KCSAN: data-race in data_push_tail / string

Status: moderation: reported on 2021/07/22 19:23
Subsystems: audit
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+b3b8d0f2cecce376adeb@syzkaller.appspotmail.com
First crash: 2062d, last: 8d00h
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
166d7406 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ KCSAN: data-race in data_push_tail / string 2026/05/26 08:23 2026/05/26 08:23 2026/05/26 09:09 c69befb3
dd308b6a assessment-kcsan Benign: ✅ Confident: ✅ ❓ KCSAN: data-race in data_push_tail / string 2026/02/25 03:44 2026/02/25 03:44 2026/02/25 03:53 305c0ec5
894caa48 assessment-kcsan 💥 KCSAN: data-race in data_push_tail / string 2026/01/15 22:30 2026/01/15 22:30 2026/01/15 22:34 a9d6a792

Sample crash report:
==================================================================
BUG: KCSAN: data-race in data_push_tail / string

write to 0xffffffff895fa1e0 of 1 bytes by task 28 on cpu 1:
 string_nocheck lib/vsprintf.c:654 [inline]
 string+0x165/0x220 lib/vsprintf.c:732
 vsnprintf+0x543/0x8c0 lib/vsprintf.c:2948
 vscnprintf+0x41/0x90 lib/vsprintf.c:3017
 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222
 vprintk_store+0x57f/0x910 kernel/printk/printk.c:2364
 vprintk_emit+0x1a4/0x580 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 kauditd_printk_skb kernel/audit.c:588 [inline]
 kauditd_hold_skb+0x1b1/0x1c0 kernel/audit.c:623
 kauditd_send_queue+0x275/0x2d0 kernel/audit.c:808
 kauditd_thread+0x439/0x660 kernel/audit.c:932
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff895fa1e0 of 8 bytes by task 8787 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:607 [inline]
 data_push_tail+0x104/0x440 kernel/printk/printk_ringbuffer.c:692
 data_alloc+0x111/0x380 kernel/printk/printk_ringbuffer.c:1088
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1725
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x580 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 __ext4_error+0x225/0x2e0 fs/ext4/super.c:840
 ext4_validate_block_bitmap+0x586/0x5c0 fs/ext4/balloc.c:-1
 ext4_read_block_bitmap_nowait+0x420/0x660 fs/ext4/balloc.c:561
 ext4_mb_prefetch+0x191/0x260 fs/ext4/mballoc.c:2876
 ext4_mb_might_prefetch fs/ext4/mballoc.c:2917 [inline]
 ext4_mb_scan_group+0x177/0xf50 fs/ext4/mballoc.c:2962
 ext4_mb_scan_groups_linear fs/ext4/mballoc.c:1174 [inline]
 ext4_mb_scan_groups fs/ext4/mballoc.c:1206 [inline]
 ext4_mb_regular_allocator+0x5bc/0x1540 fs/ext4/mballoc.c:3061
 ext4_mb_new_blocks+0x7e8/0x1fa0 fs/ext4/mballoc.c:6309
 ext4_alloc_branch fs/ext4/indirect.c:340 [inline]
 ext4_ind_map_blocks+0xc2e/0x15e0 fs/ext4/indirect.c:652
 ext4_map_create_blocks+0x8a/0x390 fs/ext4/inode.c:699
 ext4_map_blocks+0x8a9/0xff0 fs/ext4/inode.c:942
 mpage_map_one_extent fs/ext4/inode.c:2505 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2601 [inline]
 ext4_do_writepages+0xf6d/0x2740 fs/ext4/inode.c:3077
 ext4_writepages+0x18c/0x300 fs/ext4/inode.c:3171
 do_writepages+0x1b9/0x300 mm/page-writeback.c:2560
 filemap_writeback mm/filemap.c:387 [inline]
 filemap_fdatawrite_range mm/filemap.c:412 [inline]
 file_write_and_wait_range+0x186/0x300 mm/filemap.c:786
 ext4_sync_file+0x114/0x5c0 fs/ext4/fsync.c:145
 vfs_fsync_range+0xc5/0xe0 fs/sync.c:186
 generic_write_sync include/linux/fs.h:2693 [inline]
 ext4_buffered_write_iter+0x518/0x580 fs/ext4/file.c:378
 ext4_file_write_iter+0x36e/0x1020 fs/ext4/file.c:-1
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x57a/0x990 fs/read_write.c:687
 ksys_write+0xdc/0x1a0 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:747
 x64_sys_call+0x154e/0x2550 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x3fffffffffffedea -> 0x3732363133333937

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8787 Comm: syz.0.1687 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
==================================================================
EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28
EXT4-fs (loop0): This should not happen!! Data will be lost

EXT4-fs (loop0): Total free blocks count 0
EXT4-fs (loop0): Free/Dirty block details
EXT4-fs (loop0): free_blocks=0
EXT4-fs (loop0): dirty_blocks=10
EXT4-fs (loop0): Block reservation details
EXT4-fs (loop0): i_reserved_data_blocks=10
EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.1687: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
syz.0.1687 (8787) used greatest stack depth: 7728 bytes left

Crashes (499):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/29 23:24 upstream 4dd16e31135e b498adee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/10/24 22:14 upstream 5b0764a53235 1d9ca40b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/10/05 11:53 upstream a90ee4305c4a af63e995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/09/17 02:48 upstream 238650ef6c7c 95928915 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/09/16 12:52 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/08/20 19:11 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/08/03 17:55 upstream 075b74841bd0 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/07/20 21:26 upstream 1590cf032971 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/07/09 06:37 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/06/04 15:38 upstream ba3e43a9e601 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/06/02 03:56 upstream 6f3ed7fec72f 1095583b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/06 14:56 upstream 74fe02ce122a 1dddfd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/04 23:21 upstream c7e4e4d5f7dc a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/05/02 00:27 upstream 6fe0be6dc7fa 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/27 07:30 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/19 16:49 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/17 01:12 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/14 20:48 upstream d60bc1401583 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/07 07:29 upstream bfe62a454542 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/04/06 18:09 upstream 591cd656a1bf 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/26 20:23 upstream 0138af2472df 766b6434 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/23 11:06 upstream c369299895a5 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/21 20:26 upstream a0c83177734a 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/03/09 23:01 upstream 1f318b96cc84 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/24 15:38 upstream 7dff99b35460 96b1aa46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/21 03:25 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/14 01:11 upstream cee73b1e840c 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/02/11 00:53 upstream dc855b77719f 441e25b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/22 08:39 upstream a66191c590b3 a16aed1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/21 23:18 upstream cf38b2340c0e 8fc37797 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/20 15:56 upstream 24d479d26b25 06648d9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/15 14:44 upstream 944aacb68baf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/14 08:06 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/12 08:10 upstream 9c7ef209cd0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2026/01/01 01:40 upstream 349bd28a86f2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/27 19:26 upstream c53f467229a7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/23 04:55 upstream b927546677c8 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/21 12:38 upstream 9094662f6707 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/20 04:04 upstream dd9b004b7ff3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/16 12:20 upstream 40fbbd64bba6 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/08 08:23 upstream ba65a4e7120a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/06 09:57 upstream 416f99c3b16f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/12/04 08:10 upstream 8f7aa3d3c732 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/26 21:23 upstream 30f09200cc4a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/20 19:53 upstream 8e621c9a3375 2cc4c24a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/14 15:41 upstream 6da43bbeb691 f7988ea4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/11 02:11 upstream 4ea7c1717f3f 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/09 23:50 upstream 439fc29dfd3b 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/11/03 14:41 upstream 6146a0f1dfae 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/29 04:33 upstream 8eefed8f65cc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/27 10:27 upstream dcb6fa37fd7b c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/19 18:22 upstream d9043c79ba68 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/19 12:38 upstream 1c64efcb083c 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2025/10/06 10:12 upstream 7a405dbb0f03 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/20 18:18 upstream 8cae8cd89f05 1b201b48 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/07/19 13:52 upstream 2734d6c1b1a0 e6a17580 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
2021/03/15 21:32 upstream 1e28eed17697 fdb2bb2c .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_push_tail / string
* Struck through repros no longer work on HEAD.