syzbot


KCSAN: data-race in bpf_obj_memcpy / copy_map_value

Status: moderation: reported on 2026/01/18 10:53
Subsystems: bpf
[Documentation on labels]
Reported-by: syzbot+2c785a41be7897a5f10c@syzkaller.appspotmail.com
First crash: 10h25m, last: 10h25m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in bpf_obj_memcpy / copy_map_value

write to 0xffff8881217cb5e0 of 1389 bytes by task 6903 on cpu 0:
 bpf_obj_memcpy+0x13c/0x1a0 include/linux/bpf.h:-1
 copy_map_value include/linux/bpf.h:556 [inline]
 htab_lru_map_update_elem+0x17c/0x700 kernel/bpf/hashtab.c:1218
 bpf_map_update_value+0x4f3/0x570 kernel/bpf/syscall.c:294
 generic_map_update_batch+0x3eb/0x540 kernel/bpf/syscall.c:2038
 bpf_map_do_batch+0x25c/0x380 kernel/bpf/syscall.c:5647
 __sys_bpf+0x5f8/0x7b0 kernel/bpf/syscall.c:-1
 __do_sys_bpf kernel/bpf/syscall.c:6274 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6272 [inline]
 __x64_sys_bpf+0x41/0x50 kernel/bpf/syscall.c:6272
 x64_sys_call+0x28e1/0x3000 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881217cb5e0 of 1389 bytes by task 6888 on cpu 1:
 bpf_obj_memcpy include/linux/bpf.h:-1 [inline]
 copy_map_value+0x128/0x140 include/linux/bpf.h:556
 bpf_map_copy_value+0x495/0x510 kernel/bpf/syscall.c:353
 map_lookup_elem+0x426/0x560 kernel/bpf/syscall.c:1760
 __sys_bpf+0x3b9/0x7b0 kernel/bpf/syscall.c:6149
 __do_sys_bpf kernel/bpf/syscall.c:6274 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6272 [inline]
 __x64_sys_bpf+0x41/0x50 kernel/bpf/syscall.c:6272
 x64_sys_call+0x28e1/0x3000 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6888 Comm: syz.4.855 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/18 10:53 upstream d12453c7e281 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in bpf_obj_memcpy / copy_map_value
* Struck through repros no longer work on HEAD.