KCSAN: data-race in __rb_insert_augmented / vm_area_dup (2)

Status: auto-closed as invalid on 2020/06/18 13:13
Subsystems: mm
[Documentation on labels]
First crash: 2496d, last: 2305d
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __rb_insert_augmented / vm_area_dup mm 6 1 2522d 2522d 0/29 closed as invalid on 2019/10/18 14:11

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __rb_insert_augmented / vm_area_dup

write to 0xffff8880ba059378 of 8 bytes by task 11656 on cpu 0:
 rb_set_parent_color include/linux/rbtree_augmented.h:165 [inline]
 __rb_insert lib/rbtree.c:191 [inline]
 __rb_insert_augmented+0x20c/0x360 lib/rbtree.c:459
 rb_insert_augmented include/linux/rbtree_augmented.h:50 [inline]
 rb_insert_augmented_cached include/linux/rbtree_augmented.h:60 [inline]
 vma_interval_tree_insert+0x192/0x220 mm/interval_tree.c:23
 __vma_link_file+0xca/0xf0 mm/mmap.c:629
 __vma_adjust+0x1ab/0x1190 mm/mmap.c:812
 vma_adjust include/linux/mm.h:2475 [inline]
 __split_vma+0x32d/0x340 mm/mmap.c:2692
 __do_munmap+0xabb/0xb20 mm/mmap.c:2791
 do_munmap mm/mmap.c:2844 [inline]
 mmap_region+0x16b/0xdd0 mm/mmap.c:1715
 do_mmap+0x717/0xc20 mm/mmap.c:1545
 do_mmap_pgoff include/linux/mm.h:2553 [inline]
 vm_mmap_pgoff+0x12f/0x190 mm/util.c:506
 ksys_mmap_pgoff+0x2db/0x420 mm/mmap.c:1595
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880ba059320 of 200 bytes by task 11658 on cpu 1:
 vm_area_dup+0x71/0x110 kernel/fork.c:362
 __split_vma+0x83/0x340 mm/mmap.c:2666
 __do_munmap+0xabb/0xb20 mm/mmap.c:2791
 do_munmap mm/mmap.c:2844 [inline]
 mmap_region+0x16b/0xdd0 mm/mmap.c:1715
 do_mmap+0x717/0xc20 mm/mmap.c:1545
 do_mmap_pgoff include/linux/mm.h:2553 [inline]
 vm_mmap_pgoff+0x12f/0x190 mm/util.c:506
 ksys_mmap_pgoff+0x2db/0x420 mm/mmap.c:1595
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 11658 Comm: modprobe Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (28):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/13 12:32 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 9a6d42fb .config console log report ci2-upstream-kcsan-gce
2020/05/11 22:28 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 9eb09c40 .config console log report ci2-upstream-kcsan-gce
2020/05/09 15:57 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 88cb3e92 .config console log report ci2-upstream-kcsan-gce
2020/05/07 00:05 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 4618eb2d .config console log report ci2-upstream-kcsan-gce
2020/04/18 23:59 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 365fba24 .config console log report ci2-upstream-kcsan-gce
2020/02/19 13:07 https://github.com/google/ktsan.git kcsan b12d66a6c34f 47fae6e9 .config console log report ci2-upstream-kcsan-gce
2020/02/18 00:36 https://github.com/google/ktsan.git kcsan b12d66a6c34f 1ce142dc .config console log report ci2-upstream-kcsan-gce
2020/02/13 12:36 https://github.com/google/ktsan.git kcsan f60f0f543333 e6247653 .config console log report ci2-upstream-kcsan-gce
2020/02/10 20:03 https://github.com/google/ktsan.git kcsan f60f0f543333 d9e55b05 .config console log report ci2-upstream-kcsan-gce
2020/02/09 23:17 https://github.com/google/ktsan.git kcsan f60f0f543333 35f5e45e .config console log report ci2-upstream-kcsan-gce
2020/02/01 22:28 https://github.com/google/ktsan.git kcsan 245a43005292 2274ad39 .config console log report ci2-upstream-kcsan-gce
2020/01/24 07:25 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/22 18:05 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/19 15:37 https://github.com/google/ktsan.git kcsan 245a43005292 0342f8c7 .config console log report ci2-upstream-kcsan-gce
2020/01/11 02:35 https://github.com/google/ktsan.git kcsan 245a43005292 4c04afaa .config console log report ci2-upstream-kcsan-gce
2020/01/07 09:25 https://github.com/google/ktsan.git kcsan 245a43005292 1bcd407e .config console log report ci2-upstream-kcsan-gce
2019/12/31 16:40 https://github.com/google/ktsan.git kcsan 245a43005292 25a0186e .config console log report ci2-upstream-kcsan-gce
2019/12/31 04:30 https://github.com/google/ktsan.git kcsan 245a43005292 7f117e28 .config console log report ci2-upstream-kcsan-gce
2019/12/28 11:38 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/23 12:42 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/13 06:35 https://github.com/google/ktsan.git kcsan 245a43005292 2a752b7c .config console log report ci2-upstream-kcsan-gce
2019/12/06 02:27 https://github.com/google/ktsan.git kcsan ef798c30ba4e 98b4ef2d .config console log report ci2-upstream-kcsan-gce
2019/12/04 14:50 https://github.com/google/ktsan.git kcsan ef798c30ba4e b2088328 .config console log report ci2-upstream-kcsan-gce
2019/11/16 06:44 https://github.com/google/ktsan.git kcsan 5863cc791e4c cdac920b .config console log report ci2-upstream-kcsan-gce
2019/11/15 07:10 https://github.com/google/ktsan.git kcsan 5863cc791e4c 79248ee8 .config console log report ci2-upstream-kcsan-gce
2019/11/07 16:13 https://github.com/google/ktsan.git kcsan 94c006602e13 f39aff9e .config console log report ci2-upstream-kcsan-gce
2019/11/04 12:40 https://github.com/google/ktsan.git kcsan 05f2236801fe 18e12644 .config console log report ci2-upstream-kcsan-gce
2019/11/04 12:30 https://github.com/google/ktsan.git kcsan 05f2236801fe 18e12644 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.