syzbot


KCSAN: data-race in io_sq_thread / io_sq_thread_stop

Status: moderation: reported on 2024/12/22 20:43
Subsystems: io-uring
[Documentation on labels]
Reported-by: syzbot+5988142e8a69a67b1418@syzkaller.appspotmail.com
First crash: 4d02h, last: 4d02h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_sq_thread / io_sq_thread_stop

write to 0xffff888102ce0878 of 8 bytes by task 7248 on cpu 1:
 io_sq_thread+0xe68/0x10b0 io_uring/sqpoll.c:378
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffff888102ce0878 of 8 bytes by task 1128 on cpu 0:
 io_sq_thread_stop+0x1d/0xd0 io_uring/sqpoll.c:60
 io_put_sq_data io_uring/sqpoll.c:76 [inline]
 io_sq_thread_finish+0x252/0x2d0 io_uring/sqpoll.c:101
 io_ring_ctx_free+0x1a/0x710 io_uring/io_uring.c:2727
 io_ring_exit_work+0x4d5/0x500 io_uring/io_uring.c:2968
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310
 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0xffff888102f06300 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 1128 Comm: kworker/u8:12 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: iou_exit io_ring_exit_work
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/22 20:42 upstream bcde95ce32b6 b4fbdbd4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in io_sq_thread / io_sq_thread_stop
* Struck through repros no longer work on HEAD.