syzbot


KCSAN: data-race in call_rcu / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:34
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+56733c45889f22c3847b@syzkaller.appspotmail.com
First crash: 488d, last: 17d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in call_rcu / mtree_range_walk

write to 0xffff8881047a7008 of 8 bytes by task 8867 on cpu 1:
 __call_rcu_common kernel/rcu/tree.c:3081 [inline]
 call_rcu+0x49/0x430 kernel/rcu/tree.c:3202
 ma_free_rcu lib/maple_tree.c:211 [inline]
 mas_free lib/maple_tree.c:1313 [inline]
 mas_replace_node+0x2fd/0x430 lib/maple_tree.c:1750
 mas_wr_node_store lib/maple_tree.c:3863 [inline]
 mas_wr_store_entry+0x1e80/0x2460 lib/maple_tree.c:4083
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5475
 vma_iter_store_overwrite mm/vma.h:448 [inline]
 vma_iter_store_new+0x1d3/0x210 mm/vma.h:455
 vma_complete+0x12b/0x570 mm/vma.c:323
 __split_vma+0x56c/0x630 mm/vma.c:523
 split_vma mm/vma.c:553 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1579
 vma_modify_flags+0x10a/0x140 mm/vma.c:1605
 mprotect_fixup+0x30f/0x5d0 mm/mprotect.c:658
 do_mprotect_pkey+0x6ce/0x9a0 mm/mprotect.c:832
 __do_sys_mprotect mm/mprotect.c:853 [inline]
 __se_sys_mprotect mm/mprotect.c:850 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:850
 x64_sys_call+0x272f/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881047a7008 of 8 bytes by task 8869 on cpu 0:
 mtree_range_walk+0x143/0x460 lib/maple_tree.c:2769
 mas_state_walk lib/maple_tree.c:3605 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4905
 lock_vma_under_rcu+0xa7/0x340 mm/memory.c:6553
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x6a0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x000055558fe21fff -> 0xffff88810340f908

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8869 Comm: syz.0.1674 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (871):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/24 21:18 upstream e72e9e693307 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/24 12:47 upstream a79be02bba5c 9882047a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/24 00:38 upstream a79be02bba5c 73a168d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/22 23:34 upstream bc3372351d0c 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/22 12:55 upstream a33b5a08cbbd 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/21 12:18 upstream 9d7a0577c9db 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/20 18:16 upstream 6fea5fabd332 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/20 06:35 upstream 119009db2674 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/19 22:38 upstream 8560697b23dc 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/19 08:16 upstream 3088d26962e8 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/18 19:36 upstream fc96b232f8e7 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/18 02:20 upstream b5c6891b2c5b 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/17 15:38 upstream cfb2e2c57aef 229db4cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/16 21:20 upstream c62f4b82d571 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/16 03:06 upstream 1a1d569a75f3 a95239b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/14 07:15 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/13 20:59 upstream 5aaaedb0cb54 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/13 03:43 upstream 7cdabafc0012 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/12 20:00 upstream 3bde70a2c827 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/12 03:58 upstream e618ee89561b 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/11 15:57 upstream 900241a5cc15 94486846 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/11 03:56 upstream 2eb959eeecc6 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/10 09:13 upstream 3b07108ada81 988b336c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/09 15:07 upstream a24588245776 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/08 22:48 upstream bec7dcbc242c a775275d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/07 22:19 upstream 0af2f6be1b42 a2ada0e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/07 10:39 upstream 0af2f6be1b42 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/06 17:16 upstream f4d2ef48250a 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/06 01:39 upstream a8662bcd2ff1 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/05 18:14 upstream a8662bcd2ff1 c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/05 04:27 upstream a52a3c18cdf3 c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/04 15:31 upstream e48e99b6edf4 1c4febdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/03 12:11 upstream a1b5bd45d4ee 996a9618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/03 01:54 upstream 92b71befc349 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/02 10:47 upstream acc4d5ff0b61 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/01 17:16 upstream 08733088b566 b8645499 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/04/01 08:38 upstream 1e7857b28020 36d76a97 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/31 15:03 upstream 4e82c87058f4 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/31 02:35 upstream aa918db707fb d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/30 18:35 upstream 7f2ff7b62617 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/29 20:39 upstream 7d06015d936c d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2025/03/29 10:58 upstream 7d06015d936c cf25e2c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/01/10 02:33 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
* Struck through repros no longer work on HEAD.