syzbot


KCSAN: data-race in __io_cqring_fill_event / io_uring_poll (2)

Status: auto-closed as invalid on 2022/01/18 18:07
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 604d, last: 348d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __io_cqring_fill_event / io_uring_poll 3 839d 840d 0/24 auto-closed as invalid on 2020/09/14 23:42

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __io_cqring_fill_event / io_uring_poll

write to 0xffff888137246a00 of 4 bytes by task 10744 on cpu 1:
 io_get_cqe fs/io_uring.c:1695 [inline]
 __io_cqring_fill_event+0xf9/0x380 fs/io_uring.c:1873
 io_cqring_fill_event+0x28/0x30 fs/io_uring.c:1887
 __io_poll_complete fs/io_uring.c:5399 [inline]
 io_poll_add+0x143/0x4c0 fs/io_uring.c:5889
 io_issue_sqe+0xc92/0x55e0 fs/io_uring.c:6682
 __io_queue_sqe+0x20/0x440 fs/io_uring.c:7018
 io_queue_sqe fs/io_uring.c:7060 [inline]
 io_submit_sqe+0x77a/0x47d3 fs/io_uring.c:7263
 io_submit_sqes+0x25d/0x670 fs/io_uring.c:7369
 __do_sys_io_uring_enter fs/io_uring.c:10072 [inline]
 __se_sys_io_uring_enter+0x212/0xb00 fs/io_uring.c:10014
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:10014
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888137246a00 of 4 bytes by task 10654 on cpu 0:
 __io_cqring_events fs/io_uring.c:1679 [inline]
 io_cqring_events fs/io_uring.c:2455 [inline]
 io_uring_poll+0xc6/0x146 fs/io_uring.c:9420
 vfs_poll include/linux/poll.h:90 [inline]
 io_poll_rewait fs/io_uring.c:5338 [inline]
 io_poll_task_func+0x12d/0x9d0 fs/io_uring.c:5414
 tctx_task_work+0x25a/0x410 fs/io_uring.c:2245
 task_work_run+0x8e/0x110 kernel/task_work.c:164
 tracehook_notify_signal include/linux/tracehook.h:214 [inline]
 handle_signal_work kernel/entry/common.c:146 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x102/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xd0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000501 -> 0x00000515

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10654 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (38):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/14 18:06 upstream 5472f14a3742 d018dd31 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/11/30 01:06 upstream d58071a8a76d d0830353 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/11/28 16:14 upstream 3498e7f2bb41 63eeac02 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/11/20 12:58 upstream a90af8f15bdc 4eb20a4e .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/11/13 12:37 upstream 66f4beaa6c1d 75b04091 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/11/07 16:44 upstream b5013d084e03 4c1be0be .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/10/31 04:01 upstream 119c85055d86 098b5d53 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/10/14 21:40 upstream 26d657410983 7aa5fe41 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/10/02 04:22 upstream 53d5fc89d66a db0f5787 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/09/12 05:58 upstream c605c39677b9 3ce60af8 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/09/02 22:47 upstream 7ba88a2a09f4 f62a5829 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/08/26 13:07 upstream 73f3af7b4611 b599f2fc .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/08/07 21:28 upstream 85a90500f9a1 6972b106 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/07/21 08:31 upstream 8cae8cd89f05 1b201b48 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/19 09:23 upstream 9ed13a17e38e aba2b2fb .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/19 08:44 upstream b1edae0d5f2e aba2b2fb .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/18 13:59 upstream fd0aa1a4567d aba2b2fb .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/17 12:01 upstream 70585216fe77 aba2b2fb .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/16 16:52 upstream 6b00bc639f1f c06f97ad .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/16 09:54 upstream 94f0b2d4a1d0 c06f97ad .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/15 22:46 upstream 94f0b2d4a1d0 990d3cbe .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/15 10:39 upstream 009c9aa5be65 8022d7e3 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/14 10:12 upstream 009c9aa5be65 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/13 21:05 upstream e4e453434a19 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/13 02:12 upstream 8ecfa36cd4db 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/12 11:54 upstream ad347abe4a98 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/12 05:51 upstream f21b807c3cf8 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/11 10:24 upstream 06af8679449d 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/10 20:03 upstream f09eacca59d2 1ba81399 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/09 07:22 upstream 368094df48e6 5c2fe346 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/07 19:04 upstream 614124bea77e b718257f .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/06/05 03:10 upstream 16f0596fc1d7 500c2339 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/05/09 11:14 upstream b741596468b0 bc5434be .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/05/01 03:19 upstream 65c61de9d090 77e2b668 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/04/25 21:37 upstream d2d09fbe33f8 2a82f1b3 .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/04/16 14:50 upstream 7e25f40eab52 7e2b734b .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/04/11 17:42 upstream 52e44129fba5 6a81331a .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
ci2-upstream-kcsan-gce 2021/04/03 06:56 upstream 0a84c2e440f7 6a81331a .config log report info KCSAN: data-race in __io_cqring_fill_event / io_uring_poll
* Struck through repros no longer work on HEAD.