From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0643AC47077 for ; Thu, 11 Jan 2024 16:25:35 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 88CC46B009B; Thu, 11 Jan 2024 11:25:34 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 83C1D6B009C; Thu, 11 Jan 2024 11:25:34 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 703666B009D; Thu, 11 Jan 2024 11:25:34 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id 5C31C6B009B for ; Thu, 11 Jan 2024 11:25:34 -0500 (EST) Received: from smtpin14.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay10.hostedemail.com (Postfix) with ESMTP id 2C5A0C05EF for ; Thu, 11 Jan 2024 16:25:34 +0000 (UTC) X-FDA: 81667555788.14.0F677C7 Received: from mail-il1-f197.google.com (mail-il1-f197.google.com [209.85.166.197]) by imf21.hostedemail.com (Postfix) with ESMTP id 7248D1C001E for ; Thu, 11 Jan 2024 16:25:32 +0000 (UTC) Authentication-Results: imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3exagZQkbAFwMSTE4FF8L4JJC7.AIIAF8OM8L6IHN8HN.6IG@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.197 as permitted sender) smtp.mailfrom=3exagZQkbAFwMSTE4FF8L4JJC7.AIIAF8OM8L6IHN8HN.6IG@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1704990332; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding:in-reply-to: references; bh=gkRwq4etcgNhHk/DDVlITJe7E+9SsU5YEaXDIzFkfAQ=; b=CFWntGvFs7Orror+oSEDWlRM69fNyB7ggygRai2HPnSXyZpy3mEKZNu5FJVncSaS5zLA2I tGRJc5B3ZbsAek/EmndbLBo6ZhA4tNV0rR+WjJ/zdvPets/D0JfN/1pGXZjcym8si6lkVl H8BZhQXsVQXpaFrxewc/qo4k9Wv6LJw= ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1704990332; a=rsa-sha256; cv=none; b=oHJMR+UGsze2bh8J2vFT8vjpaFMBW27a6N0Y2gt2YeA6vOn2QozEo3cZ3s8ZMiUGhh+P7q 0ZBnmVHC20My65QdcPHVxmWzoJvIJ9I3nzWYnStUUG3zgz/GJv2AXpXu5yvEpox1QaECzT aZymI687VRZo84uCh6Obf1IN5u3vBtU= ARC-Authentication-Results: i=1; imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3exagZQkbAFwMSTE4FF8L4JJC7.AIIAF8OM8L6IHN8HN.6IG@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.197 as permitted sender) smtp.mailfrom=3exagZQkbAFwMSTE4FF8L4JJC7.AIIAF8OM8L6IHN8HN.6IG@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) Received: by mail-il1-f197.google.com with SMTP id e9e14a558f8ab-35fc6976630so46136285ab.0 for ; Thu, 11 Jan 2024 08:25:32 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704990331; x=1705595131; h=to:from:subject:message-id:date:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=gkRwq4etcgNhHk/DDVlITJe7E+9SsU5YEaXDIzFkfAQ=; b=H9VHhDTvq3+AZQD0MITJu7TZo8+XmRAwAX7HhXorPDn5tYtBnNLmR6g3F0hewtsoio pW+/geJgAYvwLN0PZ7pXbM5kP2jksKBA0QANDcR4XCtNcbQ3juy1Nldl+IZ9gS7Fbw8H lmOe6emrGF0lNkC7jikWiVZc6puvGvqYVpI+QvC+S3Evhn0YcLKUY93JruhBWJwx/JM+ otKnGAxAVw2jDw6Sclsk7DXJFQ9Ee4BKAgqQIcKHS1bJeoggyfZudynb7m8oLftB4XnG DpI07/RPxaMtbWIff8qVgCdaYqB6mskPGAJAnGP4cZ1G/AngftxZSNywGbSG3MpcJF+D QlLA== X-Gm-Message-State: AOJu0YwzGXvga3B8yuyItx/HaK67DNaR0LDmtU4o2NXGVc1N6K15I5MK j1qasZqTU6RAROhYG94FuyySipup8Tyn9K4MVmqYKkzQsY9y X-Google-Smtp-Source: AGHT+IGIKhUtJfJuh8bo/LiUGDkddfowsSVcew0UnNRwsz+bOnsqxCywW/qIS0dFAlENT21X6EDhal+D0qhABM11Y+EfYd3e5Y3U MIME-Version: 1.0 X-Received: by 2002:a05:6e02:1d16:b0:360:7c34:ffa7 with SMTP id i22-20020a056e021d1600b003607c34ffa7mr196284ila.1.1704990331748; Thu, 11 Jan 2024 08:25:31 -0800 (PST) Date: Thu, 11 Jan 2024 08:25:31 -0800 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <00000000000011d709060eadffd3@google.com> Subject: [syzbot] [mm?] kernel BUG in move_pages From: syzbot To: aarcange@redhat.com, akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, surenb@google.com, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 7248D1C001E X-Rspam-User: X-Rspamd-Server: rspam11 X-Stat-Signature: nmu8z8563ta5mq3matdn7hn76rtqou7p X-HE-Tag: 1704990332-42371 X-HE-Meta: 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 tq/5fLll VMRssyzL8XbUtEFmNUXseh0f3+ggBTkX0CZDjzQn5GzsQHdrOZBRlW+ks5pVEJKEzl7z+0kNfRicqFVoLF2GV2cS18foj1k8+JsSuJFHm5JaSKATMoIcIAVHBnezVo5du7sj092vOeNS+AOrsTwSL5pdJGnr5viq9eNsNgq1HjaEHUW5qCSe9RtTPP36VmZ9tqPB4HZQA6jw7LHZy25yyG/9q/MnV3zX+rRuSB0fnbNkKRQrmIHYqb1pxkls2hJAWL2aQ2ZuKJObvQ7bYgZfpAgHnX2DghvVggVJvU07pyH5HFJNIrgDMdoIDQcTNK/7poVca9UpkkO+486lcGonCkHfiaEy++5HS2FQaXtwH6mWj4qJTkNjjGXHHm/CPcB6JxI56diw1bSXKtVAr7Seg1tZrwodfw38UC7wzv9dwH0qoaK1vlj/8yxzGB0cLKnZROszkV9HQtOemNBkbidmPX+fnpKpZTCReUvtskDgKom3qGMBTz5lOOQ0r7s1Cj3jR3ojXg6uUKTzXYkVqrU1MDarBQhEl8PC+v4Yvyai6TQeJcmj7tf+T8rwqM2VLoxhwxUESMr2f0oI9lWH4u4CRm3sAgRMb+69xi50q6yHJZsFOYixT7j74HQ79JWd0EMfSCW8yMWpAZQWXLEzAE3aa01r2MUXC4LlKfx1mvkGsJalLNo905ZVKCbAZeE9TjjCclKyeYBigqi6lQjbkvSTZVmPpIB8gHQoBIC9QZFogB+KWPMRDll1ncBCHCHlKAG5C0wT/DTO7f0bs6SJ1ZtgRIDdL8Hb9cdpTEhrrvrNX4rt2EBa9HrMkCgYMFXfxpKLzahP/u4RUR+x5z41dIu+aoN1x3PCi6+NsCXP0yAbge3rRg5hSf4+ImR9c6X6J02XgWmqsubDk/u94PhuJHKTCueKOIDL1o4PNMuYKCqUA46UMcs6X0dII6A8fCenWb4lSaMej1410RYwrQzLtWEMghXm7EHk5 wL4lzPuU /DeWAY7M1RUbYu1DP8nnwXPmKJmw+Qf33FxdYHmMIyf8up1EMaLxBeKSpKuEpp8iHjz7Bcd8uRA9M+mzP49CGs4dPVE0yetg53Alad72R8se32vv2NIbTkqmNY/w4IIoo6xgSq5iGOAfTcyLreBnacPmQfzHHOYKYPRIuZ1cHb2I6AJmrv0MP00Xtma+/M2Oy3ameAZ+9eohMwnyFae9KxLYA/yte+qkTxxBbwuxnaNTm+MN7mw/APgRi5OgA98/DBEXLwT3gvAO0KvJzo8UUnLQc9242XyJrUrNB+3vbR+33JWmAuoEM1BFrqMsoL8Ekj06MjWSeoQmA7V4oxlInj/ZD8hEFNpbCf4z7Ayuso4KVtSq03AeleY4R27vIq4G X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: Hello, syzbot found the following issue on: HEAD commit: e2425464bc87 Add linux-next specific files for 20240105 git tree: linux-next console+strace: https://syzkaller.appspot.com/x/log.txt?x=14941cdee80000 kernel config: https://syzkaller.appspot.com/x/.config?x=4056b9349f3da8c9 dashboard link: https://syzkaller.appspot.com/bug?extid=705209281e36404998f6 compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=125d0a09e80000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15bc7331e80000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/2f738185e2cf/disk-e2425464.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/b248fcf4ea46/vmlinux-e2425464.xz kernel image: https://storage.googleapis.com/syzbot-assets/a9945c8223f4/bzImage-e2425464.xz The issue was bisected to: commit adef440691bab824e39c1b17382322d195e1fab0 Author: Andrea Arcangeli Date: Wed Dec 6 10:36:56 2023 +0000 userfaultfd: UFFDIO_MOVE uABI bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=11cb6ea9e80000 final oops: https://syzkaller.appspot.com/x/report.txt?x=13cb6ea9e80000 console output: https://syzkaller.appspot.com/x/log.txt?x=15cb6ea9e80000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+705209281e36404998f6@syzkaller.appspotmail.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") do_one_initcall+0x128/0x680 init/main.c:1237 do_initcall_level init/main.c:1299 [inline] do_initcalls init/main.c:1315 [inline] do_basic_setup init/main.c:1334 [inline] kernel_init_freeable+0x692/0xc30 init/main.c:1552 kernel_init+0x1c/0x2a0 init/main.c:1442 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 ------------[ cut here ]------------ kernel BUG at include/linux/page-flags.h:1035! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 5068 Comm: syz-executor191 Not tainted 6.7.0-rc8-next-20240105-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:PageAnonExclusive include/linux/page-flags.h:1035 [inline] RIP: 0010:move_pages+0x1697/0x3d40 mm/userfaultfd.c:1402 Code: 00 00 48 c1 e8 0c 48 21 d0 48 c1 e0 06 48 01 c3 e9 b6 f7 ff ff e8 79 c6 9c ff 48 c7 c6 e0 7e dc 8a 48 89 df e8 0a 20 dc ff 90 <0f> 0b e8 62 c6 9c ff 48 89 da b8 ff ff 37 00 48 c1 ea 03 48 c1 e0 RSP: 0018:ffffc90003aefa98 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffffea0001e40000 RCX: ffffffff81687599 RDX: ffff88802a155940 RSI: ffffffff81eb5d46 RDI: 0000000000000000 RBP: ffff88802abab810 R08: 0000000000000000 R09: fffffbfff1e75fda R10: ffffffff8f3afed7 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000020518000 R15: 0000000000000000 FS: 00005555562cf380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000204f8000 CR3: 000000006a725000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: userfaultfd_move fs/userfaultfd.c:2047 [inline] userfaultfd_ioctl+0x683/0x6420 fs/userfaultfd.c:2169 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl fs/ioctl.c:857 [inline] __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd0/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x62/0x6a RIP: 0033:0x7f4bada9b3e9 Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff2c1d6998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fff2c1d6b68 RCX: 00007f4bada9b3e9 RDX: 00000000200000c0 RSI: 00000000c028aa05 RDI: 0000000000000003 RBP: 00007f4badb0e610 R08: 00007fff2c1d6b68 R09: 00007fff2c1d6b68 R10: 00007fff2c1d6b68 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff2c1d6b58 R14: 0000000000000001 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:PageAnonExclusive include/linux/page-flags.h:1035 [inline] RIP: 0010:move_pages+0x1697/0x3d40 mm/userfaultfd.c:1402 Code: 00 00 48 c1 e8 0c 48 21 d0 48 c1 e0 06 48 01 c3 e9 b6 f7 ff ff e8 79 c6 9c ff 48 c7 c6 e0 7e dc 8a 48 89 df e8 0a 20 dc ff 90 <0f> 0b e8 62 c6 9c ff 48 89 da b8 ff ff 37 00 48 c1 ea 03 48 c1 e0 RSP: 0018:ffffc90003aefa98 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffffea0001e40000 RCX: ffffffff81687599 RDX: ffff88802a155940 RSI: ffffffff81eb5d46 RDI: 0000000000000000 RBP: ffff88802abab810 R08: 0000000000000000 R09: fffffbfff1e75fda R10: ffffffff8f3afed7 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000020518000 R15: 0000000000000000 FS: 00005555562cf380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000204f8000 CR3: 000000006a725000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. For information about bisection process see: https://goo.gl/tpsmEJ#bisection If the report is already addressed, let syzbot know by replying with: #syz fix: exact-commit-title If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing. If you want to overwrite report's subsystems, reply with: #syz set subsystems: new-subsystem (See the list of subsystem names on the web dashboard) If the report is a duplicate of another one, reply with: #syz dup: exact-subject-of-another-report If you want to undo deduplication, reply with: #syz undup