syzbot


KCSAN: data-race in __io_fill_cqe / io_wake_function

Status: auto-closed as invalid on 2022/04/26 04:06
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 309d, last: 256d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __io_fill_cqe / io_wake_function

write to 0xffff88814d8d5a00 of 4 bytes by task 32113 on cpu 1:
 io_get_cqe fs/io_uring.c:1725 [inline]
 __io_fill_cqe+0xf9/0x380 fs/io_uring.c:1915
 __io_req_complete_post+0x6c/0x420 fs/io_uring.c:1944
 io_req_complete_post fs/io_uring.c:1972 [inline]
 __io_req_complete fs/io_uring.c:1992 [inline]
 io_sendmsg fs/io_uring.c:4961 [inline]
 io_issue_sqe+0x4df5/0x9610 fs/io_uring.c:6771
 io_wq_submit_work+0x1c5/0x370 fs/io_uring.c:6916
 io_worker_handle_work+0x51b/0xc10 fs/io-wq.c:588
 io_wqe_worker+0x1bc/0x4f0 fs/io-wq.c:639
 ret_from_fork+0x1f/0x30

read to 0xffff88814d8d5a00 of 4 bytes by task 32108 on cpu 0:
 io_should_wake fs/io_uring.c:7658 [inline]
 io_wake_function+0x36/0x100 fs/io_uring.c:7678
 __wake_up_common+0xbc/0x130 kernel/sched/wait.c:108
 __wake_up_common_lock kernel/sched/wait.c:138 [inline]
 __wake_up+0x80/0xc0 kernel/sched/wait.c:157
 io_cqring_ev_posted fs/io_uring.c:1753 [inline]
 io_req_complete_post fs/io_uring.c:1975 [inline]
 __io_req_complete fs/io_uring.c:1992 [inline]
 io_sendmsg fs/io_uring.c:4961 [inline]
 io_issue_sqe+0x4e9b/0x9610 fs/io_uring.c:6771
 io_wq_submit_work+0x1c5/0x370 fs/io_uring.c:6916
 io_worker_handle_work+0x51b/0xc10 fs/io-wq.c:588
 io_wqe_worker+0x1bc/0x4f0 fs/io-wq.c:639
 ret_from_fork+0x1f/0x30

value changed: 0x000001ef -> 0x000001f0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 32108 Comm: iou-wrk-32078 Not tainted 5.17.0-syzkaller-00192-geaa54b1458ca-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/03/22 03:57 upstream eaa54b1458ca e2d91b1d .config log report info KCSAN: data-race in __io_fill_cqe / io_wake_function
ci2-upstream-kcsan-gce 2022/03/03 13:19 upstream 5859a2b19911 45a13a73 .config log report info KCSAN: data-race in __io_fill_cqe / io_wake_function
ci2-upstream-kcsan-gce 2022/02/27 06:58 upstream 2293be58d6a1 45a13a73 .config log report info KCSAN: data-race in __io_fill_cqe / io_wake_function
ci2-upstream-kcsan-gce 2022/01/31 07:09 upstream 26291c54e111 495e00c5 .config log report info KCSAN: data-race in __io_fill_cqe / io_wake_function
ci2-upstream-kcsan-gce 2022/01/28 01:11 upstream 626b2dda7651 64a8e201 .config log report info KCSAN: data-race in __io_fill_cqe / io_wake_function
* Struck through repros no longer work on HEAD.