syzbot


KCSAN: data-race in _prb_read_valid / prb_reserve_in_last (2)

Status: moderation: reported on 2025/07/23 21:02
Subsystems: mm block
[Documentation on labels]
Reported-by: syzbot+08a0b6dcd32b2b2dfcf7@syzkaller.appspotmail.com
First crash: 181d, last: 11h42m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in _prb_read_valid / prb_reserve_in_last block 6 5 238d 252d 0/29 auto-obsoleted due to no activity on 2025/07/22 21:45

Sample crash report:
==================================================================
BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last

write to 0xffffffff86a88b40 of 8 bytes by task 22879 on cpu 1:
 data_realloc kernel/printk/printk_ringbuffer.c:1228 [inline]
 prb_reserve_in_last+0x9f1/0xb30 kernel/printk/printk_ringbuffer.c:1495
 vprintk_store+0x457/0x910 kernel/printk/printk.c:2276
 vprintk_emit+0x1a4/0x600 kernel/printk/printk.c:2402
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2441
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2451
 mem_cgroup_print_oom_context+0x89/0xd0 mm/memcontrol.c:1545
 dump_oom_victim+0x67/0xe0 mm/oom_kill.c:454
 oom_kill_process+0x2a0/0x350 mm/oom_kill.c:1048
 out_of_memory+0x97d/0xb80 mm/oom_kill.c:1185
 mem_cgroup_out_of_memory mm/memcontrol.c:1682 [inline]
 mem_cgroup_oom mm/memcontrol.c:1705 [inline]
 try_charge_memcg+0x62e/0xa10 mm/memcontrol.c:2430
 obj_cgroup_charge_pages+0xa6/0x150 mm/memcontrol.c:2823
 __memcg_kmem_charge_page+0x9e/0x170 mm/memcontrol.c:2867
 __alloc_frozen_pages_noprof+0x18a/0x350 mm/page_alloc.c:5257
 alloc_pages_mpol+0xb3/0x260 mm/mempolicy.c:2486
 alloc_frozen_pages_noprof mm/mempolicy.c:2557 [inline]
 alloc_pages_noprof+0x8f/0x130 mm/mempolicy.c:2577
 vm_area_alloc_pages mm/vmalloc.c:3718 [inline]
 __vmalloc_area_node mm/vmalloc.c:3863 [inline]
 __vmalloc_node_range_noprof+0xa46/0x12b0 mm/vmalloc.c:4051
 __kvmalloc_node_noprof+0x471/0x680 mm/slub.c:7164
 ip_set_alloc+0x24/0x30 net/netfilter/ipset/ip_set_core.c:261
 hash_netiface_create+0x282/0x740 net/netfilter/ipset/ip_set_hash_gen.h:1568
 ip_set_create+0x3cf/0x970 net/netfilter/ipset/ip_set_core.c:1109
 nfnetlink_rcv_msg+0x509/0x5d0 net/netfilter/nfnetlink.c:302
 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2550
 nfnetlink_rcv+0x167/0x1720 net/netfilter/nfnetlink.c:669
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x5c8/0x6f0 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x145/0x170 net/socket.c:742
 ____sys_sendmsg+0x31e/0x4a0 net/socket.c:2592
 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2646
 __sys_sendmsg net/socket.c:2678 [inline]
 __do_sys_sendmsg net/socket.c:2683 [inline]
 __se_sys_sendmsg net/socket.c:2681 [inline]
 __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2681
 x64_sys_call+0x17ba/0x3000 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86a88b38 of 16 bytes by task 2998 on cpu 0:
 desc_read kernel/printk/printk_ringbuffer.c:496 [inline]
 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1931 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1979 [inline]
 _prb_read_valid+0x1bc/0x950 kernel/printk/printk_ringbuffer.c:2170
 prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2242
 syslog_print+0x109/0x560 kernel/printk/printk.c:1609
 do_syslog+0x52b/0x7f0 kernel/printk/printk.c:1761
 __do_sys_syslog kernel/printk/printk.c:1853 [inline]
 __se_sys_syslog kernel/printk/printk.c:1851 [inline]
 __x64_sys_syslog+0x41/0x50 kernel/printk/printk.c:1851
 x64_sys_call+0x27ce/0x3000 arch/x86/include/generated/asm/syscalls_64.h:104
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 2998 Comm: klogd Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/21 07:11 upstream 6c790212c588 6f1aa2f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/05 05:49 upstream 3609fa95fb0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/12/07 00:24 upstream cc3ee4ba57b7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/26 05:50 upstream 30f09200cc4a 64219f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/21 21:34 upstream 2eba5e05d9bc 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/16 17:21 upstream 7254a2b52279 f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/14 09:02 upstream 6da43bbeb691 07e030de .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/10/04 10:22 upstream cbf33b8e0b36 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/09/27 18:55 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/28 12:24 upstream 07d9df80082b e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/19 13:15 upstream be48bcf004f9 254a27c1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/13 16:17 upstream 8742b2d8935f 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/12 05:09 upstream 53e760d89498 c06e8995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/11 00:50 upstream 8f5ae30d69d7 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/07/28 10:35 upstream 038d61fd6422 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/07/23 21:01 upstream 01a412d06bc5 e1dd4f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
* Struck through repros no longer work on HEAD.