Re: [syzbot] general protection fault in lock_page_memcg

[Rajat Asthana]

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

: registered new interface driver bcm203x
[ 16.380400][ T1] usbcore: registered new interface driver bpa10x
[ 16.389712][ T1] usbcore: registered new interface driver bfusb
[ 16.397265][ T1] usbcore: registered new interface driver btusb
[ 16.405572][ T1] usbcore: registered new interface driver ath3k
[ 16.414133][ T1] CAPI 2.0 started up with major 68 (middleware)
[ 16.420919][ T1] Modular ISDN core version 1.1.29
[ 16.427541][ T1] NET: Registered PF_ISDN protocol family
[ 16.434538][ T1] DSP module 2.0
[ 16.438790][ T1] mISDN_dsp: DSP clocks every 80 samples. This equals 1 jiffies.
[ 16.458389][ T1] mISDN: Layer-1-over-IP driver Rev. 2.00
[ 16.465227][ T1] 0 virtual devices registered
[ 16.470484][ T1] usbcore: registered new interface driver HFC-S_USB
[ 16.478384][ T1] intel_pstate: CPU model not supported
[ 16.484215][ T1] VUB300 Driver rom wait states = 1C irqpoll timeout = 0400
[ 16.485280][ T1] usbcore: registered new interface driver vub300
[ 16.501062][ T1] usbcore: registered new interface driver ushc
[ 16.512759][ T1] iscsi: registered transport (iser)
[ 16.519610][ T1] SoftiWARP attached
[ 16.524376][ T1] Driver 'framebuffer' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 16.536757][ T1] Driver 'memconsole' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 16.548676][ T1] Driver 'vpd' was unable to register with bus_type 'coreboot' because the bus was not initialized.
[ 16.568138][ T1] hid: raw HID events driver (C) Jiri Kosina
[ 16.594131][ T1] usbcore: registered new interface driver usbhid
[ 16.609590][ T1] usbhid: USB HID core driver
[ 16.620033][ T1] usbcore: registered new interface driver es2_ap_driver
[ 16.631323][ T1] comedi: version 0.7.76 - http://www.comedi.org
[ 16.638976][ T1] usbcore: registered new interface driver dt9812
[ 16.645877][ T1] usbcore: registered new interface driver ni6501
[ 16.653001][ T1] usbcore: registered new interface driver usbdux
[ 16.660067][ T1] usbcore: registered new interface driver usbduxfast
[ 16.667143][ T1] usbcore: registered new interface driver usbduxsigma
[ 16.674380][ T1] usbcore: registered new interface driver vmk80xx
[ 16.681326][ T1] usbcore: registered new interface driver prism2_usb
[ 16.690230][ T1] usbcore: registered new interface driver r8712u
[ 16.697781][ T1] ashmem: initialized
[ 16.702354][ T1] greybus: registered new driver hid
[ 16.708526][ T1] greybus: registered new driver gbphy
[ 16.714400][ T1] gb_gbphy: registered new driver usb
[ 16.720253][ T1] asus_wmi: ASUS WMI generic driver loaded
[ 16.780578][ T1] usbcore: registered new interface driver snd-usb-audio
[ 16.789365][ T1] usbcore: registered new interface driver snd-ua101
[ 16.798602][ T1] usbcore: registered new interface driver snd-usb-usx2y
[ 16.806404][ T1] usbcore: registered new interface driver snd-usb-us122l
[ 16.814595][ T1] usbcore: registered new interface driver snd-usb-caiaq
[ 16.822683][ T1] usbcore: registered new interface driver snd-usb-6fire
[ 16.830427][ T1] usbcore: registered new interface driver snd-usb-hiface
[ 16.838285][ T1] usbcore: registered new interface driver snd-bcd2000
[ 16.845571][ T1] usbcore: registered new interface driver snd_usb_pod
[ 16.853049][ T1] usbcore: registered new interface driver snd_usb_podhd
[ 16.860897][ T1] usbcore: registered new interface driver snd_usb_toneport
[ 16.869601][ T1] usbcore: registered new interface driver snd_usb_variax
[ 16.877335][ T1] drop_monitor: Initializing network drop monitor service
[ 16.884975][ T1] NET: Registered PF_LLC protocol family
[ 16.891529][ T1] GACT probability on
[ 16.895563][ T1] Mirror/redirect action on
[ 16.900341][ T1] Simple TC action Loaded
[ 16.906373][ T1] netem: version 1.3
[ 16.910832][ T1] u32 classifier
[ 16.914392][ T1] Performance counters on
[ 16.919288][ T1] input device check on
[ 16.923905][ T1] Actions configured
[ 16.930170][ T1] nf_conntrack_irc: failed to register helpers
[ 16.937889][ T1] nf_conntrack_sane: failed to register helpers
[ 16.959590][ T1] nf_conntrack_sip: failed to register helpers
[ 16.969515][ T1] xt_time: kernel timezone is -0000
[ 16.974812][ T1] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[ 16.984465][ T1] IPVS: Connection hash table configured (size=4096, memory=64Kbytes)
[ 16.993390][ T1] IPVS: ipvs loaded.
[ 16.997529][ T1] IPVS: [rr] scheduler registered.
[ 17.002650][ T1] IPVS: [wrr] scheduler registered.
[ 17.008704][ T1] IPVS: [lc] scheduler registered.
[ 17.014061][ T1] IPVS: [wlc] scheduler registered.
[ 17.020689][ T1] IPVS: [fo] scheduler registered.
[ 17.026322][ T1] IPVS: [ovf] scheduler registered.
[ 17.032654][ T1] IPVS: [lblc] scheduler registered.
[ 17.039144][ T1] IPVS: [lblcr] scheduler registered.
[ 17.045215][ T1] IPVS: [dh] scheduler registered.
[ 17.050453][ T1] IPVS: [sh] scheduler registered.
[ 17.055581][ T1] IPVS: [mh] scheduler registered.
[ 17.060681][ T1] IPVS: [sed] scheduler registered.
[ 17.065961][ T1] IPVS: [nq] scheduler registered.
[ 17.071236][ T1] IPVS: [twos] scheduler registered.
[ 17.077489][ T1] IPVS: [sip] pe registered.
[ 17.082359][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver
[ 17.090356][ T1] gre: GRE over IPv4 demultiplexor driver
[ 17.096378][ T1] ip_gre: GRE over IPv4 tunneling driver
[ 17.106332][ T1] IPv4 over IPsec tunneling driver
[ 17.113656][ T1] ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
[ 17.121510][ T1] Initializing XFRM netlink socket
[ 17.126721][ T1] IPsec XFRM device driver
[ 17.132428][ T1] NET: Registered PF_INET6 protocol family
[ 17.145770][ T1] Segment Routing with IPv6
[ 17.150501][ T1] RPL Segment Routing with IPv6
[ 17.156598][ T1] mip6: Mobile IPv6
[ 17.163469][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 17.174132][ T1] ip6_gre: GRE over IPv6 tunneling driver
[ 17.181588][ T1] NET: Registered PF_PACKET protocol family
[ 17.188067][ T1] NET: Registered PF_KEY protocol family
[ 17.194436][ T1] Bridge firewalling registered
[ 17.200288][ T1] NET: Registered PF_X25 protocol family
[ 17.206461][ T1] X25: Linux Version 0.2
[ 17.234013][ T1] NET: Registered PF_NETROM protocol family
[ 17.262259][ T1] NET: Registered PF_ROSE protocol family
[ 17.268571][ T1] NET: Registered PF_AX25 protocol family
[ 17.274449][ T1] can: controller area network core
[ 17.280024][ T1] NET: Registered PF_CAN protocol family
[ 17.286186][ T1] can: raw protocol
[ 17.290490][ T1] can: broadcast manager protocol
[ 17.295785][ T1] can: netlink gateway - max_hops=1
[ 17.301639][ T1] can: SAE J1939
[ 17.305415][ T1] can: isotp protocol
[ 17.309782][ T1] Bluetooth: RFCOMM TTY layer initialized
[ 17.315824][ T1] Bluetooth: RFCOMM socket layer initialized
[ 17.321826][ T1] Bluetooth: RFCOMM ver 1.11
[ 17.326481][ T1] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 17.333942][ T1] Bluetooth: BNEP filters: protocol multicast
[ 17.340483][ T1] Bluetooth: BNEP socket layer initialized
[ 17.346381][ T1] Bluetooth: CMTP (CAPI Emulation) ver 1.0
[ 17.352458][ T1] Bluetooth: CMTP socket layer initialized
[ 17.358607][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 17.365649][ T1] Bluetooth: HIDP socket layer initialized
[ 17.374161][ T1] NET: Registered PF_RXRPC protocol family
[ 17.380421][ T1] Key type rxrpc registered
[ 17.385050][ T1] Key type rxrpc_s registered
[ 17.392529][ T1] NET: Registered PF_KCM protocol family
[ 17.399090][ T1] lec:lane_module_init: lec.c: initialized
[ 17.405090][ T1] mpoa:atm_mpoa_init: mpc.c: initialized
[ 17.411496][ T1] l2tp_core: L2TP core driver, V2.0
[ 17.416864][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0
[ 17.422506][ T1] l2tp_ip: L2TP IP encapsulation support (L2TPv3)
[ 17.429784][ T1] l2tp_netlink: L2TP netlink interface
[ 17.436132][ T1] l2tp_eth: L2TP ethernet pseudowire support (L2TPv3)
[ 17.443893][ T1] l2tp_ip6: L2TP IP encapsulation support for IPv6 (L2TPv3)
[ 17.451780][ T1] NET: Registered PF_PHONET protocol family
[ 17.458947][ T1] 8021q: 802.1Q VLAN Support v1.8
[ 17.475259][ T1] DCCP: Activated CCID 2 (TCP-like)
[ 17.484249][ T1] DCCP: Activated CCID 3 (TCP-Friendly Rate Control)
[ 17.493715][ T1] sctp: Hash tables configured (bind 32/56)
[ 17.501850][ T1] NET: Registered PF_RDS protocol family
[ 17.508307][ T1] Registered RDS/infiniband transport
[ 17.514668][ T1] Registered RDS/tcp transport
[ 17.520178][ T1] tipc: Activated (version 2.0.0)
[ 17.525959][ T1] NET: Registered PF_TIPC protocol family
[ 17.532432][ T1] tipc: Started in single node mode
[ 17.538917][ T1] NET: Registered PF_SMC protocol family
[ 17.545795][ T1] 9pnet: Installing 9P2000 support
[ 17.551279][ T1] NET: Registered PF_CAIF protocol family
[ 17.560617][ T1] NET: Registered PF_IEEE802154 protocol family
[ 17.569344][ T1] Key type dns_resolver registered
[ 17.574515][ T1] Key type ceph registered
[ 17.580003][ T1] libceph: loaded (mon/osd proto 15/24)
[ 17.587471][ T1] batman_adv: B.A.T.M.A.N. advanced 2021.2 (compatibility version 15) loaded
[ 17.596868][ T1] openvswitch: Open vSwitch switching datapath
[ 17.605502][ T1] NET: Registered PF_VSOCK protocol family
[ 17.612150][ T1] mpls_gso: MPLS GSO support
[ 17.626158][ T1] IPI shorthand broadcast: enabled
[ 17.631997][ T1] AVX2 version of gcm_enc/dec engaged.
[ 17.638064][ T1] AES CTR mode by8 optimization enabled
[ 17.648388][ T1] sched_clock: Marking stable (17606340198, 41953934)->(17659733400, -11439268)
[ 17.659896][ T1] registered taskstats version 1
[ 17.670354][ T1] Loading compiled-in X.509 certificates
[ 17.677376][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 17.690315][ T1] zswap: loaded using pool lzo/zbud
[ 17.696583][ T1] debug_vm_pgtable: [debug_vm_pgtable ]: Validating architecture page table helpers
[ 17.707262][ T1] Key type ._fscrypt registered
[ 17.712376][ T1] Key type .fscrypt registered
[ 17.717609][ T1] Key type fscrypt-provisioning registered
[ 17.726936][ T1] kAFS: Red Hat AFS client v0.1 registering.
[ 17.734805][ T1] FS-Cache: Netfs 'afs' registered for caching
[ 17.749307][ T1] Btrfs loaded, crc32c=crc32c-intel, assert=on, zoned=yes
[ 17.758434][ T1] Key type big_key registered
[ 17.765666][ T1] Key type encrypted registered
[ 17.771397][ T1] AppArmor: AppArmor sha1 policy hashing enabled
[ 17.778678][ T1] ima: No TPM chip found, activating TPM-bypass!
[ 17.785717][ T1] Loading compiled-in module X.509 certificates
[ 17.792835][ T1] Loaded X.509 cert 'Build time autogenerated kernel key: f850c787ad998c396ae089c083b940ff0a9abb77'
[ 17.804331][ T1] ima: Allocated hash algorithm: sha256
[ 17.810588][ T1] ima: No architecture policies found
[ 17.816477][ T1] evm: Initialising EVM extended attributes:
[ 17.823211][ T1] evm: security.selinux (disabled)
[ 17.829023][ T1] evm: security.SMACK64 (disabled)
[ 17.835479][ T1] evm: security.SMACK64EXEC (disabled)
[ 17.841657][ T1] evm: security.SMACK64TRANSMUTE (disabled)
[ 17.848515][ T1] evm: security.SMACK64MMAP (disabled)
[ 17.854238][ T1] evm: security.apparmor
[ 17.858502][ T1] evm: security.ima
[ 17.862609][ T1] evm: security.capability
[ 17.867987][ T1] evm: HMAC attrs: 0x1
[ 17.873804][ T1] PM: Magic number: 13:410:849
[ 17.880138][ T1] tty ptyv1: hash matches
[ 17.884880][ T1] graphics fbcon: hash matches
[ 17.891658][ T1] printk: console [netcon0] enabled
[ 17.897039][ T1] netconsole: network logging started
[ 17.902971][ T1] gtp: GTP module loaded (pdp ctx size 104 bytes)
[ 17.911364][ T1] rdma_rxe: loaded
[ 17.915933][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 17.927213][ T1] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 17.935970][ T3168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 17.945557][ T1] ALSA device list:
[ 17.945767][ T3168] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 17.949645][ T1] #0: Dummy 1
[ 17.962794][ T1] #1: Loopback 1
[ 17.966723][ T1] #2: Virtual MIDI Card 1
[ 17.973437][ T1] md: Waiting for all devices to be available before autodetect
[ 17.981339][ T1] md: If you don't use raid, use raid=noautodetect
[ 17.987988][ T1] md: Autodetecting RAID arrays.
[ 17.993004][ T1] md: autorun ...
[ 17.996646][ T1] md: ... autorun DONE.
[ 18.003580][ T1] VFS: Cannot open root device "sda1" or unknown-block(0,0): error -6
[ 18.011959][ T1] Please append a correct "root=" boot option; here are the available partitions:
[ 18.021314][ T1] 0100 4096 ram0
[ 18.021325][ T1] (driver?)
[ 18.029494][ T1] 0101 4096 ram1
[ 18.029505][ T1] (driver?)
[ 18.037583][ T1] 0102 4096 ram2
[ 18.037595][ T1] (driver?)
[ 18.046769][ T1] 0103 4096 ram3
[ 18.046781][ T1] (driver?)
[ 18.054959][ T1] 0104 4096 ram4
[ 18.054970][ T1] (driver?)
[ 18.063089][ T1] 0105 4096 ram5
[ 18.063102][ T1] (driver?)
[ 18.071073][ T1] 0106 4096 ram6
[ 18.071083][ T1] (driver?)
[ 18.079342][ T1] 0107 4096 ram7
[ 18.079354][ T1] (driver?)
[ 18.087701][ T1] 0108 4096 ram8
[ 18.087713][ T1] (driver?)
[ 18.095757][ T1] 0109 4096 ram9
[ 18.095771][ T1] (driver?)
[ 18.104049][ T1] 010a 4096 ram10
[ 18.104061][ T1] (driver?)
[ 18.112044][ T1] 010b 4096 ram11
[ 18.112059][ T1] (driver?)
[ 18.120495][ T1] 010c 4096 ram12
[ 18.120508][ T1] (driver?)
[ 18.128649][ T1] 010d 4096 ram13
[ 18.128661][ T1] (driver?)
[ 18.136611][ T1] 010e 4096 ram14
[ 18.136621][ T1] (driver?)
[ 18.144973][ T1] 010f 4096 ram15
[ 18.144985][ T1] (driver?)
[ 18.153122][ T1] 1f00 128 mtdblock0
[ 18.153134][ T1] (driver?)
[ 18.163411][ T1] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 18.173580][ T1] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G W 5.13.0-syzkaller #0
[ 18.183061][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 18.193194][ T1] Call Trace:
[ 18.196633][ T1] dump_stack_lvl+0xcd/0x134
[ 18.202007][ T1] panic+0x306/0x73d
[ 18.206513][ T1] ? __warn_printk+0xf3/0xf3
[ 18.211196][ T1] mount_block_root+0x3f8/0x4dd
[ 18.216645][ T1] ? init_rootfs+0x59/0x59
[ 18.221223][ T1] ? memcpy+0x39/0x60
[ 18.225593][ T1] mount_root+0x1af/0x1f5
[ 18.231759][ T1] ? mount_block_root+0x4dd/0x4dd
[ 18.236785][ T1] ? memcpy+0x39/0x60
[ 18.240860][ T1] prepare_namespace+0x1ff/0x234
[ 18.245872][ T1] kernel_init_freeable+0x729/0x741
[ 18.251072][ T1] ? rest_init+0x3e0/0x3e0
[ 18.255572][ T1] kernel_init+0x1a/0x1d0
[ 18.259981][ T1] ? rest_init+0x3e0/0x3e0
[ 18.264416][ T1] ret_from_fork+0x1f/0x30
[ 18.270576][ T1] Kernel Offset: disabled
[ 18.275101][ T1] Rebooting in 86400 seconds..


Error text is too large and was truncated, full error text is at:
https://syzkaller.appspot.com/x/error.txt?x=1313d772300000


Tested on:

commit: e9f1cbc0 Merge tag 'acpi-5.14-rc1-2' of git://git.kernel.o..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=e72fb9b7ef21be24
dashboard link: https://syzkaller.appspot.com/bug?extid=15a9609cfd4687eb7269
compiler:

[Rajat Asthana]

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+15a960...@syzkaller.appspotmail.com

Tested on:

commit: ba31f97d Merge tag 'for-linus-5.14-rc6-tag' of git://g..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=6696b1489083c8e3
dashboard link: https://syzkaller.appspot.com/bug?extid=15a9609cfd4687eb7269
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.1

Note: testing is done by a robot and is best-effort only.