KCSAN: data-race in fasync_remove_entry / kill

KCSAN: data-race in fasync_remove_entry / kill_fasync (2)
Status: auto-closed as invalid on 2020/09/27 12:17
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 340d, last: 340d

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in fasync_remove_entry / kill_fasync (4)	1	71d	71d	0/22	auto-closed as invalid on 2021/06/23 11:06
upstream	KCSAN: data-race in fasync_remove_entry / kill_fasync (3)	1	223d	223d	0/22	auto-closed as invalid on 2021/01/22 14:57
upstream	KCSAN: data-race in fasync_remove_entry / kill_fasync	82	394d	552d	0/22	auto-closed as invalid on 2020/08/04 12:11

Sample crash report:

==================================================================
BUG: KCSAN: data-race in fasync_remove_entry / kill_fasync

write to 0xffff88811e840b00 of 8 bytes by task 23309 on cpu 1:
 fasync_remove_entry+0xd5/0x140 fs/fcntl.c:884
 fasync_helper+0x92/0xc0 fs/fcntl.c:983
 perf_fasync+0x5a/0x80 kernel/events/core.c:6207
 __fput+0x48c/0x4d0 fs/file_table.c:278
 ____fput+0x11/0x20 fs/file_table.c:314
 task_work_run+0x8e/0x110 kernel/task_work.c:141
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:139 [inline]
 exit_to_user_mode_prepare+0x1b2/0x210 kernel/entry/common.c:166
 syscall_exit_to_user_mode+0x16/0x30 kernel/entry/common.c:241
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811e840b00 of 8 bytes by interrupt on cpu 0:
 kill_fasync+0x1e/0x160 fs/fcntl.c:1021
 perf_event_wakeup kernel/events/core.c:6247 [inline]
 perf_pending_event+0x258/0x300 kernel/events/core.c:6303
 irq_work_single kernel/irq_work.c:148 [inline]
 irq_work_run_list kernel/irq_work.c:170 [inline]
 irq_work_run+0xf7/0x2c0 kernel/irq_work.c:179
 __sysvec_irq_work+0x22/0xd0 arch/x86/kernel/irq_work.c:22
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:706
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 sysvec_irq_work+0x8f/0xe0 arch/x86/kernel/irq_work.c:17
 asm_sysvec_irq_work+0x12/0x20 arch/x86/include/asm/idtentry.h:611
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:770 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x44/0x70 kernel/locking/spinlock.c:191
 try_to_wake_up+0x2ab/0x4a0 kernel/sched/core.c:2980
 wake_up_process kernel/sched/core.c:3048 [inline]
 wake_up_q+0x46/0x80 kernel/sched/core.c:596
 futex_wake+0x375/0x3d0 kernel/futex.c:1621
 do_futex+0xce9/0x21c0 kernel/futex.c:3754
 __do_sys_futex kernel/futex.c:3810 [inline]
 __se_sys_futex+0x26d/0x330 kernel/futex.c:3778
 __x64_sys_futex+0x74/0x80 kernel/futex.c:3778
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 23316 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-kcsan-gce	2020/08/23 12:14	upstream	c3d8f220d012	a6d5f3ad	.config	log	report