syzbot


KCSAN: data-race in copy_mm / lru_gen_del_mm (2)

Status: moderation: reported on 2026/07/18 18:50
Subsystems: mm
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+cf98ce9dc644a63f3094@syzkaller.appspotmail.com
First crash: 1d16h, last: 1d16h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
15955ad2-90a4-436a-aa1d-0003e5d22f83 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in copy_mm / lru_gen_del_mm (2) 2026/07/20 00:20 2026/07/20 00:20 2026/07/20 01:02 72524a6625c995608a7d179201dff2195b8d1f66

			
		
8c2f09c9-a4ab-4102-bc77-4a49ec2d762c assessment-kcsan Benign: ✅ KCSAN: data-race in copy_mm / lru_gen_del_mm (2) 2026/07/18 18:49 2026/07/18 18:49 2026/07/18 19:40 72524a6625c995608a7d179201dff2195b8d1f66

			
		
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_mm / lru_gen_del_mm mm 6 4 135d 182d 0/29 auto-obsoleted due to no activity on 2026/05/01 15:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_mm / lru_gen_del_mm

write to 0xffff8881022f8690 of 8 bytes by task 17447 on cpu 1:
 __list_del include/linux/list.h:226 [inline]
 __list_del_entry include/linux/list.h:249 [inline]
 list_del_init include/linux/list.h:318 [inline]
 lru_gen_del_mm+0x299/0x3e0 mm/vmscan.c:2927
 __mmput+0x17a/0x1c0 kernel/fork.c:1197
 mmput+0x40/0x50 kernel/fork.c:1210
 exit_mm+0x113/0x1a0 kernel/exit.c:615
 do_exit+0x438/0x1500 kernel/exit.c:997
 do_group_exit+0x138/0x140 kernel/exit.c:1152
 __do_sys_exit_group kernel/exit.c:1163 [inline]
 __se_sys_exit_group kernel/exit.c:1161 [inline]
 __x64_sys_exit_group+0x1f/0x20 kernel/exit.c:1161
 x64_sys_call+0x3008/0x3020 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881022f8000 of 1728 bytes by task 17448 on cpu 0:
 dup_mm kernel/fork.c:1537 [inline]
 copy_mm+0xd6/0x340 kernel/fork.c:1595
 copy_process+0x108c/0x2310 kernel/fork.c:2289
 kernel_clone+0x1c0/0x5f0 kernel/fork.c:2748
 __do_sys_clone kernel/fork.c:2889 [inline]
 __se_sys_clone kernel/fork.c:2873 [inline]
 __x64_sys_clone+0x143/0x180 kernel/fork.c:2873
 x64_sys_call+0x1222/0x3020 arch/x86/include/generated/asm/syscalls_64.h:57
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 17448 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/18 18:49 upstream 1229e2e57a5c 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_mm / lru_gen_del_mm
* Struck through repros no longer work on HEAD.