From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id E10B1EB64DD for ; Tue, 25 Jul 2023 20:27:48 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 344C36B0071; Tue, 25 Jul 2023 16:27:48 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 2F54D8D0001; Tue, 25 Jul 2023 16:27:48 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 1BD0C6B0075; Tue, 25 Jul 2023 16:27:48 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0015.hostedemail.com [216.40.44.15]) by kanga.kvack.org (Postfix) with ESMTP id 0BBC16B0071 for ; Tue, 25 Jul 2023 16:27:48 -0400 (EDT) Received: from smtpin30.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id D0817160EF5 for ; Tue, 25 Jul 2023 20:27:47 +0000 (UTC) X-FDA: 81051270174.30.112B77D Received: from mail-oa1-f79.google.com (mail-oa1-f79.google.com [209.85.160.79]) by imf10.hostedemail.com (Postfix) with ESMTP id 11D6EC0010 for ; Tue, 25 Jul 2023 20:27:44 +0000 (UTC) Authentication-Results: imf10.hostedemail.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none); spf=pass (imf10.hostedemail.com: domain of 3QDDAZAkbAM0BHI3t44xAt881w.z77z4xDBxAv76Cx6C.v75@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.160.79 as permitted sender) smtp.mailfrom=3QDDAZAkbAM0BHI3t44xAt881w.z77z4xDBxAv76Cx6C.v75@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1690316865; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references; bh=MlqGNncxRU4scrz3VsUwhOqenmsYgS5YkGeTubF5kEw=; b=B9ewlaxhX7frL/UbEGajrP3tWy6adCwW9Ejh6YO4G77kU9JZM5OyvoDmZewfUXHIA45fhZ 1dn8JsAf2PQKNjFUSLdgKn/J7uH/Is3+87zQmrSbT9c7j04ZfyuCeEjSfH2umHroGHLosH 0rJ9f7w5iomchjH3izxU8l85SiINbYk= ARC-Authentication-Results: i=1; imf10.hostedemail.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none); spf=pass (imf10.hostedemail.com: domain of 3QDDAZAkbAM0BHI3t44xAt881w.z77z4xDBxAv76Cx6C.v75@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.160.79 as permitted sender) smtp.mailfrom=3QDDAZAkbAM0BHI3t44xAt881w.z77z4xDBxAv76Cx6C.v75@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1690316865; a=rsa-sha256; cv=none; b=CZ62IdlbyQDrSL1XMNisF5jUkETkhAzvZbhYRkBie6HLkiMwLZ4PHosqkm5zQctGUL1DQE T9kFUEksW05JwAk5Ua09tURrmABscxtJ6eyxwYc2drscybqVK57nHkZhJu4TDF76bSSw4w HkxAmOriMue1oFeEFC9TRGZAyUtNo7U= Received: by mail-oa1-f79.google.com with SMTP id 586e51a60fabf-1b743cee7faso11180432fac.0 for ; Tue, 25 Jul 2023 13:27:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690316864; x=1690921664; h=to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=MlqGNncxRU4scrz3VsUwhOqenmsYgS5YkGeTubF5kEw=; b=dt1engrDv3fmwVkBDGMnFMarVZMvoDVhWs01p5dIyD7ZQ5REnDjvLlt3C+AVKr12/i D160EMTpmtKQ4SVpTIl57wASBPNwJrSATJUAWHlAm3Wf4RXYVodm1mFzrxjIxLz7Ap0+ 6W59PiJtMvtxnemc+AmMcZoMXjLSK5EFUTwCC3fwuPGliCGWWCdIIIebwFG5xUCze/QH xCiF+5Gs21umDMSVDgojkZxJljfwDtgZJY5fIt2ekRh2XW4nW6JSgAI2vEC9KXChgbOi gmEg/7j4VQ4N2nyfebkExWHVvomgArK0S8fdVOukh954y/IKaLbJsKyuUbSG4ATNmVNc eNdA== X-Gm-Message-State: ABy/qLZ2dUspSUVR7tehEUNgG/JLqC71SunbFYV+jybFt3SvcsuTYIXw Cmb6ZCHbl/wJFoatna/EowKIJrtbXLFZadr5510OQLWwTHw1 X-Google-Smtp-Source: APBJJlE1z4JFr+/hI0gNNxegYDi7Kqt1pMPfnI4niVCtr7ejtkygXDOQez4yQV1reGKG5Y2t0AXFt9i5s2DDFRVKtAWEP1/graD2 MIME-Version: 1.0 X-Received: by 2002:a05:6870:954e:b0:1bb:6ec5:1009 with SMTP id v14-20020a056870954e00b001bb6ec51009mr193347oal.11.1690316864214; Tue, 25 Jul 2023 13:27:44 -0700 (PDT) Date: Tue, 25 Jul 2023 13:27:44 -0700 In-Reply-To: <000000000000607ff905ffc8e477@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <0000000000003fdcc506015590d6@google.com> Subject: Re: [syzbot] [mm?] WARNING: suspicious RCU usage in mas_walk (2) From: syzbot To: akpm@linux-foundation.org, liam.howlett@oracle.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" X-Rspamd-Server: rspam09 X-Rspamd-Queue-Id: 11D6EC0010 X-Stat-Signature: 5z77y3m8hiwh55hemqmw14ring9izgxx X-Rspam-User: X-HE-Tag: 1690316864-306334 X-HE-Meta: U2FsdGVkX1842DdAp3SAiqpPA+MsVNznHrVJNWcY7xbU4zssnZULS3MUh7IgB5nop5Km6akDL7uORc0hvEFEX2E5UHMQmPxtvve+rE5mvdMwUN1+S7Je/pvShLc/IaQcn/J2Vvez8PhkLF+zCHZtfkg/uYVsiw0veUjmFe+oeJ9/SMux0oTopB2mm/JM9sdHYdqUeizHpgbz5wO78tQVn5gfXqIY9+ziWayzjXc7P3SYs4X2stULvpT4UtTsw46D7Y4X7OBA/0bYptt2jNz78Ul3YLKyiDX1tsN43DOpcnFyQ70BpjwOqLTXDREQaP578HXQTCDk2D1VsZm9rru6tR9ROqtidCPhPnBlwMxjV53v7jGz9oc/52fDOT9uBnlaOlMm5ph7wIn/7nheRtNy98lBCuOmWTFYC+28RbLojWWflM6kGaiep0mj4af0dMCHTQUleJIQ7EZFYMuH1PEALVFXABKqpZmQHaKWgUOKuxmeTc5BpA3kBfz2jnlFHdYv7lePHt9hYwHnDLeIsjtLJWBsSb3Wn+QV8N30PJmAtthuqcbyGRIM6OK33CjZzltKtsFKamK/coakKOU9GHRyUePxuzcorVszm+f7jHPweCZhfthw41GML4TMvE4Z9H+UjWISUIw5UE0ud8WmJvB9WRYDjmww8XCBX+JELF5yPpT4Sd6C5+qPLnRW+ssj4fyZYzhSG1mb3o8NYjXN0YaZqBrPghbQXX+9ZFrIuP5uwD3ENRAg09Gr0NAzAO+VaFzQ3S0WkEGEzG7Rddyejgs5DYgQsJLqG20wYzsDZZcgOa3emZ7mGV5Hew0iFqyqj4H8+bVmk6ULYe3CIOhe+gHYXaW52Q3S8/mhpseFqTxYc6J7zTzuQATttD/rebI0tyBFGON7iSXqoH6jaSG1QC/s7WeHVAX8ueI2hP0Qvpb3PnyuxWr1YTUDj3CCpLazREbLqFiUUrRbw2xktxiRyrn 7mEg6/J5 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 UGcVtfnV aeFKk0f0TgYCJnhe7OxzlMboUctQkp4AD5J5MYzdljN0A7Crsovhczt7bQumVb+MHar1s3ZbDTXBM2P+FPHFT+i+CWwsPU5gNwm7yonvKy3Fm3B258fLotZMZmzp6cmrhRrZzxxZsH2UNUNM56BilbJZZaNP3tJAmZkQC3FPKT/e9j3gkguw0UhQLA5Ua4F5Hc3JvjNpIKyMRqQ9cB81Xw== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: syzbot has found a reproducer for the following issue on: HEAD commit: 1e25dd777248 Add linux-next specific files for 20230725 git tree: linux-next console+strace: https://syzkaller.appspot.com/x/log.txt?x=10ce2c31a80000 kernel config: https://syzkaller.appspot.com/x/.config?x=f481ab36ce878b84 dashboard link: https://syzkaller.appspot.com/bug?extid=8645fe63c4d22c8d27b8 compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1697cec9a80000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1566986ea80000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/e0c7408382e8/disk-1e25dd77.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/c4b0f14b8c88/vmlinux-1e25dd77.xz kernel image: https://storage.googleapis.com/syzbot-assets/b38cfdfd7db8/bzImage-1e25dd77.xz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+8645fe63c4d22c8d27b8@syzkaller.appspotmail.com ============================= WARNING: suspicious RCU usage 6.5.0-rc3-next-20230725-syzkaller #0 Not tainted ----------------------------- lib/maple_tree.c:839 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor244/5034: #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:654 [inline] #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x201/0x950 mm/memory.c:5585 stack backtrace: CPU: 0 PID: 5034 Comm: syz-executor244 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106 lockdep_rcu_suspicious+0x20c/0x3b0 kernel/locking/lockdep.c:6719 mas_root lib/maple_tree.c:839 [inline] mas_root lib/maple_tree.c:837 [inline] mas_start lib/maple_tree.c:1381 [inline] mas_state_walk lib/maple_tree.c:3832 [inline] mas_walk+0x55e/0x7d0 lib/maple_tree.c:4973 find_mergeable_anon_vma+0x102/0x890 mm/mmap.c:1085 __anon_vma_prepare+0x7d/0x550 mm/rmap.c:200 anon_vma_prepare include/linux/rmap.h:159 [inline] wp_page_copy mm/memory.c:3202 [inline] do_wp_page+0x1bbf/0x2e10 mm/memory.c:3579 handle_pte_fault mm/memory.c:5133 [inline] __handle_mm_fault+0x1704/0x4030 mm/memory.c:5257 handle_mm_fault+0x47a/0xa00 mm/memory.c:5422 do_user_addr_fault+0x2e7/0xfe0 arch/x86/mm/fault.c:1342 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x5c/0xd0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7fbc6b3fd6e5 Code: 6a 00 41 b8 12 10 01 00 be 00 00 00 20 4c 8b 0d 21 9a 0a 00 bf 09 00 00 00 e8 37 2a 03 00 b9 00 04 00 20 ba 46 ae 20 40 31 c0 04 25 00 04 00 20 00 00 00 00 be ff ff ff ff bf 10 00 00 00 c7 RSP: 002b:00007ffd68c881f0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007ffd68c883c8 RCX: 0000000020000400 RDX: 000000004020ae46 RSI: 0000000000400000 RDI: 0000000020000000 RBP: 00007fbc6b4a3610 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd68c883b8 R14: 0000000000000001 R15: 0000000000000001 ============================= WARNING: suspicious RCU usage 6.5.0-rc3-next-20230725-syzkaller #0 Not tainted ----------------------------- lib/maple_tree.c:795 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor244/5034: #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:654 [inline] #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x201/0x950 mm/memory.c:5585 stack backtrace: CPU: 0 PID: 5034 Comm: syz-executor244 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106 lockdep_rcu_suspicious+0x20c/0x3b0 kernel/locking/lockdep.c:6719 mt_slot lib/maple_tree.c:795 [inline] mt_slot lib/maple_tree.c:792 [inline] mtree_range_walk+0x6c5/0x9b0 lib/maple_tree.c:2946 mas_state_walk lib/maple_tree.c:3839 [inline] mas_walk+0x389/0x7d0 lib/maple_tree.c:4973 find_mergeable_anon_vma+0x102/0x890 mm/mmap.c:1085 __anon_vma_prepare+0x7d/0x550 mm/rmap.c:200 anon_vma_prepare include/linux/rmap.h:159 [inline] wp_page_copy mm/memory.c:3202 [inline] do_wp_page+0x1bbf/0x2e10 mm/memory.c:3579 handle_pte_fault mm/memory.c:5133 [inline] __handle_mm_fault+0x1704/0x4030 mm/memory.c:5257 handle_mm_fault+0x47a/0xa00 mm/memory.c:5422 do_user_addr_fault+0x2e7/0xfe0 arch/x86/mm/fault.c:1342 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x5c/0xd0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7fbc6b3fd6e5 Code: 6a 00 41 b8 12 10 01 00 be 00 00 00 20 4c 8b 0d 21 9a 0a 00 bf 09 00 00 00 e8 37 2a 03 00 b9 00 04 00 20 ba 46 ae 20 40 31 c0 04 25 00 04 00 20 00 00 00 00 be ff ff ff ff bf 10 00 00 00 c7 RSP: 002b:00007ffd68c881f0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007ffd68c883c8 RCX: 0000000020000400 RDX: 000000004020ae46 RSI: 0000000000400000 RDI: 0000000020000000 RBP: 00007fbc6b4a3610 R08: 0000000000000003 R09: 0000000000000000 R10: 000000000001101 --- If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing.