================================================================== BUG: KCSAN: data-race in alloc_pid / copy_process read-write to 0xffffffff86c5ff68 of 4 bytes by task 12 on cpu 0: alloc_pid+0x651/0x940 kernel/pid.c:321 copy_process+0xf37/0x20b0 kernel/fork.c:2239 kernel_clone+0x16b/0x5d0 kernel/fork.c:2653 user_mode_thread+0x9c/0xd0 kernel/fork.c:2729 call_usermodehelper_exec_work+0x41/0x160 kernel/umh.c:171 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0x513/0xa10 kernel/workqueue.c:3359 worker_thread+0x58a/0x780 kernel/workqueue.c:3440 kthread+0x22a/0x280 kernel/kthread.c:436 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read to 0xffffffff86c5ff68 of 4 bytes by task 30 on cpu 1: copy_process+0x187f/0x20b0 kernel/fork.c:2396 kernel_clone+0x16b/0x5d0 kernel/fork.c:2653 user_mode_thread+0x9c/0xd0 kernel/fork.c:2729 call_usermodehelper_exec_work+0x41/0x160 kernel/umh.c:171 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0x513/0xa10 kernel/workqueue.c:3359 worker_thread+0x58a/0x780 kernel/workqueue.c:3440 kthread+0x22a/0x280 kernel/kthread.c:436 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x80000167 -> 0x80000168 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: events_unbound call_usermodehelper_exec_work ================================================================== bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_1 team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed