syzbot


KCSAN: data-race in __tty_hangup / io_poll_task_func

Status: auto-closed as invalid on 2021/09/03 20:08
Subsystems: serial
[Documentation on labels]
First crash: 1424d, last: 1424d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __tty_hangup / io_poll_task_func (2) serial 1 40d 40d 0/29 moderation: reported on 2025/05/14 11:15

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __tty_hangup / io_poll_task_func

write to 0xffff88812d8e6e28 of 8 bytes by task 19939 on cpu 0:
 __tty_hangup+0x247/0x650 drivers/tty/tty_io.c:630
 tty_vhangup+0x13/0x20 drivers/tty/tty_io.c:711
 pty_close+0x27b/0x2a0 drivers/tty/pty.c:79
 tty_release+0x255/0xa10 drivers/tty/tty_io.c:1771
 __fput+0x25b/0x4e0 fs/file_table.c:280
 ____fput+0x11/0x20 fs/file_table.c:313
 task_work_run+0xae/0x130 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:175 [inline]
 exit_to_user_mode_prepare+0x156/0x190 kernel/entry/common.c:209
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x49/0x90 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812d8e6e28 of 8 bytes by task 19960 on cpu 1:
 vfs_poll include/linux/poll.h:88 [inline]
 io_poll_rewait fs/io_uring.c:4880 [inline]
 io_poll_task_func+0xe9/0x440 fs/io_uring.c:4957
 tctx_task_work+0x1b8/0x460 fs/io_uring.c:1958
 task_work_run+0xae/0x130 kernel/task_work.c:164
 tracehook_notify_signal include/linux/tracehook.h:212 [inline]
 handle_signal_work kernel/entry/common.c:146 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0xf8/0x190 kernel/entry/common.c:209
 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:302
 do_syscall_64+0x49/0x90 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffffffff8308e898 -> 0xffffffff8308e798

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19960 Comm: syz-executor.4 Not tainted 5.14.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/07/30 20:06 upstream 4669e13cd67f 6c236867 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __tty_hangup / io_poll_task_func
* Struck through repros no longer work on HEAD.