From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oi1-f199.google.com (mail-oi1-f199.google.com [209.85.167.199]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3E135411A04 for ; Tue, 11 Aug 2026 08:10:00 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.199 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786435801; cv=none; b=a0qEX7xGMeu5du2xlWEkU8NlwcN5h65iJNz07HdtclGvXYu4rWJaOz1RhUTz+T80jvwRdswIfO/idY1PPln63sGNjYJUWSHMcxl6owhTa0gD5t8UABZ8LJwqes2pw31iyjvooOfmYVJjvRqxOhVvW26kLcTGq7xgPSMWCrCeuxQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786435801; c=relaxed/simple; bh=kR3vDHAo01uuPgHvXXcEZKmRBYJCnEb9h4ZcpK9u2cg=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=pJlgbtztMQrwpIL2l+CFftTZd9cPHZHL/UGXTOU2Can24EX1nQpPVRoZCHxq16YAxNAnTUSeJt7becle7Rtiwm02YHcR8anxXgixIWdhiCvv4bY8rFjx9YAkB/oOH1KSFseW9tDLEtQByF8RuMiUBjoRPbFsmPvrIkFM0Fkmv78= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.167.199 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-4ad778bacbeso3270700b6e.1 for ; Tue, 11 Aug 2026 01:10:00 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786435799; x=1787040599; h=content-type:to:from:subject:message-id:in-reply-to:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=+j7Rrw9C7BoNKr4Lq8FaX5NBu7qk0tCC1PM/asf4a0Y=; b=sagkPDiVg6EWiTFbVIoVcHjlSgMXRqyYjGqa9V/4XrmYJMXAR9Ki5n1fUq+m4Dfn5G WEn5rlXVTDc9B23xx2AF/Z32qiazm/oOcXEpTOxViD/2qMdxBH2ZVXl78vHjywHrF85K zz95lR8LHy+NnfgFu7DYU9yU2d3LsW2RTGs/2HaIsamc19ILakt4tCVST69rivK9q0FY RVcZ3rq8KuIcWJ4/j3hWafmcMhqM94uI83O/FTr3j9pxcrfW92b9nTrfik1216o/lOIt bJqPbOHDPzbqnjzCA6HiNQyi1Fumjr9QKBoE3s7QvSfPvQGV8FHecN4U60jeJ3tdnudF 0LJA== X-Gm-Message-State: AOJu0YxGYwWNLhkF71MaqYJ72aGc67k3V25ua4yILej7wnJ9V0VCJpgM wxV7ycWD+HAU0d7iEnGXjO/K/EhDgbRWpR7/tVyJI2uoawOJexa5WJa4eQHEmrZP7+Qefh5RNKI 5oe8VyzeYjGylq19AgkpgL2M/HhECKj+SbH7n6KmVu4vjlYy5l483qR1X20U= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6808:10d2:b0:495:eb8d:bf7 with SMTP id 5614622812f47-4b1fd7c282amr988744b6e.12.1786435799141; Tue, 11 Aug 2026 01:09:59 -0700 (PDT) Date: Tue, 11 Aug 2026 01:09:59 -0700 In-Reply-To: <6a7a0194.b50370da.49fe0.0056.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6a7ad8d7.b50370da.49fe0.0065.GAE@google.com> Subject: Forwarded: io_uring/cmd: don't skip completion for a non-armed multishot uring_cmd From: syzbot To: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: io_uring/cmd: don't skip completion for a non-armed multishot uring_cmd Author: vasilisalmpanis@gmail.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git dad19b6f6336e1587b0f767d5b4e2b5543224b43 diff --git a/io_uring/uring_cmd.c b/io_uring/uring_cmd.c index c14c22cff49e..a2899a852879 100644 --- a/io_uring/uring_cmd.c +++ b/io_uring/uring_cmd.c @@ -269,7 +269,8 @@ int io_uring_cmd(struct io_kiocb *req, unsigned int issue_flags) } ret = file->f_op->uring_cmd(ioucmd, issue_flags); - if (ioucmd->flags & IORING_URING_CMD_MULTISHOT) { + if ((ioucmd->flags & IORING_URING_CMD_MULTISHOT) && + (req->flags & REQ_F_APOLL_MULTISHOT)) { if (ret >= 0) return IOU_ISSUE_SKIP_COMPLETE; }