From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 11FE6C54E5D for ; Mon, 18 Mar 2024 21:03:19 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 8F8818E0006; Mon, 18 Mar 2024 17:03:19 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 8A8838E0001; Mon, 18 Mar 2024 17:03:19 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 749038E0006; Mon, 18 Mar 2024 17:03:19 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id 6114B8E0001 for ; Mon, 18 Mar 2024 17:03:19 -0400 (EDT) Received: from smtpin16.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id 01BF01605F2 for ; Mon, 18 Mar 2024 21:03:18 +0000 (UTC) X-FDA: 81911385318.16.FB65DD2 Received: from mail-oo1-f47.google.com (mail-oo1-f47.google.com [209.85.161.47]) by imf29.hostedemail.com (Postfix) with ESMTP id 10090120002 for ; Mon, 18 Mar 2024 21:03:16 +0000 (UTC) Authentication-Results: imf29.hostedemail.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=d9ifsr8Y; spf=pass (imf29.hostedemail.com: domain of 21cnbao@gmail.com designates 209.85.161.47 as permitted sender) smtp.mailfrom=21cnbao@gmail.com; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1710795797; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=TdUoNk+AdcNzgEKbiFEZWryIFkFAsqcjJShgKTbGrcA=; b=h5MC4exFw3xXyQwxZAy+F66MpBmQ5IDAluAKTPXUmyz/caUVoIPyZMZS3EFeWEC9OX6uvv daW4gVF/pMYqjvbIjRiCTOHzbU1Q2NSKb53uGTbjPcbhaypLtLhadgjqHKmQVk1fI6w2mD wudjRCwmzk5mytKjl746/8v3Wikrkqc= ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1710795797; a=rsa-sha256; cv=none; b=645kCCLLRoTorbU4VGWu6GAc0DMzFTOF7pwQkH0o12iIlqMwO30UXb8pLW6r6HUJl4r0Ug 77azOhWErdV9yXKHkdjyVgX0Pml9t3NZmqu1HVRDsOahx6h7FOPJQxffEtAL9NUzv6/dJK mgomtfGB6OSMzDhcAzMj0GcrLFn00wo= ARC-Authentication-Results: i=1; imf29.hostedemail.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=d9ifsr8Y; spf=pass (imf29.hostedemail.com: domain of 21cnbao@gmail.com designates 209.85.161.47 as permitted sender) smtp.mailfrom=21cnbao@gmail.com; dmarc=pass (policy=none) header.from=gmail.com Received: by mail-oo1-f47.google.com with SMTP id 006d021491bc7-5a47cecb98bso2044060eaf.0 for ; Mon, 18 Mar 2024 14:03:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710795796; x=1711400596; darn=kvack.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=TdUoNk+AdcNzgEKbiFEZWryIFkFAsqcjJShgKTbGrcA=; b=d9ifsr8YGv6dbpDwYC2wDsUMEYMqSwaIjYS1IENy3lQcPrMAjJv8eBBPJy09PQ7O+s 3yDPQXV3DK+wbuTlqMwYfqnV2sAa+rKiJTKPj6wRq8AyRRgrrZYtgt6yeMSukF/VSEZs zDEgthRJarTzFIJM8oCOeJ8exFQ7mPb3W671qaO81TlKK1CDUKUqZSxIO9u2f6hMga7R rvzaqcvFuHTEfDHIZfwsFFYR934ucajWa1KO37hzlkWiiOJiO5cWSIsNIyiA+JMM96Xo AfLpVTMrGnFI2fk460A18oEY1c5ZJrlz7FC8fOHJoAZJdbVqpFQjb1WexHDBkK2TSlaC WfZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710795796; x=1711400596; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=TdUoNk+AdcNzgEKbiFEZWryIFkFAsqcjJShgKTbGrcA=; b=Myo66nF9XwaEoU6ARD3EqLS+TYjlOTc/sKkAfLYuWLdnxwq948b+LWOT2DwEjUGs4y WQ6Cjkr9O/+4X5e8gEbfmuQ7sPRKuLuTHR69riXkYGfSWm1FASmT6DpT3yszVNfhCMhg ri+zD/+UxIrxp1Cp6eFdYGWEeMkdlEoLXBPRbD1UrsE+dUEXbRUvnqsu5NEyJVczC7W5 fMBfj1tpGz8fqbKHTL69/g4p1hFYse3e3e4VHl2+Amf3prIupevuXmZyuCb0I3oWyazj vql0+11ps++PRboRf7Xnuw08ZnUDR3BztlWMj8nINLAwrZ5GPsc8WvmxuFYEXqMfXg7p d1AQ== X-Forwarded-Encrypted: i=1; AJvYcCU3sJmHhNed+EkasT3yYvWN2dW3GfaCrB2lXNEMnLzXUNi1p7oa49hC846rJz7eq0yR30vrYEqOUfpZphkHGbg5alU= X-Gm-Message-State: AOJu0YzFJ/OQxYAuSj3EsDdEpo/F2UsJISO1x+ErJ+KjlJvgqXT+44sK yByyGlu53nIEFL/cY1vEalUJX2aJUgcH4if7CoiA1kRIxeav2gyn/YNEm0HsRJyxymHxsUVR8rf jim0o6ea+78z6qrH3ZRF90iyQQIQ= X-Google-Smtp-Source: AGHT+IFNBhKxlZShP9RB+uxdatc2C31HCBGRF3jiaJEyJeXWYONyDbOmGodUj4DNAbOkm0SemGe7bemw87K/4hqPFUg= X-Received: by 2002:a05:6820:54:b0:5a4:d09f:1eea with SMTP id v20-20020a056820005400b005a4d09f1eeamr547627oob.0.1710795796106; Mon, 18 Mar 2024 14:03:16 -0700 (PDT) MIME-Version: 1.0 References: <20240318204212.36505-1-21cnbao@gmail.com> <0000000000009221d60613f58726@google.com> In-Reply-To: <0000000000009221d60613f58726@google.com> From: Barry Song <21cnbao@gmail.com> Date: Tue, 19 Mar 2024 10:03:04 +1300 Message-ID: Subject: Re: [syzbot] [mm?] kernel BUG in sg_init_one To: syzbot , ira.weiny@intel.com Cc: akpm@linux-foundation.org, chengming.zhou@linux.dev, hannes@cmpxchg.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, nphamcs@gmail.com, syzkaller-bugs@googlegroups.com, yosryahmed@google.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 10090120002 X-Rspam-User: X-Stat-Signature: zpmjdthi1b11nfzt873aoqkux4kr6uzr X-Rspamd-Server: rspam03 X-HE-Tag: 1710795796-697796 X-HE-Meta: U2FsdGVkX19deFSMfnmT6ukmtyW8jtl+y+GeJLyHgIgauv0DJ0azkBryrJNV/aWLeJvILhLN0RTMDFc1gG8OHPiZs57Yjvo/5pHI6kXh+m2KQ0QzR7fR+ukOwLKo8Pcfh3sHvvrgs9th5v7luJQmCxkXb3dmCKLPVWjvyHMIyI/AifnvqdkfUP6GOrBP+ukdmS45tIf2uAFXAnWBgGyPtDJpEtOrn0Wgiy7TqdT07fzo7/0I2d5HcisBustPzfhYqFuCm1j6tFyqoFjNv2cQgyRqLAD5kEkOw57uIvmSA2vgLcaOWuQwSjArt8CGmgnZ2XbD7911OvNZ9V5l19/SA10WiH443i9Y3GrpFObUCE6l/gDKTFRZvVUIeVu1QMztsT+geXuvNbeLmCVkkdg6aqd3ToKF3cZIK56rxjS1V3Sn5YhvqgfU36/P+cNH/3i68cDRssMc5nLm1VDVz4VJWi+YtIDqdf2mQR94p2j50PMxLzb8y7lBOVD325l5N/Bfvi6WRFU3YQisOPaJKr3sFWprhAYWDeiZbmkSdypxpvIUXHVSsrHhRU8hYMcTHuo8hoTkwyF8ePJayXdpaq/3YmNQzN+pFri2zPJ/KWNypUcFJ+gHn36uiSpOOTRurY+CPitMNqQI6FbHpmScvQ5fdkvcVXz/VGoGWfPz0bOPuwqXT+jh3duP3iWKLyWKA0rU1pCOBxQ/9WHEi1D0XEMFzkiub0O20TOP958wQ9UFO+D7JfstO62DYWMj+XTomLR8TxqD2bhIzgKXnRMHvRT/foyhkf4m1/2xvz9vWGTxMgNeNeKMifQbsS2bFfsv0YBpvuYroLBtKULqjF1Aiaymn9qGNIKpVo70gKKMKfAwMH9h6MZ1Lqfumxl5ebAvpx22OXTBBYk3tje4RnozIHzGnTz/zteX5R1GNDaMXNXK/vraOlX9pBW9L7QaHWM8q9gBIceEUYFRmIadWyE0Wj1 Ea9xHSot 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Tue, Mar 19, 2024 at 9:52=E2=80=AFAM syzbot wrote: > > Hello, > > syzbot has tested the proposed patch but the reproducer is still triggeri= ng an issue: > WARNING in __kmap_to_page > > ------------[ cut here ]------------ > WARNING: CPU: 0 PID: 3529 at mm/highmem.c:167 __kmap_to_page+0x100/0x194 = mm/highmem.c:167 > Modules linked in: + Ira Hi Ira, I noticed this warning is coming from commit ef6e06b2ef87077. you have a commit message like " Because it is intended to remove kmap_to_page() add a warn on once to the kmap checks to flag potential issues early. " Do we have a replacement for kmap_to_page()? The background is that we want to pass a highmem buffer to sg_set_page() but we only know its virt address. > Kernel panic - not syncing: kernel: panic_on_warn set ... > CPU: 0 PID: 3529 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller #0 > Hardware name: ARM-Versatile Express > Backtrace: > [<8185fe64>] (dump_backtrace) from [<8185ff60>] (show_stack+0x18/0x1c arc= h/arm/kernel/traps.c:256) > r7:00000000 r6:82622e44 r5:00000000 r4:81fc00fc > [<8185ff48>] (show_stack) from [<8187d720>] (__dump_stack lib/dump_stack.= c:88 [inline]) > [<8185ff48>] (show_stack) from [<8187d720>] (dump_stack_lvl+0x54/0x7c lib= /dump_stack.c:114) > [<8187d6cc>] (dump_stack_lvl) from [<8187d760>] (dump_stack+0x18/0x1c lib= /dump_stack.c:123) > r5:00000000 r4:82857d18 > [<8187d748>] (dump_stack) from [<81860a08>] (panic+0x120/0x358 kernel/pan= ic.c:348) > [<818608e8>] (panic) from [<80243844>] (check_panic_on_warn kernel/panic.= c:241 [inline]) > [<818608e8>] (panic) from [<80243844>] (print_tainted+0x0/0xa0 kernel/pan= ic.c:236) > r3:8260c584 r2:00000001 r1:81fa8e48 r0:81fb09f0 > r7:80477264 > [<802437d0>] (check_panic_on_warn) from [<80243a38>] (__warn+0x7c/0x180 k= ernel/panic.c:694) > [<802439bc>] (__warn) from [<80243cb4>] (warn_slowpath_fmt+0x178/0x1f4 ke= rnel/panic.c:719) > r8:00000009 r7:81fd71bc r6:df9b1bf4 r5:83682400 r4:00000000 > [<80243b40>] (warn_slowpath_fmt) from [<80477264>] (__kmap_to_page+0x100/= 0x194 mm/highmem.c:167) > r10:00000000 r9:ff7e7f14 r8:83e402c0 r7:dedf0b48 r6:800fd004 r5:ffefd000 > r4:7fefd004 > [<80477164>] (__kmap_to_page) from [<804c248c>] (kmap_to_page include/lin= ux/highmem-internal.h:63 [inline]) > [<80477164>] (__kmap_to_page) from [<804c248c>] (zswap_decompress+0xc0/0x= 23c mm/zswap.c:1090) > r9:ff7e7f14 r8:83e402c0 r7:dedf0b48 r6:ffefd004 r5:840fb8e8 r4:ff7e7ef4 > [<804c23cc>] (zswap_decompress) from [<804c449c>] (zswap_load+0x15c/0x198= mm/zswap.c:1638) > r9:846e3240 r8:846e3240 r7:846e3244 r6:dedf0b48 r5:00000010 r4:840fb8e8 > [<804c4340>] (zswap_load) from [<804b9644>] (swap_read_folio+0xa8/0x498 m= m/page_io.c:518) > r9:8420fa00 r8:83682400 r7:00000000 r6:df9b1d4c r5:00000000 r4:dedf0b48 > [<804b959c>] (swap_read_folio) from [<804bb064>] (swap_cluster_readahead+= 0x1c4/0x34c mm/swap_state.c:684) > r10:00000000 r9:00000017 r8:df9b1d4b r7:00000000 r6:00000000 r5:00100cca > r4:00000010 > [<804baea0>] (swap_cluster_readahead) from [<804bb3b8>] (swapin_readahead= +0x68/0x4a8 mm/swap_state.c:904) > r10:df9b1eb8 r9:00000000 r8:00100cca r7:8371e2a0 r6:00000012 r5:00000000 > r4:00000001 > [<804bb350>] (swapin_readahead) from [<8047cde0>] (do_swap_page+0x200/0xc= c4 mm/memory.c:4046) > r10:00000040 r9:00000000 r8:8420fa00 r7:8371e2a0 r6:00000012 r5:00000000 > r4:df9b1eb8 > [<8047cbe0>] (do_swap_page) from [<8047e6c4>] (handle_pte_fault mm/memory= .c:5301 [inline]) > [<8047cbe0>] (do_swap_page) from [<8047e6c4>] (__handle_mm_fault mm/memor= y.c:5439 [inline]) > [<8047cbe0>] (do_swap_page) from [<8047e6c4>] (handle_mm_fault+0x3d8/0x12= b8 mm/memory.c:5604) > r10:00000040 r9:83dfb900 r8:83682400 r7:8371e2a0 r6:001403b8 r5:83682400 > r4:00001254 > [<8047e2ec>] (handle_mm_fault) from [<80215da8>] (do_page_fault+0x1c8/0x3= a8 arch/arm/mm/fault.c:292) > r10:00000007 r9:83dfb900 r8:83682400 r7:00000207 r6:00000254 r5:001403b8 > r4:df9b1fb0 > [<80215be0>] (do_page_fault) from [<80216170>] (do_DataAbort+0x38/0xa8 ar= ch/arm/mm/fault.c:558) > r10:7eded670 r9:00000000 r8:80215be0 r7:df9b1fb0 r6:001403b8 r5:00000207 > r4:8261d0e0 > [<80216138>] (do_DataAbort) from [<80200e3c>] (__dabt_usr+0x5c/0x60 arch/= arm/kernel/entry-armv.S:427) > Exception stack(0xdf9b1fb0 to 0xdf9b1ff8) > 1fa0: 00000000 00000000 00000000 0000= 0000 > 1fc0: 00000002 7eded61c 00000000 000001f4 00140000 00000000 7eded670 0000= 1238 > 1fe0: 00000000 7eded5a8 00000001 00021804 60000010 ffffffff > r8:824a9044 r7:83682400 r6:ffffffff r5:60000010 r4:00021804 > Rebooting in 86400 seconds.. > > > Tested on: > > commit: e5eb28f6 Merge tag 'mm-nonmm-stable-2024-03-14-09-36' .. > git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li= nux.git > console output: https://syzkaller.appspot.com/x/log.txt?x=3D1491ea6e18000= 0 > kernel config: https://syzkaller.appspot.com/x/.config?x=3D19bb57c23dffc= 38e > dashboard link: https://syzkaller.appspot.com/bug?extid=3Dadbc983a1588b78= 05de3 > compiler: arm-linux-gnueabi-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (= GNU Binutils for Debian) 2.40 > userspace arch: arm > patch: https://syzkaller.appspot.com/x/patch.diff?x=3D1265154618= 0000 > Thanks Barry