syzbot


KCSAN: data-race in ep_poll_callback / ep_try_send_events (2)

Status: moderation: reported on 2026/01/09 19:51
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+adceca945989c5733b95@syzkaller.appspotmail.com
First crash: 55d, last: 25d
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
8054189f-1179-42cc-a2b5-4f8899fc0b76 assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in ep_poll_callback / ep_try_send_events (2) 2026/02/24 19:52 2026/02/24 19:52 2026/02/24 19:55 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
c1b6516c-de9c-405d-bde0-80a07a7363cf assessment-kcsan 💥 KCSAN: data-race in ep_poll_callback / ep_try_send_events (2) 2026/01/10 02:16 2026/01/10 02:16 2026/01/10 02:16 7519916073b761ced56a7b15fdeeb4674e8dc125 Error 429, Message: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0, Status: RESOURCE_EXHAUSTED, Details: [map[@type:type.googleapis.com/google.rpc.Help links:[map[description:Learn more about Gemini API quotas url:https://ai.google.dev/gemini-api/docs/rate-limits]]] map[@type:type.googleapis.com/google.rpc.QuotaFailure violations:[map[quotaId:GenerateRequestsPerDayPerProjectPerModel quotaMetric:generativelanguage.googleapis.com/generate_requests_per_model_per_day]]] map[@type:type.googleapis.com/google.rpc.DebugInfo detail:[ORIGINAL ERROR] generic::resource_exhausted: You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. * Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0 [google.rpc.error_details_ext] { message: "You exceeded your current quota, please check your plan and billing details. For more information on this error, head to: https://ai.google.dev/gemini-api/docs/rate-limits. To monitor your current usage, head to: https://ai.dev/rate-limit. \n* Quota exceeded for metric: generativelanguage.googleapis.com/generate_requests_per_model_per_day, limit: 0" details { type_url: "type.googleapis.com/language_labs.genai.debug.GeminiApiDebugInfo" value: "RM\nK\nEgenerativelanguage.googleapis.com/generate_requests_per_model_per_day\030\000\"\000" } details { [type.googleapis.com/google.rpc.Help] { links { description: "Learn more about Gemini API quotas" url: "https://ai.google.dev/gemini-api/docs/rate-limits" } } } details { [type.googleapis.com/google.rpc.QuotaFailure] { violations { quota_metric: "generativelanguage.googleapis.com/generate_requests_per_model_per_day" quota_id: "GenerateRequestsPerDayPerProjectPerModel" } } } }]]
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ep_poll_callback / ep_try_send_events fs 6 1 283d 283d 0/29 auto-obsoleted due to no activity on 2025/07/21 19:13

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ep_poll_callback / ep_try_send_events

write to 0xffff8881262813e8 of 4 bytes by task 11821 on cpu 0:
 ep_send_events fs/eventpoll.c:1832 [inline]
 ep_try_send_events+0x510/0x730 fs/eventpoll.c:1905
 ep_poll fs/eventpoll.c:1970 [inline]
 do_epoll_wait+0x371/0x950 fs/eventpoll.c:2461
 do_epoll_pwait+0x54/0x150 fs/eventpoll.c:2491
 __do_sys_epoll_pwait fs/eventpoll.c:2504 [inline]
 __se_sys_epoll_pwait fs/eventpoll.c:2498 [inline]
 __x64_sys_epoll_pwait+0x194/0x1c0 fs/eventpoll.c:2498
 x64_sys_call+0x153d/0x3000 arch/x86/include/generated/asm/syscalls_64.h:282
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881262813e8 of 4 bytes by task 11824 on cpu 1:
 ep_poll_callback+0x4a7/0x580 fs/eventpoll.c:1332
 __wake_up_common kernel/sched/wait.c:108 [inline]
 __wake_up_common_lock kernel/sched/wait.c:125 [inline]
 __wake_up_sync_key+0x52/0x80 kernel/sched/wait.c:192
 unix_write_space+0xcf/0x140 net/unix/af_unix.c:605
 sock_wfree+0x149/0x3a0 net/core/sock.c:2693
 unix_destruct_scm+0xcd/0x100 net/unix/af_unix.c:1980
 skb_release_head_state+0x261/0x270 net/core/skbuff.c:1160
 skb_release_all net/core/skbuff.c:1180 [inline]
 __kfree_skb+0x18/0x150 net/core/skbuff.c:1196
 sk_skb_reason_drop+0xbd/0x260 net/core/skbuff.c:1234
 kfree_skb_reason include/linux/skbuff.h:1322 [inline]
 unix_release_sock+0x62e/0x750 net/unix/af_unix.c:726
 unix_release+0x58/0x80 net/unix/af_unix.c:1184
 __sock_release net/socket.c:662 [inline]
 sock_close+0x6b/0x150 net/socket.c:1455
 __fput+0x29b/0x650 fs/file_table.c:468
 fput_close_sync+0xad/0x190 fs/file_table.c:573
 __do_sys_close fs/open.c:1573 [inline]
 __se_sys_close fs/open.c:1558 [inline]
 __x64_sys_close+0x55/0xf0 fs/open.c:1558
 x64_sys_call+0x2c25/0x3000 arch/x86/include/generated/asm/syscalls_64.h:4
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xe000201d -> 0xe0000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 11824 Comm: syz.0.1858 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/08 08:55 upstream e7aa57247700 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ep_poll_callback / ep_try_send_events
2026/01/09 19:50 upstream 372800cb95a3 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ep_poll_callback / ep_try_send_events
* Struck through repros no longer work on HEAD.