syzbot


KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (10)

Status: auto-obsoleted due to no activity on 2024/06/06 09:26
Subsystems: io-uring
[Documentation on labels]
Reported-by: syzbot+938722c54478146b0ea0@syzkaller.appspotmail.com
First crash: 63d, last: 63d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (3) fs 2 977d 985d 0/27 auto-closed as invalid on 2021/12/05 08:50
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (5) fs 2 817d 821d 0/27 auto-closed as invalid on 2022/05/14 09:20
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (2) fs 1 1084d 1084d 0/27 auto-closed as invalid on 2021/08/20 00:41
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (4) fs 3 867d 896d 0/27 auto-closed as invalid on 2022/03/25 11:59
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests fs 1 1151d 1151d 0/27 auto-closed as invalid on 2021/06/13 15:29
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (9) io-uring 2 136d 154d 0/27 auto-obsoleted due to no activity on 2024/03/25 07:41
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (8) io-uring 1 225d 205d 0/27 auto-obsoleted due to no activity on 2023/12/27 04:40
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (11) io-uring 1 4d19h 4d19h 0/27 moderation: reported on 2024/06/29 17:56
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (7) io-uring 1 294d 288d 0/27 auto-obsoleted due to no activity on 2023/10/18 23:09
upstream KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (6) io-uring 2 691d 714d 0/27 auto-closed as invalid on 2022/09/17 04:56

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests

write to 0xffff8881159fe0f8 of 8 bytes by task 15261 on cpu 1:
 io_sq_thread+0xccf/0xef0 io_uring/sqpoll.c:373
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffff8881159fe0f8 of 8 bytes by task 11466 on cpu 0:
 io_uring_try_cancel_requests+0x1e8/0x570 io_uring/io_uring.c:3308
 io_ring_exit_work+0x126/0x500 io_uring/io_uring.c:3069
 process_one_work kernel/workqueue.c:3267 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3348
 worker_thread+0x526/0x730 kernel/workqueue.c:3429
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0xffff888138e66300 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 11466 Comm: kworker/u8:67 Tainted: G        W          6.9.0-rc6-syzkaller-00053-g0106679839f7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: iou_exit io_ring_exit_work
==================================================================
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device
vhci_hcd: stop threads
vhci_hcd: release socket
vhci_hcd: disconnect device

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/02 09:25 upstream 0106679839f7 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests
* Struck through repros no longer work on HEAD.