syzbot


KCSAN: data-race in mas_replace_node / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:17
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+45424fc884cd42526f1f@syzkaller.appspotmail.com
First crash: 346d, last: 13h09m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff888117084100 of 8 bytes by task 10914 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:337 [inline]
 mas_put_in_tree lib/maple_tree.c:1739 [inline]
 mas_replace_node+0x1b8/0x430 lib/maple_tree.c:1753
 mas_wr_node_store lib/maple_tree.c:3878 [inline]
 mas_wr_store_entry+0x1fbf/0x2d10 lib/maple_tree.c:4098
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5519
 vma_iter_store mm/vma.h:387 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:277
 __split_vma+0x620/0x6a0 mm/vma.c:480
 split_vma mm/vma.c:510 [inline]
 vma_modify+0x17d/0x1e0 mm/vma.c:1528
 vma_modify_flags+0xf1/0x120 mm/vma.c:1546
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:666
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:840
 __do_sys_mprotect mm/mprotect.c:861 [inline]
 __se_sys_mprotect mm/mprotect.c:858 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:858
 x64_sys_call+0x2770/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888117084100 of 8 bytes by task 10915 on cpu 0:
 ma_dead_node lib/maple_tree.c:575 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2803
 mas_state_walk lib/maple_tree.c:3620 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4946
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6274
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff88811708470e -> 0xffff888117084100

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 10915 Comm: syz.5.14377 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
==================================================================

Crashes (483):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/21 01:17 upstream e9b8ffafd20a d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/20 19:00 upstream 8faabc041a00 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/18 17:49 upstream aef25be35d23 a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/18 04:26 upstream 59dbb9d81adf a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/16 03:10 upstream 78d4f34e2115 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/15 19:50 upstream 2d8308bf5b67 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/15 03:21 upstream a0e3919a2df2 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/14 20:09 upstream a446e965a188 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/13 23:42 upstream 243f750a2df0 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/12 10:34 upstream 231825b2e1ff 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/10 16:31 upstream 7cb1b4663150 cfc402b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/09 18:31 upstream fac04efc5c79 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/08 19:27 upstream 7503345ac5f5 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/07 21:50 upstream b5f217084ab3 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/07 05:00 upstream 9a6e8c7c3a02 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/05 23:09 upstream 5076001689e4 29f61fce .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/04 15:39 upstream feffde684ac2 b50eb251 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/04 06:01 upstream ceb8bf2ceaa7 b50eb251 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/03 05:53 upstream cdd30ebb1b9f 578925bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/02 09:36 upstream f788b5ef1ca9 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/12/01 14:10 upstream bcc8eda6d349 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/30 17:24 upstream 2ba9f676d0a2 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/30 07:03 upstream 509f806f7f70 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/29 10:34 upstream 7af08b57bcb9 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/28 13:41 upstream b86545e02e8c 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/27 11:27 upstream aaf20f870da0 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/26 15:43 upstream 2c22dc1ee3a1 e9a9a9f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/25 22:18 upstream 9f16d5e6f220 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/24 13:31 upstream 9f16d5e6f220 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/23 22:06 upstream 42d9e8b7ccdd 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/23 18:33 upstream 06afb0f36106 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/22 10:28 upstream 28eb75e178d3 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/19 10:17 upstream 23acd177540d 571351cb .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/18 15:56 upstream adc218676eef e7bb5d6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/17 20:33 upstream 4a5df3796467 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/16 17:13 upstream e8bdb3c8be08 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/16 08:04 upstream f868cd251776 cfe3a04a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/15 15:16 upstream cfaaa7d010d1 f6ede3a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/13 07:12 upstream 3022e9d00ebe 62026c85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/12 07:10 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/11 22:41 upstream 2d5404caa8c7 0c4b1325 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/10 11:34 upstream de2f378f2b77 6b856513 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/08 15:14 upstream 906bd684e4b1 179b040e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/11/07 22:10 upstream ff7afaeca1a1 867e44df .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
2024/01/10 02:17 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_replace_node / mtree_range_walk
* Struck through repros no longer work on HEAD.