From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id A9FE7C4332F for ; Sun, 29 Oct 2023 09:27:28 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id E0CFE8D0035; Sun, 29 Oct 2023 05:27:27 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id DBD508D0006; Sun, 29 Oct 2023 05:27:27 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id CABE58D0035; Sun, 29 Oct 2023 05:27:27 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0016.hostedemail.com [216.40.44.16]) by kanga.kvack.org (Postfix) with ESMTP id BC0BE8D0006 for ; Sun, 29 Oct 2023 05:27:27 -0400 (EDT) Received: from smtpin23.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay10.hostedemail.com (Postfix) with ESMTP id 8852DC0469 for ; Sun, 29 Oct 2023 09:27:27 +0000 (UTC) X-FDA: 81397970934.23.28252B3 Received: from mail-oi1-f207.google.com (mail-oi1-f207.google.com [209.85.167.207]) by imf12.hostedemail.com (Postfix) with ESMTP id EC3674000C for ; Sun, 29 Oct 2023 09:27:24 +0000 (UTC) Authentication-Results: imf12.hostedemail.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none); spf=pass (imf12.hostedemail.com: domain of 3fCU-ZQkbAO8jpqbRccViRggZU.XffXcVljViTfekVek.Tfd@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.167.207 as permitted sender) smtp.mailfrom=3fCU-ZQkbAO8jpqbRccViRggZU.XffXcVljViTfekVek.Tfd@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1698571645; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding:in-reply-to: references; bh=qso1XSA0QuRFmH2A3BDg6iJYmbyHJYnTJ3GqpiGhhVY=; b=BN/JRof+0NKvzAf9r9054QiChMWV9/WWmJYqPV3jQERSdZgWwvf/Dt5z7mScTiUkrimwXM 9kQSUoza/VO7f5PpeF97OhesNR5vfEER5ddmfkWsQFMh/huIK4ULI8eHr4lAFHlZMqjFsB HNMt4Z0FoVjMNyq5RX8ATSG9WoaEbzs= ARC-Authentication-Results: i=1; imf12.hostedemail.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none); spf=pass (imf12.hostedemail.com: domain of 3fCU-ZQkbAO8jpqbRccViRggZU.XffXcVljViTfekVek.Tfd@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.167.207 as permitted sender) smtp.mailfrom=3fCU-ZQkbAO8jpqbRccViRggZU.XffXcVljViTfekVek.Tfd@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1698571645; a=rsa-sha256; cv=none; b=n66C4bbEEyC7V5XAntFjOhdLq7DX7dHWXCgaNbfmauM4E+1D+YxvVjDNRfkrM9RyNWjXnZ zhVK5EWECv8SgBC5S1cgqkr85j2tnbjMd03uAC7eWLFvjoAEbU8I1nTi2MkJYQUC5+uzCx AqkuETpB0ywpej4ovAPjZs/02TENh18= Received: by mail-oi1-f207.google.com with SMTP id 5614622812f47-3ae5ac8de14so5168671b6e.2 for ; Sun, 29 Oct 2023 02:27:24 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1698571644; x=1699176444; h=to:from:subject:message-id:date:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=qso1XSA0QuRFmH2A3BDg6iJYmbyHJYnTJ3GqpiGhhVY=; b=p7kS1JmKSaXG9PXOM4O6aYtj2NU0uIye4MFNdhOnb9JL4NYxoXBqWU33vrJE64mcVE NycLJwz3e+ESMlYM/UFB+eU6VyLm9J6hGnnBPaSrAXjPUm4Cxkcj1L4c6v31wmNjrjU3 o3kC05tYtaCjW8adIvVhLISwc7VFG5Yqpr2Br3iGSFKx6fCo6mWljJkAar/CVAwVTcwM CfatglFfIU7CxMogx/b9PYALZWlN95dPw82uNLrpCU7exEt3P+9+kOs0HAFMWHxvynQJ a5QoS1jDyIV0tNVLE8FxaYW2Zpo/AxYCVQT01U5XYzuldTJLPNq8v/pL+YRrGKVlVsiy uFYA== X-Gm-Message-State: AOJu0Ywo2axWDqHYz1Orf7L60cm3G0YM8hgyX7Z9MhtlxLFgaO6Lvz9q WuG+cA+rDGFD6C08eeVKXth47e+YgCYw39vrX97bDAKmwlTq X-Google-Smtp-Source: AGHT+IE9lCHWsammt9dgPZ9adunUKQuAUxXugMdhCkbfofOMd2w737M/NaCdLftBsNVc3oq1yC7NSxERTRoLx2Lie6QaMWuaNMdl MIME-Version: 1.0 X-Received: by 2002:a05:6870:e993:b0:1ea:1bc1:4084 with SMTP id r19-20020a056870e99300b001ea1bc14084mr3465353oao.4.1698571644095; Sun, 29 Oct 2023 02:27:24 -0700 (PDT) Date: Sun, 29 Oct 2023 02:27:24 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <00000000000078d1e00608d7878b@google.com> Subject: [syzbot] [mm?] general protection fault in hugetlb_vma_lock_write From: syzbot To: akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, llvm@lists.linux.dev, mike.kravetz@oracle.com, muchun.song@linux.dev, nathan@kernel.org, ndesaulniers@google.com, riel@surriel.com, syzkaller-bugs@googlegroups.com, trix@redhat.com Content-Type: text/plain; charset="UTF-8" X-Rspam-User: X-Stat-Signature: 1d355qyi59xqw14pqu618yzuysxzpbaw X-Rspamd-Server: rspam07 X-Rspamd-Queue-Id: EC3674000C X-HE-Tag: 1698571644-309144 X-HE-Meta: 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 22Sj3Pt0 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 flMzybkh 5CQMr6egE3Y0H25P6U5Emd34asbMGAauD5TpBflOKfwPkaumOWCuWNUFwkpumpRK8q4Q05EMFsZNVOlb9IP9mOQQh1Or2mjVvTvrcMsPoinvfveZyU5vyxg3sWjCB/kfF1nUEMFSmFF0nsiZbZuUr8PLtPF+rvTJtO/wks/2oBPmsiEqA4eK4UVKMWouzbcJlUO+pR7TphfwhxnTRw4AK4ZKG8ZGP38N9vhmNdd8t6PyBgXbjGG4vrdSpCYaGn4O4muHpWqXS3PZRGVFSx0UM9TD6LXU7IyCog8jfcGfIFC7/bpwz56j5urW3mZZQ/4asTQEF4V+ETnk0AUjcqZ9AHWkW4IrSJIJKhDaJu3ARy6bI2cNScLkFim46+xsKIHFi6QQhgyANDJYj/fZ8z0g4KmHskGe5nAUQXw8Qmk/SRo= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: Hello, syzbot found the following issue on: HEAD commit: 888cf78c29e2 Merge tag 'iommu-fix-v6.6-rc7' of git://git.k.. git tree: upstream console+strace: https://syzkaller.appspot.com/x/log.txt?x=10cbee95680000 kernel config: https://syzkaller.appspot.com/x/.config?x=9ee601744db6e780 dashboard link: https://syzkaller.appspot.com/bug?extid=6ada951e7c0f7bc8a71e compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10fa2557680000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14285b57680000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/ca8ad4106267/disk-888cf78c.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/aac2e80e0744/vmlinux-888cf78c.xz kernel image: https://storage.googleapis.com/syzbot-assets/b14533456815/bzImage-888cf78c.xz The issue was bisected to: commit bf4916922c60f43efaa329744b3eef539aa6a2b2 Author: Rik van Riel Date: Fri Oct 6 03:59:07 2023 +0000 hugetlbfs: extend hugetlb_vma_lock to private VMAs bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=17d7dab5680000 final oops: https://syzkaller.appspot.com/x/report.txt?x=1437dab5680000 console output: https://syzkaller.appspot.com/x/log.txt?x=1037dab5680000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+6ada951e7c0f7bc8a71e@syzkaller.appspotmail.com Fixes: bf4916922c60 ("hugetlbfs: extend hugetlb_vma_lock to private VMAs") general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef] CPU: 0 PID: 5048 Comm: syz-executor139 Not tainted 6.6.0-rc7-syzkaller-00142-g888cf78c29e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 RIP: 0010:__lock_acquire+0x109/0x5de0 kernel/locking/lockdep.c:5004 Code: 45 85 c9 0f 84 cc 0e 00 00 44 8b 05 c1 1e 42 0b 45 85 c0 0f 84 be 0d 00 00 48 ba 00 00 00 00 00 fc ff df 4c 89 d1 48 c1 e9 03 <80> 3c 11 00 0f 85 e8 40 00 00 49 81 3a a0 d9 5f 90 0f 84 96 0d 00 RSP: 0018:ffffc90003aa7798 EFLAGS: 00010016 RAX: ffff88807a0b9dc0 RBX: 1ffff92000754f23 RCX: 000000000000001d RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 00000000000000e8 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 00000000000000e8 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000280 CR3: 00000000758bf000 CR4: 0000000000350ef0 Call Trace: lock_acquire kernel/locking/lockdep.c:5753 [inline] lock_acquire+0x1ae/0x510 kernel/locking/lockdep.c:5718 down_write+0x93/0x200 kernel/locking/rwsem.c:1573 hugetlb_vma_lock_write mm/hugetlb.c:300 [inline] hugetlb_vma_lock_write+0xae/0x100 mm/hugetlb.c:291 __hugetlb_zap_begin+0x1e9/0x2b0 mm/hugetlb.c:5447 hugetlb_zap_begin include/linux/hugetlb.h:258 [inline] unmap_vmas+0x2f4/0x470 mm/memory.c:1733 exit_mmap+0x1ad/0xa60 mm/mmap.c:3230 __mmput+0x12a/0x4d0 kernel/fork.c:1349 mmput+0x62/0x70 kernel/fork.c:1371 exit_mm kernel/exit.c:567 [inline] do_exit+0x9ad/0x2a20 kernel/exit.c:861 __do_sys_exit kernel/exit.c:991 [inline] __se_sys_exit kernel/exit.c:989 [inline] __x64_sys_exit+0x42/0x50 kernel/exit.c:989 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff2b7a78ab9 Code: Unable to access opcode bytes at 0x7ff2b7a78a8f. RSP: 002b:00007fff926ea6b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2b7a78ab9 RDX: 00007ff2b7ab23f3 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 000000000000cfda R08: 0000000000000000 R09: 0000000000000006 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff926ea6cc R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__lock_acquire+0x109/0x5de0 kernel/locking/lockdep.c:5004 Code: 45 85 c9 0f 84 cc 0e 00 00 44 8b 05 c1 1e 42 0b 45 85 c0 0f 84 be 0d 00 00 48 ba 00 00 00 00 00 fc ff df 4c 89 d1 48 c1 e9 03 <80> 3c 11 00 0f 85 e8 40 00 00 49 81 3a a0 d9 5f 90 0f 84 96 0d 00 RSP: 0018:ffffc90003aa7798 EFLAGS: 00010016 RAX: ffff88807a0b9dc0 RBX: 1ffff92000754f23 RCX: 000000000000001d RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 00000000000000e8 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 00000000000000e8 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000280 CR3: 00000000758bf000 CR4: 0000000000350ef0 ---------------- Code disassembly (best guess): 0: 45 85 c9 test %r9d,%r9d 3: 0f 84 cc 0e 00 00 je 0xed5 9: 44 8b 05 c1 1e 42 0b mov 0xb421ec1(%rip),%r8d # 0xb421ed1 10: 45 85 c0 test %r8d,%r8d 13: 0f 84 be 0d 00 00 je 0xdd7 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 4c 89 d1 mov %r10,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 e8 40 00 00 jne 0x411c 34: 49 81 3a a0 d9 5f 90 cmpq $0xffffffff905fd9a0,(%r10) 3b: 0f .byte 0xf 3c: 84 .byte 0x84 3d: 96 xchg %eax,%esi 3e: 0d .byte 0xd --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. For information about bisection process see: https://goo.gl/tpsmEJ#bisection If the bug is already fixed, let syzbot know by replying with: #syz fix: exact-commit-title If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing. If you want to overwrite bug's subsystems, reply with: #syz set subsystems: new-subsystem (See the list of subsystem names on the web dashboard) If the bug is a duplicate of another bug, reply with: #syz dup: exact-subject-of-another-report If you want to undo deduplication, reply with: #syz undup