syzbot


KCSAN: data-race in memchr / vsnprintf (2)

Status: moderation: reported on 2026/05/04 17:19
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+7683a71b29572d08ec02@syzkaller.appspotmail.com
First crash: 6d06h, last: 5d16h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
c5bfb132-c21e-46b0-954e-5109d37d81ff assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in memchr / vsnprintf (2) 2026/04/30 17:15 2026/04/30 17:15 2026/04/30 17:36 a7464baf70c43ea5c1e2c452c1367cfc28592bd4
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in memchr / vsnprintf block 6 1 212d 212d 0/29 auto-obsoleted due to no activity on 2025/12/01 22:54

Sample crash report:
==================================================================
BUG: KCSAN: data-race in memchr / vsnprintf

write to 0xffffffff8937edca of 24 bytes by task 11611 on cpu 0:
 vsnprintf+0x2ce/0x860 lib/vsprintf.c:2899
 va_format lib/vsprintf.c:1723 [inline]
 pointer+0x821/0xcb0 lib/vsprintf.c:2569
 vsnprintf+0x491/0x860 lib/vsprintf.c:2952
 vscnprintf+0x41/0x90 lib/vsprintf.c:3013
 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222
 vprintk_store+0x57b/0x910 kernel/printk/printk.c:2364
 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 __ext4_error_inode+0x2af/0x3c0 fs/ext4/super.c:861
 ext4_xattr_delete_inode+0x760/0x7a0 fs/ext4/xattr.c:3003
 ext4_evict_inode+0xb16/0xe30 fs/ext4/inode.c:284
 evict+0x2af/0x510 fs/inode.c:841
 iput_final fs/inode.c:1960 [inline]
 iput+0x41a/0x580 fs/inode.c:2009
 ext4_process_orphan+0x1a9/0x1c0 fs/ext4/orphan.c:358
 ext4_orphan_cleanup+0x69c/0x9f0 fs/ext4/orphan.c:472
 __ext4_fill_super fs/ext4/super.c:5701 [inline]
 ext4_fill_super+0x3408/0x37c0 fs/ext4/super.c:5824
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1694
 get_tree_bdev+0x1f/0x30 fs/super.c:1717
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5856
 vfs_get_tree+0x57/0x1d0 fs/super.c:1754
 fc_mount fs/namespace.c:1193 [inline]
 do_new_mount_fc fs/namespace.c:3758 [inline]
 do_new_mount+0x288/0x8d0 fs/namespace.c:3834
 path_mount+0x4d0/0xbc0 fs/namespace.c:4154
 do_mount fs/namespace.c:4167 [inline]
 __do_sys_mount fs/namespace.c:4383 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360
 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff8937edcd of 1 bytes by task 11616 on cpu 1:
 memchr+0x28/0x50 lib/string.c:809
 memchr include/linux/fortify-string.h:737 [inline]
 count_lines kernel/printk/printk_ringbuffer.c:1857 [inline]
 copy_data kernel/printk/printk_ringbuffer.c:1903 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1996 [inline]
 _prb_read_valid+0x7d6/0x950 kernel/printk/printk_ringbuffer.c:2173
 prb_read_valid_info+0x7a/0xa0 kernel/printk/printk_ringbuffer.c:2280
 find_first_fitting_seq+0x2a1/0x330 kernel/printk/printk.c:1567
 syslog_print_all+0x11b/0x3c0 kernel/printk/printk.c:1699
 do_syslog+0x2fd/0x7f0 kernel/printk/printk.c:1777
 __do_sys_syslog kernel/printk/printk.c:1855 [inline]
 __se_sys_syslog kernel/printk/printk.c:1853 [inline]
 __x64_sys_syslog+0x41/0x50 kernel/printk/printk.c:1853
 x64_sys_call+0x2b9e/0x3020 arch/x86/include/generated/asm/syscalls_64.h:104
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x78 -> 0x69

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 11616 Comm: syz.6.1166 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/01 06:22 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in memchr / vsnprintf
2026/04/30 17:15 upstream e75a43c7cec4 a7464baf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in memchr / vsnprintf
* Struck through repros no longer work on HEAD.