syzbot


KCSAN: data-race in mas_replace_node / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:17
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+45424fc884cd42526f1f@syzkaller.appspotmail.com
First crash: 443d, last: 1d00h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff888118ba1e00 of 8 bytes by task 926 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:337 [inline]
 mas_put_in_tree lib/maple_tree.c:1739 [inline]
 mas_replace_node+0x1b8/0x430 lib/maple_tree.c:1753
 mas_wr_node_store lib/maple_tree.c:3867 [inline]
 mas_wr_store_entry+0x1e80/0x2460 lib/maple_tree.c:4087
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5479
 vma_iter_store mm/vma.h:391 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:309
 __split_vma+0x5d9/0x6a0 mm/vma.c:512
 split_vma mm/vma.c:542 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1525
 vma_modify_flags+0xf3/0x120 mm/vma.c:1551
 mprotect_fixup+0x323/0x600 mm/mprotect.c:666
 do_mprotect_pkey+0x6ce/0x9a0 mm/mprotect.c:840
 __do_sys_mprotect mm/mprotect.c:861 [inline]
 __se_sys_mprotect mm/mprotect.c:858 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:858
 x64_sys_call+0x272f/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888118ba1e00 of 8 bytes by task 928 on cpu 0:
 ma_dead_node lib/maple_tree.c:575 [inline]
 mtree_range_walk+0x347/0x460 lib/maple_tree.c:2792
 mas_state_walk lib/maple_tree.c:3609 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4909
 lock_vma_under_rcu+0x97/0x290 mm/memory.c:6362
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff8881045a170e -> 0xffff888118ba1e00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 928 Comm: syz.2.10063 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (572):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/03/27 06:26 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/25 14:32 upstream 3ba7dfb8da62 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/24 23:42 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/24 06:45 upstream 586de92313fc 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/22 03:45 upstream d07de43e3f05 c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/21 01:05 upstream 5fc319360819 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/18 23:35 upstream 76b6905c11fd 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/16 02:23 upstream 3571e8b091f4 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/15 15:16 upstream a29967be967e e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/15 02:09 upstream 695caca9345a e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/14 05:39 upstream 4003c9e78778 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/12 10:34 upstream 0b46b049d6ec ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/10 07:08 upstream 80e54e84911a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/07 22:12 upstream 00a7d39898c8 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/06 13:26 upstream 848e07631744 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/06 01:56 upstream bb2281fb05e5 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/05 13:51 upstream 48a5eed9ad58 60f5d8d9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/04 16:13 upstream 99fa936e8e4f c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/03 14:37 upstream 7eb172143d55 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/02 12:17 upstream ece144f151ac c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/01 15:23 upstream 7a5668899f54 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/03/01 02:44 upstream 76544811c850 67cf5345 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/24 15:39 upstream d082ecbc71e9 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/23 13:59 upstream 27102b38b8ca d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/23 07:44 upstream 5cf80612d3f7 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/22 04:40 upstream 8a61cb6e150e d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/21 12:56 upstream 334426094588 0808a665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/19 21:19 upstream 6537cfb395f3 b257a9b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/19 11:19 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/17 18:37 upstream 0ad2507d5d93 4121cf9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/17 05:39 upstream 224e74511041 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/16 11:20 upstream ad1b832bf1cf 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/15 16:59 upstream 78a632a2086c 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/14 07:16 upstream 68763b29e0a6 d9a046cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/14 00:04 upstream ab68d7eb7b1a a98a8417 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/13 17:12 upstream 4dc1d1bec898 a98a8417 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/13 12:19 upstream 4dc1d1bec898 b27c2402 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/12 07:30 upstream 09fbf3d50205 f2baddf5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/10 17:20 upstream a64dcfb451e2 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/09 06:40 upstream 9946eaf552b1 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/08 05:41 upstream 7ee983c850b4 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/07 16:08 upstream bb066fe812d6 53657d1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2025/02/06 15:12 upstream 92514ef226f5 577d049b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/01/10 02:17 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
* Struck through repros no longer work on HEAD.