syzbot


KCSAN: data-race in __perf_event_overflow / fasync_remove_entry (2)

Status: auto-obsoleted due to no activity on 2024/01/09 23:41
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+65e894402055de23d228@syzkaller.appspotmail.com
First crash: 227d, last: 227d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __perf_event_overflow / fasync_remove_entry (3) fs 2 45d 49d 0/27 auto-obsoleted due to no activity on 2024/07/09 18:21
upstream KCSAN: data-race in __perf_event_overflow / fasync_remove_entry fs 76 1497d 1621d 0/27 auto-closed as invalid on 2020/07/18 23:20

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __perf_event_overflow / fasync_remove_entry

write to 0xffff88813a306060 of 8 bytes by task 5826 on cpu 1:
 fasync_remove_entry+0xd5/0x130 fs/fcntl.c:879
 fasync_helper+0x96/0xc0 fs/fcntl.c:978
 perf_fasync+0x64/0x80 kernel/events/core.c:6635
 __fput+0x5c6/0x630 fs/file_table.c:391
 __fput_sync+0x44/0x50 fs/file_table.c:475
 __do_sys_close fs/open.c:1590 [inline]
 __se_sys_close+0xfa/0x1a0 fs/open.c:1575
 __x64_sys_close+0x1f/0x30 fs/open.c:1575
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff88813a306060 of 8 bytes by interrupt on cpu 0:
 __perf_event_overflow+0x35a/0x3e0 kernel/events/core.c:9589
 perf_swevent_hrtimer+0x23d/0x2e0 kernel/events/core.c:11033
 __run_hrtimer kernel/time/hrtimer.c:1688 [inline]
 __hrtimer_run_queues+0x217/0x700 kernel/time/hrtimer.c:1752
 hrtimer_interrupt+0x20d/0x7b0 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline]
 __sysvec_apic_timer_interrupt+0x52/0x190 arch/x86/kernel/apic/apic.c:1082
 sysvec_apic_timer_interrupt+0x68/0x80 arch/x86/kernel/apic/apic.c:1076
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x3d/0x50 kernel/locking/spinlock.c:194
 class_raw_spinlock_irqsave_destructor include/linux/spinlock.h:518 [inline]
 try_to_wake_up+0x3d9/0x620 kernel/sched/core.c:4226
 wake_up_process kernel/sched/core.c:4474 [inline]
 wake_up_q+0x3f/0x70 kernel/sched/core.c:1028
 futex_wake+0x2cd/0x320 kernel/futex/waitwake.c:198
 do_futex+0x2ab/0x360 kernel/futex/syscalls.c:107
 __do_sys_futex kernel/futex/syscalls.c:179 [inline]
 __se_sys_futex+0x25d/0x3a0 kernel/futex/syscalls.c:160
 __x64_sys_futex+0x78/0x90 kernel/futex/syscalls.c:160
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0xffff888147342120 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 5831 Comm: syz-executor.5 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/12/05 23:41 upstream bee0e7762ad2 858d62d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __perf_event_overflow / fasync_remove_entry
* Struck through repros no longer work on HEAD.