syzbot


KCSAN: data-race in __rb_erase_color / vm_area_dup (2)

Status: closed as invalid on 2020/06/18 14:13
Subsystems: mm
[Documentation on labels]
First crash: 1427d, last: 1427d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __rb_erase_color / vm_area_dup mm 14 1526d 1634d 0/26 auto-closed as invalid on 2020/04/20 20:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __rb_erase_color / vm_area_dup

write to 0xffff8881254d7cd8 of 8 bytes by task 17718 on cpu 0:
 rb_set_parent_color include/linux/rbtree_augmented.h:165 [inline]
 ____rb_erase_color lib/rbtree.c:398 [inline]
 __rb_erase_color+0x277/0x720 lib/rbtree.c:413
 rb_erase_augmented include/linux/rbtree_augmented.h:305 [inline]
 rb_erase_augmented_cached include/linux/rbtree_augmented.h:314 [inline]
 vma_interval_tree_remove+0x4e2/0x8e0 mm/interval_tree.c:23
 __remove_shared_vm_struct+0xa4/0xc0 mm/mmap.c:151
 unlink_file_vma+0x65/0x80 mm/mmap.c:166
 free_pgtables+0xb8/0x1f0 mm/memory.c:400
 exit_mmap+0x14d/0x2f0 mm/mmap.c:3151
 __mmput kernel/fork.c:1085 [inline]
 mmput+0xe2/0x260 kernel/fork.c:1106
 exit_mm kernel/exit.c:479 [inline]
 do_exit+0x644/0x11e0 kernel/exit.c:782
 do_group_exit+0xae/0x1a0 kernel/exit.c:893
 __do_sys_exit_group kernel/exit.c:904 [inline]
 __se_sys_exit_group kernel/exit.c:902 [inline]
 __x64_sys_exit_group+0x2b/0x30 kernel/exit.c:902
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8881254d7c80 of 200 bytes by task 5282 on cpu 1:
 vm_area_dup+0x71/0x110 kernel/fork.c:362
 dup_mmap kernel/fork.c:546 [inline]
 dup_mm+0x337/0xb50 kernel/fork.c:1363
 copy_mm kernel/fork.c:1419 [inline]
 copy_process+0x394f/0x3ab0 kernel/fork.c:2085
 _do_fork+0xf7/0x790 kernel/fork.c:2430
 __do_sys_clone+0xf9/0x130 kernel/fork.c:2585
 __se_sys_clone kernel/fork.c:2566 [inline]
 __x64_sys_clone+0x6c/0x80 kernel/fork.c:2566
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 5282 Comm: systemd-udevd Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/19 12:05 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 6d882fd2 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.