syzbot


KCSAN: data-race in begin_new_exec / cgroup_task_dead

Status: moderation: reported on 2026/01/09 01:31
Subsystems: fs mm
[Documentation on labels]
Reported-by: syzbot+e35391dc12d61582bcfe@syzkaller.appspotmail.com
First crash: 49d, last: 49d
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
5d5b15eb-1140-4e9b-af10-a2f355cb111b assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in begin_new_exec / cgroup_task_dead 2026/02/24 20:56 2026/02/24 20:56 2026/02/24 21:06 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
fb606151-bdf2-4095-be8e-3759b5540bf6 assessment-kcsan 💥 KCSAN: data-race in begin_new_exec / cgroup_task_dead 2026/01/10 03:12 2026/01/10 03:12 2026/01/10 03:12 7519916073b761ced56a7b15fdeeb4674e8dc125 Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0, Status: RESOURCE_EXHAUSTED, Details: [map[@type:type.googleapis.com/google.rpc.Help links:[map[description:Learn more about Gemini API quotas url:https://ai.google.dev/gemini-api/docs/rate-limits]]] map[@type:type.googleapis.com/google.rpc.QuotaFailure violations:[map[quotaId:GenerateRequestsPerDayPerProjectPerModel quotaMetric:generativelanguage.googleapis.com/generate_requests_per_model_per_day]]] map[@type:type.googleapis.com/google.rpc.DebugInfo detail:[ORIGINAL ERROR] generic::resource_exhausted: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0 [google.rpc.error_details_ext] { message: "You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. \n* Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0" details { type_url: "type.googleapis.com/language_labs.genai.debug.GeminiApiDebugInfo" value: "RM\nK\nEgenerativelanguage.googleapis.com/generate_requests_per_model_per_day\030\000\"\000" } details { [type.googleapis.com/google.rpc.Help] { links { description: "Learn more about Gemini API quotas" url: "https://ai.google.dev/gemini-api/docs/rate-limits" } } } details { [type.googleapis.com/google.rpc.QuotaFailure] { violations { quota_metric: "generativelanguage.googleapis.com/generate_requests_per_model_per_day" quota_id: "GenerateRequestsPerDayPerProjectPerModel" } } } }]]

Sample crash report:
==================================================================
BUG: KCSAN: data-race in begin_new_exec / cgroup_task_dead

write to 0xffff888103852630 of 4 bytes by task 9822 on cpu 0:
 de_thread fs/exec.c:1007 [inline]
 begin_new_exec+0x8eb/0x12a0 fs/exec.c:1123
 load_elf_binary+0x6a3/0x1c90 fs/binfmt_elf.c:1010
 search_binary_handler fs/exec.c:1669 [inline]
 exec_binprm fs/exec.c:1701 [inline]
 bprm_execve+0x477/0x9b0 fs/exec.c:1753
 do_execveat_common+0x6e6/0x750 fs/exec.c:1859
 do_execveat fs/exec.c:1944 [inline]
 __do_sys_execveat fs/exec.c:2018 [inline]
 __se_sys_execveat fs/exec.c:2012 [inline]
 __x64_sys_execveat+0x73/0x90 fs/exec.c:2012
 x64_sys_call+0x1c0e/0x3000 arch/x86/include/generated/asm/syscalls_64.h:323
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xca/0x2b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103852630 of 4 bytes by task 9825 on cpu 1:
 thread_group_leader include/linux/sched/signal.h:706 [inline]
 do_cgroup_task_dead kernel/cgroup/cgroup.c:7004 [inline]
 cgroup_task_dead+0x97/0x2b0 kernel/cgroup/cgroup.c:7065
 finish_task_switch+0x1b7/0x2a0 kernel/sched/core.c:5152
 context_switch kernel/sched/core.c:5259 [inline]
 __schedule+0x85f/0xcd0 kernel/sched/core.c:6863
 preempt_schedule_common kernel/sched/core.c:7047 [inline]
 __cond_resched+0x31/0x60 kernel/sched/core.c:7376
 might_resched include/linux/kernel.h:61 [inline]
 might_alloc include/linux/sched/mm.h:323 [inline]
 slab_pre_alloc_hook mm/slub.c:4904 [inline]
 slab_alloc_node mm/slub.c:5239 [inline]
 __do_kmalloc_node mm/slub.c:5656 [inline]
 __kmalloc_noprof+0xaf/0x5a0 mm/slub.c:5669
 kmalloc_noprof include/linux/slab.h:961 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 lsm_blob_alloc security/security.c:192 [inline]
 lsm_bpf_map_alloc security/security.c:314 [inline]
 security_bpf_map_create+0x51/0x130 security/security.c:5225
 map_create+0xcb5/0xda0 kernel/bpf/syscall.c:1594
 __sys_bpf+0x54e/0x7c0 kernel/bpf/syscall.c:6146
 __do_sys_bpf kernel/bpf/syscall.c:6274 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6272 [inline]
 __x64_sys_bpf+0x41/0x50 kernel/bpf/syscall.c:6272
 x64_sys_call+0x28e1/0x3000 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xca/0x2b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000011 -> 0xffffffff

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 9825 Comm: syz.2.2166 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/09 01:31 upstream 79b95d74470d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in begin_new_exec / cgroup_task_dead
* Struck through repros no longer work on HEAD.