syzbot


KCSAN: data-race in call_rcu / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:34
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+56733c45889f22c3847b@syzkaller.appspotmail.com
First crash: 316d, last: 3h38m

Sample crash report:
BUG: KCSAN: data-race in call_rcu / mtree_range_walk

write to 0xffff888118a7dc08 of 8 bytes by task 6027 on cpu 0:
 __call_rcu_common kernel/rcu/tree.c:3085 [inline]
 call_rcu+0x47/0x430 kernel/rcu/tree.c:3190
 ma_free_rcu lib/maple_tree.c:197 [inline]
 mas_topiary_node lib/maple_tree.c:2523 [inline]
 mas_topiary_replace lib/maple_tree.c:2623 [inline]
 mas_wmb_replace+0xcb3/0x14d0 lib/maple_tree.c:2645
 mas_split lib/maple_tree.c:3375 [inline]
 mas_commit_b_node lib/maple_tree.c:3395 [inline]
 mas_wr_bnode lib/maple_tree.c:4044 [inline]
 mas_wr_store_entry+0x163c/0x2d00 lib/maple_tree.c:4085
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5520
 vma_iter_store mm/vma.h:476 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:226
 __split_vma+0x620/0x6a0 mm/vma.c:429
 split_vma mm/vma.c:459 [inline]
 vma_modify+0x2cb/0xcd0 mm/vma.c:1437
 vma_modify_flags+0xf1/0x120 mm/vma.c:1455
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:664
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:838
 __do_sys_mprotect mm/mprotect.c:859 [inline]
 __se_sys_mprotect mm/mprotect.c:856 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:856
 x64_sys_call+0x2770/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888118a7dc08 of 8 bytes by task 6026 on cpu 1:
 mtree_range_walk+0x140/0x460 lib/maple_tree.c:2773
 mas_state_walk lib/maple_tree.c:3601 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4948
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6239
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x00007fa29ce55fff -> 0xffff888118a7d008

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6026 Comm: syz.0.940 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
==================================================================

Crashes (617):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/21 03:02 upstream 8f7c8b88bda4 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/20 18:32 upstream bf9aa14fc523 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/20 09:43 upstream bf9aa14fc523 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/19 23:01 upstream 158f238aa69d 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/19 08:43 upstream 23acd177540d 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/18 07:57 upstream adc218676eef cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/17 19:22 upstream 4a5df3796467 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/17 10:05 upstream b5a24181e461 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/16 18:30 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/16 05:19 upstream f868cd251776 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/15 11:58 upstream cfaaa7d010d1 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/15 03:56 upstream cfaaa7d010d1 a8c99394 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/14 16:13 upstream 0a9b9d17f3a7 a8c99394 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/13 04:28 upstream 3022e9d00ebe 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/12 06:08 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/11 17:16 upstream 2d5404caa8c7 0c4b1325 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/11 04:56 upstream a9cda7c0ffed 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/09 22:58 upstream de2f378f2b77 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/09 17:00 upstream da4373fbcf00 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/09 04:32 upstream f1dce1f09380 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/07 19:34 upstream ff7afaeca1a1 867e44df .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/07 04:29 upstream 7758b206117d df3dc63b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/06 09:58 upstream 2e1b3cc9d7f7 3a465482 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/05 23:43 upstream 2e1b3cc9d7f7 da38b4c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/04 07:25 upstream a33ab3f94f51 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/02 13:44 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/02 04:03 upstream 6c52d4da1c74 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/31 21:51 upstream 0fc810ae3ae1 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/31 11:07 upstream 4236f913808c 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/29 14:48 upstream e42b1a9a2557 66aeb999 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/29 03:19 upstream 819837584309 9efb3cc7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/26 14:39 upstream 850925a8133c 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/24 17:54 upstream c2ee9f594da8 0d144d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/23 03:57 upstream c2ee9f594da8 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/22 19:58 upstream d12937763990 a93682b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/21 17:51 upstream 42f7652d3eb5 f1e4447c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/21 09:54 upstream 42f7652d3eb5 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/20 20:42 upstream 715ca9dd687f cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/19 17:33 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/19 04:29 upstream b04ae0f45168 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/18 17:28 upstream 4d939780b705 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/18 04:46 upstream 6efbea77b390 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/17 04:53 upstream c964ced77262 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/16 03:05 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/15 19:22 upstream eca631b8fe80 7eb57b4a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/15 02:09 upstream eca631b8fe80 b01b6661 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/14 08:25 upstream 6485cf5ea253 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/10/14 00:17 upstream 36c254515dc6 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/01/10 02:33 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
* Struck through repros no longer work on HEAD.