syzbot


KCSAN: data-race in io_submit_flush_completions / tctx_task_work

Status: auto-closed as invalid on 2021/10/03 08:30
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 609d, last: 460d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_submit_flush_completions / tctx_task_work

write to 0xffff888147abb2e8 of 4 bytes by task 13770 on cpu 0:
 io_submit_flush_completions+0x7e1/0x890 fs/io_uring.c:2157
 ctx_flush_and_put fs/io_uring.c:1932 [inline]
 tctx_task_work+0x38e/0x460 fs/io_uring.c:1980
 task_work_run+0xae/0x130 kernel/task_work.c:164
 tracehook_notify_signal include/linux/tracehook.h:212 [inline]
 handle_signal_work kernel/entry/common.c:146 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0xf8/0x190 kernel/entry/common.c:209
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x49/0x90 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888147abb2e8 of 4 bytes by task 13775 on cpu 1:
 ctx_flush_and_put fs/io_uring.c:1930 [inline]
 tctx_task_work+0x361/0x460 fs/io_uring.c:1980
 task_work_run+0xae/0x130 kernel/task_work.c:164
 tracehook_notify_signal include/linux/tracehook.h:212 [inline]
 handle_signal_work kernel/entry/common.c:146 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0xf8/0x190 kernel/entry/common.c:209
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x49/0x90 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000001 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 13775 Comm: syz-executor.3 Tainted: G        W         5.14.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (23):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/08/29 08:23 upstream 3f5ad13cb012 be2c130d .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/15 00:12 upstream ba31f97d43be 2489ab88 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/14 01:24 upstream f8e6dfc64f61 2489ab88 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/13 04:53 upstream f8e6dfc64f61 3fd2ea69 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/13 04:42 upstream f8e6dfc64f61 3fd2ea69 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/11 21:58 upstream 761c6d7ec820 6972b106 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/07 21:13 upstream 85a90500f9a1 6972b106 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/06 04:39 upstream 902e7f373fff 2f537099 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/04 16:26 upstream d5ad8ec3cfb5 b97d64c9 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/08/03 04:48 upstream c500bee1c5b2 6c236867 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/07/27 16:43 upstream ff1176468d36 17d6ab15 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/07/15 06:12 upstream 8096acd7442e b9a2f64e .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/07/05 17:40 upstream 3dbdb38e2869 55aa55c2 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/06/18 16:13 upstream fd0aa1a4567d aba2b2fb .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/06/02 07:33 upstream 231bc5390667 0740de69 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/26 23:32 upstream 7ac3a1c1ae51 858ea628 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/25 03:27 upstream 1434a3127887 3c7fef33 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/24 16:03 upstream c4681547bcce 3c7fef33 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/23 20:35 upstream 4d7620341eda 3c7fef33 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/20 00:38 upstream c3d0e3fd41b7 a343ba6b .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/05/03 05:25 upstream 9ccce092fc64 77e2b668 .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/04/16 18:51 upstream 2f7b98d1e55c 7e2b734b .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
ci2-upstream-kcsan-gce 2021/04/02 07:51 upstream 1678e493d530 6a81331a .config log report info KCSAN: data-race in io_submit_flush_completions / tctx_task_work
* Struck through repros no longer work on HEAD.