loop3: p91 size 108986237 extends beyond EOD, truncated loop3: p92 size 108986237 extends beyond EOD, ================================================================== BUG: KCSAN: data-race in data_push_tail / number write to 0xffffffff88bc6cf8 of 1 bytes by task 11659 on cpu 1: number+0x7f0/0xac0 lib/vsprintf.c:551 vsnprintf+0x6ae/0x890 lib/vsprintf.c:2807 vscnprintf+0x42/0x90 lib/vsprintf.c:2908 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216 vprintk_store+0x589/0x870 kernel/printk/printk.c:2336 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 br_set_state+0x290/0x390 net/bridge/br_stp.c:57 br_init_port+0x5b/0xf0 net/bridge/br_stp_if.c:39 new_nbp+0x236/0x310 net/bridge/br_if.c:442 br_add_if+0x1ef/0xa50 net/bridge/br_if.c:599 br_add_slave+0x2c/0x40 net/bridge/br_device.c:373 do_set_master net/core/rtnetlink.c:2926 [inline] do_setlink+0x7fb/0x22c0 net/core/rtnetlink.c:3125 rtnl_changelink net/core/rtnetlink.c:3732 [inline] __rtnl_newlink net/core/rtnetlink.c:3884 [inline] rtnl_newlink+0xde9/0x1250 net/core/rtnetlink.c:4021 rtnetlink_rcv_msg+0x651/0x710 net/core/rtnetlink.c:6911 netlink_rcv_skb+0x12c/0x230 net/netlink/af_netlink.c:2543 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6938 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:733 __sys_sendto+0x1a8/0x230 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0x78/0x90 net/socket.c:2190 x64_sys_call+0x29fa/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88bc6cf8 of 8 bytes by task 11710 on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 blk_add_partition block/partitions/core.c:549 [inline] blk_add_partitions block/partitions/core.c:633 [inline] bdev_disk_changed+0x87f/0xb90 block/partitions/core.c:693 loop_reread_partitions drivers/block/loop.c:537 [inline] loop_set_status+0x37e/0x590 drivers/block/loop.c:1305 lo_ioctl+0x81b/0x14d0 blkdev_ioctl+0x359/0x450 block/ioctl.c:693 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0xc9/0x140 fs/ioctl.c:892 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:892 x64_sys_call+0x1690/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffe259 -> 0x735f656764697262 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 11710 Comm: syz.3.3729 Tainted: G W 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== truncated loop3: p93 size 108986237 extends beyond EOD, truncated loop3: p94 size 108986237 extends beyond EOD, truncated loop3: p95 size 108986237 extends beyond EOD, truncated loop3: p96 size 108986237 extends beyond EOD, truncated loop3: p97 size 108986237 extends beyond EOD, truncated loop3: p98 size 108986237 extends beyond EOD, truncated loop3: p99 size 108986237 extends beyond EOD, truncated loop3: p100 size 108986237 extends beyond EOD, truncated loop3: p101 size 108986237 extends beyond EOD, truncated loop3: p102 size 108986237 extends beyond EOD, truncated loop3: p103 size 108986237 extends beyond EOD, truncated loop3: p104 size 108986237 extends beyond EOD, truncated loop3: p105 size 108986237 extends beyond EOD, truncated loop3: p106 size 108986237 extends beyond EOD, truncated loop3: p107 size 108986237 extends beyond EOD, truncated loop3: p108 size 108986237 extends beyond EOD, truncated loop3: p109 size 108986237 extends beyond EOD, truncated loop3: p110 size 108986237 extends beyond EOD, truncated loop3: p111 size 108986237 extends beyond EOD, truncated loop3: p112 size 108986237 extends beyond EOD, truncated loop3: p113 size 108986237 extends beyond EOD, truncated loop3: p114 size 108986237 extends beyond EOD, truncated loop3: p115 size 108986237 extends beyond EOD, truncated loop3: p116 size 108986237 extends beyond EOD, truncated loop3: p117 size 108986237 extends beyond EOD, truncated loop3: p118 size 108986237 extends beyond EOD, truncated loop3: p119 size 108986237 extends beyond EOD, truncated loop3: p120 size 108986237 extends beyond EOD, truncated loop3: p121 size 108986237 extends beyond EOD, truncated loop3: p122 size 108986237 extends beyond EOD, truncated loop3: p123 size 108986237 extends beyond EOD, truncated loop3: p124 size 108986237 extends beyond EOD, truncated loop3: p125 size 108986237 extends beyond EOD, truncated loop3: p126 size 108986237 extends beyond EOD, truncated loop3: p127 size 108986237 extends beyond EOD, truncated loop3: p128 size 108986237 extends beyond EOD, truncated loop3: p129 size 108986237 extends beyond EOD, truncated loop3: p130 size 108986237 extends beyond EOD, truncated loop3: p131 size 108986237 extends beyond EOD, truncated loop3: p132 size 108986237 extends beyond EOD, truncated loop3: p133 size 108986237 extends beyond EOD, truncated loop3: p134 size 108986237 extends beyond EOD, truncated loop3: p135 size 108986237 extends beyond EOD, truncated loop3: p136 size 108986237 extends beyond EOD, truncated loop3: p137 size 108986237 extends beyond EOD, truncated loop3: p138 size 108986237 extends beyond EOD, truncated loop3: p139 size 108986237 extends beyond EOD, truncated loop3: p140 size 108986237 extends beyond EOD, truncated loop3: p141 size 108986237 extends beyond EOD, truncated loop3: p142 size 108986237 extends beyond EOD, truncated loop3: p143 size 108986237 extends beyond EOD, truncated loop3: p144 size 108986237 extends beyond EOD, truncated loop3: p145 size 108986237 extends beyond EOD, truncated loop3: p146 size 108986237 extends beyond EOD, truncated loop3: p147 size 108986237 extends beyond EOD, truncated loop3: p148 size 108986237 extends beyond EOD, truncated loop3: p149 size 108986237 extends beyond EOD, truncated loop3: p150 size 108986237 extends beyond EOD, truncated loop3: p151 size 108986237 extends beyond EOD, truncated loop3: p152 size 108986237 extends beyond EOD, truncated loop3: p153 size 108986237 extends beyond EOD, truncated loop3: p154 size 108986237 extends beyond EOD, truncated loop3: p155 size 108986237 extends beyond EOD, truncated loop3: p156 size 108986237 extends beyond EOD, truncated loop3: p157 size 108986237 extends beyond EOD, truncated loop3: p158 size 108986237 extends beyond EOD, truncated loop3: p159 size 108986237 extends beyond EOD, truncated loop3: p160 size 108986237 extends beyond EOD, truncated loop3: p161 size 108986237 extends beyond EOD, truncated loop3: p162 size 108986237 extends beyond EOD, truncated loop3: p163 size 108986237 extends beyond EOD, truncated loop3: p164 size 108986237 extends beyond EOD, truncated loop3: p165 size 108986237 extends beyond EOD, truncated loop3: p166 size 108986237 extends beyond EOD, truncated loop3: p167 size 108986237 extends beyond EOD, truncated loop3: p168 size 108986237 extends beyond EOD, truncated loop3: p169 size 108986237 extends beyond EOD, truncated loop3: p170 size 108986237 extends beyond EOD, truncated loop3: p171 size 108986237 extends beyond EOD, truncated loop3: p172 size 108986237 extends beyond EOD, truncated loop3: p173 size 108986237 extends beyond EOD, truncated loop3: p174 size 108986237 extends beyond EOD, truncated loop3: p175 size 108986237 extends beyond EOD, truncated loop3: p176 size 108986237 extends beyond EOD, truncated loop3: p177 size 108986237 extends beyond EOD, truncated loop3: p178 size 108986237 extends beyond EOD, truncated loop3: p179 size 108986237 extends beyond EOD, truncated loop3: p180 size 108986237 extends beyond EOD, truncated loop3: p181 size 108986237 extends beyond EOD, truncated loop3: p182 size 108986237 extends beyond EOD, truncated loop3: p183 size 108986237 extends beyond EOD, truncated loop3: p184 size 108986237 extends beyond EOD, truncated loop3: p185 size 108986237 extends beyond EOD, truncated loop3: p186 size 108986237 extends beyond EOD, truncated loop3: p187 size 108986237 extends beyond EOD, truncated loop3: p188 size 108986237 extends beyond EOD, truncated loop3: p189 size 108986237 extends beyond EOD, truncated loop3: p190 size 108986237 extends beyond EOD, truncated loop3: p191 size 108986237 extends beyond EOD, truncated loop3: p192 size 108986237 extends beyond EOD, truncated loop3: p193 size 108986237 extends beyond EOD, truncated loop3: p194 size 108986237 extends beyond EOD, truncated loop3: p195 size 108986237 extends beyond EOD, truncated loop3: p196 size 108986237 extends beyond EOD, truncated loop3: p197 size 108986237 extends beyond EOD, truncated loop3: p198 size 108986237 extends beyond EOD, truncated loop3: p199 size 108986237 extends beyond EOD, truncated loop3: p200 size 108986237 extends beyond EOD, truncated loop3: p201 size 108986237 extends beyond EOD, truncated loop3: p202 size 108986237 extends beyond EOD, truncated loop3: p203 size 108986237 extends beyond EOD, truncated loop3: p204 size 108986237 extends beyond EOD, truncated loop3: p205 size 108986237 extends beyond EOD, truncated loop3: p206 size 108986237 extends beyond EOD, truncated loop3: p207 size 108986237 extends beyond EOD, truncated loop3: p208 size 108986237 extends beyond EOD, truncated loop3: p209 size 108986237 extends beyond EOD, truncated loop3: p210 size 108986237 extends beyond EOD, truncated loop3: p211 size 108986237 extends beyond EOD, truncated loop3: p212 size 108986237 extends beyond EOD, truncated loop3: p213 size 108986237 extends beyond EOD, truncated loop3: p214 size 108986237 extends beyond EOD, truncated loop3: p215 size 108986237 extends beyond EOD, truncated loop3: p216 size 108986237 extends beyond EOD, truncated loop3: p217 size 108986237 extends beyond EOD, truncated loop3: p218 size 108986237 extends beyond EOD, truncated loop3: p219 size 108986237 extends beyond EOD, truncated loop3: p220 size 108986237 extends beyond EOD, truncated loop3: p221 size 108986237 extends beyond EOD, truncated loop3: p222 size 108986237 extends beyond EOD, truncated loop3: p223 size 108986237 extends beyond EOD, truncated loop3: p224 size 108986237 extends beyond EOD, truncated loop3: p225 size 108986237 extends beyond EOD, truncated loop3: p226 size 108986237 extends beyond EOD, truncated loop3: p227 size 108986237 extends beyond EOD, truncated loop3: p228 size 108986237 extends beyond EOD, truncated loop3: p229 size 108986237 extends beyond EOD, truncated loop3: p230 size 108986237 extends beyond EOD, truncated loop3: p231 size 108986237 extends beyond EOD, truncated loop3: p232 size 108986237 extends beyond EOD, truncated loop3: p233 size 108986237 extends beyond EOD, truncated loop3: p234 size 108986237 extends beyond EOD, truncated loop3: p235 size 108986237 extends beyond EOD, truncated loop3: p236 size 108986237 extends beyond EOD, truncated loop3: p237 size 108986237 extends beyond EOD, truncated loop3: p238 size 108986237 extends beyond EOD, truncated loop3: p239 size 108986237 extends beyond EOD, truncated loop3: p240 size 108986237 extends beyond EOD, truncated loop3: p241 size 108986237 extends beyond EOD, truncated loop3: p242 size 108986237 extends beyond EOD, truncated loop3: p243 size 108986237 extends beyond EOD, truncated loop3: p244 size 108986237 extends beyond EOD, truncated loop3: p245 size 108986237 extends beyond EOD, truncated loop3: p246 size 108986237 extends beyond EOD, truncated loop3: p247 size 108986237 extends beyond EOD, truncated loop3: p248 size 108986237 extends beyond EOD, truncated loop3: p249 size 108986237 extends beyond EOD, truncated loop3: p250 size 108986237 extends beyond EOD, truncated loop3: p251 size 108986237 extends beyond EOD, truncated loop3: p252 size 108986237 extends beyond EOD, truncated loop3: p253 size 108986237 extends beyond EOD, truncated loop3: p254 size 108986237 extends beyond EOD, truncated loop3: p255 size 108986237 extends beyond EOD, truncated