KCSAN: data-race in __io_fill_cqe_req / io_cqring_wait (2)

Status: auto-closed as invalid on 2022/08/16 16:26
First crash: 143d, last: 143d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __io_fill_cqe_req / io_cqring_wait 1 249d 249d 0/24 auto-closed as invalid on 2022/05/03 11:08

Sample crash report:
BUG: KCSAN: data-race in __io_fill_cqe_req / io_cqring_wait

read-write to 0xffff888126a18a50 of 4 bytes by task 4209 on cpu 1:
 io_get_cqe fs/io_uring.c:2233 [inline]
 __io_fill_cqe_req+0x242/0x5a0 fs/io_uring.c:2468
 __io_req_complete_post fs/io_uring.c:2572 [inline]
 io_req_complete_post fs/io_uring.c:2582 [inline]
 io_req_complete_failed+0x2d4/0x3b0 fs/io_uring.c:2615
 io_queue_async+0xfe/0x160 fs/io_uring.c:8690
 io_queue_sqe fs/io_uring.c:8734 [inline]
 io_submit_sqe+0x3a17/0x3f50 fs/io_uring.c:8985
 io_submit_sqes+0x27b/0x500 fs/io_uring.c:9096
 __io_sq_thread fs/io_uring.c:9148 [inline]
 io_sq_thread+0x5e7/0xac0 fs/io_uring.c:9217

read to 0xffff888126a18a50 of 4 bytes by task 4216 on cpu 0:
 __io_cqring_events fs/io_uring.c:2189 [inline]
 io_cqring_events fs/io_uring.c:3193 [inline]
 io_cqring_wait+0x177/0x9a0 fs/io_uring.c:9369
 __do_sys_io_uring_enter fs/io_uring.c:12078 [inline]
 __se_sys_io_uring_enter+0x6c1/0xd60 fs/io_uring.c:11969
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:11969
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80

value changed: 0x00000a57 -> 0x00000a5b

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 4216 Comm: syz-executor.2 Not tainted 5.19.0-rc6-syzkaller-00104-g72a8e05d4f66-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/07/12 16:19 upstream 72a8e05d4f66 d91dd8ea .config log report info KCSAN: data-race in __io_fill_cqe_req / io_cqring_wait
* Struck through repros no longer work on HEAD.