syzbot


KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event

Status: moderation: reported on 2025/07/05 04:29
Subsystems: pm
[Documentation on labels]
Reported-by: syzbot+f1c34e6db0a3f2b2b1d9@syzkaller.appspotmail.com
First crash: 2d03h, last: 6h56m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event

write to 0xffff888103c049b8 of 1 bytes by task 11978 on cpu 0:
 wakeup_source_activate drivers/base/power/wakeup.c:565 [inline]
 wakeup_source_report_event+0xd6/0x280 drivers/base/power/wakeup.c:590
 __pm_stay_awake+0x34/0x70 drivers/base/power/wakeup.c:611
 ep_pm_stay_awake_rcu fs/eventpoll.c:727 [inline]
 ep_poll_callback+0x1f6/0x550 fs/eventpoll.c:1243
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up+0x63/0xb0 kernel/sched/wait.c:127
 unix_dgram_peer_wake_relay+0xd3/0xf0 net/unix/af_unix.c:514
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x4f/0x80 kernel/sched/wait.c:173
 __unix_dgram_recvmsg+0x3b2/0x840 net/unix/af_unix.c:2541
 unix_dgram_recvmsg+0x81/0x90 net/unix/af_unix.c:2616
 sock_recvmsg_nosec+0x104/0x130 net/socket.c:1017
 ____sys_recvmsg+0x26f/0x280 net/socket.c:2784
 ___sys_recvmsg+0x11f/0x370 net/socket.c:2828
 do_recvmmsg+0x1ef/0x540 net/socket.c:2923
 __sys_recvmmsg net/socket.c:2997 [inline]
 __do_sys_recvmmsg net/socket.c:3020 [inline]
 __se_sys_recvmmsg net/socket.c:3013 [inline]
 __x64_sys_recvmmsg+0xe5/0x170 net/socket.c:3013
 x64_sys_call+0x1c6a/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:300
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103c049b8 of 1 bytes by task 11981 on cpu 1:
 __ep_eventpoll_poll+0x1de/0x4e0 fs/eventpoll.c:958
 ep_item_poll fs/eventpoll.c:1025 [inline]
 __ep_eventpoll_poll+0x2d7/0x4e0 fs/eventpoll.c:965
 ep_eventpoll_poll+0x1f/0x30 fs/eventpoll.c:1032
 vfs_poll include/linux/poll.h:82 [inline]
 do_pollfd fs/select.c:870 [inline]
 do_poll fs/select.c:913 [inline]
 do_sys_poll+0x65e/0xbd0 fs/select.c:1009
 __do_sys_ppoll fs/select.c:1115 [inline]
 __se_sys_ppoll+0x1b9/0x200 fs/select.c:1095
 __x64_sys_ppoll+0x67/0x80 fs/select.c:1095
 x64_sys_call+0x2de5/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:272
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00 -> 0x01

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 11981 Comm: syz.0.3043 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/07 00:35 upstream d7b8f8e20813 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/07 00:35 upstream d7b8f8e20813 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/07 00:35 upstream d7b8f8e20813 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/06 11:20 upstream 1f988d0788f5 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/06 11:20 upstream 1f988d0788f5 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/05 21:45 upstream 05df91921da6 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/05 07:17 upstream a79a588fc176 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/05 07:16 upstream a79a588fc176 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
2025/07/05 04:29 upstream a79a588fc176 d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event
* Struck through repros no longer work on HEAD.