From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oo1-f42.google.com (mail-oo1-f42.google.com [209.85.161.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B876D3290B9 for ; Tue, 18 Aug 2026 20:19:17 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.42 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787084359; cv=none; b=cZ2X0FwiPgDLUdvfD/JIDYhWPxwDK/BZ20M3cZp0TyjDPFqj0fPiASpcTeK4Kyt4COPG9KaB9Tgl2FVQqNw4RxWesj9BcPNQpK8jBwF6LuyoijtwL2lSC561DH5xBFOaglTY4lwU7BR6nTf0PI+UcRMSv6lPJmhKDq2NsNcECjY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787084359; c=relaxed/simple; bh=23HK3oXGJCkgVXNMMVpJRvDzUtuvfqGaZIzmssHRKms=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=eVzgoSB5m63hewii47qP9HisQIisHVO9uVcrQP0ULNGkoqB3nQbl3LJqYrSGp5o4kMGiLMuO5rK2M/5+1ZNzmuNeNG6drw0WO+HrFyl2KBwniZKw+MAMtwTWhSHrBsMWvoVBuSrIIpCPc8ZXqwksFUgyKjecscOwp48LylKZeFg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b=g+h9kn10; arc=none smtp.client-ip=209.85.161.42 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b="g+h9kn10" Received: by mail-oo1-f42.google.com with SMTP id 006d021491bc7-6b12942ed04so211589eaf.1 for ; Tue, 18 Aug 2026 13:19:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1787084356; x=1787689156; darn=vger.kernel.org; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:from:to:cc:subject :date:message-id:reply-to:content-type; bh=jZlmslRhHAtCSzaMTa4W5Bc0ab0HyjyPNsfXiZbsD5o=; b=g+h9kn10n/1EWs0m/RItcueE2FLGva1Kfs+wginjnAQICjNIsU9/BRUSCP+/FXZEIK 9SG3QP+dmdjZLd3JmpgBFhXw6Sa04PVhmtderuxhm9QDBXBz7bmCbUkDh3qvJ06xpcmB NYsb6S2Q9EJ9dvOOKVJHM4HMMLAX3GjGbBhooBo48b15NrGJOymf16667XGvvKUeGJ6a bCmBoZFK/T49tqDVdpcxdbAup4aQQZIJGqMQDNeCwYiuGF5kEhfMlFV7jNJwK5VUkUQw k2gT4kXoBg5wHFzRcHJTE93X5cL7s4dKKlZwnP1QLrnRf6IOfAfwC2cvMU2+nM85kmH3 yjpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787084356; x=1787689156; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=jZlmslRhHAtCSzaMTa4W5Bc0ab0HyjyPNsfXiZbsD5o=; b=pq1CwFh6nH4SwZSdYoMy+iWnOQCtq1arnG2HJWcEZsQ2+GFagC20Duc8JIXu/ILt/j TABGzsnRozpJqqQ4IR0NQrWQ7LqMhn+mnt0xbSY9xMhin1ImkUizidqTvo04K9b+XtYQ POUy++ltYB/4Di3NAchjJMcClmOqBaIs33xxP+9j0adaYJuSngGamt/wNf4v+e07sOvU SkDNYLs3g05Nf5aySDhLrnrO+JP8oV/WYS0/n+LzX/8iYZNArG9mc8gu+UYYokrK8ShM cqjcKJYskhfsW6PDK3IRFNtlLuO1m4GPUg8Hq19AJKZu6mdk/a70bBCbMM6b9vMNsSuS Zqrw== X-Forwarded-Encrypted: i=1; AHgh+RrbGGos4miIqk50IcVuZIchZ3qtpVrvtPOFqbxBVXDMAcKmBywY32obYPr7+k5YrVSHQv6u2d7o3SkYdFs=@vger.kernel.org X-Gm-Message-State: AOJu0YzCgOeC5rRFAsQ1KlPQ0/n66quT16bRbkNDwxC0YQI27m53MNs0 P7m/d1i658NrfI3IQTf1LU8oPKh2OOcb2VXvbZBu8+IwE3O4oapKnPoPvW2O7jyuT6YW03raZVa GGm6q X-Gm-Gg: AR+sD13qc+k7vfayga6lFhkkM3a680U8nM8rqAh+N3/8mQq7nIP3YgdDwFaLHY3sZft ZgPAm0+PD2BoObuccKEB/ViIv49CmlkxekTu6ykHD9W5wBoAxSUwSyvZznI6CN19ON9RvpBAIQK UUyufQvkBOJxEPSLks+Bh8iWiacoHmrm5TbscyoWJNwkWCrc8HwwXDUxL8I/O31ilnomPRzO054 UwVegAg/rPsM6YBCsKBHSgef16bZSyEuxElmHfmtuUCq8ihQl74KYlRW3tfW/kaSpq4cGyDPKmD 2S88iEdfVTX4lUWLQnRJg8W3dGwGyoWpY2s6gUL3ztYXyioQqT0vvJjFjYgnMzzZuaN/ca2LyKw RJ30Y1BYSUfSC3JihZpCtZazoeKzh+1N+aa4s4wwqMKpecw6tzFVfJCEADgiERiEQPILHllUNHc mbOvJvEZ21u7jETXJld8ePIDTD/Zu5rGcKtUAoKpOY3xXp1rG833UbEfENeL/Aq1N/N9BhBY26V CKBJQgkCq94CLM/Zt8xO2xLfFS9LwznqHTfz80jlVCqjQ== X-Received: by 2002:a05:6820:2215:b0:6ae:941b:521c with SMTP id 006d021491bc7-6b13ad7cd19mr126171eaf.18.1787084356276; Tue, 18 Aug 2026 13:19:16 -0700 (PDT) Received: from ziepe.ca (hlfxns010zw-159-2-239-150.pppoe-dynamic.high-speed.ns.bellaliant.net. [159.2.239.150]) by smtp.gmail.com with ESMTPSA id 006d021491bc7-6b1166fd581sm5592640eaf.15.2026.08.18.13.19.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 18 Aug 2026 13:19:15 -0700 (PDT) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1wwQHC-00000000I3U-2Jmi; Tue, 18 Aug 2026 17:19:14 -0300 Date: Tue, 18 Aug 2026 17:19:14 -0300 From: Jason Gunthorpe To: syzbot Cc: iommu@lists.linux.dev, joro@8bytes.org, kevin.tian@intel.com, linux-kernel@vger.kernel.org, robin.murphy@arm.com, syzkaller-bugs@googlegroups.com, will@kernel.org Subject: Re: [syzbot] [iommu?] general protection fault in iommufd_ioas_change_process Message-ID: <20260818201914.GA18100@ziepe.ca> References: <6a833819.4d75e56a.c9a88.0001.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6a833819.4d75e56a.c9a88.0001.GAE@google.com> On Mon, Aug 17, 2026 at 09:34:33AM -0700, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: 3d6d817622b0 Merge tag 'scsi-fixes' of git://git.kernel.or.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=10b01a9e580000 > kernel config: https://syzkaller.appspot.com/x/.config?x=c44651ea7dd2f307 > dashboard link: https://syzkaller.appspot.com/bug?extid=48637757323884de77a2 > compiler: gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13dbb225580000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14b01a9e580000 #syz fix: iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages