syzbot


KCSAN: data-race in call_rcu / mtree_range_walk

Status: moderation: reported on 2024/01/10 02:34
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+56733c45889f22c3847b@syzkaller.appspotmail.com
First crash: 346d, last: 14h25m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in call_rcu / mtree_range_walk

write to 0xffff8881030f3b10 of 8 bytes by task 21950 on cpu 1:
 __call_rcu_common kernel/rcu/tree.c:3084 [inline]
 call_rcu+0x3b/0x430 kernel/rcu/tree.c:3190
 ma_free_rcu lib/maple_tree.c:211 [inline]
 mas_topiary_node lib/maple_tree.c:2534 [inline]
 mas_topiary_replace lib/maple_tree.c:2640 [inline]
 mas_wmb_replace+0xfbd/0x14d0 lib/maple_tree.c:2656
 mas_split lib/maple_tree.c:3383 [inline]
 mas_commit_b_node lib/maple_tree.c:3403 [inline]
 mas_wr_bnode lib/maple_tree.c:4064 [inline]
 mas_wr_store_entry+0x1681/0x2d10 lib/maple_tree.c:4105
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5519
 vma_iter_store mm/vma.h:387 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:277
 __split_vma+0x5d6/0x6a0 mm/vma.c:480
 split_vma mm/vma.c:510 [inline]
 vma_modify+0xd3/0x1e0 mm/vma.c:1520
 vma_modify_flags+0xf1/0x120 mm/vma.c:1546
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:666
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:840
 __do_sys_mprotect mm/mprotect.c:861 [inline]
 __se_sys_mprotect mm/mprotect.c:858 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:858
 x64_sys_call+0x2770/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881030f3b10 of 8 bytes by task 21951 on cpu 0:
 mtree_range_walk+0x1b4/0x460 lib/maple_tree.c:2792
 mas_state_walk lib/maple_tree.c:3620 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4946
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6274
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 21951 Comm: syz.1.14577 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
==================================================================

Crashes (668):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/21 00:42 upstream e9b8ffafd20a d7f584ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/20 22:06 upstream e9b8ffafd20a 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/20 09:24 upstream 8faabc041a00 0f61b415 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/19 22:43 upstream baaa2567a712 5905cb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/19 05:32 upstream eabcdba3ad40 1432fc84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/18 13:07 upstream aef25be35d23 a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/18 00:24 upstream 59dbb9d81adf a0626d3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/17 10:34 upstream f44d154d6e3d f93b2b55 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/17 02:05 upstream f44d154d6e3d eec85da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/16 11:37 upstream 78d4f34e2115 eec85da6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/16 05:33 upstream 78d4f34e2115 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/15 14:53 upstream 2d8308bf5b67 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/15 04:04 upstream a0e3919a2df2 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/14 17:15 upstream a446e965a188 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/14 01:22 upstream 243f750a2df0 7cbfbb3a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/13 12:55 upstream 150b567e0d57 3547e30f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/13 05:04 upstream 150b567e0d57 530e80f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/12 10:20 upstream 231825b2e1ff 6f1b0fa8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/12 01:20 upstream 231825b2e1ff ff949d25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/11 20:29 upstream f92f4749861b ff949d25 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/10 06:56 upstream 7cb1b4663150 cfc402b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/09 14:00 upstream fac04efc5c79 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/09 02:24 upstream 62b5a46999c7 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/08 02:15 upstream 7503345ac5f5 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/07 18:43 upstream b5f217084ab3 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/07 03:39 upstream 9a6e8c7c3a02 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/06 10:10 upstream b8f52214c61a 946d28f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/05 21:28 upstream 5076001689e4 29f61fce .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/05 13:22 upstream feffde684ac2 29f61fce .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/04 13:50 upstream feffde684ac2 b50eb251 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/03 06:38 upstream cdd30ebb1b9f 578925bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/02 14:39 upstream e70140ba0d2b b499ea68 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/02 04:51 upstream f788b5ef1ca9 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/12/01 06:07 upstream bcc8eda6d349 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/30 17:32 upstream 2ba9f676d0a2 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/30 07:36 upstream 509f806f7f70 68914665 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/29 22:24 upstream 509f806f7f70 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/29 00:29 upstream 7af08b57bcb9 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/28 10:33 upstream b86545e02e8c 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/27 22:01 upstream 7d4050728c83 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/27 10:53 upstream aaf20f870da0 52b38cc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/27 04:15 upstream 445d9f05fa14 e9a9a9f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/26 18:34 upstream 2c22dc1ee3a1 e9a9a9f2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/26 04:38 upstream 2c22dc1ee3a1 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/25 21:29 upstream 9f16d5e6f220 11dbc254 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/24 15:02 upstream 9f16d5e6f220 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/24 06:23 upstream 42d9e8b7ccdd 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/23 08:32 upstream 06afb0f36106 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/11/22 09:33 upstream 28eb75e178d3 4b25d554 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
2024/01/10 02:33 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in call_rcu / mtree_range_walk
* Struck through repros no longer work on HEAD.