KCSAN: data-race in vm_area_dup / vma_interval_tree_augment_rotate (2)

Status: auto-closed as invalid on 2020/04/11 23:00
Subsystems: mm
[Documentation on labels]
First crash: 2491d, last: 2425d
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in vm_area_dup / vma_interval_tree_augment_rotate mm 6 1 2514d 2514d 0/29 closed as invalid on 2019/11/19 13:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in vm_area_dup / vma_interval_tree_augment_rotate

read to 0xffff88811f132ed8 of 200 bytes by task 10822 on cpu 0:
 vm_area_dup+0x70/0xf0 kernel/fork.c:362
 __split_vma+0x88/0x350 mm/mmap.c:2656
 split_vma+0x73/0xa0 mm/mmap.c:2714
 mprotect_fixup+0x43f/0x510 mm/mprotect.c:413
 do_mprotect_pkey+0x3eb/0x660 mm/mprotect.c:553
 __do_sys_mprotect mm/mprotect.c:578 [inline]
 __se_sys_mprotect mm/mprotect.c:575 [inline]
 __x64_sys_mprotect+0x51/0x70 mm/mprotect.c:575
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88811f132f48 of 8 bytes by task 10824 on cpu 1:
 vma_interval_tree_augment_compute_max mm/interval_tree.c:23 [inline]
 vma_interval_tree_augment_rotate+0xde/0x100 mm/interval_tree.c:23
 __rb_insert lib/rbtree.c:205 [inline]
 __rb_insert_augmented+0x34b/0x370 lib/rbtree.c:459
 rb_insert_augmented include/linux/rbtree_augmented.h:50 [inline]
 rb_insert_augmented_cached include/linux/rbtree_augmented.h:60 [inline]
 vma_interval_tree_insert+0x196/0x230 mm/interval_tree.c:23
 __vma_link_file+0xd9/0x110 mm/mmap.c:634
 vma_link+0xab/0x130 mm/mmap.c:660
 mmap_region+0x85e/0xd50 mm/mmap.c:1807
 do_mmap+0x6c8/0xba0 mm/mmap.c:1555
 do_mmap_pgoff include/linux/mm.h:2338 [inline]
 vm_mmap_pgoff+0x12d/0x190 mm/util.c:506
 vm_mmap+0x9d/0xd0 mm/util.c:525
 elf_map+0xd4/0x200 fs/binfmt_elf.c:377
 load_elf_binary+0x90c/0x2ef0 fs/binfmt_elf.c:982
 search_binary_handler fs/exec.c:1658 [inline]
 search_binary_handler+0x127/0x420 fs/exec.c:1635
 exec_binprm fs/exec.c:1701 [inline]
 __do_execve_file.isra.0+0xb6a/0x1140 fs/exec.c:1821
 do_execveat_common fs/exec.c:1867 [inline]
 do_execve fs/exec.c:1884 [inline]
 __do_sys_execve fs/exec.c:1960 [inline]
 __se_sys_execve fs/exec.c:1955 [inline]
 __x64_sys_execve+0x62/0x80 fs/exec.c:1955
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 10824 Comm: blkid Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/01 22:58 https://github.com/google/ktsan.git kcsan 245a43005292 2274ad39 .config console log report ci2-upstream-kcsan-gce
2020/01/22 18:17 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/22 18:16 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/14 19:32 https://github.com/google/ktsan.git kcsan 245a43005292 fa12bd3c .config console log report ci2-upstream-kcsan-gce
2020/01/13 23:53 https://github.com/google/ktsan.git kcsan 245a43005292 32881205 .config console log report ci2-upstream-kcsan-gce
2020/01/12 10:58 https://github.com/google/ktsan.git kcsan 245a43005292 31290a45 .config console log report ci2-upstream-kcsan-gce
2019/12/30 16:28 https://github.com/google/ktsan.git kcsan 245a43005292 6b36d338 .config console log report ci2-upstream-kcsan-gce
2019/12/16 10:25 https://github.com/google/ktsan.git kcsan 245a43005292 0ae38e44 .config console log report ci2-upstream-kcsan-gce
2019/12/14 06:06 https://github.com/google/ktsan.git kcsan 245a43005292 eef6e580 .config console log report ci2-upstream-kcsan-gce
2019/12/12 17:22 https://github.com/google/ktsan.git kcsan ef798c30ba4e 08003f64 .config console log report ci2-upstream-kcsan-gce
2019/12/11 14:23 https://github.com/google/ktsan.git kcsan ef798c30ba4e 0d368675 .config console log report ci2-upstream-kcsan-gce
2019/12/02 20:31 https://github.com/google/ktsan.git kcsan ef798c30ba4e ab342da3 .config console log report ci2-upstream-kcsan-gce
2019/11/27 16:19 https://github.com/google/ktsan.git kcsan ef798c30ba4e 0d63f89c .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.