syzbot


KCSAN: data-race in event_sched_out / perf_event_update_userpage

Status: auto-closed as invalid on 2020/12/02 23:00
Subsystems: perf
[Documentation on labels]
First crash: 1275d, last: 1275d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (3) perf 2 1058d 1068d 0/26 auto-closed as invalid on 2021/07/08 04:06
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (6) perf 1 892d 892d 0/26 auto-closed as invalid on 2021/12/20 08:52
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (7) perf 2 843d 849d 0/26 auto-closed as invalid on 2022/02/08 01:10
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (5) perf 1 944d 944d 0/26 auto-closed as invalid on 2021/10/30 02:46
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (4) perf 1 993d 993d 0/26 auto-closed as invalid on 2021/09/10 05:35
upstream KCSAN: data-race in event_sched_out / perf_event_update_userpage (2) perf 1 1105d 1105d 0/26 auto-closed as invalid on 2021/05/21 17:09

Sample crash report:
==================================================================
BUG: KCSAN: data-race in event_sched_out / perf_event_update_userpage

write to 0xffff88810de67cc0 of 8 bytes by task 1667 on cpu 1:
 __perf_update_times kernel/events/core.c:633 [inline]
 perf_event_update_time kernel/events/core.c:645 [inline]
 perf_event_set_state kernel/events/core.c:664 [inline]
 event_sched_out+0x4ad/0x9f0 kernel/events/core.c:2280
 group_sched_out+0xbc/0x190 kernel/events/core.c:2306
 ctx_sched_out+0x3ee/0x490 kernel/events/core.c:3265
 task_ctx_sched_out kernel/events/core.c:2683 [inline]
 perf_event_context_sched_out kernel/events/core.c:3470 [inline]
 __perf_event_task_sched_out+0x37c/0xc90 kernel/events/core.c:3544
 perf_event_task_sched_out include/linux/perf_event.h:1229 [inline]
 prepare_task_switch+0x142/0x170 kernel/sched/core.c:3547
 context_switch kernel/sched/core.c:3726 [inline]
 __schedule+0x2e8/0x550 kernel/sched/core.c:4523
 preempt_schedule_irq+0x43/0x80 kernel/sched/core.c:4784
 irqentry_exit_cond_resched+0x30/0x40 kernel/entry/common.c:357
 irqentry_exit+0x2a/0x40 kernel/entry/common.c:387
 sysvec_apic_timer_interrupt+0x80/0x90 arch/x86/kernel/apic/apic.c:1091
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:631
 get_current arch/x86/include/asm/current.h:15 [inline]
 get_ctx kernel/kcsan/core.c:198 [inline]
 check_access kernel/kcsan/core.c:629 [inline]
 __tsan_read1+0x10d/0x180 kernel/kcsan/core.c:839
 tomoyo_check_path_number_acl+0x1e/0x160 security/tomoyo/file.c:281
 tomoyo_check_acl+0xcc/0x200 security/tomoyo/domain.c:175
 tomoyo_path_number_perm+0x1af/0x2d0 security/tomoyo/file.c:733
 tomoyo_file_ioctl+0x1c/0x20 security/tomoyo/tomoyo.c:329
 security_file_ioctl+0x45/0x90 security/security.c:1481
 __do_sys_ioctl fs/ioctl.c:747 [inline]
 __se_sys_ioctl+0x48/0x140 fs/ioctl.c:739
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:739
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88810de67cc0 of 8 bytes by task 1663 on cpu 0:
 __perf_update_times kernel/events/core.c:632 [inline]
 calc_timer_values kernel/events/core.c:5654 [inline]
 perf_event_update_userpage+0xd6/0x300 kernel/events/core.c:5709
 perf_mmap+0xbc9/0xd40 kernel/events/core.c:6196
 call_mmap include/linux/fs.h:1892 [inline]
 mmap_region+0xd19/0x13f0 mm/mmap.c:1807
 do_mmap+0x77d/0xc90 mm/mmap.c:1583
 vm_mmap_pgoff+0xe5/0x170 mm/util.c:507
 ksys_mmap_pgoff+0x2a8/0x380 mm/mmap.c:1634
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 1663 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/28 22:54 upstream ed8780e3f2ec f24824d3 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.