/process_vm_access.c:218
 process_vm_rw+0x14e/0x1d0 mm/process_vm_access.c:286
 __do_sys_process_vm_writev mm/process_vm_access.c:308 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:303 [inline]
 __x64_sys_process_vm_writev+0x76/0x90 mm/process_vm_access.c:303
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 9185 Comm: syz-executor.4 Not tainted 5.9.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/20 11:06 upstream 7eac66d0456f ed282a3a .config console log report ci2-upstream-kcsan-gce
2020/08/13 07:06 upstream fb893de323e2 bc15f7db .config console log report ci2-upstream-kcsan-gce
2020/08/05 07:48 upstream c0842fbc1b18 02034dac .config console log report ci2-upstream-kcsan-gce
2020/07/28 13:17 upstream 92ed30191993 cb93dc6a .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.