syzbot


KCSAN: data-race in io_issue_sqe / io_uring_try_cancel_requests

Status: auto-closed as invalid on 2021/11/27 10:59
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 399d, last: 399d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in io_issue_sqe / io_uring_try_cancel_requests

write to 0xffff8881352a2490 of 8 bytes by task 27863 on cpu 0:
 __list_add include/linux/list.h:70 [inline]
 list_add include/linux/list.h:86 [inline]
 io_iopoll_req_issued fs/io_uring.c:2758 [inline]
 io_issue_sqe+0x6372/0x67b0 fs/io_uring.c:6765
 io_wq_submit_work+0xf5/0x2c0 fs/io_uring.c:6800
 io_worker_handle_work+0x788/0xa20 fs/io-wq.c:515
 io_wqe_worker+0x1b9/0x540 fs/io-wq.c:566
 ret_from_fork+0x1f/0x30

read to 0xffff8881352a2490 of 8 bytes by task 3181 on cpu 1:
 list_empty_careful include/linux/list.h:319 [inline]
 io_uring_try_cancel_requests+0x34e/0x870 fs/io_uring.c:9611
 io_ring_exit_work+0x9f/0x1580 fs/io_uring.c:9397
 process_one_work+0x402/0x910 kernel/workqueue.c:2297
 worker_thread+0x636/0xae0 kernel/workqueue.c:2444
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30

value changed: 0xffff8881352a2488 -> 0xffff88812550b580

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3181 Comm: kworker/u4:8 Tainted: G        W         5.15.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound io_ring_exit_work
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/10/23 10:55 upstream 9c0c4d24ac00 282f03fb .config log report info KCSAN: data-race in io_issue_sqe / io_uring_try_cancel_requests
* Struck through repros no longer work on HEAD.