From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7CA3EC27C53 for ; Wed, 12 Jun 2024 17:47:41 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id ED9746B0083; Wed, 12 Jun 2024 13:47:40 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id E88B16B00A2; Wed, 12 Jun 2024 13:47:40 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id D77606B00A3; Wed, 12 Jun 2024 13:47:40 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id BAB836B0083 for ; Wed, 12 Jun 2024 13:47:40 -0400 (EDT) Received: from smtpin08.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id 509601404B4 for ; Wed, 12 Jun 2024 17:47:40 +0000 (UTC) X-FDA: 82222969080.08.034B71E Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by imf02.hostedemail.com (Postfix) with ESMTP id 50F3C80002 for ; Wed, 12 Jun 2024 17:47:38 +0000 (UTC) Authentication-Results: imf02.hostedemail.com; dkim=pass header.d=linux-foundation.org header.s=korg header.b=cpQKbVBn; dmarc=none; spf=pass (imf02.hostedemail.com: domain of akpm@linux-foundation.org designates 139.178.84.217 as permitted sender) smtp.mailfrom=akpm@linux-foundation.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1718214458; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=wQQnVGFNZHqdtlG6uEjws/nd6czxzn9VMlTf3GHXlvo=; b=jscrrlXnr8Lp4hjSVKDzF624hXX95odPH+Jy03m+FUt01kQ5EVNStX1bZVGazfdeu00lkn nczS6FTBmPeDdepI1IuSxTkkrjbg6uPPTsh1NSai9AV07NGJK7dEMUYcSi1iODnFN6DHwW IuuyQ+5f/ZL6RfYJnjtyVTXqZtJmzfE= ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1718214458; a=rsa-sha256; cv=none; b=CwHIf0mjpnJTEtu+fISJLfDSV6UElQYMvHUQpqw5taXqvz+bh4ByQN4brUrsGLsqQ1U6/V SQH0SaWB/6Ou2c+DCok2aPBrhaSX66HSbkbGp6FXkkmzdo0Pp/9iMgqb5xdDW2sg1t+B3a qhxafyOrAGsxy6K4jdvSchgTpjJrUxE= ARC-Authentication-Results: i=1; imf02.hostedemail.com; dkim=pass header.d=linux-foundation.org header.s=korg header.b=cpQKbVBn; dmarc=none; spf=pass (imf02.hostedemail.com: domain of akpm@linux-foundation.org designates 139.178.84.217 as permitted sender) smtp.mailfrom=akpm@linux-foundation.org Received: from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58]) by dfw.source.kernel.org (Postfix) with ESMTP id 17E7A61507; Wed, 12 Jun 2024 17:47:37 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9138FC32786; Wed, 12 Jun 2024 17:47:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linux-foundation.org; s=korg; t=1718214456; bh=TAmpk28DOHQlh76vj68wZqyZ2em5S70V/tuKcrqTIJ8=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=cpQKbVBnd+SeSjoJk5LlbpDqCHPsBMITWW4owW+EqGYHPdxGfpvvSM1h4RtTcQShV P+9436E1EDMEEuv9RN+Kudi/mMB7DF/bRjiHB3fgfgfKIWhCWD1WK0q/23gZrGFj5v VwfMLBHzuKuoOflv7AULxkhjALUqRD78xJKv3Qkg= Date: Wed, 12 Jun 2024 10:47:35 -0700 From: Andrew Morton To: syzbot Cc: linux-kernel@vger.kernel.org, linux-mm@kvack.org, pasha.tatashin@soleen.com, syzkaller-bugs@googlegroups.com, Peter Xu Subject: Re: [syzbot] [mm?] WARNING in __page_table_check_ptes_set (2) Message-Id: <20240612104735.ee6405d2096236bf18c51a41@linux-foundation.org> In-Reply-To: <000000000000b7b11a061ab49122@google.com> References: <000000000000b7b11a061ab49122@google.com> X-Mailer: Sylpheed 3.8.0beta1 (GTK+ 2.24.33; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspam-User: X-Rspamd-Server: rspam01 X-Rspamd-Queue-Id: 50F3C80002 X-Stat-Signature: m85o8iepsisy1jerog9ijthkng6n16hr X-HE-Tag: 1718214458-574694 X-HE-Meta: U2FsdGVkX194rGqWdl2NEuA0lbDjtoAWppryPqV1GoFuDdzFBTyZcIjjF2EoC/aVOoETRqVB/HWMwUWB7FEBeVwbMXfhDf4eA2lifkQLZqw1ZMwJBTJgh9866JUrwT1Buf6Um3Ee8qPkVFeaTE4I+SK7It02chKeuTrB+30zGk5HCnalj/dTB61rZpdk3FBd8NziAhgbcHSoMaN+uVOAMm+YfpIjaIfJ9tOWjrp0ZdWxJxgJlGCY6y0Hfkz06AOaVK1CzmkEOItnVF3pNDZGJ+rlJo2k/nIyYw1lp9F656kigvhU8oT5qR7aD3w6Mx/yvEXgOgUwqHxNCsncp8c8GoVtX2Uy7S7eafa5X7uGNBRpWcAQFKJnQf7atwBE1zG1+EKRoF3OFPM+O57CE30byP6k7oNta0iwedrj8bCskr7p/uBZvpvNf1odIYngaMRL4WiIytY4hjBZqyTN+6/cbDeRTzd8BYFgFcbGlEVylru8LgMI3ISeUC7W4wSqaB75pHTOeL/CXOt3KFc08NjOissO6JzCIbVc7xhmbk/8w/NhgSyg6UEk2H7MiCGsqozrYLCDrtsujJv9OD+AoWGbqG8WwMpW9xW4L42DWwlpQ5LyBt6gO31vrFtF+7wR96zEqiW4oHdAPazoSgbM1j6wutRTbL5o89nH3rb6iB0QAaiIxkzLzzVeq4ltXOV/GKcnNacacM2HJN71RqOKJ67INjVd5Fd8n0Ph4Y0/E0SVAsMkUxfdyfE92dHpGFltmMyvTbDtcJu6tBk0uDriTMr9KXJFPKLzQgwiV8F03jBZtoJizhzWHnnSD54ubAdpHNRRs+xoGyfaLrImJnHYtIMMfipxJxWrzDeMoqGlRFqhnR7QFIl3XjzuMPZC52z/xVbCpalpvLhNkbwA52c23kXaasW8rWUU83OhYx27ehMKk/2Ns8yTaFYlSnRuBwHGs4pivoBKLd5svz8gAvlHaOc Jl9iigCW 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Wed, 12 Jun 2024 10:18:21 -0700 syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: 8867bbd4a056 mm: arm64: Fix the out-of-bounds issue in con.. > git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci > console output: https://syzkaller.appspot.com/x/log.txt?x=146b3d96980000 > kernel config: https://syzkaller.appspot.com/x/.config?x=3b4350cf56c61c80 > dashboard link: https://syzkaller.appspot.com/bug?extid=0b56d6ed0d0c0c9a79dc > compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 > userspace arch: arm64 > > Unfortunately, I don't have any reproducer for this issue yet. > > ... > > ------------[ cut here ]------------ > WARNING: CPU: 1 PID: 1 at mm/page_table_check.c:198 page_table_check_pte_flags mm/page_table_check.c:198 [inline] > WARNING: CPU: 1 PID: 1 at mm/page_table_check.c:198 __page_table_check_ptes_set+0x324/0x398 mm/page_table_check.c:211 if (pte_present(pte) && pte_uffd_wp(pte)) WARN_ON_ONCE(pte_write(pte)); Let me optimistically cc Peter ;) > Modules linked in: > CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 > pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) > pc : page_table_check_pte_flags mm/page_table_check.c:198 [inline] > pc : __page_table_check_ptes_set+0x324/0x398 mm/page_table_check.c:211 > lr : page_table_check_pte_flags mm/page_table_check.c:198 [inline] > lr : __page_table_check_ptes_set+0x324/0x398 mm/page_table_check.c:211 > sp : ffff800093d57520 > x29: ffff800093d575a0 x28: ffff7000127aaec8 x27: dfff800000000000 > x26: 0000000000000001 x25: bfeffffffffffff3 x24: 1ffff000127aaea8 > x23: 0408000000000000 x22: 0000000000000001 x21: ffff0000d38131b8 > x20: ffff800093d57540 x19: 0408000000000000 x18: ffff800093d57300 > x17: 00000000000074be x16: ffff800080b0d2d4 x15: ffff7000127aaeb0 > x14: 1ffff000127aaeb0 x13: 0000000000000004 x12: ffffffffffffffff > x11: ffff80008eb6e78c x10: 0000000000ff0100 x9 : 0000000000000000 > x8 : ffff0000c1968000 x7 : ffff80008096b550 x6 : 0000000000000000 > x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 > x2 : bfeffffffffffff3 x1 : 0408000000000000 x0 : 0408000000000000 > Call trace: > page_table_check_pte_flags mm/page_table_check.c:198 [inline] > __page_table_check_ptes_set+0x324/0x398 mm/page_table_check.c:211 > page_table_check_ptes_set include/linux/page_table_check.h:74 [inline] > __set_ptes arch/arm64/include/asm/pgtable.h:404 [inline] > set_ptes arch/arm64/include/asm/pgtable.h:1586 [inline] > pte_clear_tests+0x510/0x538 mm/debug_vm_pgtable.c:640 > debug_vm_pgtable+0x268/0x590 mm/debug_vm_pgtable.c:1392 > do_one_initcall+0x254/0x9e4 init/main.c:1267 > do_initcall_level+0x154/0x214 init/main.c:1329 > do_initcalls+0x58/0xac init/main.c:1345 > do_basic_setup+0x8c/0xa0 init/main.c:1364 > kernel_init_freeable+0x324/0x478 init/main.c:1578 > kernel_init+0x24/0x2a0 init/main.c:1467 > ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 > irq event stamp: 1342246 > hardirqs last enabled at (1342245): [] seqcount_lockdep_reader_access+0x6c/0xd4 include/linux/seqlock.h:74 > hardirqs last disabled at (1342246): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470 > softirqs last enabled at (1342178): [] softirq_handle_end kernel/softirq.c:400 [inline] > softirqs last enabled at (1342178): [] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582 > softirqs last disabled at (1341257): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 > ---[ end trace 0000000000000000 ]--- > page_owner is disabled > Key type .fscrypt registered > Key type fscrypt-provisioning registered > kAFS: Red Hat AFS client v0.1 registering. > Btrfs loaded, assert=on, ref-verify=on, zoned=yes, fsverity=yes > Key type big_key registered > Key type encrypted registered > ima: No TPM chip found, activating TPM-bypass! > Loading compiled-in module X.509 certificates > Loaded X.509 cert 'Build time autogenerated kernel key: 79e1c0a63a233d95d926db3e542dc8d9e342ab6b' > ima: Allocated hash algorithm: sha256 > ima: No architecture policies found > evm: Initialising EVM extended attributes: > evm: security.selinux (disabled) > evm: security.SMACK64 > evm: security.SMACK64EXEC > evm: security.SMACK64TRANSMUTE > evm: security.SMACK64MMAP > evm: security.apparmor (disabled) > evm: security.ima > evm: security.capability > evm: HMAC attrs: 0x1 > printk: legacy console [netcon0] enabled > netconsole: network logging started > gtp: GTP module loaded (pdp ctx size 128 bytes) > rdma_rxe: loaded > cfg80211: Loading compiled-in X.509 certificates for regulatory database > Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' > Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600' > clk: Disabling unused clocks > PM: genpd: Disabling unused power domains > ALSA device list: > #0: Dummy 1 > #1: Loopback 1 > #2: Virtual MIDI Card 1 > md: Skipping autodetection of RAID arrays. (raid=autodetect will force) > EXT4-fs (nvme0n1p2): mounted filesystem 126e38a5-b482-40da-8f06-bd78886e02c1 ro with ordered data mode. Quota mode: none. > VFS: Mounted root (ext4 filesystem) readonly on device 259:2. > devtmpfs: mounted > Freeing unused kernel memory: 4416K > Run /sbin/init as init process > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > If the report is already addressed, let syzbot know by replying with: > #syz fix: exact-commit-title > > If you want to overwrite report's subsystems, reply with: > #syz set subsystems: new-subsystem > (See the list of subsystem names on the web dashboard) > > If the report is a duplicate of another one, reply with: > #syz dup: exact-subject-of-another-report > > If you want to undo deduplication, reply with: > #syz undup