syzbot


KCSAN: data-race in copy_creds / prepare_creds (2)

Status: moderation: reported on 2025/12/01 07:50
Subsystems: lsm
[Documentation on labels]
Reported-by: syzbot+a9c18b3cb9f026e801ba@syzkaller.appspotmail.com
First crash: 73d, last: 13d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in copy_creds / prepare_creds lsm 6 3 131d 149d 0/29 auto-obsoleted due to no activity on 2025/11/29 06:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in copy_creds / prepare_creds

write to 0xffff8881034a4228 of 4 bytes by task 4584 on cpu 0:
 get_cred_many include/linux/cred.h:219 [inline]
 copy_creds+0x78/0x340 kernel/cred.c:278
 copy_process+0x639/0x1f10 kernel/fork.c:2086
 kernel_clone+0x16b/0x5b0 kernel/fork.c:2651
 __do_sys_clone3 kernel/fork.c:2953 [inline]
 __se_sys_clone3+0x1f5/0x230 kernel/fork.c:2932
 __x64_sys_clone3+0x31/0x40 kernel/fork.c:2932
 x64_sys_call+0x2c0f/0x3000 arch/x86/include/generated/asm/syscalls_64.h:436
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881034a4180 of 184 bytes by task 4585 on cpu 1:
 prepare_creds+0x6d/0x550 kernel/cred.c:192
 prepare_exec_creds+0x14/0xe0 kernel/cred.c:234
 prepare_bprm_creds fs/exec.c:1363 [inline]
 bprm_execve+0x6f/0x9b0 fs/exec.c:1733
 do_execveat_common+0x6cf/0x740 fs/exec.c:1859
 do_execve fs/exec.c:1933 [inline]
 __do_sys_execve fs/exec.c:2009 [inline]
 __se_sys_execve fs/exec.c:2004 [inline]
 __x64_sys_execve+0x5c/0x70 fs/exec.c:2004
 x64_sys_call+0x271d/0x3000 arch/x86/include/generated/asm/syscalls_64.h:60
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 4585 Comm: syz.5.260 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/29 22:04 upstream 8dfce8991b95 aeb6fdd5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_creds / prepare_creds
2026/01/07 02:50 upstream f0b9d8eb98df d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_creds / prepare_creds
2026/01/02 13:47 upstream b69053dd3ffb d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_creds / prepare_creds
2025/12/15 22:44 upstream 8f0b4cce4481 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_creds / prepare_creds
2025/12/01 07:50 upstream 7d0a66e4bb90 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in copy_creds / prepare_creds
* Struck through repros no longer work on HEAD.