syzbot


KCSAN: data-race in expand_downwards / find_vma (2)

Status: auto-closed as invalid on 2020/10/21 23:02
Subsystems: mm
[Documentation on labels]
First crash: 1316d, last: 1316d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in expand_downwards / find_vma mm 1 1531d 1531d 0/26 auto-closed as invalid on 2020/04/24 09:47

Sample crash report:
==================================================================
BUG: KCSAN: data-race in expand_downwards / find_vma

write to 0xffff88809e09ce10 of 8 bytes by task 29987 on cpu 1:
 expand_downwards+0x6d0/0x9c0 mm/mmap.c:2507
 expand_stack+0x19/0x20 mm/mmap.c:2564
 do_user_addr_fault+0x67e/0x770 arch/x86/mm/fault.c:1344
 handle_page_fault arch/x86/mm/fault.c:1429 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1482
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538
 do_strncpy_from_user lib/strncpy_from_user.c:56 [inline]
 strncpy_from_user+0x205/0x2e0 lib/strncpy_from_user.c:121
 getname_flags+0xb8/0x3d0 fs/namei.c:149
 getname+0x15/0x20 fs/namei.c:209
 do_sys_openat2+0x2f2/0x500 fs/open.c:1162
 do_sys_open fs/open.c:1184 [inline]
 __do_sys_openat fs/open.c:1200 [inline]
 __se_sys_openat fs/open.c:1195 [inline]
 __x64_sys_openat+0xef/0x110 fs/open.c:1195
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88809e09ce10 of 8 bytes by task 29983 on cpu 0:
 find_vma+0x73/0x100 mm/mmap.c:2274
 __mm_populate+0x10c/0x340 mm/gup.c:1449
 mm_populate include/linux/mm.h:2564 [inline]
 vm_mmap_pgoff+0x133/0x170 mm/util.c:511
 ksys_mmap_pgoff+0xe1/0x380 mm/mmap.c:1596
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 29983 Comm: syz-executor.0 Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/16 22:56 upstream 5925fa68fe82 77507d02 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.