syzbot


KCSAN: data-race in memchr / string (6)

Status: moderation: reported on 2025/06/12 14:40
Subsystems: audit
[Documentation on labels]
Reported-by: syzbot+3984271db8fa10af29b7@syzkaller.appspotmail.com
First crash: 3d17h, last: 3d17h
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in memchr / string (3) audit 7 387d 400d 0/28 auto-obsoleted due to no activity on 2024/06/28 09:14
upstream KCSAN: data-race in memchr / string (4) audit 1 338d 338d 0/28 auto-obsoleted due to no activity on 2024/08/16 20:32
upstream KCSAN: data-race in memchr / string (5) audit 1 284d 284d 0/28 auto-obsoleted due to no activity on 2024/10/10 00:33
upstream KCSAN: data-race in memchr / string v9fs 1 1442d 1442d 0/28 auto-closed as invalid on 2021/08/08 15:57
upstream KCSAN: data-race in memchr / string (2) mm 1 1195d 1195d 0/28 auto-closed as invalid on 2022/04/12 14:29

Sample crash report:
==================================================================
BUG: KCSAN: data-race in memchr / string

write to 0xffffffff88e5385b of 1 bytes by task 29 on cpu 0:
 string_nocheck lib/vsprintf.c:643 [inline]
 string+0x187/0x220 lib/vsprintf.c:721
 vsnprintf+0x532/0x890 lib/vsprintf.c:2874
 vscnprintf+0x41/0x90 lib/vsprintf.c:2939
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 kauditd_printk_skb kernel/audit.c:546 [inline]
 kauditd_hold_skb+0x1b1/0x1c0 kernel/audit.c:581
 kauditd_send_queue+0x273/0x2c0 kernel/audit.c:766
 kauditd_thread+0x421/0x630 kernel/audit.c:890
 kthread+0x486/0x510 kernel/kthread.c:464
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff88e5385b of 1 bytes by task 19606 on cpu 1:
 memchr+0x28/0x50 lib/string.c:809
 _Z6memchrPKvU25pass_dynamic_object_size0im include/linux/fortify-string.h:739 [inline]
 count_lines kernel/printk/printk_ringbuffer.c:1797 [inline]
 copy_data kernel/printk/printk_ringbuffer.c:1843 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1936 [inline]
 _prb_read_valid+0x65d/0x920 kernel/printk/printk_ringbuffer.c:2113
 prb_read_valid_info+0x66/0x90 kernel/printk/printk_ringbuffer.c:2219
 do_syslog+0x6e2/0x7e0 kernel/printk/printk.c:1853
 __do_sys_syslog kernel/printk/printk.c:1877 [inline]
 __se_sys_syslog kernel/printk/printk.c:1875 [inline]
 __x64_sys_syslog+0x41/0x50 kernel/printk/printk.c:1875
 x64_sys_call+0x2ea0/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:104
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x45 -> 0x36

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 19606 Comm: syz.0.6195 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/12 14:39 upstream 2c4a1f3fe03e 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in memchr / string
* Struck through repros no longer work on HEAD.