From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 05EDDC5AE59 for ; Thu, 5 Jun 2025 06:11:15 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 9B1266B0535; Thu, 5 Jun 2025 02:11:14 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 961AA6B0536; Thu, 5 Jun 2025 02:11:14 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 8021C6B0539; Thu, 5 Jun 2025 02:11:14 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0017.hostedemail.com [216.40.44.17]) by kanga.kvack.org (Postfix) with ESMTP id 5A3046B0535 for ; Thu, 5 Jun 2025 02:11:14 -0400 (EDT) Received: from smtpin13.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id C6EB31418F8 for ; Thu, 5 Jun 2025 06:11:13 +0000 (UTC) X-FDA: 83520324426.13.914F9C9 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by imf08.hostedemail.com (Postfix) with ESMTP id 62B59160002 for ; Thu, 5 Jun 2025 06:11:11 +0000 (UTC) Authentication-Results: imf08.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=GRP0WXZt; dmarc=pass (policy=quarantine) header.from=redhat.com; spf=pass (imf08.hostedemail.com: domain of david@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=david@redhat.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1749103871; a=rsa-sha256; cv=none; b=fbumdSQZoObQpS+ETdlIEnXty803P0JcfFSv5t6sUsHsX07DR+N0m/kMEDgN/+1xIXRKw/ mP20sMyZRKTnmUI4uGrr1Kn+/F3J1DFyUl0LwilUoKtGObUYJvnp15ZmimoSvNF0P0jA/h ySQuQlfLypSfctbNA6LDEwozZdunXuU= ARC-Authentication-Results: i=1; imf08.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=GRP0WXZt; dmarc=pass (policy=quarantine) header.from=redhat.com; spf=pass (imf08.hostedemail.com: domain of david@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=david@redhat.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1749103871; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=eGEzGojVYGbhIc9LDFPn5qyK5CyR6EWfYgfko/uoq3g=; b=4MztZjbxLyA7Gw8QcLKzlawRKwP0tZQWMjDcIKwZ0TkogqLE7PPTIyee7RsHaaHA/BbR/D tPo6V0RCMqtHX//edwnh4EOYeQXxtXsCaWPevcrySYI2dxKrXt7AMUgP9KGB/7t3VCmVXD 6m74Vc88Bxg0dADFqDUMpI73BHMHQyU= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1749103870; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=eGEzGojVYGbhIc9LDFPn5qyK5CyR6EWfYgfko/uoq3g=; b=GRP0WXZtFpKYpjnhchw2keGo5efwzMYOMXRnkGmJ4PiFjD3e+a5xyByWgOseKFji3ek/Pr nYoTrEXR5Lbxkr0fWzkg46hOArgksN4tAd3GaSL402Ie1FpWzvcWOkqmuvnlBLjAvH0W5G il1TO4SBL6f8D5ygqDrpfxxeIU5B8qU= Received: from mail-wr1-f71.google.com (mail-wr1-f71.google.com [209.85.221.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-279-WYPr-fOvMIW68qrC5Ej1ew-1; Thu, 05 Jun 2025 02:11:07 -0400 X-MC-Unique: WYPr-fOvMIW68qrC5Ej1ew-1 X-Mimecast-MFC-AGG-ID: WYPr-fOvMIW68qrC5Ej1ew_1749103866 Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-3a4fac7fa27so234859f8f.0 for ; Wed, 04 Jun 2025 23:11:06 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1749103866; x=1749708666; h=content-transfer-encoding:in-reply-to:organization:autocrypt :content-language:from:references:to:subject:user-agent:mime-version :date:message-id:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=eGEzGojVYGbhIc9LDFPn5qyK5CyR6EWfYgfko/uoq3g=; b=jQb4WzdsUVWYah0wr77sAaiNh6GtbWlHfZUJYBvOJLPMPWPb0Zxu7ESfQNtYO7Jl6G I1HbiYe36ZvropTCaRmBxP3rTcdN3eb1r6JkOLn56tIsnQi4VREt77QG1mU27mwIZE1A F8TZ4U+W1oByu60vvQwW/LQAEEZ+sHr+pEp0uzsJUAPIZy5SX2FA7njIlOJa3FZJ5wy+ snUuD1BhSYVPJUnKi/VGqiuv9VnoWc8IsqVVB0iz5ReRzLTYC95LsRmEvvhtqrIZOvWn EPeWPTOIqXKKX+c0o1faQoTNkaJlvsG+YLF5I2AUK5zVBh7LqkUXPl0LDuxvjGSmUqYO +ACQ== X-Forwarded-Encrypted: i=1; AJvYcCXw7mX60QKPHmbFY7lMM20+b6rbXFEnBTk3indUjP+Zvw/UPuFGcCI4zoupCRaPe1GpCfW/oelDIA==@kvack.org X-Gm-Message-State: AOJu0YzCxPuropu00FZzT0gN3FSeMUV6P0KpVh8JVMulSqDT8RlPx98a 8jlbauBDtb2xJVBtksgfSg94O6LmOwrtSsZG1nZz8fKmRXSKwV8eOBLahLtV3cChcvXSPU/Mx6j Agh/mrr51RRgds0gUiQI+A00R4Nr9TkltIi9k8RSro9zatBR0gT5m4aOHN7grgFw= X-Gm-Gg: ASbGncukzf7lRUjo/1CGXuNFIvCYxrEJWRy8E+iSy+sIoHobtGmwsaDCcvVgNdzPwf2 +z62GeSMSQhHIMitClLbcJT83mmnoWw+LN9yqLdR0vGKcTL7EqOEOtlLsVx/ei2QLD8OIH0TrVz YKANnPOL37gkWNurzPjOU4fYLavbbqgDelxx5ebMurSo+iyt/GhjcQb2cpptzWoCIeeE7rkPzDH hEGvcJz2OQOg/EQ+SM5OmbEznNVu5YUGkFMkxc+4qHH6jkdbi1d+5Hdb73HeWGZsLJHx7edC3PN ijslN8xsxHsNm+hnoFCAORouUIxVOf096DF9IdKRh3s= X-Received: by 2002:a05:6000:2c11:b0:3a4:f5f6:b4ab with SMTP id ffacd0b85a97d-3a51d966567mr4185676f8f.30.1749103865882; Wed, 04 Jun 2025 23:11:05 -0700 (PDT) X-Google-Smtp-Source: AGHT+IFJy9vxF3vvjqSsbomY4mvZK/nI30Q+ypm5M6f5YIpmw6V0p8rypSW1cL9oUlfNz9aZtFgtVw== X-Received: by 2002:a05:6000:2c11:b0:3a4:f5f6:b4ab with SMTP id ffacd0b85a97d-3a51d966567mr4185647f8f.30.1749103865377; Wed, 04 Jun 2025 23:11:05 -0700 (PDT) Received: from [192.168.3.141] (p4fe0f5ef.dip0.t-ipconnect.de. [79.224.245.239]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-451fb1782b5sm6921095e9.12.2025.06.04.23.11.03 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 04 Jun 2025 23:11:04 -0700 (PDT) Message-ID: <4fc2c008-2384-4d94-b1bf-f0a076585a4a@redhat.com> Date: Thu, 5 Jun 2025 08:11:02 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [syzbot] [mm?] kernel BUG in try_to_unmap_one (2) To: syzbot , Liam.Howlett@oracle.com, akpm@linux-foundation.org, harry.yoo@oracle.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org, lorenzo.stoakes@oracle.com, riel@surriel.com, syzkaller-bugs@googlegroups.com, vbabka@suse.cz, Jens Axboe , Catalin Marinas References: <68412d57.050a0220.2461cf.000e.GAE@google.com> From: David Hildenbrand Autocrypt: addr=david@redhat.com; keydata= xsFNBFXLn5EBEAC+zYvAFJxCBY9Tr1xZgcESmxVNI/0ffzE/ZQOiHJl6mGkmA1R7/uUpiCjJ dBrn+lhhOYjjNefFQou6478faXE6o2AhmebqT4KiQoUQFV4R7y1KMEKoSyy8hQaK1umALTdL QZLQMzNE74ap+GDK0wnacPQFpcG1AE9RMq3aeErY5tujekBS32jfC/7AnH7I0v1v1TbbK3Gp XNeiN4QroO+5qaSr0ID2sz5jtBLRb15RMre27E1ImpaIv2Jw8NJgW0k/D1RyKCwaTsgRdwuK Kx/Y91XuSBdz0uOyU/S8kM1+ag0wvsGlpBVxRR/xw/E8M7TEwuCZQArqqTCmkG6HGcXFT0V9 PXFNNgV5jXMQRwU0O/ztJIQqsE5LsUomE//bLwzj9IVsaQpKDqW6TAPjcdBDPLHvriq7kGjt WhVhdl0qEYB8lkBEU7V2Yb+SYhmhpDrti9Fq1EsmhiHSkxJcGREoMK/63r9WLZYI3+4W2rAc UucZa4OT27U5ZISjNg3Ev0rxU5UH2/pT4wJCfxwocmqaRr6UYmrtZmND89X0KigoFD/XSeVv jwBRNjPAubK9/k5NoRrYqztM9W6sJqrH8+UWZ1Idd/DdmogJh0gNC0+N42Za9yBRURfIdKSb B3JfpUqcWwE7vUaYrHG1nw54pLUoPG6sAA7Mehl3nd4pZUALHwARAQABzSREYXZpZCBIaWxk ZW5icmFuZCA8ZGF2aWRAcmVkaGF0LmNvbT7CwZgEEwEIAEICGwMGCwkIBwMCBhUIAgkKCwQW AgMBAh4BAheAAhkBFiEEG9nKrXNcTDpGDfzKTd4Q9wD/g1oFAl8Ox4kFCRKpKXgACgkQTd4Q 9wD/g1oHcA//a6Tj7SBNjFNM1iNhWUo1lxAja0lpSodSnB2g4FCZ4R61SBR4l/psBL73xktp rDHrx4aSpwkRP6Epu6mLvhlfjmkRG4OynJ5HG1gfv7RJJfnUdUM1z5kdS8JBrOhMJS2c/gPf wv1TGRq2XdMPnfY2o0CxRqpcLkx4vBODvJGl2mQyJF/gPepdDfcT8/PY9BJ7FL6Hrq1gnAo4 3Iv9qV0JiT2wmZciNyYQhmA1V6dyTRiQ4YAc31zOo2IM+xisPzeSHgw3ONY/XhYvfZ9r7W1l pNQdc2G+o4Di9NPFHQQhDw3YTRR1opJaTlRDzxYxzU6ZnUUBghxt9cwUWTpfCktkMZiPSDGd KgQBjnweV2jw9UOTxjb4LXqDjmSNkjDdQUOU69jGMUXgihvo4zhYcMX8F5gWdRtMR7DzW/YE BgVcyxNkMIXoY1aYj6npHYiNQesQlqjU6azjbH70/SXKM5tNRplgW8TNprMDuntdvV9wNkFs 9TyM02V5aWxFfI42+aivc4KEw69SE9KXwC7FSf5wXzuTot97N9Phj/Z3+jx443jo2NR34XgF 89cct7wJMjOF7bBefo0fPPZQuIma0Zym71cP61OP/i11ahNye6HGKfxGCOcs5wW9kRQEk8P9 M/k2wt3mt/fCQnuP/mWutNPt95w9wSsUyATLmtNrwccz63XOwU0EVcufkQEQAOfX3n0g0fZz Bgm/S2zF/kxQKCEKP8ID+Vz8sy2GpDvveBq4H2Y34XWsT1zLJdvqPI4af4ZSMxuerWjXbVWb T6d4odQIG0fKx4F8NccDqbgHeZRNajXeeJ3R7gAzvWvQNLz4piHrO/B4tf8svmRBL0ZB5P5A 2uhdwLU3NZuK22zpNn4is87BPWF8HhY0L5fafgDMOqnf4guJVJPYNPhUFzXUbPqOKOkL8ojk CXxkOFHAbjstSK5Ca3fKquY3rdX3DNo+EL7FvAiw1mUtS+5GeYE+RMnDCsVFm/C7kY8c2d0G NWkB9pJM5+mnIoFNxy7YBcldYATVeOHoY4LyaUWNnAvFYWp08dHWfZo9WCiJMuTfgtH9tc75 7QanMVdPt6fDK8UUXIBLQ2TWr/sQKE9xtFuEmoQGlE1l6bGaDnnMLcYu+Asp3kDT0w4zYGsx 5r6XQVRH4+5N6eHZiaeYtFOujp5n+pjBaQK7wUUjDilPQ5QMzIuCL4YjVoylWiBNknvQWBXS lQCWmavOT9sttGQXdPCC5ynI+1ymZC1ORZKANLnRAb0NH/UCzcsstw2TAkFnMEbo9Zu9w7Kv AxBQXWeXhJI9XQssfrf4Gusdqx8nPEpfOqCtbbwJMATbHyqLt7/oz/5deGuwxgb65pWIzufa N7eop7uh+6bezi+rugUI+w6DABEBAAHCwXwEGAEIACYCGwwWIQQb2cqtc1xMOkYN/MpN3hD3 AP+DWgUCXw7HsgUJEqkpoQAKCRBN3hD3AP+DWrrpD/4qS3dyVRxDcDHIlmguXjC1Q5tZTwNB boaBTPHSy/Nksu0eY7x6HfQJ3xajVH32Ms6t1trDQmPx2iP5+7iDsb7OKAb5eOS8h+BEBDeq 3ecsQDv0fFJOA9ag5O3LLNk+3x3q7e0uo06XMaY7UHS341ozXUUI7wC7iKfoUTv03iO9El5f XpNMx/YrIMduZ2+nd9Di7o5+KIwlb2mAB9sTNHdMrXesX8eBL6T9b+MZJk+mZuPxKNVfEQMQ a5SxUEADIPQTPNvBewdeI80yeOCrN+Zzwy/Mrx9EPeu59Y5vSJOx/z6OUImD/GhX7Xvkt3kq Er5KTrJz3++B6SH9pum9PuoE/k+nntJkNMmQpR4MCBaV/J9gIOPGodDKnjdng+mXliF3Ptu6 3oxc2RCyGzTlxyMwuc2U5Q7KtUNTdDe8T0uE+9b8BLMVQDDfJjqY0VVqSUwImzTDLX9S4g/8 kC4HRcclk8hpyhY2jKGluZO0awwTIMgVEzmTyBphDg/Gx7dZU1Xf8HFuE+UZ5UDHDTnwgv7E th6RC9+WrhDNspZ9fJjKWRbveQgUFCpe1sa77LAw+XFrKmBHXp9ZVIe90RMe2tRL06BGiRZr jPrnvUsUUsjRoRNJjKKA/REq+sAnhkNPPZ/NNMjaZ5b8Tovi8C0tmxiCHaQYqj7G2rgnT0kt WNyWQQ== Organization: Red Hat In-Reply-To: <68412d57.050a0220.2461cf.000e.GAE@google.com> X-Mimecast-Spam-Score: 1 X-Mimecast-MFC-PROC-ID: kXd-mMZIdPqWzqaVPfDidWqpkwobrvZ1iPrQATYaLec_1749103866 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Server: rspam08 X-Rspamd-Queue-Id: 62B59160002 X-Stat-Signature: xyafw79hdqga4hrgmnp5adt6oksa1xx4 X-Rspam-User: X-HE-Tag: 1749103871-403461 X-HE-Meta: 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 xrQ+ukpB e5eOggT4TAc2kejNRs/3ZJWU7zLRB+4KDTQFqktbulNdKSEHsqfe2hi5ydUFTKf+wDAtmNx+4qdRWelv5iuOxde3a8O4li6dmrQDartNf81RdCzPOF9pjPr5MsswKh13pr4heexm8JZDpNPs11oNZf0aauyDHe3BV5tI74a3RsDEPh1DpgvDRvdmNosxqSxYol1emh3gMCsRKABGV7NIdVNIeW5Mu9PYHKFLsspYbJV7+JpVqzPuGM0gnNDADt061UiiL27sMt3YuRMOapTcrReZFOZYEQGewWytqrECw5zXenN4fNOonJGpKafo4k5iD6qoSHtjlAfUwXz9KaSNFVeMLXBAFeyPZ9FsST+V7lPmVhk7kQy9Kkci55v+uQUAQGYRH3DybnRcRuheO9zv921s5AKgO9aC5X+ODB0BqyO0tvHTbyHvx+fGsmtg26HPi+HlQ3C1iTZ3VdRy/sHakKGa5cvF7DIQsEBz04CmUgvn/f7xXM7gAG/h/5lpVwEAV+kmJMXQVQxF+hTy1FOPE7Ez36lXn4ITVO79c/1mwOtgSSarQ6OSoURk3gu75NR70Qr9xKBmIigf8xLGhKoN+muJ0xNUAUsMHF2Mm1FRCh8erb+86aRGwix7iqi211eMGSk4hRX/oNF+YHWjhNJdRvEo3CR3xZKq1NAv3NTKHyDLF2fsHlJWMnByqG1J1/BwE8NMbSPspI9jvQgpF6gfX4mfx3fml7iFR94+aHNOr3XiGSmKkLKdw+/QoORS2cbfUmpd1f7Tb5HGVDs8rHW8Q1dp28kgPat90gFiBNc9Jt55X/2BPpJnp3YXLrO2lmjqUHPFp2+Vxtj4bmvMQDiJ7H9qhfNuwKI/1iKayA6QRj4NNN8l2wdtPNOtz06A8kuIhlYa5FNr4rck8XJ9MdK/drac+eR3paIg5ExkxiqihzFHXDnrASJJ4aGjMfZnt1baA3mdWKpyniaIfMtgVVEzIjR5PpJCh UCTFFnH5 K51BktbYMR/JmFYPSct3DjV+dWs8iIIWBtoAMrtA3c+nsPhTt3RZNYbn5mkP50BOI1QwL01mIQ8j4DtCc4OGEiHPPWM094yYOOOPvLTZ+pVEULRR/WrU2JVAUP+YU+dTVoAE/fDXkVvbGZS7zSOgy1IKgL1dES76mS6YOHZpZLRTJs81FFGOrghLV8N1i1+LLedBy5FI8KrWL6XNkDFofdYbJ/qL37QHPDOcD4QYo01De/8F/4SinppbMXveS8UAaXKFLEJ+KiRRbTqjsIts6kMeOmsmo5bE4WH97a8Czw63+d040x+RdA== X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On 05.06.25 07:38, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: d7fa1af5b33e Merge branch 'for-next/core' into for-kernelci Hmmm, another very odd page-table mapping related problem on that tree found on arm64 only: https://lore.kernel.org/all/f031d35b-13e3-4dec-a89c-f221331be735@kernel.dk/T/#mef6b1f00bd47724e3ba756d9c898128ab010ed34 Are we maybe corrupting ptes/pfns etc? > git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci > console output: https://syzkaller.appspot.com/x/log.txt?x=1757300c580000 > kernel config: https://syzkaller.appspot.com/x/.config?x=89c13de706fbf07a > dashboard link: https://syzkaller.appspot.com/bug?extid=3b220254df55d8ca8a61 > compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 > userspace arch: arm64 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=150f7ed4580000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13745970580000 > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/da97ad659b2c/disk-d7fa1af5.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/659e123552a8/vmlinux-d7fa1af5.xz > kernel image: https://storage.googleapis.com/syzbot-assets/6ec5dbf4643e/Image-d7fa1af5.gz.xz > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+3b220254df55d8ca8a61@syzkaller.appspotmail.com > > head: 05ffc00000000309 fffffdffc6628001 0080000000000000 0000000100000000 > head: ffffffff00000000 0000000000000024 00000000ffffffff 0000000000000200 > page dumped because: VM_BUG_ON_FOLIO(!pvmw.pte) > ------------[ cut here ]------------ > kernel BUG at mm/rmap.c:1955! > Internal error: Oops - BUG: 00000000f2000800 [#1] SMP > Modules linked in: > CPU: 1 UID: 0 PID: 9503 Comm: syz-executor315 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 > pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) > pc : try_to_unmap_one+0x2c54/0x2d40 mm/rmap.c:1955 > lr : try_to_unmap_one+0x2c54/0x2d40 mm/rmap.c:1955 > sp : ffff80009e906380 > x29: ffff80009e9065e0 x28: 0000000000000038 > x27: ffff0000c9dbee80 > x26: fffffdffc6628018 x25: fffffdffc6628030 x24: dfff800000000000 > x23: ffff0000d84efdc0 x22: ffff0000d84efde0 x21: 0000000000000001 > x20: fffffdffc6628000 x19: 05ffc00000020849 x18: 00000000ffffffff > x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 > x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 > x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : 664e624a89365e00 > x8 : 664e624a89365e00 x7 : 0000000000000001 x6 : 0000000000000001 > x5 : ffff80009e905a98 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 > x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000002f > Call trace: > try_to_unmap_one+0x2c54/0x2d40 mm/rmap.c:1955 (P) > rmap_walk_anon+0x47c/0x640 mm/rmap.c:2834 > rmap_walk+0x128/0x1e8 mm/rmap.c:2939 > try_to_unmap+0xc4/0x120 mm/rmap.c:2263 > unmap_poisoned_folio+0x278/0x4a4 mm/memory-failure.c:1610 > shrink_folio_list+0x608/0x4410 mm/vmscan.c:1131 > reclaim_folio_list+0xdc/0x5d0 mm/vmscan.c:2217 > reclaim_pages+0x420/0x544 mm/vmscan.c:2254 > madvise_cold_or_pageout_pte_range+0x1d38/0x20d4 mm/madvise.c:434 > walk_pmd_range mm/pagewalk.c:130 [inline] > walk_pud_range mm/pagewalk.c:226 [inline] > walk_p4d_range mm/pagewalk.c:264 [inline] > walk_pgd_range+0xb4c/0x16bc mm/pagewalk.c:305 > __walk_page_range+0x13c/0x654 mm/pagewalk.c:412 > walk_page_range_mm+0x4fc/0x7dc mm/pagewalk.c:505 > walk_page_range+0x80/0x98 mm/pagewalk.c:584 > madvise_pageout_page_range mm/madvise.c:617 [inline] > madvise_pageout mm/madvise.c:644 [inline] > madvise_vma_behavior mm/madvise.c:1269 [inline] > madvise_walk_vmas mm/madvise.c:1530 [inline] > madvise_do_behavior+0x1940/0x2908 mm/madvise.c:1695 > do_madvise mm/madvise.c:1782 [inline] > __do_sys_madvise mm/madvise.c:1790 [inline] > __se_sys_madvise mm/madvise.c:1788 [inline] > __arm64_sys_madvise+0x10c/0x154 mm/madvise.c:1788 > __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] > invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 > el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 > do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 > el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 > el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 > el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 > Code: f9404be0 b0051fc1 910c8021 97fdefe4 (d4210000) > ---[ end trace 0000000000000000 ]--- > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > If the report is already addressed, let syzbot know by replying with: > #syz fix: exact-commit-title > > If you want syzbot to run the reproducer, reply with: > #syz test: git://repo/address.git branch-or-commit-hash > If you attach or paste a git patch, syzbot will apply it before testing. > > If you want to overwrite report's subsystems, reply with: > #syz set subsystems: new-subsystem > (See the list of subsystem names on the web dashboard) > > If the report is a duplicate of another one, reply with: > #syz dup: exact-subject-of-another-report > > If you want to undo deduplication, reply with: > #syz undup > -- Cheers, David / dhildenb