syzbot


KCSAN: data-race in io_submit_sqes / io_uring_poll (2)

Status: auto-closed as invalid on 2021/02/08 06:39
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 705d, last: 705d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in io_submit_sqes / io_uring_poll (3) 55 383d 460d 0/24 auto-closed as invalid on 2021/12/27 08:47
upstream KCSAN: data-race in io_submit_sqes / io_uring_poll 2 806d 832d 0/24 auto-closed as invalid on 2020/10/29 16:22
upstream KCSAN: data-race in io_submit_sqes / io_uring_poll (4) 123 104d 270d 0/24 auto-obsoleted due to no activity on 2022/10/01 12:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll

read-write to 0xffff88801bdc3c50 of 4 bytes by task 12385 on cpu 1:
 io_consume_sqe fs/io_uring.c:6708 [inline]
 io_submit_sqes+0x3f5/0x1250 fs/io_uring.c:6861
 __do_sys_io_uring_enter fs/io_uring.c:9214 [inline]
 __se_sys_io_uring_enter+0x22a/0xad0 fs/io_uring.c:9158
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9158
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88801bdc3c50 of 4 bytes by task 12376 on cpu 0:
 io_sqring_full fs/io_uring.c:1668 [inline]
 io_uring_poll+0x92/0x160 fs/io_uring.c:8625
 vfs_poll include/linux/poll.h:90 [inline]
 __io_arm_poll_handler+0x18f/0x400 fs/io_uring.c:5347
 io_poll_add fs/io_uring.c:5599 [inline]
 io_issue_sqe+0x7e0/0x3f20 fs/io_uring.c:6200
 __io_queue_sqe+0x20e/0x7a0 fs/io_uring.c:6488
 io_queue_sqe+0x1bf/0x2b0 fs/io_uring.c:6554
 io_submit_sqe+0x2fd/0x5b0 fs/io_uring.c:6627
 io_submit_sqes+0xa66/0x1250 fs/io_uring.c:6875
 __do_sys_io_uring_enter fs/io_uring.c:9214 [inline]
 __se_sys_io_uring_enter+0x22a/0xad0 fs/io_uring.c:9158
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9158
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 12376 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/01/04 06:30 upstream e71ba9452f0b 79264ae3 .config log report info
* Struck through repros no longer work on HEAD.