syz.3.2794[10600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! syz.3.2794[10600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! ================================================================== BUG: KCSAN: data-race in data_push_tail / string write to 0xffffffff88baa598 of 1 bytes by task 29 on cpu 0: string_nocheck lib/vsprintf.c:650 [inline] string+0x16c/0x210 lib/vsprintf.c:728 vsnprintf+0xa09/0xe30 lib/vsprintf.c:2848 vscnprintf+0x42/0x90 lib/vsprintf.c:2954 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216 vprintk_store+0x589/0x870 kernel/printk/printk.c:2336 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 kauditd_printk_skb kernel/audit.c:546 [inline] kauditd_hold_skb+0x1a3/0x1b0 kernel/audit.c:581 kauditd_send_queue+0x288/0x2e0 kernel/audit.c:766 kauditd_thread+0x42a/0x650 kernel/audit.c:890 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read to 0xffffffff88baa598 of 8 bytes by task 10600 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 bpf_get_probe_write_proto+0x8b/0x90 kernel/trace/bpf_trace.c:365 bpf_tracing_func_proto+0x596/0x790 kernel/trace/bpf_trace.c:1490 raw_tp_prog_func_proto+0x65/0xc0 kernel/trace/bpf_trace.c:1973 get_helper_proto kernel/bpf/verifier.c:10641 [inline] check_helper_call+0x13d/0x3d00 kernel/bpf/verifier.c:10661 do_check+0x4b03/0x7090 kernel/bpf/verifier.c:18767 do_check_common+0xc37/0x1090 kernel/bpf/verifier.c:21844 do_check_main kernel/bpf/verifier.c:21935 [inline] bpf_check+0x3edb/0xd5e0 kernel/bpf/verifier.c:22661 bpf_prog_load+0xed4/0x1070 kernel/bpf/syscall.c:2947 __sys_bpf+0x463/0x7a0 kernel/bpf/syscall.c:5790 __do_sys_bpf kernel/bpf/syscall.c:5897 [inline] __se_sys_bpf kernel/bpf/syscall.c:5895 [inline] __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5895 x64_sys_call+0x2914/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffe495 -> 0x6e61223d68746170 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 10600 Comm: syz.3.2794 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 ================================================================== syz.3.2794[10600] is installing a program with bpf_probe_write_user helper that may corrupt user memory!