syzbot


WARNING in io_link_timeout_fn
Status: upstream: reported C repro on 2021/05/12 20:28
Reported-by: syzbot+5a864149dd970b546223@syzkaller.appspotmail.com
Fix commit: 447c19f3b507 io_uring: fix ltout double free on completion race
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 78d, last: 78d

Cause bisection: introduced by (bisect log) :
commit 91f245d5d5de0802428a478802ec051f7de2f5d6
Author: Jens Axboe <axboe@kernel.dk>
Date: Tue Feb 9 20:48:50 2021 +0000

  io_uring: enable kmemcg account for io_uring requests

Crash: possible deadlock in tctx_task_work (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/05/14 00:39 19m asml.silence@gmail.com https://github.com/isilence/linux.git syz_test8 OK
2021/05/13 21:03 11m asml.silence@gmail.com https://github.com/isilence/linux.git syz_test6 report log
2021/05/12 20:57 10m axboe@kernel.dk git://git.kernel.dk/linux-block.git io_uring-5.13 report log

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/05/12 14:58 upstream 88b06399c9c7 da958a4d .config log report syz C WARNING in io_link_timeout_fn
ci-upstream-kasan-gce 2021/05/12 14:24 upstream 88b06399c9c7 da958a4d .config log report info WARNING in io_link_timeout_fn