KCSAN: data-race in _prb_read_valid / prb_reserve_in_last (2)

Status: moderation: reported on 2025/07/23 21:02
Subsystems: ext4
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+08a0b6dcd32b2b2dfcf7@syzkaller.appspotmail.com
First crash: 396d, last: 5h36m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
2e7a44a9 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in _prb_read_valid / prb_reserve_in_last (2) 2026/05/23 13:45 2026/05/23 13:45 2026/05/23 14:11 c69befb3
0849a77a assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in _prb_read_valid / prb_reserve_in_last (2) 2026/01/15 07:01 2026/01/15 07:01 2026/01/15 07:23 a9d6a792
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in _prb_read_valid / prb_reserve_in_last block 6 5 453d 467d 0/29 auto-obsoleted due to no activity on 2025/07/22 21:45

Sample crash report:
loop3: detected capacity change from 0 to 512
==================================================================
BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last

write to 0xffffffff86e7cde8 of 8 bytes by task 2981 on cpu 1:
 data_realloc kernel/printk/printk_ringbuffer.c:1228 [inline]
 prb_reserve_in_last+0x9c7/0xae0 kernel/printk/printk_ringbuffer.c:1498
 vprintk_store+0x45b/0x910 kernel/printk/printk.c:2328
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 disk_unlock_native_capacity block/partitions/core.c:522 [inline]
 blk_add_partition block/partitions/core.c:545 [inline]
 blk_add_partitions block/partitions/core.c:635 [inline]
 bdev_disk_changed+0xacb/0xe20 block/partitions/core.c:695
 blkdev_get_whole+0x1e8/0x2c0 block/bdev.c:793
 bdev_open+0x279/0x7d0 block/bdev.c:1002
 bdev_file_open_by_dev+0x1cc/0x230 block/bdev.c:1104
 disk_scan_partitions+0x149/0x1b0 block/genhd.c:387
 blkdev_common_ioctl+0x120d/0x2060 block/ioctl.c:713
 blkdev_ioctl+0x31f/0x460 block/ioctl.c:792
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583
 x64_sys_call+0x239d/0x2550 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86e7cde0 of 16 bytes by task 10910 on cpu 0:
 desc_read kernel/printk/printk_ringbuffer.c:496 [inline]
 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1934 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1982 [inline]
 _prb_read_valid+0x183/0x930 kernel/printk/printk_ringbuffer.c:2173
 prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2245
 printk_get_next_message+0xea/0x550 kernel/printk/printk.c:3052
 console_emit_next_record kernel/printk/printk.c:3137 [inline]
 console_flush_one_record kernel/printk/printk.c:3268 [inline]
 console_flush_all+0x2bc/0x6d0 kernel/printk/printk.c:3350
 __console_flush_and_unlock kernel/printk/printk.c:3380 [inline]
 console_unlock+0xa1/0x280 kernel/printk/printk.c:3420
 vprintk_emit+0x3e5/0x610 kernel/printk/printk.c:2479
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 set_capacity_and_notify+0x1d5/0x230 block/genhd.c:93
 loop_set_size+0x2e/0x70 drivers/block/loop.c:221
 loop_configure+0x826/0x9c0 drivers/block/loop.c:1101
 lo_ioctl+0x1e3/0x1430 drivers/block/loop.c:1556
 blkdev_ioctl+0x387/0x460 block/ioctl.c:798
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583
 x64_sys_call+0x239d/0x2550 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 10910 Comm: syz.3.3560 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================
EXT4-fs: Ignoring removed nobh option
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.3560: corrupted inode contents
loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #3: comm syz.3.3560: mark_inode_dirty error
loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.3560: corrupted inode contents
loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.3560: mark_inode_dirty error
loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
Quota error (device loop3): write_blk: dquota write failed
Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3560: Failed to acquire dquot type 0
loop3: lost filesystem error report for type 5 error -117
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.3560: corrupted inode contents
loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #16: comm syz.3.3560: mark_inode_dirty error
loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.3560: corrupted inode contents
loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.3560: mark_inode_dirty error
loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.3560: corrupted inode contents
EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem
loop3: lost filesystem error report for type 5 error -117
EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #16: comm syz.3.3560: corrupted inode contents
EXT4-fs error (device loop3): ext4_truncate:4721: inode #16: comm syz.3.3560: mark_inode_dirty error
EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem
loop3: lost filesystem error report for type 5 error -117
EXT4-fs (loop3): 1 truncate cleaned up
EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.

Crashes (45):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/24 09:08 upstream 0a0d1d55dad5 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/08/18 05:05 upstream ff68e5f557f6 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/08/07 07:32 upstream f9a2394a2348 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/07/27 11:23 upstream f5098b6bae76 aae9036b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/07/26 06:39 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/07/09 19:27 upstream 2c7c88a412aa a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/07/08 21:27 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/07/06 09:19 upstream 8cdeaa50eae8 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/06/30 02:34 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/06/25 10:40 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/06/19 21:35 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/06/12 02:58 upstream 2b414a95b8f7 e93da63e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/05/27 11:25 upstream eb3f4b7426cf 8777bdc3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/05/24 09:46 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/05/15 16:55 upstream 70eda68668d1 9cd3beaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/24 17:10 upstream dd6c438c3e64 1c2b9291 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/23 15:20 upstream 2e6803928193 4c3406dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/16 15:31 upstream 1d51b370a0f8 4743f87d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/15 17:44 upstream 1f5ffc672165 c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/12 18:26 upstream f5459048c38a 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/10 08:50 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/04/08 15:26 upstream 3036cd0d3328 d9b7f621 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/03/07 21:20 upstream 4ae12d8bd9a8 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/02/23 10:49 upstream 6de23f81a5e0 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/02/18 19:34 upstream 23b0f90ba871 77d4d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/02/04 08:28 upstream de0674d9bc69 42b01fab .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/28 12:27 upstream 1f97d9dcf536 004c195c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/27 11:31 upstream fcb70a56f4d8 9a514c2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/23 06:02 upstream c072629f05d7 82c9c083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/21 07:11 upstream 6c790212c588 6f1aa2f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2026/01/05 05:49 upstream 3609fa95fb0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/12/07 00:24 upstream cc3ee4ba57b7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/26 05:50 upstream 30f09200cc4a 64219f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/21 21:34 upstream 2eba5e05d9bc 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/16 17:21 upstream 7254a2b52279 f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/11/14 09:02 upstream 6da43bbeb691 07e030de .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/10/04 10:22 upstream cbf33b8e0b36 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/09/27 18:55 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/28 12:24 upstream 07d9df80082b e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/19 13:15 upstream be48bcf004f9 254a27c1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/13 16:17 upstream 8742b2d8935f 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/12 05:09 upstream 53e760d89498 c06e8995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/08/11 00:50 upstream 8f5ae30d69d7 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/07/28 10:35 upstream 038d61fd6422 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
2025/07/23 21:01 upstream 01a412d06bc5 e1dd4f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / prb_reserve_in_last
* Struck through repros no longer work on HEAD.