syzbot


KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11)

Status: moderation: reported on 2024/06/29 17:56
Subsystems: io-uring
[Documentation on labels]
Reported-by: syzbot+6880371d15aebe0565d8@syzkaller.appspotmail.com
First crash: 2d17h, last: 2d17h
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (3) fs 2 975d 983d 0/27 auto-closed as invalid on 2021/12/05 08:50
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (5) fs 2 815d 819d 0/27 auto-closed as invalid on 2022/05/14 09:20
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10) io-uring 1 61d 61d 0/27 auto-obsoleted due to no activity on 2024/06/06 09:26
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (2) fs 1 1082d 1082d 0/27 auto-closed as invalid on 2021/08/20 00:41
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (4) fs 3 864d 894d 0/27 auto-closed as invalid on 2022/03/25 11:59
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests fs 1 1149d 1149d 0/27 auto-closed as invalid on 2021/06/13 15:29
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 2 134d 152d 0/27 auto-obsoleted due to no activity on 2024/03/25 07:41
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 1 223d 203d 0/27 auto-obsoleted due to no activity on 2023/12/27 04:40
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 1 292d 286d 0/27 auto-obsoleted due to no activity on 2023/10/18 23:09
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 2 689d 712d 0/27 auto-closed as invalid on 2022/09/17 04:56

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests

write to 0xffff888110de4278 of 8 bytes by task 31731 on cpu 1:
 io_sq_thread+0xdab/0xff0 io_uring/sqpoll.c:383
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffff888110de4278 of 8 bytes by task 28 on cpu 0:
 io_uring_try_cancel_requests+0x1c3/0x370 io_uring/io_uring.c:3016
 io_ring_exit_work+0x148/0x500 io_uring/io_uring.c:2817
 process_one_work kernel/workqueue.c:3248 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3329
 worker_thread+0x526/0x720 kernel/workqueue.c:3409
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0xffff888108cd0000 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: iou_exit io_ring_exit_work
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/29 17:56 upstream de0a9f448633 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests
* Struck through repros no longer work on HEAD.