KCSAN: data-race in _prb_read_valid / vsnprintf

Status: moderation: reported on 2026/08/31 16:48
Subsystems: exfat
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+61736f0c3bbc25a53083@syzkaller.appspotmail.com
First crash: 36d, last: 6d12h
▶ ▼ ✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
912f803c repro-c Reproduced: ✅ ❓ KCSAN: data-race in _prb_read_valid / vsnprintf 2026/09/30 11:14 2026/09/30 11:14 2026/09/30 12:17 7808aef4
2c84b389 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ✅ NetworkTrigger: ✅ PeripheralTrigger: ✅ RemoteTrigger: ✅ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ✅ ❓ KCSAN: data-race in _prb_read_valid / vsnprintf 2026/09/02 00:01 2026/09/02 00:01 2026/09/02 00:04 587f6b29
2dabb11b assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in _prb_read_valid / vsnprintf 2026/08/31 16:47 2026/08/31 16:48 2026/08/31 17:08 2f52988a
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/09/30 13:00 10m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 551c722f40809618230001baccf219193e22fc5a no crash job log log

Sample crash report:
==================================================================
BUG: KCSAN: data-race in _prb_read_valid / vsnprintf

write to 0xffffffff895e2c97 of 3 bytes by task 13756 on cpu 1:
 vsnprintf+0x2c0/0x8c0 lib/vsprintf.c:2900
 vscnprintf+0x41/0x90 lib/vsprintf.c:3018
 printk_sprint+0x30/0x2b0 kernel/printk/printk.c:2222
 vprintk_store+0x57f/0x910 kernel/printk/printk.c:2364
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 _fat_msg+0xb0/0xe0 fs/fat/misc.c:62
 __fat_fs_error+0x183/0x1e0 fs/fat/misc.c:31
 fat_bmap_cluster fs/fat/cache.c:298 [inline]
 fat_get_mapped_cluster+0x235/0x250 fs/fat/cache.c:315
 fat_bmap+0x250/0x280 fs/fat/cache.c:379
 __fat_get_block fs/fat/inode.c:129 [inline]
 fat_get_block+0xd3/0x5e0 fs/fat/inode.c:190
 block_read_full_folio+0x1eb/0x690 fs/buffer.c:2308
 do_mpage_readpage+0x29f/0xe80 fs/mpage.c:313
 mpage_read_folio+0xbd/0x130 fs/mpage.c:394
 fat_read_folio+0x1c/0x30 fs/fat/inode.c:205
 filemap_read_folio+0x2e/0x110 mm/filemap.c:2520
 filemap_fault+0x5a4/0xb60 mm/filemap.c:3689
 __do_fault mm/memory.c:5565 [inline]
 do_read_fault mm/memory.c:6000 [inline]
 do_fault mm/memory.c:6134 [inline]
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault mm/memory.c:6707 [inline]
 handle_mm_fault+0x2310/0x3bb0 mm/memory.c:6876
 faultin_page mm/gup.c:1126 [inline]
 __get_user_pages+0x12e9/0x1eb0 mm/gup.c:1428
 populate_vma_page_range mm/gup.c:1860 [inline]
 __mm_populate+0x242/0x390 mm/gup.c:1963
 mm_populate include/linux/mm.h:4288 [inline]
 vm_mmap_pgoff+0x23b/0x2d0 mm/util.c:586
 ksys_mmap_pgoff+0x250/0x310 mm/mmap.c:619
 x64_sys_call+0x23b3/0x2550 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff895e2c98 of 70 bytes by task 15 on cpu 0:
 copy_data kernel/printk/printk_ringbuffer.c:1911 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1996 [inline]
 _prb_read_valid+0x882/0x930 kernel/printk/printk_ringbuffer.c:2173
 prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2245
 printk_get_next_message+0xea/0x550 kernel/printk/printk.c:3052
 nbcon_emit_next_record+0x4af/0x1bc0 kernel/printk/nbcon.c:1017
 nbcon_emit_one kernel/printk/nbcon.c:1157 [inline]
 nbcon_kthread_func+0x3fd/0x690 kernel/printk/nbcon.c:1271
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 15 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/30 12:10 upstream 551c722f4080 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / vsnprintf
2026/08/31 16:47 upstream cee9395acd80 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in _prb_read_valid / vsnprintf
* Struck through repros no longer work on HEAD.