KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic

Status: moderation: reported C repro on 2025/06/04 17:43
Subsystems: mm fs
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+27d06913c9600f11dfed@syzkaller.appspotmail.com
First crash: 500d, last: 9h07m
▶ ▼ ✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision
0df0ba89 repro-c Reproduced: ✅ ❓ KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic 2026/10/03 16:26 2026/10/03 16:26 2026/10/03 17:07 57bbd979
1dc834de assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic 2026/05/17 10:44 2026/05/17 10:44 2026/05/17 10:47 de5aae85
fa757437 repro ❓ KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic 2026/03/08 03:03 2026/03/08 03:03 2026/03/08 03:10 31e9c887
2a99d994 assessment-kcsan Benign: ✅ Confident: ✅ ❓ KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic 2026/02/24 21:45 2026/02/24 21:45 2026/02/24 21:54 305c0ec5
a5368807 assessment-kcsan 💥 KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic 2026/01/10 04:29 2026/01/10 04:29 2026/01/10 04:46 75199160
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/10/03 18:53 9m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git e767a4ea70a3992c37ed604157d32f0dfbf9b1e3 report job log log

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic

read to 0xffff88810d4ab000 of 4096 bytes by task 12 on cpu 0:
 memcpy_from_iter lib/iov_iter.c:85 [inline]
 iterate_bvec include/linux/iov_iter.h:123 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:306 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 __copy_from_iter lib/iov_iter.c:261 [inline]
 copy_folio_from_iter_atomic+0x728/0x10a0 lib/iov_iter.c:491
 generic_perform_write+0x2c4/0x490 mm/filemap.c:4392
 shmem_file_write_iter+0xc5/0xf0 mm/shmem.c:3443
 lo_rw_aio+0x6ab/0x760 drivers/block/loop.c:-1
 do_req_filebacked drivers/block/loop.c:-1 [inline]
 loop_handle_cmd drivers/block/loop.c:1949 [inline]
 loop_process_work+0x569/0xad0 drivers/block/loop.c:1984
 loop_rootcg_workfn+0x22/0x30 drivers/block/loop.c:2015
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 worker_thread+0x569/0x750 kernel/workqueue.c:3560
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

write to 0xffff88810d4ab000 of 4096 bytes by task 3666 on cpu 1:
 instrument_copy_from_user_before include/linux/instrumented.h:147 [inline]
 copy_from_user_iter lib/iov_iter.c:66 [inline]
 iterate_ubuf include/linux/iov_iter.h:30 [inline]
 iterate_and_advance2 include/linux/iov_iter.h:302 [inline]
 iterate_and_advance include/linux/iov_iter.h:330 [inline]
 __copy_from_iter lib/iov_iter.c:261 [inline]
 copy_folio_from_iter_atomic+0x282/0x10a0 lib/iov_iter.c:491
 iomap_write_iter fs/iomap/buffered-io.c:1246 [inline]
 iomap_file_buffered_write+0x43a/0x960 fs/iomap/buffered-io.c:1313
 blkdev_buffered_write block/fops.c:717 [inline]
 blkdev_write_iter+0x391/0x490 block/fops.c:783
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57f/0x9a0 fs/read_write.c:687
 ksys_pwrite64 fs/read_write.c:794 [inline]
 __do_sys_pwrite64 fs/read_write.c:802 [inline]
 __se_sys_pwrite64 fs/read_write.c:799 [inline]
 __x64_sys_pwrite64+0xfd/0x150 fs/read_write.c:799
 x64_sys_call+0x23be/0x2550 arch/x86/include/generated/asm/syscalls_64.h:19
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3666 Comm: syz-executor394 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================

Crashes (237):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/08 22:23 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 6c377d19d4a5 b2734a59 .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/04 01:34 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git a74306e2e676 38f7f0d1 .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/03 19:03 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git e767a4ea70a3 7bf4ea23 .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/18 06:59 upstream 32c52ec87d62 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/08 17:57 upstream 6c377d19d4a5 b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/08 10:30 upstream 7b63ef2d55f2 4f6a9fcf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/10/04 19:34 upstream 6addb4f38557 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/29 11:58 upstream 72d3fcf802c4 7bf4ea23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/25 20:44 upstream aa98230e410f f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/25 10:34 upstream f49a343b305c f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/24 01:09 upstream 62f4c998b297 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/23 16:25 upstream fe2ec83746e5 abce1216 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/20 03:05 upstream 518e5b794c06 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/17 09:51 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/16 10:32 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/15 09:48 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/12 11:34 upstream 3026c6e4f223 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/11 22:56 upstream 3026c6e4f223 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/05 22:00 upstream 0d9ff90a5422 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/03 22:51 upstream 8ab1afb2eb24 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/09/01 12:50 upstream 786262be6048 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/27 15:16 upstream 73e3f0710014 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/25 23:02 upstream 73ae59e97596 a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/24 00:13 upstream 388b607d107c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/23 11:29 upstream 2709dd5ae32f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/22 00:54 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/21 10:26 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/21 00:17 upstream cf62c7084acf 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/19 11:01 upstream bd5f485f3f02 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/17 18:21 upstream 8d3ae59288f1 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/14 17:25 upstream ad8d485e6658 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/14 09:27 upstream 3aa1dcaa4f6f b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/09 09:24 upstream 06cf61899d64 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/08 21:20 upstream a7c7074b58d2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/07 21:19 upstream f9a2394a2348 e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/08/01 01:54 upstream 8ba098e6b6ff 7664cf44 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/24 10:16 upstream d326f83e819c 544adce9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/23 19:20 upstream 4539944e5151 71a13572 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/23 10:13 upstream 4539944e5151 881ce5c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/21 10:27 upstream b95f03f04d47 7c5de9c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/19 15:29 upstream c6859eed755d 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/13 22:14 upstream a13c140cc289 cc4833d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/12 10:52 upstream 44696aa3a489 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/09 07:36 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/07 02:13 upstream 8cdeaa50eae8 8e71ce95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/07/04 18:33 upstream 1e9cdc2ea15a fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/06/30 04:04 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/06/27 07:19 upstream 5a66900afbd6 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/06/26 09:08 upstream 4edcdefd4083 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/05/16 18:19 upstream d458a240344c a15a64a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/03/07 14:16 upstream 4ae12d8bd9a8 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2026/02/20 07:51 upstream 8bf22c33e7a1 17d780d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2025/12/30 18:16 upstream dbf8fe85a16a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
2025/06/04 17:42 upstream 1af80d00e1e0 e565f08d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
* Struck through repros no longer work on HEAD.