From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 30EE8C77B73 for ; Thu, 27 Apr 2023 20:57:52 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 7007E6B0071; Thu, 27 Apr 2023 16:57:52 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 6B0DD6B0072; Thu, 27 Apr 2023 16:57:52 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 55126900002; Thu, 27 Apr 2023 16:57:52 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by kanga.kvack.org (Postfix) with ESMTP id 44E676B0071 for ; Thu, 27 Apr 2023 16:57:52 -0400 (EDT) Received: from smtpin17.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay10.hostedemail.com (Postfix) with ESMTP id F3FBFC03A5 for ; Thu, 27 Apr 2023 20:57:51 +0000 (UTC) X-FDA: 80728382784.17.6991E10 Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by imf02.hostedemail.com (Postfix) with ESMTP id 21DEB80011 for ; Thu, 27 Apr 2023 20:57:49 +0000 (UTC) Authentication-Results: imf02.hostedemail.com; dkim=pass header.d=gmail.com header.s=20221208 header.b=drl4ZY7j; spf=pass (imf02.hostedemail.com: domain of shy828301@gmail.com designates 209.85.215.182 as permitted sender) smtp.mailfrom=shy828301@gmail.com; dmarc=pass (policy=none) header.from=gmail.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1682629070; a=rsa-sha256; cv=none; b=MT6Ivt3KSTS7HcczRgZU0Qgw90piBNOuI+BWKVA2kDowwMMlYtFPLPAdtJc76nmEzTUtxd LHbAhWL4rzJk8WTdsO47hUgmDoUeOX6IYKo6m9tY2jeiX2LERYwHjmyPr3ZxTp/Q8M2yxG hzJ+8wJPs6Ll1MSeGhNNwEGX5ISXY/c= ARC-Authentication-Results: i=1; imf02.hostedemail.com; dkim=pass header.d=gmail.com header.s=20221208 header.b=drl4ZY7j; spf=pass (imf02.hostedemail.com: domain of shy828301@gmail.com designates 209.85.215.182 as permitted sender) smtp.mailfrom=shy828301@gmail.com; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1682629070; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=FLwuP92GDfOvPMRtZaBWMYpp0kL/TwjkG4jKKsiFN2s=; b=okLgb7KtvC9VR3D8FOZMynG3wNewkTUft0bbTZVmodag1j8jgV9X3KnCLboAQT7CE0qjj7 d3LMpOXSgCrZR5zS3nvgIctocguV50HU8Jb3IV18N3hJ8tMEiyfisGsfU4mViUV7666ySf QQ9WoLBA3X7yCUuiZOBjX7x7bKegod4= Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-51efefe7814so8882307a12.3 for ; Thu, 27 Apr 2023 13:57:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682629069; x=1685221069; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=FLwuP92GDfOvPMRtZaBWMYpp0kL/TwjkG4jKKsiFN2s=; b=drl4ZY7jDmLnog0HDTCuWMijhLCuhH06IYJxu+S/odKOccKbdgrB4n1lMu3/JeixKB s8goBo2rWSvaIlAuZMspNGyoOG9oMaALClUKCJchnAseKI2leiClT5t+PQbrEdiYR4rc cm1jVsuPr9CnW8ALy9QXqwpNqUPLoQW69k2e5vPqmTJ3xlOA/k92/nAvUdrvmiW+exiR ly/g5ypbuXQuCrYqrA38/3LEUjhH3sFhJ6lDWw7xbx+pj+GEdK2wwxnjmmIXvY2Su2V6 lfYMzYcATmdA0TT7WrZOWXwkCEJoxe1rjR5/57bCvWPQlSEwiobGRWF4OaYIZ3ZYzfJv Ok2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682629069; x=1685221069; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=FLwuP92GDfOvPMRtZaBWMYpp0kL/TwjkG4jKKsiFN2s=; b=U9EjhQVDPi/peA59DU0WrGszSImu/oGnW6Jnx+TVaZvAQQgjeYBGaLt0l0SsvL161i LoxHs1P8+O7lHLY58eWybHSGm83+FFTqx3dZsw11gFF6rE1wcWeNQXCzkjDZdnoLCyjH rUiCwWMDbOWCSfTtAJzk8xKuFEGPGVu9ObDS8XT0pulPk1cUIl9KsWxjvhCvQmMlXCiF gMJLpzw06VJ+OIe5Oewq9nx3OZR3sn7vXRdcLS8k3RutJ+xzMOYNm7jEz//IAWJ+8R0R Bse1Xfs66BagmyYxakeTJ01M/R5dj8DLk1cu/E2O1JcQp2jnbl/tUdEoGSGsxslDblQE owwg== X-Gm-Message-State: AC+VfDxPOyrIrusuH9LH7LWXjwcvvagmXz/SCA/L9PJ96epdqbSyq6Ho vhWe6EA63MPwXDsQaznIXxdz7uaJHuIuI9Mw4qI= X-Google-Smtp-Source: ACHHUZ6qjE0jNq9wyLzgnnXjTsWc9T6sewCPF11tTkGhKVcwqjx+7gcY3UFq7Vs2TebYMQk7zfOHg/0cnzAXFvzkMA4= X-Received: by 2002:a17:90a:988:b0:23d:376a:c2bc with SMTP id 8-20020a17090a098800b0023d376ac2bcmr3085174pjo.5.1682629068754; Thu, 27 Apr 2023 13:57:48 -0700 (PDT) MIME-Version: 1.0 References: <000000000000e6cd7405fa52e6ad@google.com> In-Reply-To: <000000000000e6cd7405fa52e6ad@google.com> From: Yang Shi Date: Thu, 27 Apr 2023 13:57:37 -0700 Message-ID: Subject: Re: [syzbot] [mm?] kernel BUG in folio_unlock To: syzbot , Hugh Dickins Cc: akpm@linux-foundation.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspam-User: X-Rspamd-Queue-Id: 21DEB80011 X-Rspamd-Server: rspam01 X-Stat-Signature: ajhcpbhkiz1o5ce4qg133i65dz8pk84b X-HE-Tag: 1682629069-610704 X-HE-Meta: U2FsdGVkX191jhmAlV+oodU+JP2cuOpgCwJCFjp5JiMcHG4ENHdVNQtAllNFGaNkwL+GbYY4qmHSmBQOI8ZPk2zAQtZZyxAVIhDsJ1kZ7YRqD65G71yL4zAmIjJyefnHpgHv88DZt9t9lgWhhrAecybpvAUbCJKZI6HbiL6JPuDa+R+UQE/HdYjjJM/A8fEm2JC1kmjghulFa6brZcqoTJym1EzMJd9fisAFxOxSwnK8pKgBluaUAIdhgyr0iXZhEfFRadrb1ILdRn31DchOzxqqvSxNUZVF8rqF2ZzRJE14fd4UnmhVEPeZBsHLYEP8ibKJ2aEO5bUgiyI4znbFJrtQjEtV3T1GqAaH/F76UZOVHKlXp0tZCsQf2jN3WyRNI0f30fewbOz+YplMOosHCSIEtRl8yC3AxoKOTQNcVhsOjLZZTKwSJAE7r++QGHohzVZAzPxjqtyE3PN99Wv2FXQ0WqBmmXzcYEXFn/Ey8GHMwJ1r5g2lPU3brOc3ILsPY3jqMmFNO9ABmjfS8XlTGxrd4mGN5x9xSDbfu2f0yXH+jnT3TEKUNbkkEFYyfI/5HoruvGTIPCh2slCK8jyfpneVyZZzXd7scMcLX37R+L/hCiYMI+YE7wr93Xp9wdn3bFZ936rwD4+/el/tv1SqCxmmxkMUZ2DPCPJd+AUbhJowzRDkUGJ4ddYyQbDARV46Lj6I/FQbE/MHwF4hR9OPbybCynlbsgta3ZwCXdksjC1dXmnUCE85og38F7XK2FxQFnm2n2yYbaHYR8RgXCYPmGg20J2ShHmpeJIWkrU3bfllAY2KHREpprvfZgCBhLsi6WHPaY3sqqmiphLn0jSw85GgDSzi4pl00wEcJ7E3IiZYRDNPqTGJ5czrxvXAzsebGr2RUR0peb+CXiQrbSzDisQS8ZIFdd9oWE51H8hQmm0rWXiLscbXGKaUvwl1bZZQMLX6k+PSP+ESnMZCZjm rrU8RPUf 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 C7RmBMhi cIOSzc3u6xVyG88Pinumiq/opWls7cx/AlLKF6U4VhD0SDLQ1ZN2sy1vhvWz6vSZZ6z3nCXygVEwD8Txr2kiSyDppnhRVrm/zuRX2xGNfM6nhPfgE3xNsI5iVWofyuZPGYeteyNDAVsrNiE2FSJAI5J1lp0UO4/o2umCGZMWu8hxmn4zbluLwZPNg7NMrUViE4hOhdRshz4B5vvhyWzTz8GaUQixHdc5B/+34Q497so= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, Apr 27, 2023 at 8:20=E2=80=AFAM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit: d3e1ee0e67e7 Add linux-next specific files for 20230421 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=3D110654a428000= 0 > kernel config: https://syzkaller.appspot.com/x/.config?x=3D53c789efbcc06= cf6 > dashboard link: https://syzkaller.appspot.com/bug?extid=3D1b2ce6d050776f4= 403cf > compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binuti= ls for Debian) 2.35.2 > > Unfortunately, I don't have any reproducer for this issue yet. > > Downloadable assets: > disk image: https://storage.googleapis.com/syzbot-assets/c558a9e1fe6a/dis= k-d3e1ee0e.raw.xz > vmlinux: https://storage.googleapis.com/syzbot-assets/2ec100a34c4c/vmlinu= x-d3e1ee0e.xz > kernel image: https://storage.googleapis.com/syzbot-assets/1afcd9936dc1/b= zImage-d3e1ee0e.xz > > IMPORTANT: if you fix the issue, please add the following tag to the comm= it: > Reported-by: syzbot+1b2ce6d050776f4403cf@syzkaller.appspotmail.com It looks like next-20230421 doesn't have Hugh's fix: https://lore.kernel.org/linux-mm/b6c881-c352-bb91-85a8-febeb09dfd71@google.= com/ Although I'm not sure whether this is the same problem or not, it doesn't hurt to retest with this fix. next-20230427 already included this fix. > > faultin_page mm/gup.c:925 [inline] > __get_user_pages+0x614/0x10e0 mm/gup.c:1147 > populate_vma_page_range+0x2df/0x420 mm/gup.c:1543 > __mm_populate+0x105/0x3b0 mm/gup.c:1652 > mm_populate include/linux/mm.h:3191 [inline] > vm_mmap_pgoff+0x2c6/0x3b0 mm/util.c:548 > ksys_mmap_pgoff+0x7d/0x5a0 mm/mmap.c:1440 > do_syscall_x64 arch/x86/entry/common.c:50 [inline] > do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 > entry_SYSCALL_64_after_hwframe+0x63/0xcd > ------------[ cut here ]------------ > kernel BUG at mm/filemap.c:1529! > invalid opcode: 0000 [#1] PREEMPT SMP KASAN > CPU: 0 PID: 7377 Comm: syz-executor.1 Not tainted 6.3.0-rc7-next-20230421= -syzkaller #0 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G= oogle 04/14/2023 > RIP: 0010:folio_unlock+0xb2/0xd0 mm/filemap.c:1529 > Code: e8 63 4b d4 ff 48 89 ef 31 f6 e8 f9 fc ff ff 5b 5d e9 52 4b d4 ff e= 8 4d 4b d4 ff 48 c7 c6 c0 a7 56 8a 48 89 ef e8 ee e0 0f 00 <0f> 0b 48 89 df= e8 74 2a 27 00 e9 7c ff ff ff 66 66 2e 0f 1f 84 00 > RSP: 0018:ffffc9001531f7a8 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 > RDX: ffff88803c570000 RSI: ffffffff81af9a12 RDI: 0000000000000000 > RBP: ffffea0002128000 R08: 0000000000000001 R09: ffffffff8e796e17 > R10: fffffbfff1cf2dc2 R11: 0000000000000000 R12: ffffc9001531f8d8 > R13: ffffc9001531f8d0 R14: ffffc9001531f8d8 R15: 000000000000001e > FS: 00007fe54afbc700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000= 000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 00007eff0bb831b8 CR3: 0000000023ba2000 CR4: 00000000003506f0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > Call Trace: > > collapse_file+0x1f6d/0x5db0 mm/khugepaged.c:2316 > hpage_collapse_scan_file+0xbef/0x1550 mm/khugepaged.c:2415 > madvise_collapse+0x53b/0xca0 mm/khugepaged.c:2877 > madvise_vma_behavior+0x649/0x20a0 mm/madvise.c:1074 > madvise_walk_vmas+0x1c7/0x2b0 mm/madvise.c:1248 > do_madvise.part.0+0x287/0x5e0 mm/madvise.c:1428 > do_madvise mm/madvise.c:1441 [inline] > __do_sys_madvise mm/madvise.c:1441 [inline] > __se_sys_madvise mm/madvise.c:1439 [inline] > __x64_sys_madvise+0x117/0x150 mm/madvise.c:1439 > do_syscall_x64 arch/x86/entry/common.c:50 [inline] > do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 > entry_SYSCALL_64_after_hwframe+0x63/0xcd > RIP: 0033:0x7fe54c48c169 > Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f= 7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff= ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 > RSP: 002b:00007fe54afbc168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c > RAX: ffffffffffffffda RBX: 00007fe54c5ac120 RCX: 00007fe54c48c169 > RDX: 0000000000000019 RSI: 000000000060005f RDI: 0000000020000000 > RBP: 00007fe54c4e7ca1 R08: 0000000000000000 R09: 0000000000000000 > R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 > R13: 00007fff8070a1ff R14: 00007fe54afbc300 R15: 0000000000022000 > > Modules linked in: > ---[ end trace 0000000000000000 ]--- > RIP: 0010:folio_unlock+0xb2/0xd0 mm/filemap.c:1529 > Code: e8 63 4b d4 ff 48 89 ef 31 f6 e8 f9 fc ff ff 5b 5d e9 52 4b d4 ff e= 8 4d 4b d4 ff 48 c7 c6 c0 a7 56 8a 48 89 ef e8 ee e0 0f 00 <0f> 0b 48 89 df= e8 74 2a 27 00 e9 7c ff ff ff 66 66 2e 0f 1f 84 00 > RSP: 0018:ffffc9001531f7a8 EFLAGS: 00010293 > RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 > RDX: ffff88803c570000 RSI: ffffffff81af9a12 RDI: 0000000000000000 > RBP: ffffea0002128000 R08: 0000000000000001 R09: ffffffff8e796e17 > R10: fffffbfff1cf2dc2 R11: 0000000000000000 R12: ffffc9001531f8d8 > R13: ffffc9001531f8d0 R14: ffffc9001531f8d8 R15: 000000000000001e > FS: 00007fe54afbc700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000= 000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 00007fd2aa586058 CR3: 0000000023ba2000 CR4: 00000000003506e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > If the bug is already fixed, let syzbot know by replying with: > #syz fix: exact-commit-title > > If you want to change bug's subsystems, reply with: > #syz set subsystems: new-subsystem > (See the list of subsystem names on the web dashboard) > > If you want to unassign a label, reply with: > #syz unset some-label > > If the bug is a duplicate of another bug, reply with: > #syz dup: exact-subject-of-another-report > > If you want to undo deduplication, reply with: > #syz undup >