syzbot


KCSAN: data-race in __rb_erase_color / vm_area_dup

Status: auto-closed as invalid on 2020/04/20 20:44
Subsystems: mm
[Documentation on labels]
First crash: 1643d, last: 1535d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __rb_erase_color / vm_area_dup (2) mm 1 1437d 1437d 0/26 closed as invalid on 2020/06/18 14:13

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __rb_erase_color / vm_area_dup

write to 0xffff888122aeb2b0 of 8 bytes by task 16941 on cpu 1:
 __rb_rotate_set_parents lib/rbtree.c:79 [inline]
 ____rb_erase_color lib/rbtree.c:348 [inline]
 __rb_erase_color+0x66e/0x700 lib/rbtree.c:413
 rb_erase_augmented include/linux/rbtree_augmented.h:305 [inline]
 rb_erase_augmented_cached include/linux/rbtree_augmented.h:314 [inline]
 vma_interval_tree_remove+0x4dd/0x8b0 mm/interval_tree.c:23
 __remove_shared_vm_struct+0xad/0xd0 mm/mmap.c:154
 unlink_file_vma+0x69/0x90 mm/mmap.c:169
 free_pgtables+0x14f/0x200 mm/memory.c:414
 exit_mmap+0x151/0x300 mm/mmap.c:3141
 __mmput kernel/fork.c:1082 [inline]
 mmput+0xea/0x280 kernel/fork.c:1103
 exit_mm kernel/exit.c:485 [inline]
 do_exit+0x4ac/0x18c0 kernel/exit.c:784
 do_group_exit+0xb4/0x1c0 kernel/exit.c:895
 __do_sys_exit_group kernel/exit.c:906 [inline]
 __se_sys_exit_group kernel/exit.c:904 [inline]
 __x64_sys_exit_group+0x2e/0x30 kernel/exit.c:904
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888122aeb258 of 200 bytes by task 16949 on cpu 0:
 vm_area_dup+0x70/0xf0 kernel/fork.c:362
 __split_vma+0x88/0x350 mm/mmap.c:2656
 __do_munmap+0x233/0xb60 mm/mmap.c:2772
 __vm_munmap+0xb2/0x130 mm/mmap.c:2846
 vm_munmap+0x29/0x40 mm/mmap.c:2864
 elf_map+0x1f6/0x200 fs/binfmt_elf.c:379
 load_elf_interp fs/binfmt_elf.c:600 [inline]
 load_elf_binary+0x1566/0x2f10 fs/binfmt_elf.c:1056
 search_binary_handler fs/exec.c:1658 [inline]
 search_binary_handler+0x127/0x420 fs/exec.c:1635
 exec_binprm fs/exec.c:1701 [inline]
 __do_execve_file.isra.0+0xb6a/0x1140 fs/exec.c:1821
 do_execveat_common fs/exec.c:1867 [inline]
 do_execve+0x3c/0x60 fs/exec.c:1884
 call_usermodehelper_exec_async+0x3b0/0x400 kernel/umh.c:112
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 16949 Comm: modprobe Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/10 20:38 https://github.com/google/ktsan.git kcsan f60f0f543333 d9e55b05 .config console log report ci2-upstream-kcsan-gce
2020/02/10 16:36 https://github.com/google/ktsan.git kcsan f60f0f543333 18847f55 .config console log report ci2-upstream-kcsan-gce
2020/02/08 10:25 https://github.com/google/ktsan.git kcsan f60f0f543333 06150bf1 .config console log report ci2-upstream-kcsan-gce
2020/01/19 16:24 https://github.com/google/ktsan.git kcsan 245a43005292 0342f8c7 .config console log report ci2-upstream-kcsan-gce
2020/01/12 10:52 https://github.com/google/ktsan.git kcsan 245a43005292 31290a45 .config console log report ci2-upstream-kcsan-gce
2019/12/28 10:43 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/23 10:29 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
2019/12/13 08:36 https://github.com/google/ktsan.git kcsan 245a43005292 2a752b7c .config console log report ci2-upstream-kcsan-gce
2019/12/10 04:25 https://github.com/google/ktsan.git kcsan ef798c30ba4e 4b83c8fb .config console log report ci2-upstream-kcsan-gce
2019/11/30 21:12 https://github.com/google/ktsan.git kcsan ef798c30ba4e a76bf83f .config console log report ci2-upstream-kcsan-gce
2019/11/29 10:34 https://github.com/google/ktsan.git kcsan ef798c30ba4e 4f7e1d0f .config console log report ci2-upstream-kcsan-gce
2019/11/16 06:50 https://github.com/google/ktsan.git kcsan 5863cc791e4c cdac920b .config console log report ci2-upstream-kcsan-gce
2019/11/01 19:16 https://github.com/google/ktsan.git kcsan 05f2236801fe 997ccc67 .config console log report ci2-upstream-kcsan-gce
2019/10/25 23:50 https://github.com/google/ktsan.git kcsan 05f2236801fe 413926c5 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.