syzbot


KCSAN: data-race in __perf_event_read_value / event_sched_in

Status: auto-closed as invalid on 2021/11/26 16:03
Subsystems: perf
[Documentation on labels]
First crash: 924d, last: 910d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __perf_event_read_value / event_sched_in

write to 0xffff88812cf36ca0 of 8 bytes by task 20493 on cpu 1:
 perf_event_update_time kernel/events/core.c:647 [inline]
 perf_event_set_state kernel/events/core.c:666 [inline]
 event_sched_in+0x1d2/0xe10 kernel/events/core.c:2541
 group_sched_in kernel/events/core.c:2595 [inline]
 merge_sched_in kernel/events/core.c:3746 [inline]
 visit_groups_merge+0x933/0x1aa0 kernel/events/core.c:3696
 ctx_flexible_sched_in kernel/events/core.c:3788 [inline]
 ctx_sched_in+0x1db/0x200 kernel/events/core.c:3833
 perf_event_sched_in kernel/events/core.c:2699 [inline]
 perf_event_context_sched_in kernel/events/core.c:3884 [inline]
 __perf_event_task_sched_in+0x2f9/0x850 kernel/events/core.c:3927
 perf_event_task_sched_in include/linux/perf_event.h:1208 [inline]
 finish_task_switch+0x1fd/0x290 kernel/sched/core.c:4809
 context_switch kernel/sched/core.c:4943 [inline]
 __schedule+0x435/0x680 kernel/sched/core.c:6287
 preempt_schedule_common kernel/sched/core.c:6459 [inline]
 __cond_resched+0x2a/0x40 kernel/sched/core.c:8151
 might_alloc include/linux/sched/mm.h:201 [inline]
 slab_pre_alloc_hook mm/slab.h:492 [inline]
 slab_alloc mm/slab.c:3306 [inline]
 __do_kmalloc mm/slab.c:3700 [inline]
 __kmalloc+0x65/0x350 mm/slab.c:3711
 kmalloc include/linux/slab.h:596 [inline]
 io_alloc_async_data fs/io_uring.c:3310 [inline]
 io_setup_async_rw+0xe6/0x300 fs/io_uring.c:3323
 io_issue_sqe+0x33a6/0x67b0
 __io_queue_sqe+0x34/0x460 fs/io_uring.c:6960
 io_queue_sqe fs/io_uring.c:7011 [inline]
 io_submit_sqe+0x88b/0x3eb0 fs/io_uring.c:7187
 io_submit_sqes+0x505/0xde0 fs/io_uring.c:7293
 __do_sys_io_uring_enter fs/io_uring.c:9986 [inline]
 __se_sys_io_uring_enter+0x20d/0xb30 fs/io_uring.c:9928
 __x64_sys_io_uring_enter+0x74/0x80 fs/io_uring.c:9928
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88812cf36ca0 of 8 bytes by task 20494 on cpu 0:
 __perf_event_read_value+0x84/0x1f0 kernel/events/core.c:5218
 perf_read_one kernel/events/core.c:5347 [inline]
 __perf_read kernel/events/core.c:5398 [inline]
 perf_read+0x2b8/0x5c0 kernel/events/core.c:5415
 loop_rw_iter+0x227/0x330
 io_iter_do_read fs/io_uring.c:3437 [inline]
 io_read fs/io_uring.c:3495 [inline]
 io_issue_sqe+0x1a2b/0x67b0 fs/io_uring.c:6654
 io_wq_submit_work+0xf5/0x2c0 fs/io_uring.c:6803
 io_worker_handle_work+0x788/0xa20 fs/io-wq.c:515
 io_wqe_worker+0x1b9/0x540 fs/io-wq.c:566
 ret_from_fork+0x1f/0x30

value changed: 0x0000000001af2bae -> 0x0000000001af998c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 20494 Comm: iou-wrk-20493 Not tainted 5.15.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/10/22 16:02 upstream 64222515138e 282f03fb .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __perf_event_read_value / event_sched_in
2021/10/08 23:12 upstream 741668ef7832 efe0f24d .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in __perf_event_read_value / event_sched_in
* Struck through repros no longer work on HEAD.