syzbot


KCSAN: data-race in mas_replace_node / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:17
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+45424fc884cd42526f1f@syzkaller.appspotmail.com
First crash: 95d, last: 6h00m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff888104257c00 of 8 bytes by task 10152 on cpu 0:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1726 [inline]
 mas_replace_node+0x1b5/0x440 lib/maple_tree.c:1740
 mas_wr_node_store lib/maple_tree.c:3956 [inline]
 mas_wr_modify+0x2bc3/0x3c90 lib/maple_tree.c:4189
 mas_wr_store_entry+0x250/0x390 lib/maple_tree.c:4229
 mas_store_prealloc+0x151/0x2b0 lib/maple_tree.c:5485
 vma_iter_store+0x168/0x190 mm/internal.h:1290
 mmap_region+0xf74/0x1550 mm/mmap.c:2891
 do_mmap+0x6a6/0xac0 mm/mmap.c:1385
 vm_mmap_pgoff+0x12f/0x250 mm/util.c:573
 ksys_mmap_pgoff+0xc6/0x340 mm/mmap.c:1431
 x64_sys_call+0x1815/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888104257c00 of 8 bytes by task 10153 on cpu 1:
 ma_dead_node lib/maple_tree.c:560 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2793
 mas_state_walk lib/maple_tree.c:3678 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4909
 lock_vma_under_rcu+0x84/0x2a0 mm/memory.c:5758
 do_user_addr_fault arch/x86/mm/fault.c:1354 [inline]
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x161/0x6d0 arch/x86/mm/fault.c:1563
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff88810424b706 -> 0xffff888104257c00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 10153 Comm: syz-executor.0 Not tainted 6.9.0-rc3-syzkaller-00355-g7efd0a74039f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================
loop0: detected capacity change from 0 to 1024
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.

Crashes (185):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/13 23:07 upstream 7efd0a74039f c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/13 15:52 upstream 8f2c057754b2 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 22:47 upstream 5939d45155bb c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 08:54 upstream 586b5dfb51b9 27de0a5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 01:14 upstream e8c39d0f57f3 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/11 05:29 upstream 9875c0beb8ad 33b9e058 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/10 23:16 upstream 2c71fdf02a95 4320ec32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/10 11:11 upstream 2c71fdf02a95 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 21:22 upstream 20cb38a7af88 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 17:28 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 04:44 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/08 16:20 upstream fec50db7033e 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/08 09:50 upstream fec50db7033e ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/06 20:50 upstream f2f80ac80987 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/06 07:15 upstream 104db052b62d ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/05 21:48 upstream 8cb4a9a82b21 77230c29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/05 05:09 upstream c88b9b4cde17 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/04 16:45 upstream c85af715cac0 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/04 10:55 upstream c85af715cac0 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/03 17:56 upstream 3e92c1e6cd87 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/03 05:24 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/02 16:56 upstream 026e680b0a08 eb2966c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/02 04:32 upstream 026e680b0a08 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/01 10:09 upstream 39cd87c4eb2b 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/31 20:04 upstream 18737353cca0 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/31 18:15 upstream 712e14250dd2 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/30 15:26 upstream 486291a0e624 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/30 03:56 upstream 4535e1a4174c 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/28 16:13 upstream 8d025e2092e2 e91187ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/27 04:19 upstream 7033999ecd7b 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/26 06:52 upstream 928a87efa423 bcd9b39f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/25 12:48 upstream 4cece7649650 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/24 23:21 upstream 5e74df2f8f15 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/24 07:34 upstream 70293240c5ce 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/23 18:12 upstream 484193fecd2b 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/23 04:46 upstream bfa8f18691ed 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/23 01:59 upstream bfa8f18691ed 4b6cdce6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/22 12:29 upstream 8e938e398669 4b6cdce6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/22 08:15 upstream 8e938e398669 7a239ce7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/21 20:19 upstream ebc9bee8814d 7a239ce7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/21 05:05 upstream dba89d1b81df 6753db5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/21 01:00 upstream dba89d1b81df 5b7d42ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/20 15:00 upstream a4145ce1e7bc 5b7d42ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/20 04:30 upstream a4145ce1e7bc a485f239 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/19 19:41 upstream d95fcdf4961d e104824c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/19 13:35 upstream b3603fcb79b1 e104824c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/01/10 02:17 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
* Struck through repros no longer work on HEAD.