syzbot


KCSAN: data-race in mas_walk / mas_wmb_replace

Status: moderation: reported on 2024/01/12 12:08
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+6659e22700b68d21381e@syzkaller.appspotmail.com
First crash: 313d, last: 5d05h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_walk / mas_wmb_replace

write to 0xffff888104083300 of 8 bytes by task 5940 on cpu 0:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1725 [inline]
 mas_topiary_replace lib/maple_tree.c:2554 [inline]
 mas_wmb_replace+0x222/0x14d0 lib/maple_tree.c:2645
 mas_split lib/maple_tree.c:3375 [inline]
 mas_commit_b_node lib/maple_tree.c:3395 [inline]
 mas_wr_bnode lib/maple_tree.c:4044 [inline]
 mas_wr_store_entry+0x163c/0x2d00 lib/maple_tree.c:4085
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5520
 vma_iter_store mm/vma.h:476 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:226
 __split_vma+0x620/0x6a0 mm/vma.c:429
 split_vma mm/vma.c:459 [inline]
 vma_modify+0x2cb/0xcd0 mm/vma.c:1437
 vma_modify_flags+0xf1/0x120 mm/vma.c:1455
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:664
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:838
 __do_sys_mprotect mm/mprotect.c:859 [inline]
 __se_sys_mprotect mm/mprotect.c:856 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:856
 x64_sys_call+0x26cf/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888104083300 of 8 bytes by task 5942 on cpu 1:
 mte_parent lib/maple_tree.c:546 [inline]
 mte_dead_node lib/maple_tree.c:578 [inline]
 mas_start lib/maple_tree.c:1368 [inline]
 mas_state_walk lib/maple_tree.c:3594 [inline]
 mas_walk+0x123/0x320 lib/maple_tree.c:4948
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6239
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff888116317a01 -> 0xffff888104083300

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 5942 Comm: syz.6.45474 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================

Crashes (168):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/16 01:11 upstream f868cd251776 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/11/11 21:13 upstream 2d5404caa8c7 0c4b1325 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/11/10 07:06 upstream de2f378f2b77 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/11/04 07:49 upstream a33ab3f94f51 f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/28 08:41 upstream 284a2f899676 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/24 17:04 upstream c2ee9f594da8 0d144d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/19 14:58 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/17 06:55 upstream c964ced77262 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/11 01:53 upstream eb952c47d154 8fbfc0c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/10 11:57 upstream d3d1556696c1 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/09 23:56 upstream 75b607fab38d 56fb2cb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/06 14:52 upstream 8f602276d390 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/10/04 09:37 upstream 0c559323bbaa d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/27 00:21 upstream 11a299a7933e 9314348a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/20 18:12 upstream baeb9a7d8b60 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/18 04:44 upstream 2f27fce67173 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/16 11:01 upstream 98f7e32f20d2 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/09 11:53 upstream da3ea35007d0 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/06 20:03 upstream b831f83e40a2 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/01 18:50 upstream 431c1646e1f8 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/09/01 04:03 upstream e8784b0aef62 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/31 19:45 upstream 1934261d8974 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/31 04:06 upstream 20371ba12063 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/25 22:28 upstream 5be63fc19fca d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/25 12:58 upstream 780bdc1ba776 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/24 06:05 upstream 60f0560f53e3 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/23 19:26 upstream 3d5f968a177d d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/23 08:53 upstream aa0743a22936 ce8a9099 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/21 17:07 upstream b311c1b497e5 db5852f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/20 08:42 upstream 6e4436539ae1 9f0ab3fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/19 11:46 upstream 47ac09b91bef 9f0ab3fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/18 05:37 upstream 810996a36309 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/17 19:49 upstream e5fa841af679 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/15 22:03 upstream 1fb918967b56 e4bacdaf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/13 16:25 upstream d74da846046a f21a18ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/13 04:37 upstream d74da846046a 7b0f4b46 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/11 22:22 upstream 7006fe2f7f78 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/10 09:18 upstream afdab700f65e 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/10 02:07 upstream afdab700f65e a83d9288 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/09 15:39 upstream ee9a43b7cfe2 a83d9288 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/07 23:35 upstream 6a0e38264012 109d2082 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/06 20:28 upstream eb5e56d14912 1ef9fe42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/03 15:20 upstream 17712b7ea075 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/03 00:33 upstream 1c4246294c98 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/02 00:05 upstream 183d46ff422e 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/08/01 02:45 upstream 21b136cc63d2 1e9c4cf3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/07/31 12:03 upstream e4fc196f5ba3 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/07/30 23:15 upstream 22f546873149 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/07/30 18:55 upstream 94ede2a3e913 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
2024/01/12 12:07 upstream 70d201a40823 dda5a988 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_walk / mas_wmb_replace
* Struck through repros no longer work on HEAD.