syzbot


WARNING in hugetlb_wp

Status: fixed on 2023/02/24 13:50
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+f0b97304ef90f0d0b1dc@syzkaller.appspotmail.com
Fix commit: f347454d0341 mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
First crash: 550d, last: 540d
Cause bisection: failed (error log, bisect log)
  
Discussions (2)
Title Replies (including bot) Last reply
[PATCH v1] mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings 13 (13) 2022/11/23 08:40
[syzbot] WARNING in hugetlb_wp 3 (4) 2022/10/31 14:13

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3601 at mm/hugetlb.c:5313 hugetlb_wp+0x20a/0x1af0 mm/hugetlb.c:5313
Modules linked in:
CPU: 0 PID: 3601 Comm: syz-executor140 Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
RIP: 0010:hugetlb_wp+0x20a/0x1af0 mm/hugetlb.c:5313
Code: ea 03 80 3c 02 00 0f 85 31 14 00 00 49 8b 5f 20 31 ff 48 89 dd 83 e5 02 48 89 ee e8 50 a8 b7 ff 48 85 ed 75 5b e8 56 ab b7 ff <0f> 0b 41 bd 40 00 00 00 e8 49 ab b7 ff 48 b8 00 00 00 00 00 fc ff
RSP: 0018:ffffc90003b9f620 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000008640070 RCX: 0000000000000000
RDX: ffff8880787f3a80 RSI: ffffffff81c5013a RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a841800
R13: 0000000000000000 R14: ffffffff91218f38 R15: ffff88801bf51ca8
FS:  00005555563c6300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc69c9caf8 CR3: 0000000079cc2000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 hugetlb_no_page mm/hugetlb.c:5755 [inline]
 hugetlb_fault+0x19cc/0x2060 mm/hugetlb.c:5874
 follow_hugetlb_page+0x3f3/0x1850 mm/hugetlb.c:6301
 __get_user_pages+0x2cb/0xf10 mm/gup.c:1202
 __get_user_pages_locked mm/gup.c:1434 [inline]
 __get_user_pages_remote+0x18f/0x830 mm/gup.c:2187
 get_user_pages_remote+0x84/0xc0 mm/gup.c:2260
 __access_remote_vm+0x287/0x6b0 mm/memory.c:5517
 ptrace_access_vm+0x181/0x1d0 kernel/ptrace.c:61
 generic_ptrace_pokedata kernel/ptrace.c:1323 [inline]
 ptrace_request+0xb46/0x10c0 kernel/ptrace.c:1046
 arch_ptrace+0x36/0x510 arch/x86/kernel/ptrace.c:828
 __do_sys_ptrace kernel/ptrace.c:1296 [inline]
 __se_sys_ptrace kernel/ptrace.c:1269 [inline]
 __x64_sys_ptrace+0x178/0x2a0 kernel/ptrace.c:1269
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f7238da3399
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc69c9caf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
RAX: ffffffffffffffda RBX: 00007ffc69c9cb40 RCX: 00007f7238da3399
RDX: 00000000200000c0 RSI: 0000000000000002 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000800000015 R09: 0000000800000015
R10: 00000000000003ff R11: 0000000000000246 R12: 00007ffc69c9cb14
R13: 00007ffc69c9cb20 R14: 00007ffc69c9cb18 R15: 0000000000000000
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/04 07:47 upstream f2f32f8af2b0 6d752409 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in hugetlb_wp
2022/10/25 05:35 upstream 247f34f7b803 ff2fe65d .config console log report syz C [disk image] [vmlinux] ci-upstream-kasan-gce WARNING in hugetlb_wp
2022/10/25 05:12 upstream 247f34f7b803 ff2fe65d .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce WARNING in hugetlb_wp
* Struck through repros no longer work on HEAD.