Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

mm/mmap.c dup_mmap() -> tear_down_vmas()

Type Parameter Key Value
PARAM_VALUE 0 mm 4096-ptr_max
PARAM_VALUE 0 mm->context.ldt 0
PARAM_VALUE 0 mm->context.ldt_usr_sem.count.counter 0
PARAM_VALUE 0 mm->context.ldt_usr_sem.dep_map->name 0-255
PARAM_VALUE 0 mm->context.ldt_usr_sem.first_waiter 0
PARAM_VALUE 0 mm->context.ldt_usr_sem.magic 4096-ptr_max
PARAM_VALUE 0 mm->context.ldt_usr_sem.owner.counter 0
PARAM_VALUE 0 mm->context.lock.dep_map->name 0-255
PARAM_VALUE 0 mm->context.lock.first_waiter 0
PARAM_VALUE 0 mm->context.lock.magic 4096-ptr_max
PARAM_VALUE 0 mm->context.lock.osq.tail.counter 0
PARAM_VALUE 0 mm->context.lock.owner.counter 0
PARAM_VALUE 0 mm->context.tlb_gen.counter 0
PARAM_VALUE 0 mm->def_flags 0,1073741824
PARAM_VALUE 0 mm->exe_file 0,4096-ptr_max
PARAM_VALUE 0 mm->hugetlb_usage.counter 0
PARAM_VALUE 0 mm->ioctx_table 0
PARAM_VALUE 0 mm->iommu_mm 0
PARAM_VALUE 0 mm->locked_vm 0
PARAM_VALUE 0 mm->lru_gen.bitmap 0
PARAM_VALUE 0 mm->lru_gen.memcg 0
PARAM_VALUE 0 mm->map_count 1-s32max
PARAM_VALUE 0 mm->mm_cid.lock.magic 3735899821
PARAM_VALUE 0 mm->mm_cid.lock.owner (-1)
PARAM_VALUE 0 mm->mm_cid.lock.owner_cpu u32max
PARAM_VALUE 0 mm->mm_cid.max_cids 0
PARAM_VALUE 0 mm->mm_cid.mode 0
PARAM_VALUE 0 mm->mm_cid.mutex.dep_map->name 0-255
PARAM_VALUE 0 mm->mm_cid.mutex.first_waiter 0
PARAM_VALUE 0 mm->mm_cid.mutex.magic 4096-ptr_max
PARAM_VALUE 0 mm->mm_cid.mutex.osq.tail.counter 0
PARAM_VALUE 0 mm->mm_cid.mutex.owner.counter 0
PARAM_VALUE 0 mm->mm_cid.pcpu 4096-ptr_max
PARAM_VALUE 0 mm->mm_cid.pcpu_thrs 0
PARAM_VALUE 0 mm->mm_cid.update_deferred 0
PARAM_VALUE 0 mm->mm_cid.users 0
PARAM_VALUE 0 mm->mm_count.counter 1
PARAM_VALUE 0 mm->mm_id 0-s32max
PARAM_VALUE 0 mm->mm_lock_seq.dep_map->name 0-255
PARAM_VALUE 0 mm->mm_mt.ma_flags 771
PARAM_VALUE 0 mm->mm_mt.ma_root 0
PARAM_VALUE 0 mm->mm_users.counter 1
PARAM_VALUE 0 mm->mmap_lock.count.counter 0
PARAM_VALUE 0 mm->mmap_lock.dep_map->name 0-255
PARAM_VALUE 0 mm->mmap_lock.first_waiter 0
PARAM_VALUE 0 mm->mmap_lock.first_waiter->list.next 2624917664208203776
PARAM_VALUE 0 mm->mmap_lock.first_waiter->list.prev 2624917664208203776
PARAM_VALUE 0 mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 0 mm->mmap_lock.magic 4096-ptr_max
PARAM_VALUE 0 mm->mmap_lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 mm->mmap_lock.owner.counter 0
PARAM_VALUE 0 mm->notifier_subscriptions 0
PARAM_VALUE 0 mm->owner 4096-ptr_max
PARAM_VALUE 0 mm->page_table_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 mm->pgd 18379471554275704832,18446612682070032384
PARAM_VALUE 0 mm->pinned_vm.counter 0
PARAM_VALUE 0 mm->sc_stat.cpu (-1)
PARAM_VALUE 0 mm->sc_stat.footprint 0
PARAM_VALUE 0 mm->sc_stat.lock.magic 3735899821
PARAM_VALUE 0 mm->sc_stat.lock.owner (-1)
PARAM_VALUE 0 mm->sc_stat.lock.owner_cpu u32max
PARAM_VALUE 0 mm->sc_stat.nr_running_avg 0
PARAM_VALUE 0 mm->sc_stat.pcpu_sched 4096-ptr_max
PARAM_VALUE 0 mm->tlb_flush_pending.counter 0
PARAM_VALUE 0 mm->uprobes_state.xol_area 0
PARAM_VALUE 0 mm->vma_writer_wait.task 0
PARAM_VALUE 0 mm->write_protect_seq.dep_map->name 0-255
PARAM_VALUE 0 mm->write_protect_seq.sequence 0
PARAM_VALUE 1 vmi 3206200147527860224
PARAM_VALUE 1 vmi->mas.alloc 0
PARAM_VALUE 1 vmi->mas.mas_flags 0,2-254
PARAM_VALUE 1 vmi->mas.node_request 0
PARAM_VALUE 1 vmi->mas.sheaf 0
PARAM_VALUE 1 vmi->mas.status 0-3,5,8-u32max
PARAM_VALUE 2 vma 4096-ptr_max
PARAM_VALUE 2 vma->anon_vma_chain.next->next 4096-ptr_max
PARAM_VALUE 2 vma->anon_vma_chain.prev->next 4096-ptr_max
PARAM_VALUE 2 vma->anon_vma_chain.prev->prev 4096-ptr_max
PARAM_VALUE 2 vma->flags.__vma_flags 4096-ptr_max
PARAM_VALUE 2 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 2 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 2 vma->vm_mm 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->context.execute_only_pkey (-1)
PARAM_VALUE 2 vma->vm_mm->context.ldt 0
PARAM_VALUE 2 vma->vm_mm->context.ldt_usr_sem.magic 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->context.lock.first_waiter 0
PARAM_VALUE 2 vma->vm_mm->context.lock.magic 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->context.lock.owner.counter 0
PARAM_VALUE 2 vma->vm_mm->context.pkey_allocation_map 1
PARAM_VALUE 2 vma->vm_mm->context.tlb_gen.counter 0
PARAM_VALUE 2 vma->vm_mm->context.untag_mask u64max
PARAM_VALUE 2 vma->vm_mm->def_flags 0,1073741824
PARAM_VALUE 2 vma->vm_mm->exe_file 0,4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->ioctx_table 0
PARAM_VALUE 2 vma->vm_mm->iommu_mm 0
PARAM_VALUE 2 vma->vm_mm->locked_vm 0
PARAM_VALUE 2 vma->vm_mm->lru_gen.bitmap 0
PARAM_VALUE 2 vma->vm_mm->lru_gen.memcg 0
PARAM_VALUE 2 vma->vm_mm->map_count 0-s32max
PARAM_VALUE 2 vma->vm_mm->mm_cid.lock.magic 3735899821
PARAM_VALUE 2 vma->vm_mm->mm_cid.lock.owner (-1)
PARAM_VALUE 2 vma->vm_mm->mm_cid.lock.owner_cpu u32max
PARAM_VALUE 2 vma->vm_mm->mm_cid.max_cids 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.mode 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.mutex.first_waiter 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.mutex.magic 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->mm_cid.mutex.owner.counter 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.pcpu 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->mm_cid.pcpu_thrs 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.update_deferred 0
PARAM_VALUE 2 vma->vm_mm->mm_cid.users 0
PARAM_VALUE 2 vma->vm_mm->mm_count.counter 1
PARAM_VALUE 2 vma->vm_mm->mm_id 0-s32max
PARAM_VALUE 2 vma->vm_mm->mm_mt.ma_flags 771
PARAM_VALUE 2 vma->vm_mm->mm_mt.ma_root 0
PARAM_VALUE 2 vma->vm_mm->mm_users.counter 1
PARAM_VALUE 2 vma->vm_mm->mmap_lock.count.counter 0
PARAM_VALUE 2 vma->vm_mm->mmap_lock.first_waiter 0
PARAM_VALUE 2 vma->vm_mm->mmap_lock.magic 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->mmap_lock.osq.tail.counter 0-s32max
PARAM_VALUE 2 vma->vm_mm->mmap_lock.owner.counter 0
PARAM_VALUE 2 vma->vm_mm->notifier_subscriptions 0
PARAM_VALUE 2 vma->vm_mm->owner 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->pgd 18379471554275704832,18446612682070032384
PARAM_VALUE 2 vma->vm_mm->pinned_vm.counter 0
PARAM_VALUE 2 vma->vm_mm->sc_stat.cpu (-1)
PARAM_VALUE 2 vma->vm_mm->sc_stat.footprint 0
PARAM_VALUE 2 vma->vm_mm->sc_stat.lock.magic 3735899821
PARAM_VALUE 2 vma->vm_mm->sc_stat.lock.owner (-1)
PARAM_VALUE 2 vma->vm_mm->sc_stat.lock.owner_cpu u32max
PARAM_VALUE 2 vma->vm_mm->sc_stat.nr_running_avg 0
PARAM_VALUE 2 vma->vm_mm->sc_stat.pcpu_sched 4096-ptr_max
PARAM_VALUE 2 vma->vm_mm->tlb_flush_pending.counter 0
PARAM_VALUE 2 vma->vm_mm->uprobes_state.xol_area 0
PARAM_VALUE 2 vma->vm_mm->vma_writer_wait.task 0
PARAM_VALUE 2 vma->vm_mm->write_protect_seq.sequence 0
PARAM_VALUE 2 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 2 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type 0-1
PARAM_VALUE 2 vma->vmlock_dep_map->name 0-255
PARAM_VALUE 3 end 1-u64max
DATA_SOURCE 0 mm $0
DATA_SOURCE 2 vma r vma_next
FUZZY_MAX 3 end u64max
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 1 vmi->mas.index
NO_OVERFLOW_SIMPLE 2 vma->vm_start
UNITS 2 vma unit_byte
UNITS 3 end unit_byte
LOCK2 &oldmm->mmap_lock
LOCK2 0 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

mm/mmap.c exit_mmap() -> tear_down_vmas()

Type Parameter Key Value
PARAM_VALUE 0 mm 4096-ptr_max
PARAM_VALUE 0 mm->binfmt->module 0
PARAM_VALUE 0 mm->context.ldt 0
PARAM_VALUE 0 mm->ioctx_table 0
PARAM_VALUE 0 mm->mm_cid.pcpu 0
PARAM_VALUE 0 mm->mm_id 0
PARAM_VALUE 0 mm->mm_users.counter 0
PARAM_VALUE 0 mm->mmap_lock.dep_map->name 0-255
PARAM_VALUE 0 mm->mmap_lock.first_waiter->handoff_set 1
PARAM_VALUE 0 mm->mmap_lock.first_waiter->list.next 2212933610777083904,2624917664208203776
PARAM_VALUE 0 mm->mmap_lock.first_waiter->list.prev 2212933610777083904,2624917664208203776
PARAM_VALUE 0 mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 0 mm->mmap_lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 mm->notifier_subscriptions 0
PARAM_VALUE 0 mm->sc_stat.pcpu_sched 0
PARAM_VALUE 1 vmi 7384155619282165760
PARAM_VALUE 1 vmi->mas.alloc 0
PARAM_VALUE 1 vmi->mas.mas_flags 0
PARAM_VALUE 1 vmi->mas.node 0
PARAM_VALUE 1 vmi->mas.node_request 0
PARAM_VALUE 1 vmi->mas.sheaf 0
PARAM_VALUE 1 vmi->mas.status 1
PARAM_VALUE 1 vmi->mas.store_type 0
PARAM_VALUE 2 vma 4096-ptr_max
PARAM_VALUE 2 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 2 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 2 vma->vm_mm 4096-ptr_max
PARAM_VALUE 3 end u64max
CAPPED_DATA 0 mm 1
CAPPED_DATA 0 mm->uprobes_state.xol_area 1
DATA_SOURCE 0 mm $0
DATA_SOURCE 2 vma r vma_next
RX_PATH
TASK_NOT_RUNNING
UNITS 0 mm unit_byte
LOCK2 0 &mm->mmap_lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct mm_struct)->mmap_lock