FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 28293 Comm: syz.8.8764 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
==================================================================
BUG: KCSAN: data-race in data_push_tail / vsnprintf

write to 0xffffffff88e2a1a0 of 38 bytes by task 23 on cpu 1:
 vsnprintf+0x2ce/0x890 lib/vsprintf.c:2878
 vscnprintf+0x41/0x90 lib/vsprintf.c:2991
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 vhci_hub_control+0xe7a/0xe80 drivers/usb/usbip/vhci_hcd.c:486
 rh_call_control drivers/usb/core/hcd.c:656 [inline]
 rh_urb_enqueue drivers/usb/core/hcd.c:821 [inline]
 usb_hcd_submit_urb+0xc0c/0x1200 drivers/usb/core/hcd.c:1542
 usb_submit_urb+0xae2/0xc20 drivers/usb/core/urb.c:581
 usb_start_wait_urb+0x8c/0x190 drivers/usb/core/message.c:59
 usb_internal_control_msg drivers/usb/core/message.c:103 [inline]
 usb_control_msg+0x18f/0x250 drivers/usb/core/message.c:154
 get_port_status drivers/usb/core/hub.c:611 [inline]
 hub_ext_port_status+0xc0/0x480 drivers/usb/core/hub.c:628
 hub_port_wait_reset drivers/usb/core/hub.c:-1 [inline]
 hub_port_reset+0x53a/0xe50 drivers/usb/core/hub.c:3092
 hub_port_init+0x7a7/0x1680 drivers/usb/core/hub.c:5055
 hub_port_connect drivers/usb/core/hub.c:5495 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
 port_event drivers/usb/core/hub.c:5870 [inline]
 hub_event+0x19f3/0x29c0 drivers/usb/core/hub.c:5952
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3319
 worker_thread+0x582/0x770 kernel/workqueue.c:3400
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff88e2a1a8 of 8 bytes by task 28293 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 dump_stack_print_info+0x1a0/0x1b0 lib/dump_stack.c:71
 __dump_stack+0x11/0x30 lib/dump_stack.c:93
 dump_stack_lvl+0xe8/0x140 lib/dump_stack.c:120
 dump_stack+0x15/0x1b lib/dump_stack.c:129
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x265/0x280 lib/fault-inject.c:174
 should_failslab+0x8c/0xb0 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4144 [inline]
 slab_alloc_node mm/slub.c:4220 [inline]
 kmem_cache_alloc_node_noprof+0x57/0x320 mm/slub.c:4292
 __alloc_skb+0x101/0x320 net/core/skbuff.c:659
 alloc_skb include/linux/skbuff.h:1336 [inline]
 nlmsg_new include/net/netlink.h:1055 [inline]
 rtmsg_ifinfo_build_skb+0x5f/0x1b0 net/core/rtnetlink.c:4392
 rtmsg_ifinfo_event net/core/rtnetlink.c:4434 [inline]
 rtmsg_ifinfo+0x6d/0x110 net/core/rtnetlink.c:4443
 netif_state_change+0x187/0x1f0 net/core/dev.c:1585
 netdev_state_change+0xb5/0x160 net/core/dev_api.c:366
 tun_set_queue drivers/net/tun.c:2971 [inline]
 __tun_chr_ioctl+0x3f4/0x14c0 drivers/net/tun.c:3068
 tun_chr_ioctl+0x27/0x40 drivers/net/tun.c:3334
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:584
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:584
 x64_sys_call+0x1816/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000010000186f -> 0x645f69636876203a

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 28293 Comm: syz.8.8764 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
==================================================================
Call Trace:
 <TASK>
 __dump_stack+0x1d/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0xe8/0x140 lib/dump_stack.c:120
 dump_stack+0x15/0x1b lib/dump_stack.c:129
 fail_dump lib/fault-inject.c:73 [inline]
 should_fail_ex+0x265/0x280 lib/fault-inject.c:174
 should_failslab+0x8c/0xb0 mm/failslab.c:46
 slab_pre_alloc_hook mm/slub.c:4144 [inline]
 slab_alloc_node mm/slub.c:4220 [inline]
 kmem_cache_alloc_node_noprof+0x57/0x320 mm/slub.c:4292
 __alloc_skb+0x101/0x320 net/core/skbuff.c:659
 alloc_skb include/linux/skbuff.h:1336 [inline]
 nlmsg_new include/net/netlink.h:1055 [inline]
 rtmsg_ifinfo_build_skb+0x5f/0x1b0 net/core/rtnetlink.c:4392
 rtmsg_ifinfo_event net/core/rtnetlink.c:4434 [inline]
 rtmsg_ifinfo+0x6d/0x110 net/core/rtnetlink.c:4443
 netif_state_change+0x187/0x1f0 net/core/dev.c:1585
 netdev_state_change+0xb5/0x160 net/core/dev_api.c:366
 tun_set_queue drivers/net/tun.c:2971 [inline]
 __tun_chr_ioctl+0x3f4/0x14c0 drivers/net/tun.c:3068
 tun_chr_ioctl+0x27/0x40 drivers/net/tun.c:3334
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:584
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:584
 x64_sys_call+0x1816/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2ca594ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2ca438e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f2ca5b86090 RCX: 00007f2ca594ebe9
RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000007
RBP: 00007f2ca438e090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007f2ca5b86128 R14: 00007f2ca5b86090 R15: 00007ffd1d5c0388
 </TASK>