syzbot


KCSAN: data-race in fasync_remove_entry / kill_fasync (2)

Status: auto-closed as invalid on 2020/09/27 12:17
Subsystems: fs
[Documentation on labels]
First crash: 1341d, last: 1341d
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (10) fs 1 302d 302d 0/26 auto-obsoleted due to no activity on 2023/08/01 22:11
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (4) fs 1 1072d 1072d 0/26 auto-closed as invalid on 2021/06/23 11:06
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (5) fs 2 1002d 1004d 0/26 auto-closed as invalid on 2021/08/31 22:21
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (9) fs 1 521d 521d 0/26 auto-obsoleted due to no activity on 2023/01/02 11:50
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (3) fs 1 1223d 1223d 0/26 auto-closed as invalid on 2021/01/22 14:57
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (6) fs 1 941d 941d 0/26 auto-closed as invalid on 2021/10/31 16:09
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (7) fs 4 863d 901d 0/26 auto-closed as invalid on 2022/01/18 10:05
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync (8) fs 3 807d 816d 0/26 auto-closed as invalid on 2022/03/14 14:59
upstream KCSAN: data-race in fasync_remove_entry / kill_fasync fs 82 1395d 1552d 0/26 auto-closed as invalid on 2020/08/04 12:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fasync_remove_entry / kill_fasync

write to 0xffff88811e840b00 of 8 bytes by task 23309 on cpu 1:
 fasync_remove_entry+0xd5/0x140 fs/fcntl.c:884
 fasync_helper+0x92/0xc0 fs/fcntl.c:983
 perf_fasync+0x5a/0x80 kernel/events/core.c:6207
 __fput+0x48c/0x4d0 fs/file_table.c:278
 ____fput+0x11/0x20 fs/file_table.c:314
 task_work_run+0x8e/0x110 kernel/task_work.c:141
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:139 [inline]
 exit_to_user_mode_prepare+0x1b2/0x210 kernel/entry/common.c:166
 syscall_exit_to_user_mode+0x16/0x30 kernel/entry/common.c:241
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811e840b00 of 8 bytes by interrupt on cpu 0:
 kill_fasync+0x1e/0x160 fs/fcntl.c:1021
 perf_event_wakeup kernel/events/core.c:6247 [inline]
 perf_pending_event+0x258/0x300 kernel/events/core.c:6303
 irq_work_single kernel/irq_work.c:148 [inline]
 irq_work_run_list kernel/irq_work.c:170 [inline]
 irq_work_run+0xf7/0x2c0 kernel/irq_work.c:179
 __sysvec_irq_work+0x22/0xd0 arch/x86/kernel/irq_work.c:22
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:706
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 sysvec_irq_work+0x8f/0xe0 arch/x86/kernel/irq_work.c:17
 asm_sysvec_irq_work+0x12/0x20 arch/x86/include/asm/idtentry.h:611
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:770 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x44/0x70 kernel/locking/spinlock.c:191
 try_to_wake_up+0x2ab/0x4a0 kernel/sched/core.c:2980
 wake_up_process kernel/sched/core.c:3048 [inline]
 wake_up_q+0x46/0x80 kernel/sched/core.c:596
 futex_wake+0x375/0x3d0 kernel/futex.c:1621
 do_futex+0xce9/0x21c0 kernel/futex.c:3754
 __do_sys_futex kernel/futex.c:3810 [inline]
 __se_sys_futex+0x26d/0x330 kernel/futex.c:3778
 __x64_sys_futex+0x74/0x80 kernel/futex.c:3778
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 23316 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/23 12:14 upstream c3d8f220d012 a6d5f3ad .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.