KCSAN: data-race in data_alloc / prb_reserve

Status: moderation: reported on 2021/03/25 21:28
Subsystems: audit
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+3ef70d22840405b8403f@syzkaller.appspotmail.com
First crash: 2104d, last: 7h04m
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision
3e9dd160 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in data_alloc / prb_reserve 2026/05/21 08:47 2026/05/21 08:47 2026/05/21 09:22 cf874a1c
731e1e99 repro 💥 KCSAN: data-race in data_alloc / prb_reserve 2026/03/10 13:21 2026/03/10 13:21 2026/03/10 13:34 d16aa12f
948cbd3a assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in data_alloc / prb_reserve 2026/01/14 18:04 2026/01/14 18:04 2026/01/14 18:07 a9d6a792

Sample crash report:
==================================================================
BUG: KCSAN: data-race in data_alloc / prb_reserve

write to 0xffffffff86e71f48 of 8 bytes by task 7364 on cpu 1:
 data_alloc+0x308/0x380 kernel/printk/printk_ringbuffer.c:1130
 prb_reserve+0x8e3/0xaf0 kernel/printk/printk_ringbuffer.c:1727
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 bt_err+0xa7/0xd0 net/bluetooth/lib.c:293
 __hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:271 [inline]
 __hci_cmd_sync_status net/bluetooth/hci_sync.c:287 [inline]
 hci_read_local_features_sync net/bluetooth/hci_sync.c:3848 [inline]
 hci_init_stage_sync net/bluetooth/hci_sync.c:3761 [inline]
 hci_init1_sync net/bluetooth/hci_sync.c:3895 [inline]
 hci_init_sync net/bluetooth/hci_sync.c:5162 [inline]
 hci_dev_init_sync net/bluetooth/hci_sync.c:5354 [inline]
 hci_dev_open_sync+0xf8e/0x22b0 net/bluetooth/hci_sync.c:5432
 hci_dev_do_open net/bluetooth/hci_core.c:431 [inline]
 hci_power_on+0xef/0x390 net/bluetooth/hci_core.c:923
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 worker_thread+0x569/0x750 kernel/workqueue.c:3560
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff86e71f48 of 8 bytes by task 3568 on cpu 0:
 desc_read kernel/printk/printk_ringbuffer.c:496 [inline]
 desc_push_tail kernel/printk/printk_ringbuffer.c:792 [inline]
 desc_reserve kernel/printk/printk_ringbuffer.c:938 [inline]
 prb_reserve+0x21a/0xaf0 kernel/printk/printk_ringbuffer.c:1677
 vprintk_store+0x54e/0x910 kernel/printk/printk.c:2354
 vprintk_emit+0x1a4/0x610 kernel/printk/printk.c:2455
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2504
 bt_err+0xa7/0xd0 net/bluetooth/lib.c:293
 hci_cmd_timeout+0x97/0x140 net/bluetooth/hci_core.c:1433
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 worker_thread+0x569/0x750 kernel/workqueue.c:3560
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0xfffffffffffeb828 -> 0x000000000009d638

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3568 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: hci0 hci_cmd_timeout
==================================================================
Bluetooth: hci0: command 0x1003 tx timeout

Crashes (1310):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/21 16:12 upstream 93f51579e7df 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/15 17:26 upstream 587858367581 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/14 11:10 upstream 704340f1cd0d 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/13 23:31 upstream d681d7ef617e 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/13 07:13 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/09/09 01:39 upstream 893e11787f78 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/30 23:08 upstream a23cbb05744b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/22 03:31 upstream 26260251022f 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/20 09:34 upstream a4ff2be345d0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/15 17:16 upstream 15ef2f78c49d 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/15 08:59 upstream dac3e89a2c90 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/10 18:00 upstream db2ddb871435 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/08 10:13 upstream bcc44b6785f2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/06 02:25 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/02 09:08 upstream 2d2338c93da7 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/08/02 02:41 upstream 02dc699f83d0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/28 10:32 upstream 62cc90241548 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/26 11:50 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/24 09:36 upstream d326f83e819c 544adce9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/23 14:55 upstream 4539944e5151 71a13572 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/20 08:10 upstream 82a47586c0b9 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/19 14:03 upstream c6859eed755d 72524a66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/17 12:20 upstream fce2dfa773ce 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/15 20:03 upstream 58717b2a1365 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/14 17:32 upstream 3b029c035b34 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/13 18:29 upstream a13c140cc289 cc4833d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/13 03:13 upstream f4fb100039e9 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/10 05:03 upstream a635d6748234 4167ee25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/09 23:37 upstream 2c7c88a412aa a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/06 09:45 upstream 8cdeaa50eae8 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/07/03 11:32 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/28 22:03 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/26 05:12 upstream a142da0b2d32 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/25 16:25 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/24 21:01 upstream 840ef6c78e6a 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/23 18:38 upstream 502d801f0ab0 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/22 22:35 upstream 1dc18801be29 5a630be6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/20 07:36 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/17 19:31 upstream 66affa37cfac b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/15 18:28 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/13 12:49 upstream 062871f1371b 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/11 11:20 upstream 9716c086c8e8 b754d2d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/10 18:19 upstream acb7500801e9 f79bac11 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/08 00:19 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/06/01 04:34 upstream e43ffb69e043 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/30 17:01 upstream f5e5d3509bff 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/28 13:07 upstream eb3f4b7426cf 681715f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/26 13:05 upstream e8c2f9fdadee a3e47276 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/24 09:42 upstream 4cbfe4502e3d c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/22 23:22 upstream 45255ea1ca09 5f091fcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/21 22:44 upstream 758c807bb943 e195359d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/05/19 05:09 upstream 4d3a2a466b8d 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/03/09 04:27 upstream 014441d1e4b2 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2026/01/14 13:49 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/03/23 05:33 upstream 0d02ec6b3136 8092f30d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/03/21 21:14 upstream 812da4d39463 4c9a64da .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in data_alloc / prb_reserve
2021/01/11 05:54 upstream 0653161f0fac 2c1f2513 .config console log report info ci2-upstream-kcsan-gce
2020/12/17 20:32 upstream accefff5b547 04201c06 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.