syzbot


KCSAN: data-race in mas_wmb_replace / mtree_range_walk

Status: moderation: reported on 2024/01/10 06:04
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+ba5c9cf3a800755ee7cf@syzkaller.appspotmail.com
First crash: 117d, last: 15h11m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk

write to 0xffff8881043e7300 of 8 bytes by task 27676 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1726 [inline]
 mas_topiary_replace lib/maple_tree.c:2555 [inline]
 mas_wmb_replace+0x20f/0x14f0 lib/maple_tree.c:2646
 mas_split lib/maple_tree.c:3393 [inline]
 mas_commit_b_node lib/maple_tree.c:3446 [inline]
 mas_wr_bnode lib/maple_tree.c:4158 [inline]
 mas_wr_modify+0x183d/0x3c90 lib/maple_tree.c:4196
 mas_wr_store_entry+0x250/0x390 lib/maple_tree.c:4229
 mas_store_prealloc+0x151/0x2b0 lib/maple_tree.c:5485
 vma_iter_store mm/internal.h:1292 [inline]
 vma_complete+0x3a7/0x760 mm/mmap.c:535
 __split_vma+0x5db/0x610 mm/mmap.c:2385
 split_vma mm/mmap.c:2411 [inline]
 vma_modify+0x19e/0x200 mm/mmap.c:2452
 vma_modify_flags include/linux/mm.h:3305 [inline]
 mprotect_fixup+0x322/0x5c0 mm/mprotect.c:635
 do_mprotect_pkey+0x655/0x940 mm/mprotect.c:809
 __do_sys_mprotect mm/mprotect.c:830 [inline]
 __se_sys_mprotect mm/mprotect.c:827 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:827
 x64_sys_call+0x26bd/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881043e7300 of 8 bytes by task 27681 on cpu 0:
 ma_dead_node lib/maple_tree.c:560 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2793
 mas_state_walk lib/maple_tree.c:3678 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4909
 lock_vma_under_rcu+0x84/0x2a0 mm/memory.c:5758
 do_user_addr_fault arch/x86/mm/fault.c:1354 [inline]
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x161/0x6d0 arch/x86/mm/fault.c:1563
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff88813a3b1001 -> 0xffff8881043e7300

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27681 Comm: syz-executor.2 Not tainted 6.9.0-rc6-syzkaller-00290-gb9158815de52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (177):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/05 20:49 upstream b9158815de52 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/04 16:55 upstream 7367539ad4b0 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/04 09:57 upstream ddb4c3f25b7b 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/03 12:11 upstream f03359bca01b dd26401e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/03 01:38 upstream 49a73b1652c5 ddfc15a1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/01 20:37 upstream 0106679839f7 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/05/01 10:16 upstream 18daea77cca6 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/30 05:30 upstream b947cc5bf6d7 f10afd69 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/29 15:09 upstream e67572cd2204 27e33c58 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/28 05:32 upstream 5d12ed4bea43 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/27 09:41 upstream 5eb4573ea63d 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/26 16:56 upstream c942a0cd3603 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/26 09:27 upstream c942a0cd3603 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/25 21:37 upstream e33c4963bf53 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/25 05:46 upstream e88c4cfcb7b8 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/24 14:11 upstream 9d1ddab261f3 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/23 13:01 upstream 71b1543c83d6 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/22 13:42 upstream ed30a4a51bb1 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/22 00:26 upstream 48cf398f15fc af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/21 11:23 upstream 977b1ef51866 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/20 13:22 upstream 13a2e429f644 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/19 22:49 upstream 3cdb45594619 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/19 01:16 upstream 2668e3ae2ef3 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/18 11:42 upstream 8cd26fd90c1a af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/18 01:54 upstream 4b6b51322118 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/16 18:54 upstream 96fca68c4fbf 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/16 06:06 upstream 96fca68c4fbf 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/16 01:58 upstream 0bbac3facb5d b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/15 01:51 upstream 399f4dae683a c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/14 04:42 upstream 7efd0a74039f c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/12 22:49 upstream 5939d45155bb c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/12 05:44 upstream 586b5dfb51b9 27de0a5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/12 00:54 upstream e8c39d0f57f3 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/11 03:44 upstream 9875c0beb8ad 33b9e058 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/10 02:39 upstream 20cb38a7af88 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/09 03:33 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/08 23:21 upstream fec50db7033e 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/07 18:37 upstream 9fe30842a90b ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/07 02:49 upstream f2f80ac80987 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/06 11:26 upstream 104db052b62d ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/05 17:00 upstream 8cb4a9a82b21 77230c29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/05 07:40 upstream c88b9b4cde17 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/04 16:46 upstream c85af715cac0 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/04 06:10 upstream c85af715cac0 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/03 09:01 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/02 00:41 upstream 026e680b0a08 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/04/01 07:29 upstream 18737353cca0 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/03/30 23:54 upstream 486291a0e624 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/01/10 06:04 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
* Struck through repros no longer work on HEAD.