syzbot


KCSAN: data-race in copy_process / show_stat (5)

Status: moderation: reported on 2026/05/29 14:53
Subsystems: mm
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+c95c682a0d287dbbb481@syzkaller.appspotmail.com
First crash: 14d, last: 14d
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
8fcb6da1-717b-44d4-9641-13d92ecceafc assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in copy_process / show_stat (5) 2026/06/02 21:33 2026/06/02 21:33 2026/06/02 21:34 62fe15281f5011cd203d8845b8767b10e7443aa5
5b80ad86-ea5a-4765-8cd6-518219c5f8af assessment-kcsan Benign: ✅ KCSAN: data-race in copy_process / show_stat (5) 2026/05/30 00:32 2026/05/30 00:32 2026/05/30 00:33 6b4a844333e83556da95d61d7f207e7ef5cd4bc6
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_process / show_stat (2) mm 6 2 2058d 2060d 0/29 auto-closed as invalid on 2020/11/28 01:56
upstream KCSAN: data-race in copy_process / show_stat (3) mm 6 1 1451d 1451d 0/29 auto-closed as invalid on 2022/07/28 00:27
upstream KCSAN: data-race in copy_process / show_stat mm 6 3 2095d 2133d 0/29 auto-closed as invalid on 2020/10/21 12:32
upstream KCSAN: data-race in copy_process / show_stat (4) mm 6 1 1209d 1209d 0/29 auto-obsoleted due to no activity on 2023/04/17 12:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_process / show_stat

read-write to 0xffffffff89368ae0 of 8 bytes by task 15138 on cpu 0:
 copy_process+0x21f6/0x2370 kernel/fork.c:2510
 kernel_clone+0x1c0/0x5f0 kernel/fork.c:2722
 __do_sys_clone kernel/fork.c:2863 [inline]
 __se_sys_clone kernel/fork.c:2847 [inline]
 __x64_sys_clone+0x143/0x180 kernel/fork.c:2847
 x64_sys_call+0x1222/0x3020 arch/x86/include/generated/asm/syscalls_64.h:57
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff89368ae0 of 8 bytes by task 15131 on cpu 1:
 show_stat+0xc16/0xd80 fs/proc/stat.c:181
 seq_read_iter+0x31e/0x940 fs/seq_file.c:231
 proc_reg_read_iter+0xe6/0x180 fs/proc/inode.c:295
 copy_splice_read+0x471/0x6c0 fs/splice.c:362
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x26e/0x670 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000003b23 -> 0x0000000000003b24

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 15131 Comm: syz.0.2819 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/29 14:52 upstream 8fde5d1d47f6 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_process / show_stat
* Struck through repros no longer work on HEAD.