syzbot


KCSAN: data-race in __rb_rotate_set_parents / vm_area_dup (2)

Status: closed as invalid on 2020/06/18 14:24
Subsystems: mm
[Documentation on labels]
First crash: 1442d, last: 1407d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __rb_rotate_set_parents / vm_area_dup mm 17 1526d 1644d 0/26 auto-closed as invalid on 2020/04/30 01:08

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __rb_rotate_set_parents / vm_area_dup

write to 0xffff88809322ce68 of 8 bytes by task 13356 on cpu 1:
 rb_set_parent_color include/linux/rbtree_augmented.h:165 [inline]
 __rb_rotate_set_parents+0x5a/0xe0 lib/rbtree.c:80
 __rb_insert lib/rbtree.c:215 [inline]
 __rb_insert_augmented+0x10a/0x360 lib/rbtree.c:459
 rb_insert_augmented include/linux/rbtree_augmented.h:50 [inline]
 rb_insert_augmented_cached include/linux/rbtree_augmented.h:60 [inline]
 vma_interval_tree_insert+0x192/0x220 mm/interval_tree.c:23
 __vma_link_file+0xca/0xf0 mm/mmap.c:629
 __vma_adjust+0x1ab/0x1190 mm/mmap.c:812
 vma_adjust include/linux/mm.h:2475 [inline]
 __split_vma+0x1fe/0x340 mm/mmap.c:2695
 split_vma+0x69/0x90 mm/mmap.c:2724
 mprotect_fixup+0x45d/0x530 mm/mprotect.c:473
 do_mprotect_pkey+0x3da/0x640 mm/mprotect.c:613
 __do_sys_mprotect mm/mprotect.c:638 [inline]
 __se_sys_mprotect mm/mprotect.c:635 [inline]
 __x64_sys_mprotect+0x4d/0x60 mm/mprotect.c:635
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88809322ce10 of 200 bytes by task 13357 on cpu 0:
 vm_area_dup+0x71/0x110 kernel/fork.c:362
 __split_vma+0x83/0x340 mm/mmap.c:2666
 split_vma+0x69/0x90 mm/mmap.c:2724
 mprotect_fixup+0x45d/0x530 mm/mprotect.c:473
 do_mprotect_pkey+0x3da/0x640 mm/mprotect.c:613
 __do_sys_mprotect mm/mprotect.c:638 [inline]
 __se_sys_mprotect mm/mprotect.c:635 [inline]
 __x64_sys_mprotect+0x4d/0x60 mm/mprotect.c:635
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13357 Comm: modprobe Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/17 12:00 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 b6c46f43 .config console log report ci2-upstream-kcsan-gce
2020/05/13 13:44 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 9a6d42fb .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.