KCSAN: data-race in data_push_tail / string

Status: moderation: reported on 2021/07/22 19:23
Subsystems: audit
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+b3b8d0f2cecce376adeb@syzkaller.appspotmail.com
First crash: 1987d, last: 3d07h
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
166d7406 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in data_push_tail / string 2026/05/26 08:23 2026/05/26 08:23 2026/05/26 09:09 c69befb3
dd308b6a assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in data_push_tail / string 2026/02/25 03:44 2026/02/25 03:44 2026/02/25 03:53 305c0ec5
894caa48 assessment-kcsan 💥 KCSAN: data-race in data_push_tail / string 2026/01/15 22:30 2026/01/15 22:30 2026/01/15 22:34 a9d6a792

Sample crash report:
loop1: detected capacity change from 0 to 512
EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
EXT4-fs (loop1): mounted filesystem 007f0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
==================================================================
BUG: KCSAN: data-race in data_push_tail / string

write to 0xffffffff895c2658 of 1 bytes by task 23261 on cpu 1:
 string_nocheck lib/vsprintf.c:652 [inline]
 string+0x165/0x220 lib/vsprintf.c:730
 vsnprintf+0x543/0x8c0 lib/vsprintf.c:2945
 vscnprintf+0x41/0x90 lib/vsprintf.c:3014
 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222
 vprintk_store+0x57f/0x910 kernel/printk/printk.c:2364
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 addrtype_mt_checkentry_v1+0x13b/0x160 net/netfilter/xt_addrtype.c:208
 xt_checkentry_match net/netfilter/x_tables.c:543 [inline]
 xt_check_match+0x3b7/0x5e0 net/netfilter/x_tables.c:576
 check_match net/ipv6/netfilter/ip6_tables.c:488 [inline]
 find_check_match net/ipv6/netfilter/ip6_tables.c:505 [inline]
 find_check_entry net/ipv6/netfilter/ip6_tables.c:556 [inline]
 translate_table+0xbd5/0x1210 net/ipv6/netfilter/ip6_tables.c:733
 do_replace net/ipv6/netfilter/ip6_tables.c:1152 [inline]
 do_ip6t_set_ctl+0x73e/0x990 net/ipv6/netfilter/ip6_tables.c:1643
 nf_setsockopt+0x199/0x1b0 net/netfilter/nf_sockopt.c:101
 ipv6_setsockopt+0x11a/0x130 net/ipv6/ipv6_sockglue.c:970
 tcp_setsockopt+0x98/0xb0 net/ipv4/tcp.c:4179
 sock_common_setsockopt+0x69/0x80 net/core/sock.c:4033
 do_sock_setsockopt net/socket.c:2393 [inline]
 __sys_setsockopt+0x184/0x200 net/socket.c:2418
 __do_sys_setsockopt net/socket.c:2424 [inline]
 __se_sys_setsockopt net/socket.c:2421 [inline]
 __x64_sys_setsockopt+0x64/0x80 net/socket.c:2421
 x64_sys_call+0x248f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:55
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff895c2658 of 8 bytes by task 23191 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:608 [inline]
 data_push_tail+0x104/0x440 kernel/printk/printk_ringbuffer.c:693
 data_alloc+0x111/0x380 kernel/printk/printk_ringbuffer.c:1089
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1727
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 __ext4_msg+0x1aa/0x1c0 fs/ext4/super.c:1001
 ext4_fill_super+0x2f25/0x3770 fs/ext4/super.c:5851
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1887
 get_tree_bdev+0x1f/0x30 fs/super.c:1910
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5868
 vfs_get_tree+0x57/0x1d0 fs/super.c:1947
 fc_mount fs/namespace.c:1198 [inline]
 do_new_mount_fc fs/namespace.c:3772 [inline]
 do_new_mount+0x288/0x8d0 fs/namespace.c:3848
 path_mount+0x4ad/0xb90 fs/namespace.c:4168
 do_mount fs/namespace.c:4181 [inline]
 __do_sys_mount fs/namespace.c:4397 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4374
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4374
 x64_sys_call+0xc3b/0x2550 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x3fffffffffffff1d -> 0x484f525020367670

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 23191 Comm: syz.1.5683 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff)

Crashes (494):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/20 19:11 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/08/03 17:55 upstream 075b74841bd0 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/07/20 21:26 upstream 1590cf032971 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/07/09 06:37 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/06/04 15:38 upstream ba3e43a9e601 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/06/02 03:56 upstream 6f3ed7fec72f 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/06 14:56 upstream 74fe02ce122a 1dddfd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/04 23:21 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/02 00:27 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/27 07:30 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/19 16:49 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/17 01:12 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/14 20:48 upstream d60bc1401583 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/07 07:29 upstream bfe62a454542 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/06 18:09 upstream 591cd656a1bf 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/26 20:23 upstream 0138af2472df 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/23 11:06 upstream c369299895a5 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/21 20:26 upstream a0c83177734a 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/09 23:01 upstream 1f318b96cc84 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/24 15:38 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/21 03:25 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/14 01:11 upstream cee73b1e840c 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/11 00:53 upstream dc855b77719f 441e25b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/22 08:39 upstream a66191c590b3 a16aed1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/21 23:18 upstream cf38b2340c0e 8fc37797 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/20 15:56 upstream 24d479d26b25 06648d9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/15 14:44 upstream 944aacb68baf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/14 08:06 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/12 08:10 upstream 9c7ef209cd0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/01 01:40 upstream 349bd28a86f2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/27 19:26 upstream c53f467229a7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/23 04:55 upstream b927546677c8 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/21 12:38 upstream 9094662f6707 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/20 04:04 upstream dd9b004b7ff3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/16 12:20 upstream 40fbbd64bba6 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/08 08:23 upstream ba65a4e7120a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/06 09:57 upstream 416f99c3b16f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/04 08:10 upstream 8f7aa3d3c732 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/26 21:23 upstream 30f09200cc4a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/20 19:53 upstream 8e621c9a3375 2cc4c24a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/14 15:41 upstream 6da43bbeb691 f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/11 02:11 upstream 4ea7c1717f3f 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/09 23:50 upstream 439fc29dfd3b 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/03 14:41 upstream 6146a0f1dfae 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/29 04:33 upstream 8eefed8f65cc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/27 10:27 upstream dcb6fa37fd7b c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/19 18:22 upstream d9043c79ba68 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/19 12:38 upstream 1c64efcb083c 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/06 10:12 upstream 7a405dbb0f03 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/20 18:18 upstream 8cae8cd89f05 1b201b48 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/19 13:52 upstream 2734d6c1b1a0 e6a17580 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/03/15 21:32 upstream 1e28eed17697 fdb2bb2c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
* Struck through repros no longer work on HEAD.