syzbot


KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (7)

Status: auto-obsoleted due to no activity on 2023/01/17 00:23
Subsystems: serial
[Documentation on labels]
First crash: 578d, last: 568d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (4) serial 1 788d 788d 0/27 auto-closed as invalid on 2022/06/02 02:02
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (2) serial 4 991d 1013d 0/27 auto-closed as invalid on 2021/11/10 16:29
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (5) serial 1 708d 708d 0/27 auto-closed as invalid on 2022/08/21 08:44
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common serial 1 1600d 1600d 0/27 auto-closed as invalid on 2020/04/15 15:43
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (3) serial 4 860d 910d 0/27 auto-closed as invalid on 2022/03/21 13:14
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (6) serial 1 632d 632d 0/27 auto-obsoleted due to no activity on 2022/11/05 11:00
upstream KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common (8) serial 2 445d 481d 0/27 auto-obsoleted due to no activity on 2023/05/11 04:25

Sample crash report:
RBP: 00007fb7b5cb81d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffedc092d5f R14: 00007fb7b5cb8300 R15: 0000000000022000
 </TASK>
==================================================================
BUG: KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common

write to 0xffffc9000120d05c of 1 bytes by task 25127 on cpu 1:
 n_tty_receive_buf_common+0x273/0xbf0 drivers/tty/n_tty.c:1701
 n_tty_receive_buf2+0x2e/0x40 drivers/tty/n_tty.c:1746
 tty_ldisc_receive_buf+0x5b/0xf0 drivers/tty/tty_buffer.c:457
 tty_port_default_receive_buf+0x54/0x80 drivers/tty/tty_port.c:39
 receive_buf drivers/tty/tty_buffer.c:515 [inline]
 flush_to_ldisc+0x1d9/0x470 drivers/tty/tty_buffer.c:565
 process_one_work+0x3d3/0x720 kernel/workqueue.c:2289
 worker_thread+0x618/0xa70 kernel/workqueue.c:2436
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

read to 0xffffc9000120d05c of 1 bytes by task 25330 on cpu 0:
 n_tty_kick_worker+0x2d/0x160 drivers/tty/n_tty.c:207
 n_tty_read+0x5fe/0x1170 drivers/tty/n_tty.c:2158
 iterate_tty_read drivers/tty/tty_io.c:852 [inline]
 tty_read+0x17d/0x3e0 drivers/tty/tty_io.c:927
 call_read_iter include/linux/fs.h:2193 [inline]
 io_iter_do_read io_uring/rw.c:637 [inline]
 io_read+0x2e3/0xcc0 io_uring/rw.c:759
 io_issue_sqe+0x30f/0x850 io_uring/io_uring.c:1743
 io_queue_sqe io_uring/io_uring.c:1916 [inline]
 io_submit_sqe+0x3b1/0xa40 io_uring/io_uring.c:2174
 io_submit_sqes+0x274/0x530 io_uring/io_uring.c:2285
 __do_sys_io_uring_enter io_uring/io_uring.c:3220 [inline]
 __se_sys_io_uring_enter+0x1ef/0xc60 io_uring/io_uring.c:3152
 __x64_sys_io_uring_enter+0x74/0x80 io_uring/io_uring.c:3152
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 25330 Comm: syz-executor.2 Not tainted 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/12/03 17:04 upstream 97ee9d1c1696 e080de16 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common
2022/11/24 07:28 upstream 4312098baf37 ff68ff8f .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in n_tty_kick_worker / n_tty_receive_buf_common
* Struck through repros no longer work on HEAD.