syzbot


KCSAN: data-race in data_push_tail / string

Status: moderation: reported on 2021/07/22 19:23
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+b3b8d0f2cecce376adeb@syzkaller.appspotmail.com
First crash: 1572d, last: 1d22h

Sample crash report:
EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.3492: corrupted inode contents
EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.3492: mark_inode_dirty error
==================================================================
BUG: KCSAN: data-race in data_push_tail / string

write to 0xffffffff88e4c6b0 of 1 bytes by task 14062 on cpu 0:
 string_nocheck lib/vsprintf.c:643 [inline]
 string+0x187/0x220 lib/vsprintf.c:721
 vsnprintf+0x532/0x890 lib/vsprintf.c:2874
 vscnprintf+0x41/0x90 lib/vsprintf.c:2939
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 __ext4_std_error+0x346/0x370 fs/ext4/super.c:956
 ext4_process_orphan+0x14e/0x1c0 fs/ext4/orphan.c:347
 ext4_orphan_cleanup+0x6a8/0xa00 fs/ext4/orphan.c:474
 __ext4_fill_super fs/ext4/super.c:5605 [inline]
 ext4_fill_super+0x3171/0x34e0 fs/ext4/super.c:5724
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1681
 get_tree_bdev+0x1f/0x30 fs/super.c:1704
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5756
 vfs_get_tree+0x54/0x1d0 fs/super.c:1804
 do_new_mount+0x207/0x680 fs/namespace.c:3902
 path_mount+0x4a4/0xb20 fs/namespace.c:4226
 do_mount fs/namespace.c:4239 [inline]
 __do_sys_mount fs/namespace.c:4450 [inline]
 __se_sys_mount+0x28f/0x2e0 fs/namespace.c:4427
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4427
 x64_sys_call+0xd36/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff88e4c6b0 of 8 bytes by task 14087 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 __ext4_error_inode+0x2ca/0x3f0 fs/ext4/super.c:844
 __ext4_mark_inode_dirty+0xbd/0x3f0 fs/ext4/inode.c:6433
 ext4_truncate+0x8d3/0xad0 fs/ext4/inode.c:4597
 ext4_process_orphan+0x110/0x1c0 fs/ext4/orphan.c:339
 ext4_orphan_cleanup+0x6a8/0xa00 fs/ext4/orphan.c:474
 __ext4_fill_super fs/ext4/super.c:5605 [inline]
 ext4_fill_super+0x3171/0x34e0 fs/ext4/super.c:5724
 get_tree_bdev_flags+0x291/0x300 fs/super.c:1681
 get_tree_bdev+0x1f/0x30 fs/super.c:1704
 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5756
 vfs_get_tree+0x54/0x1d0 fs/super.c:1804
 do_new_mount+0x207/0x680 fs/namespace.c:3902
 path_mount+0x4a4/0xb20 fs/namespace.c:4226
 do_mount fs/namespace.c:4239 [inline]
 __do_sys_mount fs/namespace.c:4450 [inline]
 __se_sys_mount+0x28f/0x2e0 fs/namespace.c:4427
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4427
 x64_sys_call+0xd36/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000100000105 -> 0x3a3734333a6e6168

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 14087 Comm: syz.0.3492 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================
EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
EXT4-fs (loop0): 1 truncate cleaned up
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
smc: net device bond0 erased user defined pnetid SYZ2

Crashes (426):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/03 11:24 upstream b4911fb0b060 115ceea7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/07/01 22:19 upstream 66701750d556 091a06cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/06/21 03:25 upstream 11313e2f7812 d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/06/19 05:37 upstream fb4d33ab452e ed3e87f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/06/09 01:55 upstream 939f15e640f1 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/06/08 09:50 upstream 8630c59e9936 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/05/31 19:41 upstream 0f70f5b08a47 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/05/29 21:10 upstream e0797d3b91de 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/05/23 23:29 upstream eccf6f2f6ab9 f8cc0c83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/05/04 12:40 upstream e8ab83e34bdc b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/05/03 15:59 upstream 95d3481af6dc b0714e37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/30 14:29 upstream ca91b9500108 85a5a23f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/22 13:39 upstream a33b5a08cbbd 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/21 21:27 upstream 9d7a0577c9db 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/21 03:03 upstream 6fea5fabd332 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/17 03:40 upstream c62f4b82d571 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/14 07:18 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/13 15:29 upstream 5aaaedb0cb54 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/04/03 12:28 upstream a1b5bd45d4ee 996a9618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/30 09:44 upstream 7f2ff7b62617 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/25 06:44 upstream 3ba7dfb8da62 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/20 09:07 upstream a7f2e10ecd8f 9209bc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/17 13:07 upstream 4701f33a1070 948c34e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/12 05:49 upstream 0b46b049d6ec ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/09 04:28 upstream b7c90e3e717a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/03/07 01:39 upstream 0f52fd4f67c6 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/28 10:31 upstream 1e15510b71c9 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/26 16:08 upstream ac9c34d1e45a d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/22 00:28 upstream 8a61cb6e150e d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/19 06:30 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/14 06:35 upstream 68763b29e0a6 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/01 15:56 upstream 60c828cf80c0 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/02/01 00:42 upstream 69b8923f5003 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/29 17:43 upstream 05dbaf8dd8bf 136953f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/26 00:35 upstream 0f8e26b38d7a 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/20 21:25 upstream 100ceb4817a2 6e87cfa2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/15 18:26 upstream 619f0b6fad52 968edaf4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/15 05:46 upstream 619f0b6fad52 7315a7cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/12 01:22 upstream b62cef9a5c67 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/11 07:48 upstream 77a903cd8e5a 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/10 02:26 upstream 643e2e259c2b 67d7ec0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/09 21:19 upstream eea6e4b4dfb8 9220929f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/01/03 18:52 upstream 0bc21e701a6f f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2024/12/31 09:31 upstream ccb98ccef0e5 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2024/12/29 17:27 upstream 059dd502b263 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2024/12/27 15:01 upstream d6ef8b40d075 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2024/12/22 10:22 upstream 48f506ad0b68 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/20 18:18 upstream 8cae8cd89f05 1b201b48 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/19 13:52 upstream 2734d6c1b1a0 e6a17580 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/03/15 21:32 upstream 1e28eed17697 fdb2bb2c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
* Struck through repros no longer work on HEAD.