syzbot


KCSAN: data-race in mas_wmb_replace / mtree_range_walk

Status: moderation: reported on 2024/01/10 06:04
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+ba5c9cf3a800755ee7cf@syzkaller.appspotmail.com
First crash: 493d, last: 23d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk

write to 0xffff8881040f2f00 of 8 bytes by task 4298 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:337 [inline]
 mas_topiary_node lib/maple_tree.c:2517 [inline]
 mas_topiary_replace lib/maple_tree.c:2625 [inline]
 mas_wmb_replace+0xebb/0x1510 lib/maple_tree.c:2641
 mas_split lib/maple_tree.c:3368 [inline]
 mas_commit_b_node lib/maple_tree.c:3388 [inline]
 mas_wr_bnode lib/maple_tree.c:4049 [inline]
 mas_wr_store_entry+0x158c/0x2460 lib/maple_tree.c:4090
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5475
 vma_iter_store_overwrite mm/vma.h:448 [inline]
 vma_iter_store_new+0x1d3/0x210 mm/vma.h:455
 vma_complete+0x12b/0x570 mm/vma.c:323
 __split_vma+0x56c/0x630 mm/vma.c:523
 split_vma mm/vma.c:553 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1579
 vma_modify_flags+0x10a/0x140 mm/vma.c:1605
 mprotect_fixup+0x30f/0x5d0 mm/mprotect.c:658
 do_mprotect_pkey+0x6ce/0x9a0 mm/mprotect.c:832
 __do_sys_mprotect mm/mprotect.c:853 [inline]
 __se_sys_mprotect mm/mprotect.c:850 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:850
 x64_sys_call+0x272f/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881040f2f00 of 8 bytes by task 4300 on cpu 0:
 ma_dead_node lib/maple_tree.c:575 [inline]
 mtree_range_walk+0x347/0x460 lib/maple_tree.c:2788
 mas_state_walk lib/maple_tree.c:3605 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4905
 lock_vma_under_rcu+0xa7/0x340 mm/memory.c:6553
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x6a0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff88811849e20e -> 0xffff8881040f2f00

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 4300 Comm: syz.4.281 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================

Crashes (566):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/24 01:09 upstream a79be02bba5c 73a168d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/23 04:33 upstream bc3372351d0c 53a8b9bd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/22 13:00 upstream a33b5a08cbbd 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/21 18:28 upstream 9d7a0577c9db 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/20 01:54 upstream 8560697b23dc 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/19 11:32 upstream 3088d26962e8 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/18 21:47 upstream fc96b232f8e7 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/18 08:30 upstream b5c6891b2c5b 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/14 20:19 upstream 8ffd015db85f 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/12 14:21 upstream 3bde70a2c827 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/11 14:28 upstream 900241a5cc15 94486846 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/10 22:15 upstream 2eb959eeecc6 1ef3ab4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/07 11:18 upstream 0af2f6be1b42 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/06 13:23 upstream f4d2ef48250a 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/06 03:44 upstream a8662bcd2ff1 1c65791e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/03 13:09 upstream a1b5bd45d4ee 996a9618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/03 04:56 upstream 92b71befc349 c799dfdd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/01 17:54 upstream 08733088b566 b8645499 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/04/01 05:11 upstream 1e7857b28020 36d76a97 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/30 16:42 upstream 7f2ff7b62617 d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/28 21:45 upstream acb4f33713b9 9a1a9e31 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/28 02:45 upstream 1a9239bb4253 6c09fb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/27 05:43 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/25 21:02 upstream 2df0c02dab82 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/25 11:11 upstream 3ba7dfb8da62 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/24 22:24 upstream 38fec10eb60d 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/22 20:35 upstream 88d324e69ea9 c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/22 04:27 upstream d07de43e3f05 c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/21 13:47 upstream b3ee1e460951 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/20 23:56 upstream 5fc319360819 62330552 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/20 09:10 upstream a7f2e10ecd8f 9209bc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/18 18:14 upstream 76b6905c11fd 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/18 09:31 upstream fc444ada1310 ce3352cd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/16 17:36 upstream 31d7109a19f6 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/15 22:59 upstream 3571e8b091f4 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/15 12:49 upstream a29967be967e e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/14 10:50 upstream 4003c9e78778 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/13 15:33 upstream b7f94fcf5546 44be8b44 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/12 18:49 upstream 0fed89a961ea ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/12 13:05 upstream 0b46b049d6ec ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/11 09:20 upstream 4d872d51bc9d 16256247 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/09 17:59 upstream 1110ce6a1e34 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/09 04:56 upstream b7c90e3e717a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/08 21:05 upstream 2a520073e74f 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/08 01:18 upstream 00a7d39898c8 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/07 10:48 upstream 0f52fd4f67c6 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2025/03/06 16:03 upstream 848e07631744 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
2024/01/10 06:04 upstream 35f11a3710cd b438bd66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in mas_wmb_replace / mtree_range_walk
* Struck through repros no longer work on HEAD.