syzbot


KCSAN: data-race in mas_wr_store_entry / mtree_range_walk

Status: upstream: reported on 2024/09/23 09:04
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+e01fa33e67abb0b3b3bb@syzkaller.appspotmail.com
First crash: 59d, last: 3d22h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [mm?] KCSAN: data-race in mas_wr_store_entry / mtree_range_walk 4 (5) 2024/09/23 13:59

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk

write to 0xffff88811570e310 of 8 bytes by task 3533 on cpu 0:
 mas_wr_slot_store lib/maple_tree.c:3889 [inline]
 mas_wr_store_entry+0x146b/0x2d00 lib/maple_tree.c:4075
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5520
 vma_iter_store mm/vma.h:476 [inline]
 commit_merge+0x441/0x740 mm/vma.c:608
 vma_expand+0x211/0x360 mm/vma.c:1030
 vma_merge_new_range+0x364/0x480 mm/vma.c:967
 __mmap_region mm/mmap.c:1427 [inline]
 mmap_region+0x95d/0x14a0 mm/mmap.c:1603
 do_mmap+0x718/0xb60 mm/mmap.c:496
 vm_mmap_pgoff+0x133/0x290 mm/util.c:588
 ksys_mmap_pgoff+0xd0/0x330 mm/mmap.c:542
 x64_sys_call+0x1884/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811570e310 of 8 bytes by task 3536 on cpu 1:
 mtree_range_walk+0x1b4/0x460 lib/maple_tree.c:2781
 mas_state_walk lib/maple_tree.c:3601 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4948
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6239
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x00007f131973efff -> 0xffffffff852ab690

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3536 Comm: syz.0.21 Not tainted 6.12.0-rc7-syzkaller-00192-gb5a24181e461 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
==================================================================

Crashes (35):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/17 08:00 upstream b5a24181e461 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/16 15:52 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/15 14:56 upstream cfaaa7d010d1 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/13 20:19 upstream f1b785f4c787 bb3f8425 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/13 08:14 upstream 3022e9d00ebe 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/12 13:54 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/11 03:10 upstream a9cda7c0ffed 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/10 10:58 upstream de2f378f2b77 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/09 05:50 upstream f1dce1f09380 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/07 23:29 upstream ff7afaeca1a1 867e44df .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/03 01:06 upstream 11066801dd4b f00eed24 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/11/01 12:44 upstream 5635f189425e 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/31 10:34 upstream 4236f913808c 96eb609f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/27 00:18 upstream 850925a8133c 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/23 16:49 upstream c2ee9f594da8 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/20 20:02 upstream 715ca9dd687f cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/19 15:18 upstream 3d5ad2d4eca3 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/18 01:04 upstream 6efbea77b390 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/17 07:03 upstream c964ced77262 666f77ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/16 04:35 upstream 2f87d0916ce0 bde2d81c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/15 02:50 upstream eca631b8fe80 b01b6661 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/14 09:26 upstream 6485cf5ea253 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/13 11:39 upstream 7234e2ea0edd 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/05 00:02 upstream 2f91ff27b0ee d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/03 18:50 upstream 7ec462100ef9 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/03 07:53 upstream f23aa4c0761a a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/10/02 20:14 upstream e32cde8d2bd7 02f9582a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/30 22:53 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/30 03:31 upstream e7ed34365879 ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/29 13:43 upstream 3efc57369a0c ba29ff75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/28 07:05 upstream 3630400697a3 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/25 12:44 upstream 684a64bf32b6 349a68c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/24 04:07 upstream 18ba6034468e 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/23 16:58 upstream de5cb0dcb74c 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
2024/09/22 15:54 upstream 88264981f208 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
* Struck through repros no longer work on HEAD.