From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3C2D0C77B60 for ; Fri, 28 Apr 2023 13:25:58 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id C93DA6B007B; Fri, 28 Apr 2023 09:25:57 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id C43E66B007D; Fri, 28 Apr 2023 09:25:57 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id B0BC46B0080; Fri, 28 Apr 2023 09:25:57 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0016.hostedemail.com [216.40.44.16]) by kanga.kvack.org (Postfix) with ESMTP id 9FDEE6B007B for ; Fri, 28 Apr 2023 09:25:57 -0400 (EDT) Received: from smtpin01.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id 2F92716016F for ; Fri, 28 Apr 2023 13:25:57 +0000 (UTC) X-FDA: 80730872754.01.EED9DD3 Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71]) by imf21.hostedemail.com (Postfix) with ESMTP id 13CA61C000E for ; Fri, 28 Apr 2023 13:25:53 +0000 (UTC) Authentication-Results: imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3YclLZAkbAEw6CDyozzs5o33wr.u22uzs86s5q217s17.q20@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.71 as permitted sender) smtp.mailfrom=3YclLZAkbAEw6CDyozzs5o33wr.u22uzs86s5q217s17.q20@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1682688354; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding:in-reply-to: references; bh=3yq9rEjt6j/Grlqag7wuS/2mUAkFSJI6s+U6/7TuIJI=; b=RGKRQJYmp1Mj0JyLVvORKja3jo/nQxURuS6FL7oSJvMM3+8jtxbPFRb4gttKKn30dTH3bu oqccM9XgptaoM5odh2ANNLH0aZ3N+G9zgN5c5K9c+NWGbl7+/EbztgcugE14Ii6XEp765R DwORlwVwOqa7JxnJqGuQJp0SFmLM76k= ARC-Authentication-Results: i=1; imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3YclLZAkbAEw6CDyozzs5o33wr.u22uzs86s5q217s17.q20@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.71 as permitted sender) smtp.mailfrom=3YclLZAkbAEw6CDyozzs5o33wr.u22uzs86s5q217s17.q20@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1682688354; a=rsa-sha256; cv=none; b=D9RjKPY7RenoCfwWEfdpATuAUM9bC0y+KLpG6MDId7rzZAMG1MgqzPwIh3ysvLSPSTTExk Pm7dZxhkdC3w2xRw+jppRVbkIfAI/NuNNc8LWcheR+160bin7UW3SZxkpvIpyHIEgQl8l+ B+X75UpV/VQtFG8p6DvCaoZPo/v/6vw= Received: by mail-io1-f71.google.com with SMTP id ca18e2360f4ac-760ed929d24so1374429139f.2 for ; Fri, 28 Apr 2023 06:25:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682688353; x=1685280353; h=to:from:subject:message-id:date:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=3yq9rEjt6j/Grlqag7wuS/2mUAkFSJI6s+U6/7TuIJI=; b=eo9KqanHZ1TmQhaqDFt04S0KTUDzQbWIHHLbOrlROBcGURbPUKjYEnIdaavwQUM+HJ shBzNaFUh2K3RhJ/brHOeoBM7Mgm3W5qGQzbbLhyCDtnKp0YuPsjr64XDZWr2JZcrwFG u7jRKzSnDHJtJt8nha8QlTlWj42dYixht1UiTJkMLQktuWjN2XBB75arw5XbI6cnEYGQ vdFqhRdzUgktTAL2DYhI0xxyhSgonTh5OePly2rUh5EF4NqbDAGOvoY8MpyIn8qHa5Ln PtMYA1zrR4Akm3AtLx48DpruVKJymaf9jAUB6r9GEtg4rGsIQSDPbQWmicDaev5xOvpL arXQ== X-Gm-Message-State: AC+VfDwpV7hUvT63PbH2h/RzTXJZ3YSTC4AC7vsnteGRl8OvySpwscAw XmER1EW5QSEYn82GrSQlcJlPdxMfRoRkvlby5wGxx/46j8oG X-Google-Smtp-Source: ACHHUZ6MnE/JgqBmivx4QQnhYuUax80Nj5PF5TRhT6lU1SjA8npOjQKyM/bfSmyJBgYPRrP9m88zwPvomu5ONPVhcDvzOaf/IXuH MIME-Version: 1.0 X-Received: by 2002:a02:b1d2:0:b0:40f:a8e9:96ab with SMTP id u18-20020a02b1d2000000b0040fa8e996abmr2540325jah.5.1682688353273; Fri, 28 Apr 2023 06:25:53 -0700 (PDT) Date: Fri, 28 Apr 2023 06:25:53 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <00000000000090900c05fa656913@google.com> Subject: [syzbot] [mm?] [net?] KASAN: null-ptr-deref Read in filemap_fault From: syzbot To: linux-kernel@vger.kernel.org, linux-mm@kvack.org, netdev@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" X-Stat-Signature: 7jn3ywm1b8cb9k9sx5wjq9ihe1sjude8 X-Rspam-User: X-Rspamd-Queue-Id: 13CA61C000E X-Rspamd-Server: rspam06 X-HE-Tag: 1682688353-536781 X-HE-Meta: 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 sbGbl63H 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 l6b/S/gS md9hN6ln7VICLyBieJL1yLhwx39Mevh5tH0iRFBTHhP+5xh8ECtQ6XUAM1TdiS0MdO7EP0PIEAZCcC9+j8NBEzwEFssaGln5XTpneVjWbQL6V6Prr4PHOv9w6qSuyMZdUf/Ve0v86aHbMrisZtAUHFFSvE5517GQ X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: Hello, syzbot found the following issue on: HEAD commit: 33afd4b76393 Merge tag 'mm-nonmm-stable-2023-04-27-16-01' .. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=17bc1008280000 kernel config: https://syzkaller.appspot.com/x/.config?x=70288413d8a92398 dashboard link: https://syzkaller.appspot.com/bug?extid=48011b86c8ea329af1b9 compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 userspace arch: i386 Unfortunately, I don't have any reproducer for this issue yet. IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+48011b86c8ea329af1b9@syzkaller.appspotmail.com ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read include/linux/instrumented.h:68 [inline] BUG: KASAN: null-ptr-deref in atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] BUG: KASAN: null-ptr-deref in page_ref_count include/linux/page_ref.h:67 [inline] BUG: KASAN: null-ptr-deref in put_page_testzero include/linux/mm.h:1007 [inline] BUG: KASAN: null-ptr-deref in folio_put_testzero include/linux/mm.h:1013 [inline] BUG: KASAN: null-ptr-deref in folio_put include/linux/mm.h:1440 [inline] BUG: KASAN: null-ptr-deref in filemap_fault+0x544/0x24a0 mm/filemap.c:3382 Read of size 4 at addr 0000000000000028 by task syz-executor.2/19418 CPU: 1 PID: 19418 Comm: syz-executor.2 Not tainted 6.3.0-syzkaller-10620-g33afd4b76393 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_report mm/kasan/report.c:465 [inline] kasan_report+0xec/0x130 mm/kasan/report.c:572 check_region_inline mm/kasan/generic.c:181 [inline] kasan_check_range+0x141/0x190 mm/kasan/generic.c:187 instrument_atomic_read include/linux/instrumented.h:68 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] page_ref_count include/linux/page_ref.h:67 [inline] put_page_testzero include/linux/mm.h:1007 [inline] folio_put_testzero include/linux/mm.h:1013 [inline] folio_put include/linux/mm.h:1440 [inline] filemap_fault+0x544/0x24a0 mm/filemap.c:3382 __do_fault+0x107/0x600 mm/memory.c:4176 do_read_fault mm/memory.c:4530 [inline] do_fault mm/memory.c:4659 [inline] do_pte_missing mm/memory.c:3647 [inline] handle_pte_fault mm/memory.c:4947 [inline] __handle_mm_fault+0x27f6/0x4170 mm/memory.c:5089 handle_mm_fault+0x2af/0x9f0 mm/memory.c:5243 do_user_addr_fault+0x51a/0x1210 arch/x86/mm/fault.c:1440 handle_page_fault arch/x86/mm/fault.c:1534 [inline] exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1590 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0023:0xf72255d0 Code: Unable to access opcode bytes at 0xf72255a6. RSP: 002b:00000000ffb4674c EFLAGS: 00010202 RAX: 00000000f734e000 RBX: 00000000f734e000 RCX: 00000000f737c038 RDX: 000000002e220000 RSI: 0000000000000004 RDI: 00000000000e257f RBP: 00000000f737c0c0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ================================================================== --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. If the bug is already fixed, let syzbot know by replying with: #syz fix: exact-commit-title If you want to change bug's subsystems, reply with: #syz set subsystems: new-subsystem (See the list of subsystem names on the web dashboard) If the bug is a duplicate of another bug, reply with: #syz dup: exact-subject-of-another-report If you want to undo deduplication, reply with: #syz undup