syzbot


KCSAN: data-race in mas_replace_node / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:17
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+45424fc884cd42526f1f@syzkaller.appspotmail.com
First crash: 467d, last: 1d14h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff888117075f00 of 8 bytes by task 15257 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:337 [inline]
 mas_put_in_tree lib/maple_tree.c:1735 [inline]
 mas_replace_node+0x1b8/0x430 lib/maple_tree.c:1749
 mas_wr_node_store lib/maple_tree.c:3863 [inline]
 mas_wr_store_entry+0x1e80/0x2460 lib/maple_tree.c:4083
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5475
 vma_iter_store_overwrite mm/vma.h:448 [inline]
 vma_iter_store_new+0x1d3/0x210 mm/vma.h:455
 vma_complete+0x12b/0x570 mm/vma.c:323
 __split_vma+0x56c/0x630 mm/vma.c:523
 split_vma mm/vma.c:553 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1579
 vma_modify_flags+0x10a/0x140 mm/vma.c:1605
 mprotect_fixup+0x30f/0x5d0 mm/mprotect.c:658
 do_mprotect_pkey+0x6ce/0x9a0 mm/mprotect.c:832
 __do_sys_mprotect mm/mprotect.c:853 [inline]
 __se_sys_mprotect mm/mprotect.c:850 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:850
 x64_sys_call+0x272f/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888117075f00 of 8 bytes by task 15259 on cpu 0:
 ma_dead_node lib/maple_tree.c:575 [inline]
 mtree_range_walk+0x347/0x460 lib/maple_tree.c:2788
 mas_state_walk lib/maple_tree.c:3605 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4905
 lock_vma_under_rcu+0xa7/0x340 mm/memory.c:6553
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x6a0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff888117075a0e -> 0xffff888117075f00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 15259 Comm: syz.6.4329 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (593):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/20 10:30 upstream 119009db2674 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/19 21:57 upstream 8560697b23dc 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/19 15:03 upstream 3088d26962e8 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/18 15:05 upstream fc96b232f8e7 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/18 08:51 upstream b5c6891b2c5b 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/16 22:05 upstream c62f4b82d571 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/15 20:42 upstream 834a4a689699 23b969b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/14 19:06 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/13 04:14 upstream 7cdabafc0012 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/12 06:25 upstream e618ee89561b 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/11 12:14 upstream 900241a5cc15 94486846 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/10 13:43 upstream 3b07108ada81 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/09 19:58 upstream a24588245776 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/08 03:16 upstream 0af2f6be1b42 a2ada0e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/06 13:40 upstream f4d2ef48250a 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/04 17:52 upstream e48e99b6edf4 1c4febdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/03 05:14 upstream 92b71befc349 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/02 18:56 upstream acc4d5ff0b61 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/04/01 17:11 upstream 08733088b566 b8645499 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/31 23:54 upstream 4e82c87058f4 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/31 03:14 upstream aa918db707fb d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/27 06:26 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/25 14:32 upstream 3ba7dfb8da62 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/24 23:42 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/24 06:45 upstream 586de92313fc 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/22 03:45 upstream d07de43e3f05 c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/21 01:05 upstream 5fc319360819 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/18 23:35 upstream 76b6905c11fd 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/16 02:23 upstream 3571e8b091f4 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/15 15:16 upstream a29967be967e e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/15 02:09 upstream 695caca9345a e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/14 05:39 upstream 4003c9e78778 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/12 10:34 upstream 0b46b049d6ec ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/10 07:08 upstream 80e54e84911a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/07 22:12 upstream 00a7d39898c8 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/06 13:26 upstream 848e07631744 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/06 01:56 upstream bb2281fb05e5 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/05 13:51 upstream 48a5eed9ad58 60f5d8d9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/04 16:13 upstream 99fa936e8e4f c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/03 14:37 upstream 7eb172143d55 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/02 12:17 upstream ece144f151ac c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/01 15:23 upstream 7a5668899f54 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/01 02:44 upstream 76544811c850 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/24 15:39 upstream d082ecbc71e9 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/01/10 02:17 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
* Struck through repros no longer work on HEAD.