From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.1 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_ADSP_CUSTOM_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D2D16C433DB for ; Wed, 27 Jan 2021 17:02:21 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 417C164DA1 for ; Wed, 27 Jan 2021 17:02:21 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 417C164DA1 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=WRtS65LxBWgTQBI9oG3cgd3Wzi1xZ34pr4/JUNZZYIU=; b=ofznDyY9jc+X4XzDH5jj2YijT EFD7YCbnHTyVvdziSIpJkgvyUbijFvCme8wgq1vuAScF5AETViKw6SYQyHigSdCqIyR2xtLxZWEor 9vpR3mlM8u2Mce2AZaCBjTRUTN1285SQtOyRh90En2D4Qyyd9X2cbRsTzESBL7Js9Cchx6tSdw+9P aCipz0l4x0TZK7oc8kkqTy9ZZc9Q/z/4209OMTnpDwmU8dkz9V2vV1x/F7e8Lok/dlfJ6v8o8CKAA o3dgnyGZm3kC++bii3cisRjfgPjaFHlc4dDWuvZI69QmV/nKowkpw4EP5bRbwXfA+Euwiybfp5eD3 urkBfomJg==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1l4oBW-0000Ej-31; Wed, 27 Jan 2021 17:00:50 +0000 Received: from mail-qt1-x82c.google.com ([2607:f8b0:4864:20::82c]) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1l4oBQ-0000C6-Pw for linux-arm-kernel@lists.infradead.org; Wed, 27 Jan 2021 17:00:46 +0000 Received: by mail-qt1-x82c.google.com with SMTP id e15so1877767qte.9 for ; Wed, 27 Jan 2021 09:00:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=db8XM4dDylReM65JbzNSasWwDXexPWp2d9EwGe45kHY=; b=k5ulvU/uNcsW9egNXbQmS79RLWI2XUDJzlsC27p+vp0ZtWv8bT8AKEawVXlwSzMykS dGH3knQHJvzgiNRGOfgpI0rYBX7LsZVlBFLcMU/u7jcfliVZLMw+W0w48j+FK/Ae51vi 20aV1+sbjqKi6tU8Pcnn5WyHdE2Ac33dJFTpDTQu8HVXuOE+/EBQ4vKlS7adGhqqi3Gu mFaZ/mAGohb0ZjpIGAlqeYPYw2SO5DS5GNcuw0WChMy4oBIuBjbYsoMOwc0QTM11Rrfv T0reg2YhBcvk9jiLECJP5JvvICPycOMmZA55yAMi7hDt4BMbM5kOr7N1wWp4zwP9MRLt lnsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=db8XM4dDylReM65JbzNSasWwDXexPWp2d9EwGe45kHY=; b=L54ASMiH9xI+0oI++7fmivZBYtPszkf1rsErQS3HI2e+auaNqBpfLe1fD56Bd5tvdR woJqIf+4b5YckJraJ6z6XBSoVDJEKg/5UyiR0Yq2+pWY4W2gjcFIPFXauktgM6Jl4U0l wbpLjXs4w+RFygHJAYsAvl4jSX1l4Nk38eDuTyWbAKVXp3PzeCt4Uj+OgsQh57oGSCLs t8lnRV1Lm2PEe3exhqeXG80Lr3GKOVhDKwVldW2b5TqRih46WIzQaH4EroC6ojolTnyt N8yPTKQK3SYDTvv2yB8lgAxVep1FAycickndSe3UihMUBj4G33Ofzx9LeT2HidUsdAgo uCEw== X-Gm-Message-State: AOAM533o5ASIhquYZPBcDq4Cj/toisGpF4Yqr4y04mvwRihEkxcD7FUN PC1ieay4TfLZ53LE/4kUzY7rgLESmsefr3NljVpq/Q== X-Google-Smtp-Source: ABdhPJwGirSUuNT1ehH6WWTFWzEjVR4jIbbuhcvD5p4UHiGYn6amech3gczPi69huDbUA8/FMe8MZkhpgcqANWDBaDY= X-Received: by 2002:ac8:7c82:: with SMTP id y2mr10448956qtv.67.1611766842364; Wed, 27 Jan 2021 09:00:42 -0800 (PST) MIME-Version: 1.0 References: <0000000000009bbb7905b9e4a624@google.com> In-Reply-To: <0000000000009bbb7905b9e4a624@google.com> From: Dmitry Vyukov Date: Wed, 27 Jan 2021 18:00:30 +0100 Message-ID: Subject: Re: WARNING in __do_kernel_fault To: syzbot X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210127_120044_947889_E7D8C503 X-CRM114-Status: GOOD ( 21.65 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Mark Rutland , Catalin Marinas , syzkaller-bugs , LKML , Andrey Konovalov , Will Deacon , Dave Martin , Linux ARM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org On Wed, Jan 27, 2021 at 5:56 PM syzbot wrote: > > Hello, > > syzbot found the following issue on: > > HEAD commit: 2ab38c17 mailmap: remove the "repo-abbrev" comment > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=15a25264d00000 > kernel config: https://syzkaller.appspot.com/x/.config?x=ad43be24faf1194c > dashboard link: https://syzkaller.appspot.com/bug?extid=45b6fce29ff97069e2c5 > userspace arch: arm64 > > Unfortunately, I don't have any reproducer for this issue yet. > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > Reported-by: syzbot+45b6fce29ff97069e2c5@syzkaller.appspotmail.com This happens on arm64 instance with mte enabled. There is a GPF in reiserfs_xattr_init on x86_64 reported: https://syzkaller.appspot.com/bug?id=8abaedbdeb32c861dc5340544284167dd0e46cde so I would assume it's just a plain NULL deref. Is this WARNING not indicative of a kernel bug? Or there is something special about this particular NULL deref? > REISERFS (device loop0): Using rupasov hash to sort names > ------------[ cut here ]------------ > Ignoring spurious kernel translation fault at virtual address 0000000000000030 > WARNING: CPU: 1 PID: 5380 at arch/arm64/mm/fault.c:364 __do_kernel_fault+0x198/0x1c0 arch/arm64/mm/fault.c:364 > Modules linked in: > CPU: 1 PID: 5380 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller-00037-g2ab38c17aac1 #0 > Hardware name: linux,dummy-virt (DT) > pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--) > pc : __do_kernel_fault+0x198/0x1c0 arch/arm64/mm/fault.c:364 > lr : __do_kernel_fault+0x198/0x1c0 arch/arm64/mm/fault.c:364 > sp : ffff800014933830 > x29: ffff800014933830 x28: f1ff00000c28bc00 > x27: ffff80001231db80 x26: f0ff00002054a0b8 > x25: 0000000000000000 x24: f1ff000004217680 > x23: 0000000097c78006 x22: 0000000000000030 > x21: 0000000000000025 x20: ffff800014933960 > x19: 0000000097c78006 x18: 00000000fffffffb > x17: 0000000000000000 x16: 0000000000000000 > x15: 0000000000000020 x14: 6c656e72656b2073 > x13: 00000000000006f9 x12: ffff8000149334e0 > x11: ffff80001313b450 x10: 00000000ffffe000 > x9 : ffff80001313b450 x8 : ffff80001308b450 > x7 : ffff80001313b450 x6 : 0000000000000000 > x5 : ffff00007fbe1948 x4 : 0000000000015ff5 > x3 : 0000000000000001 x2 : 0000000000000000 > x1 : 0000000000000000 x0 : f1ff00000c28bc00 > Call trace: > __do_kernel_fault+0x198/0x1c0 arch/arm64/mm/fault.c:364 > do_page_fault+0x1c0/0x3a0 arch/arm64/mm/fault.c:649 > do_translation_fault+0xb4/0xc4 arch/arm64/mm/fault.c:660 > do_mem_abort+0x44/0xbc arch/arm64/mm/fault.c:793 > el1_abort+0x40/0x6c arch/arm64/kernel/entry-common.c:118 > el1_sync_handler+0xb0/0xcc arch/arm64/kernel/entry-common.c:209 > el1_sync+0x70/0x100 arch/arm64/kernel/entry.S:656 > reiserfs_xattr_jcreate_nblocks fs/reiserfs/xattr.h:79 [inline] > reiserfs_security_init+0x98/0x10c fs/reiserfs/xattr_security.c:70 > reiserfs_mkdir+0xf4/0x320 fs/reiserfs/namei.c:821 > xattr_mkdir.constprop.0+0x24/0x3c fs/reiserfs/xattr.c:76 > create_privroot fs/reiserfs/xattr.c:889 [inline] > reiserfs_xattr_init+0x16c/0x320 fs/reiserfs/xattr.c:1011 > reiserfs_fill_super+0xa34/0xd20 fs/reiserfs/super.c:2177 > mount_bdev+0x1c4/0x1f0 fs/super.c:1366 > get_super_block+0x1c/0x30 fs/reiserfs/super.c:2606 > legacy_get_tree+0x34/0x64 fs/fs_context.c:592 > vfs_get_tree+0x2c/0xf0 fs/super.c:1496 > do_new_mount fs/namespace.c:2881 [inline] > path_mount+0x3e8/0xaf0 fs/namespace.c:3211 > do_mount fs/namespace.c:3224 [inline] > __do_sys_mount fs/namespace.c:3432 [inline] > __se_sys_mount fs/namespace.c:3409 [inline] > __arm64_sys_mount+0x1a8/0x2fc fs/namespace.c:3409 > __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] > invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] > el0_svc_common.constprop.0+0x74/0x190 arch/arm64/kernel/syscall.c:159 > do_el0_svc+0x78/0x90 arch/arm64/kernel/syscall.c:198 > el0_svc+0x14/0x20 arch/arm64/kernel/entry-common.c:365 > el0_sync_handler+0x1a8/0x1b0 arch/arm64/kernel/entry-common.c:381 > el0_sync+0x190/0x1c0 arch/arm64/kernel/entry.S:699 > > > --- > This report is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this issue. See: > https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > -- > You received this message because you are subscribed to the Google Groups "syzkaller-bugs" group. > To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-bugs+unsubscribe@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-bugs/0000000000009bbb7905b9e4a624%40google.com. _______________________________________________ linux-arm-kernel mailing list linux-arm-kernel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-arm-kernel