syzbot


KCSAN: data-race in mas_wmb_replace / mtree_range_walk

Status: moderation: reported on 2024/01/10 06:04
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+ba5c9cf3a800755ee7cf@syzkaller.appspotmail.com
First crash: 316d, last: 13h48m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk

write to 0xffff88810ea3bb00 of 8 bytes by task 6702 on cpu 0:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1725 [inline]
 mas_topiary_replace lib/maple_tree.c:2554 [inline]
 mas_wmb_replace+0x222/0x14d0 lib/maple_tree.c:2645
 mas_split lib/maple_tree.c:3375 [inline]
 mas_commit_b_node lib/maple_tree.c:3395 [inline]
 mas_wr_bnode lib/maple_tree.c:4044 [inline]
 mas_wr_store_entry+0x163c/0x2d00 lib/maple_tree.c:4085
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5520
 vma_iter_store mm/vma.h:476 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:226
 __split_vma+0x5d6/0x6a0 mm/vma.c:429
 split_vma mm/vma.c:459 [inline]
 vma_modify+0x217/0xcd0 mm/vma.c:1429
 vma_modify_flags+0xf1/0x120 mm/vma.c:1455
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:664
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:838
 __do_sys_mprotect mm/mprotect.c:859 [inline]
 __se_sys_mprotect mm/mprotect.c:856 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:856
 x64_sys_call+0x2770/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810ea3bb00 of 8 bytes by task 6707 on cpu 1:
 ma_dead_node lib/maple_tree.c:561 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2792
 mas_state_walk lib/maple_tree.c:3601 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4948
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6239
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff88811f807a01 -> 0xffff88810ea3bb00

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 6707 Comm: syz.5.927 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
==================================================================

Crashes (392):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/20 16:48 upstream bf9aa14fc523 4fca1650 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/20 00:16 upstream 158f238aa69d 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/19 00:41 upstream 23acd177540d 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/17 10:33 upstream b5a24181e461 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/16 05:34 upstream f868cd251776 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/15 14:31 upstream cfaaa7d010d1 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/12 09:46 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/09 19:58 upstream da4373fbcf00 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/08 15:03 upstream 906bd684e4b1 179b040e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/07 06:39 upstream 7758b206117d df3dc63b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/06 14:39 upstream 2e1b3cc9d7f7 3a465482 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/06 00:07 upstream 2e1b3cc9d7f7 da38b4c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/11/03 03:47 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/26 10:59 upstream 850925a8133c 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/25 10:55 upstream 4e46774408d9 c79b8ca5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/24 18:51 upstream c2ee9f594da8 0d144d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/21 18:05 upstream 42f7652d3eb5 f1e4447c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/20 18:14 upstream 715ca9dd687f cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/16 02:46 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/14 08:56 upstream 6485cf5ea253 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/14 01:41 upstream 36c254515dc6 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/13 07:56 upstream 7234e2ea0edd 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/12 02:17 upstream 9e4c6c1ad9a1 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/08 01:55 upstream 87d6aab2389e d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/07 04:34 upstream 8cf0b93919e1 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/06 07:44 upstream fc20a3e57247 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/10/01 18:48 upstream e32cde8d2bd7 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/30 18:13 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/30 00:36 upstream e7ed34365879 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/29 04:44 upstream 3efc57369a0c ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/27 04:43 upstream 11a299a7933e 9314348a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/21 13:58 upstream 1868f9d0260e 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/20 03:40 upstream 2004cef11ea0 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/19 04:13 upstream 4a39ac5b7d62 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/18 07:24 upstream 2f27fce67173 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/15 21:15 upstream d42f7708e27c 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/14 04:11 upstream 196145c606d0 b58f933c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/13 11:56 upstream fdf042df0463 73e8a465 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/12 07:58 upstream 7c6a3a65ace7 d94c83d8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/11 14:28 upstream 8d8d276ba2fb 8ab55d0e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/10 23:28 upstream 8d8d276ba2fb 86aa7bd7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/09 02:19 upstream 5dadc1be8fc5 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/09/08 15:53 upstream d1f2d51b711a 9750182a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/01/10 06:04 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
* Struck through repros no longer work on HEAD.