bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms ================================================================== BUG: KCSAN: data-race in data_push_tail / number write to 0xffffffff86f1ddd6 of 1 bytes by task 24390 on cpu 1: number+0x7d0/0xa90 lib/vsprintf.c:562 vsnprintf+0xa44/0xe20 lib/vsprintf.c:2883 va_format lib/vsprintf.c:1681 [inline] pointer+0x8a1/0xd10 lib/vsprintf.c:2448 vsnprintf+0x861/0xe20 lib/vsprintf.c:2821 vscnprintf+0x42/0x80 lib/vsprintf.c:2923 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2128 vprintk_store+0x56f/0x800 kernel/printk/printk.c:2242 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2288 vprintk_default+0x26/0x30 kernel/printk/printk.c:2318 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50 _printk+0x7a/0xa0 kernel/printk/printk.c:2328 __netdev_printk+0x2bf/0x3b0 net/core/dev.c:11273 netdev_info+0x99/0xc0 net/core/dev.c:11320 bond_mii_monitor+0x7b6/0x1820 drivers/net/bonding/bond_main.c:2809 process_one_work+0x3e6/0x750 kernel/workqueue.c:2405 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2552 kthread+0x1d7/0x210 kernel/kthread.c:379 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 read to 0xffffffff86f1ddd0 of 8 bytes by task 30739 on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:590 [inline] data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:675 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1046 prb_reserve+0x893/0xbc0 kernel/printk/printk_ringbuffer.c:1555 vprintk_store+0x53e/0x800 kernel/printk/printk.c:2232 vprintk_emit+0xd0/0x430 kernel/printk/printk.c:2288 vprintk_default+0x26/0x30 kernel/printk/printk.c:2318 vprintk+0x83/0x90 kernel/printk/printk_safe.c:50 _printk+0x7a/0xa0 kernel/printk/printk.c:2328 __netdev_printk+0x2bf/0x3b0 net/core/dev.c:11273 netdev_info+0x99/0xc0 net/core/dev.c:11320 bond_mii_monitor+0x7b6/0x1820 drivers/net/bonding/bond_main.c:2809 process_one_work+0x3e6/0x750 kernel/workqueue.c:2405 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2552 kthread+0x1d7/0x210 kernel/kthread.c:379 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 value changed: 0x0000000100020806 -> 0x736d203020726574 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 30739 Comm: kworker/u4:25 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 Workqueue: bond4 bond_mii_monitor ================================================================== bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond25: (slave batadv362): link status up again after 0 ms bond25: (slave batadv363): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond29: (slave batadv370): link status up again after 0 ms bond29: (slave batadv371): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond9: (slave batadv83): link status up again after 0 ms bond9: (slave batadv84): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond25: (slave batadv362): link status up again after 0 ms bond25: (slave batadv363): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond9: (slave batadv83): link status up again after 0 ms bond9: (slave batadv84): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond25: (slave batadv362): link status up again after 0 ms bond25: (slave batadv363): link status up again after 0 ms bond25: (slave batadv362): link status up again after 0 ms bond25: (slave batadv363): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond9: (slave batadv83): link status up again after 0 ms bond9: (slave batadv84): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond29: (slave batadv370): link status up again after 0 ms bond29: (slave batadv371): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond9: (slave batadv83): link status up again after 0 ms bond9: (slave batadv84): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond7: (slave batadv79): link status up again after 0 ms bond7: (slave batadv80): link status up again after 0 ms bond6: (slave batadv47): link status up again after 0 ms bond6: (slave batadv48): link status up again after 0 ms bond9: (slave batadv83): link status up again after 0 ms bond9: (slave batadv84): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond22: (slave batadv356): link status up again after 0 ms bond22: (slave batadv357): link status up again after 0 ms bond28: (slave batadv368): link status up again after 0 ms bond28: (slave batadv369): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond29: (slave batadv370): link status up again after 0 ms bond29: (slave batadv371): link status up again after 0 ms bond24: (slave batadv360): link status up again after 0 ms bond24: (slave batadv361): link status up again after 0 ms bond31: (slave batadv380): link status up again after 0 ms bond31: (slave batadv381): link status up again after 0 ms bond30: (slave batadv372): link status up again after 0 ms bond30: (slave batadv373): link status up again after 0 ms bond30: (slave batadv372): failed to get link speed/duplex bond30: (slave batadv373): failed to get link speed/duplex bond6: (slave batadv47): link status up again after 0 ms bond6: (slave batadv48): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond22: (slave batadv356): link status up again after 0 ms bond22: (slave batadv357): link status up again after 0 ms bond26: (slave batadv364): link status up again after 0 ms bond26: (slave batadv365): link status up again after 0 ms bond4: (slave batadv43): link status up again after 0 ms bond4: (slave batadv44): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond5: (slave batadv45): link status up again after 0 ms bond5: (slave batadv46): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond23: (slave batadv358): link status up again after 0 ms bond23: (slave batadv359): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond27: (slave batadv366): link status up again after 0 ms bond27: (slave batadv367): link status up again after 0 ms bond22: (slave batadv356): link status up again after 0 ms bond22: (slave batadv357): link status up again after 0 ms bond22: (slave batadv356): link status up again after 0 ms bond22: (slave batadv357): link status up again after 0 ms