syzbot


KCSAN: data-race in mas_replace_node / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:17
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+45424fc884cd42526f1f@syzkaller.appspotmail.com
First crash: 108d, last: 4h33m

Sample crash report:
loop2: detected capacity change from 0 to 256
==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff88811636a500 of 8 bytes by task 8577 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1726 [inline]
 mas_replace_node+0x1b5/0x440 lib/maple_tree.c:1740
 mas_wr_node_store lib/maple_tree.c:3956 [inline]
 mas_wr_modify+0x2bc3/0x3c90 lib/maple_tree.c:4189
 mas_wr_store_entry+0x250/0x390 lib/maple_tree.c:4229
 mas_store_prealloc+0x151/0x2b0 lib/maple_tree.c:5485
 vma_iter_store mm/internal.h:1292 [inline]
 vma_complete+0x3a7/0x760 mm/mmap.c:535
 __split_vma+0x58d/0x610 mm/mmap.c:2385
 split_vma mm/mmap.c:2411 [inline]
 vma_modify+0x10e/0x200 mm/mmap.c:2445
 vma_modify_flags include/linux/mm.h:3305 [inline]
 mprotect_fixup+0x322/0x5c0 mm/mprotect.c:635
 do_mprotect_pkey+0x655/0x940 mm/mprotect.c:809
 __do_sys_mprotect mm/mprotect.c:830 [inline]
 __se_sys_mprotect mm/mprotect.c:827 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:827
 x64_sys_call+0x26bd/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811636a500 of 8 bytes by task 8578 on cpu 0:
 ma_dead_node lib/maple_tree.c:560 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2793
 mas_state_walk lib/maple_tree.c:3678 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4909
 lock_vma_under_rcu+0x84/0x2a0 mm/memory.c:5758
 do_user_addr_fault arch/x86/mm/fault.c:1354 [inline]
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x161/0x6d0 arch/x86/mm/fault.c:1563
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff8881031f2b06 -> 0xffff88811636a500

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8578 Comm: syz-executor.2 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================

Crashes (207):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/27 05:14 upstream 5eb4573ea63d 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/26 16:29 upstream c942a0cd3603 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/26 11:19 upstream c942a0cd3603 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/25 20:50 upstream e33c4963bf53 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/24 20:04 upstream e88c4cfcb7b8 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/24 04:53 upstream 9d1ddab261f3 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/23 14:07 upstream 71b1543c83d6 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/23 14:03 upstream 71b1543c83d6 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/22 09:17 upstream ed30a4a51bb1 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/22 00:32 upstream 48cf398f15fc af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/21 01:42 upstream 977b1ef51866 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/20 11:17 upstream 13a2e429f644 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/19 20:54 upstream 3cdb45594619 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/19 01:13 upstream 2668e3ae2ef3 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/18 19:15 upstream 8cd26fd90c1a af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/17 21:15 upstream 4b6b51322118 acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/17 16:44 upstream 96fca68c4fbf acc528cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/16 21:15 upstream 96fca68c4fbf 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/16 13:21 upstream 96fca68c4fbf 0d592ce4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/15 16:37 upstream 0bbac3facb5d b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/14 19:49 upstream 399f4dae683a c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/13 23:07 upstream 7efd0a74039f c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/13 15:52 upstream 8f2c057754b2 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 22:47 upstream 5939d45155bb c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 08:54 upstream 586b5dfb51b9 27de0a5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/12 01:14 upstream e8c39d0f57f3 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/11 05:29 upstream 9875c0beb8ad 33b9e058 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/10 23:16 upstream 2c71fdf02a95 4320ec32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/10 11:11 upstream 2c71fdf02a95 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 21:22 upstream 20cb38a7af88 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 17:28 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/09 04:44 upstream 20cb38a7af88 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/08 16:20 upstream fec50db7033e 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/08 09:50 upstream fec50db7033e ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/06 20:50 upstream f2f80ac80987 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/06 07:15 upstream 104db052b62d ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/05 21:48 upstream 8cb4a9a82b21 77230c29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/05 05:09 upstream c88b9b4cde17 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/04 16:45 upstream c85af715cac0 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/04 10:55 upstream c85af715cac0 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/03 17:56 upstream 3e92c1e6cd87 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/03 05:24 upstream b1e6ec0a0fd0 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/02 16:56 upstream 026e680b0a08 eb2966c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/02 04:32 upstream 026e680b0a08 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/04/01 10:09 upstream 39cd87c4eb2b 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/31 20:04 upstream 18737353cca0 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/31 18:15 upstream 712e14250dd2 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/03/30 15:26 upstream 486291a0e624 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/01/10 02:17 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
* Struck through repros no longer work on HEAD.