name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 UID: 0 PID: 27183 Comm: syz.5.7015 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 ================================================================== BUG: KCSAN: data-race in data_alloc / prb_reserve write to 0xffffffff866893a0 of 8 bytes by task 26928 on cpu 0: data_alloc+0x291/0x2c0 kernel/printk/printk_ringbuffer.c:1096 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 batadv_check_known_mac_addr+0x147/0x180 net/batman-adv/hard-interface.c:526 batadv_hard_if_event+0x4b9/0xfb0 net/batman-adv/hard-interface.c:998 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:1996 call_netdevice_notifiers_extack net/core/dev.c:2034 [inline] call_netdevice_notifiers net/core/dev.c:2048 [inline] dev_set_mac_address+0x1ff/0x260 net/core/dev.c:9212 dev_set_mac_address_user+0x31/0x50 net/core/dev.c:9226 do_setlink+0x3ec/0x22c0 net/core/rtnetlink.c:3064 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3875 [inline] rtnl_newlink+0xde9/0x1250 net/core/rtnetlink.c:4012 rtnetlink_rcv_msg+0x651/0x710 net/core/rtnetlink.c:6922 netlink_rcv_skb+0x12c/0x230 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6949 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:726 __sys_sendto+0x1a8/0x230 net/socket.c:2197 __do_sys_sendto net/socket.c:2204 [inline] __se_sys_sendto net/socket.c:2200 [inline] __x64_sys_sendto+0x78/0x90 net/socket.c:2200 x64_sys_call+0x29fa/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff866893a0 of 8 bytes by task 27183 on cpu 1: desc_read kernel/printk/printk_ringbuffer.c:482 [inline] desc_push_tail kernel/printk/printk_ringbuffer.c:778 [inline] desc_reserve kernel/printk/printk_ringbuffer.c:924 [inline] prb_reserve+0x235/0xb60 kernel/printk/printk_ringbuffer.c:1619 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86 _printk+0x7a/0xa0 kernel/printk/printk.c:2457 show_trace_log_lvl+0xdd/0x400 arch/x86/kernel/dumpstack.c:195 __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0xf2/0x150 lib/dump_stack.c:120 dump_stack+0x15/0x1a lib/dump_stack.c:129 fail_dump lib/fault-inject.c:53 [inline] should_fail_ex+0x223/0x230 lib/fault-inject.c:154 should_fail+0xb/0x10 lib/fault-inject.c:164 should_fail_usercopy+0x1a/0x20 lib/fault-inject-usercopy.c:37 _inline_copy_from_user include/linux/uaccess.h:163 [inline] _copy_from_user+0x1e/0xb0 lib/usercopy.c:18 copy_from_user include/linux/uaccess.h:212 [inline] get_sg_io_hdr+0xbc/0x390 drivers/scsi/scsi_ioctl.c:698 sg_new_write+0xca/0x8e0 drivers/scsi/sg.c:730 sg_ioctl_common drivers/scsi/sg.c:931 [inline] sg_ioctl+0xe22/0x1870 drivers/scsi/sg.c:1156 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0xc9/0x140 fs/ioctl.c:892 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:892 x64_sys_call+0x1690/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000040db8 -> 0x00000000000ee658 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 27183 Comm: syz.5.7015 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 ================================================================== Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0xf2/0x150 lib/dump_stack.c:120 dump_stack+0x15/0x1a lib/dump_stack.c:129 fail_dump lib/fault-inject.c:53 [inline] should_fail_ex+0x223/0x230 lib/fault-inject.c:154 should_fail+0xb/0x10 lib/fault-inject.c:164 should_fail_usercopy+0x1a/0x20 lib/fault-inject-usercopy.c:37 _inline_copy_from_user include/linux/uaccess.h:163 [inline] _copy_from_user+0x1e/0xb0 lib/usercopy.c:18 copy_from_user include/linux/uaccess.h:212 [inline] get_sg_io_hdr+0xbc/0x390 drivers/scsi/scsi_ioctl.c:698 sg_new_write+0xca/0x8e0 drivers/scsi/sg.c:730 sg_ioctl_common drivers/scsi/sg.c:931 [inline] sg_ioctl+0xe22/0x1870 drivers/scsi/sg.c:1156 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0xc9/0x140 fs/ioctl.c:892 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:892 x64_sys_call+0x1690/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2dc9305d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2dc7971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f2dc94f5fa0 RCX: 00007f2dc9305d29 RDX: 0000000020000140 RSI: 0000000000002285 RDI: 0000000000000009 RBP: 00007f2dc7971090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 00007f2dc94f5fa0 R15: 00007ffe085981d8