syzbot


KCSAN: data-race in io_cqring_overflow_flush / io_submit_sqe

Status: auto-closed as invalid on 2021/01/19 23:49
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+4140a16087dd1c9e5e8a@syzkaller.appspotmail.com
First crash: 1251d, last: 1189d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_cqring_overflow_flush / io_submit_sqe

read-write to 0xffff888017297c44 of 1 bytes by task 13273 on cpu 0:
 io_cqring_overflow_flush+0x8e/0xab0 fs/io_uring.c:1646
 io_uring_cancel_task_requests fs/io_uring.c:8670 [inline]
 __io_uring_files_cancel+0x21a/0x12e0 fs/io_uring.c:8768
 io_uring_files_cancel include/linux/io_uring.h:51 [inline]
 exit_files+0x6a/0xc0 fs/file.c:456
 do_exit+0x428/0x1630 kernel/exit.c:818
 do_group_exit+0xc8/0x170 kernel/exit.c:920
 get_signal+0xf9b/0x1510 kernel/signal.c:2792
 arch_do_signal_or_restart+0x2a/0x270 arch/x86/kernel/signal.c:811
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x109/0x1a0 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888017297c44 of 1 bytes by task 13265 on cpu 1:
 io_submit_sqe+0x85/0x8f0 fs/io_uring.c:6355
 io_submit_sqes+0x9a8/0x1720 fs/io_uring.c:6597
 __do_sys_io_uring_enter fs/io_uring.c:8984 [inline]
 __se_sys_io_uring_enter+0x554/0xb00 fs/io_uring.c:8933
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:8933
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 13265 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/12/15 23:48 upstream d635a69dd498 f213e07e .config console log report info ci2-upstream-kcsan-gce
2020/12/15 04:16 upstream fab0fca1da5c 97183ed7 .config console log report info ci2-upstream-kcsan-gce
2020/12/06 00:47 upstream 32f741b02f1a 50503117 .config console log report info ci2-upstream-kcsan-gce
2020/12/01 14:45 upstream b65054597872 07bfe8a5 .config console log report info ci2-upstream-kcsan-gce
2020/11/30 11:54 upstream b65054597872 76831598 .config console log report info ci2-upstream-kcsan-gce
2020/11/28 06:03 upstream c84e1efae022 486f93ef .config console log report info ci2-upstream-kcsan-gce
2020/11/26 20:21 upstream 4df910620beb 2f1cec62 .config console log report info ci2-upstream-kcsan-gce
2020/11/11 17:34 upstream eccc87672492 cca87986 .config console log report info ci2-upstream-kcsan-gce
2020/11/06 15:39 upstream 521b619acdc8 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/04 12:15 upstream 4ef8451b3326 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/10/18 05:50 upstream 9d9af1007bc0 fea47c01 .config console log report info ci2-upstream-kcsan-gce
2020/10/14 20:47 upstream b5fc7a89e58b fc7735a2 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.