BUG: KCSAN: data-race in data_alloc / prb_reserve write to 0xffffffff86c81a80 of 8 bytes by task 31784 on cpu 0: data_alloc+0x31c/0x390 kernel/printk/printk_ringbuffer.c:1130 prb_reserve+0x8d7/0xae0 kernel/printk/printk_ringbuffer.c:1724 vprintk_store+0x54a/0x910 kernel/printk/printk.c:2354 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 printk_stack_address arch/x86/kernel/dumpstack.c:70 [inline] __show_trace_log_lvl+0x460/0x560 arch/x86/kernel/dumpstack.c:282 __dump_stack+0x1d/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x95/0xd0 lib/dump_stack.c:120 dump_stack+0x15/0x1b lib/dump_stack.c:129 fail_dump lib/fault-inject.c:73 [inline] should_fail_ex+0x263/0x280 lib/fault-inject.c:174 should_failslab+0x8c/0xb0 mm/failslab.c:46 slab_pre_alloc_hook mm/slub.c:4491 [inline] slab_alloc_node mm/slub.c:4843 [inline] kmem_cache_alloc_node_noprof+0x6d/0x460 mm/slub.c:4918 __alloc_skb+0x2d6/0x690 net/core/skbuff.c:702 alloc_skb include/linux/skbuff.h:1383 [inline] __ip_append_data+0x19a3/0x2460 net/ipv4/ip_output.c:1133 ip_append_data+0xd5/0x130 net/ipv4/ip_output.c:1378 udp_sendmsg+0x328/0x1590 net/ipv4/udp.c:1511 inet_sendmsg+0xac/0xd0 net/ipv4/af_inet.c:865 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x3db/0x490 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0x76/0x90 net/socket.c:2209 x64_sys_call+0x2d35/0x3020 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff86c81a80 of 8 bytes by task 31773 on cpu 1: desc_read kernel/printk/printk_ringbuffer.c:496 [inline] desc_push_tail kernel/printk/printk_ringbuffer.c:792 [inline] desc_reserve kernel/printk/printk_ringbuffer.c:938 [inline] prb_reserve+0x207/0xae0 kernel/printk/printk_ringbuffer.c:1674 vprintk_store+0x54a/0x910 kernel/printk/printk.c:2354 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2455 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 __nla_validate_parse+0x1735/0x1cf0 lib/nlattr.c:647 __nla_parse+0x40/0x60 lib/nlattr.c:732 nla_parse_nested_deprecated include/net/netlink.h:1379 [inline] do_setlink+0x1fe2/0x2940 net/core/rtnetlink.c:3357 rtnl_group_changelink net/core/rtnetlink.c:3790 [inline] __rtnl_newlink net/core/rtnetlink.c:3944 [inline] rtnl_newlink+0xeee/0x1330 net/core/rtnetlink.c:4072 rtnetlink_rcv_msg+0x64b/0x720 net/core/rtnetlink.c:6958 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6985 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x5c8/0x6f0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0x563/0x5b0 net/socket.c:2592 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2681 x64_sys_call+0x194c/0x3020 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000015200 -> 0x00000000000b2ef0 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 31773 Comm: syz.3.8087 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== netlink: 16 bytes leftover after parsing attributes in process `syz.3.8087'. netlink: 16 bytes leftover after parsing attributes in process `syz.3.8087'.