KCSAN: data-race in data_alloc / prb_reserve

Status: moderation: reported on 2021/03/25 21:28
Subsystems: block net
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+3ef70d22840405b8403f@syzkaller.appspotmail.com
First crash: 2099d, last: 1d20h
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
3e9dd160 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in data_alloc / prb_reserve 2026/05/21 08:47 2026/05/21 08:47 2026/05/21 09:22 cf874a1c
731e1e99 repro 💥 KCSAN: data-race in data_alloc / prb_reserve 2026/03/10 13:21 2026/03/10 13:21 2026/03/10 13:34 d16aa12f
948cbd3a assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in data_alloc / prb_reserve 2026/01/14 18:04 2026/01/14 18:04 2026/01/14 18:07 a9d6a792

Sample crash report:
inactive_anon 0
active_anon 0
==================================================================
BUG: KCSAN: data-race in data_alloc / prb_reserve

write to 0xffffffff86e71360 of 8 bytes by task 18152 on cpu 0:
 data_alloc+0x308/0x380 kernel/printk/printk_ringbuffer.c:1130
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1727
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 printk_stack_address arch/x86/kernel/dumpstack.c:70 [inline]
 __show_trace_log_lvl+0x460/0x560 arch/x86/kernel/dumpstack.c:282
 __dump_stack+0x1d/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x95/0xd0 lib/dump_stack.c:120
 dump_stack+0x15/0x1b lib/dump_stack.c:129
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x262/0x280 lib/fault-inject.c:174
 should_failslab+0x8c/0xb0 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4638 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0xd6/0x500 mm/slub.c:5545
 __kmemdup_nul mm/util.c:64 [inline]
 kstrndup+0x7e/0x120 mm/util.c:120
 asymmetric_lookup_restriction+0x7b/0x370 crypto/asymmetric_keys/asymmetric_type.c:520
 keyring_restrict+0xf2/0x280 security/keys/keyring.c:1053
 keyctl_restrict_keyring+0x10a/0x1c0 security/keys/keyctl.c:1772
 __do_sys_keyctl security/keys/keyctl.c:1995 [inline]
 __se_sys_keyctl+0x228/0xb70 security/keys/keyctl.c:1886
 __x64_sys_keyctl+0x67/0x80 security/keys/keyctl.c:1886
 x64_sys_call+0x1fe0/0x2550 arch/x86/include/generated/asm/syscalls_64.h:251
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86e71360 of 8 bytes by task 18147 on cpu 1:
 desc_read kernel/printk/printk_ringbuffer.c:496 [inline]
 desc_push_tail kernel/printk/printk_ringbuffer.c:792 [inline]
 desc_reserve kernel/printk/printk_ringbuffer.c:938 [inline]
 prb_reserve+0x21a/0xaf0 kernel/printk/printk_ringbuffer.c:1677
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 seq_buf_do_printk+0x113/0x1a0 lib/seq_buf.c:126
 mem_cgroup_print_oom_meminfo+0x17d/0x260 mm/memcontrol.c:1874
 dump_header+0xa2/0x240 mm/oom_kill.c:466
 oom_kill_process+0x294/0x420 mm/oom_kill.c:1031
 out_of_memory+0x981/0xbc0 mm/oom_kill.c:1169
 mem_cgroup_out_of_memory mm/memcontrol.c:1952 [inline]
 mem_cgroup_oom mm/memcontrol.c:1975 [inline]
 try_charge_memcg+0x6ba/0xae0 mm/memcontrol.c:2760
 try_charge mm/memcontrol.c:2860 [inline]
 obj_cgroup_charge_pages mm/memcontrol.c:3161 [inline]
 __obj_cgroup_charge+0x120/0x250 mm/memcontrol.c:3539
 __memcg_slab_post_alloc_hook+0x4c4/0x8d0 mm/memcontrol.c:3669
 memcg_slab_post_alloc_hook mm/slub.c:2517 [inline]
 slab_post_alloc_hook mm/slub.c:4702 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x255/0x4d0 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 __register_sysctl_table+0x52/0xbe0 fs/proc/proc_sysctl.c:1378
 register_net_sysctl_sz+0x118/0x190 net/sysctl_net.c:172
 sctp_sysctl_net_register+0x499/0x4f0 net/sctp/sysctl.c:607
 sctp_ctrlsock_init+0xa6/0x140 net/sctp/protocol.c:1451
 ops_init+0x22a/0x2e0 net/core/net_namespace.c:137
 setup_net+0x9f/0x230 net/core/net_namespace.c:443
 copy_net_ns+0x333/0x490 net/core/net_namespace.c:582
 create_new_namespaces+0x1f6/0x420 kernel/nsproxy.c:132
 unshare_nsproxy_namespaces+0x115/0x150 kernel/nsproxy.c:234
 ksys_unshare+0x42b/0x710 kernel/fork.c:3295
 __do_sys_unshare kernel/fork.c:3359 [inline]
 __se_sys_unshare kernel/fork.c:3357 [inline]
 __x64_sys_unshare+0x1f/0x30 kernel/fork.c:3357
 x64_sys_call+0x1e33/0x2550 arch/x86/include/generated/asm/syscalls_64.h:273
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000001b05e8 -> 0x000000000025aea0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 18147 Comm: syz.0.10764 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
inactive_file 0
active_file 0
unevictable 0
hierarchical_memory_limit 98304
hierarchical_memsw_limit 9223372036854771712
total_cache 0
total_rss 0
total_shmem 0
total_mapped_file 0
total_dirty 0
total_writeback 0
total_workingset_refault_anon 0
total_workingset_refault_file 0
total_swap 0
total_swapcached 16384
total_pgpgin 4
total_pgpgout 4
total_pgfault 108
total_pgmajfault 0
total_inactive_anon 0
total_active_anon 0
total_inactive_file 0
total_active_file 0
total_unevictable 0
oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.10764,pid=18146,uid=0
Memory cgroup out of memory: Killed process 18146 (syz.0.10764) total-vm:94056kB, anon-rss:1424kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000

Crashes (1309):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/15 17:26 upstream 587858367581 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/14 11:10 upstream 704340f1cd0d 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/13 23:31 upstream d681d7ef617e 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/13 07:13 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/09 01:39 upstream 893e11787f78 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/30 23:08 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/22 03:31 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/20 09:34 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/15 17:16 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/15 08:59 upstream dac3e89a2c90 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/10 18:00 upstream db2ddb871435 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/08 10:13 upstream bcc44b6785f2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/06 02:25 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/02 09:08 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/02 02:41 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/28 10:32 upstream 62cc90241548 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/26 11:50 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/24 09:36 upstream d326f83e819c 544adce9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/23 14:55 upstream 4539944e5151 71a13572 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/20 08:10 upstream 82a47586c0b9 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/19 14:03 upstream c6859eed755d 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/17 12:20 upstream fce2dfa773ce 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/15 20:03 upstream 58717b2a1365 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/14 17:32 upstream 3b029c035b34 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/13 18:29 upstream a13c140cc289 cc4833d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/13 03:13 upstream f4fb100039e9 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/10 05:03 upstream a635d6748234 4167ee25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/09 23:37 upstream 2c7c88a412aa a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/06 09:45 upstream 8cdeaa50eae8 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/03 11:32 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/28 22:03 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/26 05:12 upstream a142da0b2d32 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/25 16:25 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/24 21:01 upstream 840ef6c78e6a 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/23 18:38 upstream 502d801f0ab0 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/22 22:35 upstream 1dc18801be29 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/20 07:36 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/17 19:31 upstream 66affa37cfac b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/15 18:28 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/13 12:49 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/11 11:20 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/10 18:19 upstream acb7500801e9 f79bac11 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/08 00:19 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/01 04:34 upstream e43ffb69e043 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/30 17:01 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/28 13:07 upstream eb3f4b7426cf 681715f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/26 13:05 upstream e8c2f9fdadee a3e47276 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/24 09:42 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/22 23:22 upstream 45255ea1ca09 5f091fcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/21 22:44 upstream 758c807bb943 e195359d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/19 05:09 upstream 4d3a2a466b8d 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/03/09 04:27 upstream 014441d1e4b2 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/01/14 13:49 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/03/23 05:33 upstream 0d02ec6b3136 8092f30d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/03/21 21:14 upstream 812da4d39463 4c9a64da .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/01/11 05:54 upstream 0653161f0fac 2c1f2513 .config console log report info ci2-upstream-kcsan-gce
2020/12/17 20:32 upstream accefff5b547 04201c06 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.