================================================================== BUG: KCSAN: data-race in __set_task_comm / strlen write to 0xffff88810418bba0 of 8 bytes by task 5888 on cpu 0: __set_task_comm+0x92/0x180 fs/exec.c:1100 begin_new_exec+0xeb4/0x1210 fs/exec.c:1257 load_elf_binary+0x64a/0x1a30 fs/binfmt_elf.c:1010 search_binary_handler fs/exec.c:1694 [inline] exec_binprm fs/exec.c:1726 [inline] bprm_execve+0x45c/0x9b0 fs/exec.c:1778 kernel_execve+0x5e0/0x630 fs/exec.c:1922 call_usermodehelper_exec_async+0x196/0x250 kernel/umh.c:109 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read to 0xffff88810418bba0 of 1 bytes by task 4422 on cpu 1: strlen+0x19/0x40 lib/string.c:402 __fortify_strlen include/linux/fortify-string.h:218 [inline] trace_event_get_offsets_sched_stat_runtime include/trace/events/sched.h:560 [inline] do_trace_event_raw_event_sched_stat_runtime include/trace/events/sched.h:553 [inline] trace_event_raw_event_sched_stat_runtime+0x59/0x140 include/trace/events/sched.h:553 __do_trace_sched_stat_runtime include/trace/events/sched.h:576 [inline] trace_sched_stat_runtime include/trace/events/sched.h:576 [inline] update_se+0x153/0x460 kernel/sched/fair.c:1375 update_curr+0x29/0x210 kernel/sched/fair.c:2001 enqueue_entity kernel/sched/fair.c:6121 [inline] enqueue_task_fair+0x144/0xab0 kernel/sched/fair.c:7857 enqueue_task kernel/sched/core.c:2184 [inline] activate_task kernel/sched/core.c:2224 [inline] ttwu_do_activate+0xa7/0x230 kernel/sched/core.c:3824 ttwu_queue kernel/sched/core.c:4077 [inline] try_to_wake_up+0x44a/0x6c0 kernel/sched/core.c:4415 __mutex_unlock_slowpath+0x216/0x370 kernel/locking/mutex.c:1077 mutex_unlock+0x81/0x90 kernel/locking/mutex.c:582 __rtnl_unlock+0x56/0xb0 net/core/rtnetlink.c:143 netdev_run_todo+0xb6/0x9c0 net/core/dev.c:11718 rtnl_unlock+0xe/0x20 net/core/rtnetlink.c:157 rtnl_net_unlock include/linux/rtnetlink.h:135 [inline] addrconf_dad_work+0x8f6/0xbc0 net/ipv6/addrconf.c:4321 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405 worker_thread+0x569/0x750 kernel/workqueue.c:3486 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x75 -> 0x00 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 4422 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(lazy) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: ipv6_addrconf addrconf_dad_work ================================================================== netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_1 hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_1 hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_1 hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed