KCSAN: data-race in detach_pid / perf_event_switch_output (6)

Status: moderation: reported on 2026/09/16 08:13
Subsystems: perf
Labels: race:benign
[Documentation on labels]
Reported-by: syzbot+c382ee653fd70f5cf1bb@syzkaller.appspotmail.com
First crash: 14h05m, last: 14h05m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
e01b721e assessment-kcsan Benign: ✅ KCSAN: data-race in detach_pid / perf_event_switch_output (6) 2026/09/16 08:13 2026/09/16 08:13 2026/09/16 08:49 12a0a44a
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in detach_pid / perf_event_switch_output perf 6 16 1818d 1969d 0/29 auto-closed as invalid on 2021/10/29 19:05
upstream KCSAN: data-race in detach_pid / perf_event_switch_output (4) perf 6 1 942d 942d 0/29 auto-obsoleted due to no activity on 2024/03/23 04:37
upstream KCSAN: data-race in detach_pid / perf_event_switch_output (2) perf 6 1 1732d 1732d 0/29 auto-closed as invalid on 2022/01/22 22:51
upstream KCSAN: data-race in detach_pid / perf_event_switch_output (3) perf 6 1 1097d 1097d 0/29 auto-obsoleted due to no activity on 2023/10/20 14:02
upstream KCSAN: data-race in detach_pid / perf_event_switch_output (5) perf prio:low 6 1 168d 168d 0/29 auto-obsoleted due to no activity on 2026/05/27 09:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in detach_pid / perf_event_switch_output

write to 0xffff88810477a8e0 of 8 bytes by task 24142 on cpu 1:
 __change_pid kernel/pid.c:414 [inline]
 detach_pid+0xf0/0x1a0 kernel/pid.c:426
 __unhash_process kernel/exit.c:140 [inline]
 __exit_signal kernel/exit.c:211 [inline]
 release_task+0x67c/0xb90 kernel/exit.c:272
 wait_task_zombie kernel/exit.c:1316 [inline]
 wait_consider_task+0x10ef/0x15f0 kernel/exit.c:1543
 do_wait_thread kernel/exit.c:1606 [inline]
 __do_wait+0xf1/0x500 kernel/exit.c:1724
 do_wait+0xb6/0x230 kernel/exit.c:1758
 kernel_wait4+0x19f/0x210 kernel/exit.c:1917
 __do_sys_wait4 kernel/exit.c:1945 [inline]
 __se_sys_wait4 kernel/exit.c:1941 [inline]
 __x64_sys_wait4+0x91/0x120 kernel/exit.c:1941
 x64_sys_call+0x108f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:62
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810477a8e0 of 8 bytes by task 0 on cpu 0:
 pid_alive include/linux/pid.h:267 [inline]
 perf_event_pid_type kernel/events/core.c:1534 [inline]
 perf_event_pid kernel/events/core.c:1541 [inline]
 perf_event_switch_output+0x17c/0x370 kernel/events/core.c:10130
 perf_iterate_sb_cpu kernel/events/core.c:9023 [inline]
 perf_iterate_sb+0x369/0x650 kernel/events/core.c:9052
 perf_event_switch kernel/events/core.c:10177 [inline]
 __perf_event_task_sched_in+0xa41/0xae0 kernel/events/core.c:4330
 perf_event_task_sched_in include/linux/perf_event.h:1639 [inline]
 finish_task_switch+0x2bd/0x340 kernel/sched/core.c:5372
 context_switch kernel/sched/core.c:5529 [inline]
 __schedule+0x79e/0xd20 kernel/sched/core.c:7277
 schedule_idle+0x1d/0x40 kernel/sched/core.c:7395
 do_idle+0x27e/0x2d0 kernel/sched/idle.c:384
 cpu_startup_entry+0x24/0x30 kernel/sched/idle.c:454
 rest_init+0x101/0x110 init/main.c:732
 start_kernel+0x49f/0x4d0 init/main.c:1190
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0xfc/0x100 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x157

value changed: 0xffff888122a246c0 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/16 08:13 upstream 9b87fdc9af2f 12a0a44a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in detach_pid / perf_event_switch_output
* Struck through repros no longer work on HEAD.