syzbot


KCSAN: data-race in call_rcu / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:34
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+56733c45889f22c3847b@syzkaller.appspotmail.com
First crash: 468d, last: 19h14m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in call_rcu / mtree_range_walk

write to 0xffff888103779b08 of 8 bytes by task 4312 on cpu 0:
 __call_rcu_common kernel/rcu/tree.c:3081 [inline]
 call_rcu+0x49/0x430 kernel/rcu/tree.c:3202
 ma_free_rcu lib/maple_tree.c:211 [inline]
 mas_topiary_node lib/maple_tree.c:2519 [inline]
 mas_topiary_replace lib/maple_tree.c:2625 [inline]
 mas_wmb_replace+0xff5/0x1510 lib/maple_tree.c:2641
 mas_split lib/maple_tree.c:3368 [inline]
 mas_commit_b_node lib/maple_tree.c:3388 [inline]
 mas_wr_bnode lib/maple_tree.c:4049 [inline]
 mas_wr_store_entry+0x158c/0x2460 lib/maple_tree.c:4090
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5475
 vma_iter_store_overwrite mm/vma.h:448 [inline]
 vma_iter_store_new+0x1d3/0x210 mm/vma.h:455
 vma_complete+0x12b/0x570 mm/vma.c:323
 __split_vma+0x56c/0x630 mm/vma.c:523
 split_vma mm/vma.c:553 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1579
 vma_modify_flags+0x10a/0x140 mm/vma.c:1605
 mprotect_fixup+0x30f/0x5d0 mm/mprotect.c:658
 do_mprotect_pkey+0x6ce/0x9a0 mm/mprotect.c:832
 __do_sys_mprotect mm/mprotect.c:853 [inline]
 __se_sys_mprotect mm/mprotect.c:850 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:850
 x64_sys_call+0x272f/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103779b08 of 8 bytes by task 4321 on cpu 1:
 mtree_range_walk+0x143/0x460 lib/maple_tree.c:2769
 mas_state_walk lib/maple_tree.c:3605 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4905
 lock_vma_under_rcu+0xa7/0x340 mm/memory.c:6553
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x6a0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x000000110c22ffff -> 0xffff888103779008

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 4321 Comm: syz.0.294 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (866):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/21 12:18 upstream 9d7a0577c9db 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/20 18:16 upstream 6fea5fabd332 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/20 06:35 upstream 119009db2674 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/19 22:38 upstream 8560697b23dc 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/19 08:16 upstream 3088d26962e8 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/18 19:36 upstream fc96b232f8e7 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/18 02:20 upstream b5c6891b2c5b 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/17 15:38 upstream cfb2e2c57aef 229db4cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/16 21:20 upstream c62f4b82d571 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/16 03:06 upstream 1a1d569a75f3 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/14 07:15 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/13 20:59 upstream 5aaaedb0cb54 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/13 03:43 upstream 7cdabafc0012 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/12 20:00 upstream 3bde70a2c827 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/12 03:58 upstream e618ee89561b 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/11 15:57 upstream 900241a5cc15 94486846 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/11 03:56 upstream 2eb959eeecc6 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/10 09:13 upstream 3b07108ada81 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/09 15:07 upstream a24588245776 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/08 22:48 upstream bec7dcbc242c a775275d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/07 22:19 upstream 0af2f6be1b42 a2ada0e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/07 10:39 upstream 0af2f6be1b42 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/06 17:16 upstream f4d2ef48250a 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/06 01:39 upstream a8662bcd2ff1 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/05 18:14 upstream a8662bcd2ff1 c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/05 04:27 upstream a52a3c18cdf3 c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/04 15:31 upstream e48e99b6edf4 1c4febdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/03 12:11 upstream a1b5bd45d4ee 996a9618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/03 01:54 upstream 92b71befc349 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/02 10:47 upstream acc4d5ff0b61 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/01 17:16 upstream 08733088b566 b8645499 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/01 08:38 upstream 1e7857b28020 36d76a97 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/31 15:03 upstream 4e82c87058f4 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/31 02:35 upstream aa918db707fb d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/30 18:35 upstream 7f2ff7b62617 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/29 20:39 upstream 7d06015d936c d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/29 10:58 upstream 7d06015d936c cf25e2c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/29 01:45 upstream 15cb9a2b66fc 9a1a9e31 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/28 20:00 upstream acb4f33713b9 9a1a9e31 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/27 20:45 upstream 1a9239bb4253 6c09fb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/27 12:16 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/26 19:05 upstream 2df0c02dab82 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/26 12:07 upstream 2df0c02dab82 89d30d73 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/25 21:24 upstream 2df0c02dab82 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/25 11:09 upstream 3ba7dfb8da62 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/24 20:17 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/01/10 02:33 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
* Struck through repros no longer work on HEAD.