From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oa1-f72.google.com (mail-oa1-f72.google.com [209.85.160.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 23C17145348 for ; Fri, 16 Jan 2026 13:51:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.72 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768571463; cv=none; b=BgkTLxeRGKtX0zjHa2vK04Aoc48Gk3j2vJw86oOzledfKXglrKMdHMumlZZ8JrWOkCCddaA455tTSny1rJCxJKI1z47BAfurwBdu3FevAYfruB7mwqJLB0E05TMY0xrlsbHgotouwQkd0AtnM997ChXCKaida7PZol0ce+P9Xoc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768571463; c=relaxed/simple; bh=FgQI/5O0Wb92AmKha7aVDphkxElwHbAMdkN4UAuuNSs=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To:Cc: Content-Type; b=j79kKMRG2oAbf29mZdUUN6rQUoOGUP1hAUFAe0lsJbpX0+8d75HKjSsdDRMAPhupGOdxsTDXs5QhMQKOIOYJU4TKg8bISCHZrTnpRUD7U+kFLQirhlEHnuKgikI83eJo0oadvvkLD03jvbFbUExr7+q1UORQyh70/2rXD6cf+bE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.160.72 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oa1-f72.google.com with SMTP id 586e51a60fabf-4041710f90fso4194165fac.2 for ; Fri, 16 Jan 2026 05:51:01 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768571461; x=1769176261; h=cc:to:from:subject:message-id:in-reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Y4JgLRVrbzPt97b/QHVeuTdomTm+YW2wBi/KzvmtIZM=; b=NRB12q223Haa5m/nU4RJpsX0xgHUZQtIGNCDR0BlMUZIYi8hwm5DJQPYlX8b0H32Za wV4ZN2U6f+0+/AQTFP/79L0U0R8Fto3E1lRSN3ENTP9HoYD12pCbE/BThXVuENaeiNak 6ZjTtdC2johqE/1LHJPnEGr19ToSdVcO4UYxBKQe/gq47U+4VD0+SwFlRPDhdGS0jVe4 Ndb281y0Mtpuor1XVCdGOh7PVGA0lt3kooAmUaa1YWrsk9J8C8NIZmTTAeM1PZyx4Vv8 vdxPLPmn+2XIDkgHCZ4M3NXQNngqYRNepY62bAngHAUve8XYhC7ENOOMbJedHuBTxg+R vJtQ== X-Forwarded-Encrypted: i=1; AJvYcCV+6JWLBEYGwsJWD6WgqLxq47++vLHICVybZCzDLoWL3Q+iE84S14DHqyddLh7r1TGNbhv+1QxCJl6PrG8=@vger.kernel.org X-Gm-Message-State: AOJu0YzitKQsQvPVbshN4bfbr57cVT3bSdRQtU935/AyqkikNuyJItbz nfmDd0JoSGXD8fcJSi1E6GWRRSGw6/ZsjsAMDk/ClXlXuTDiNWCTFEzwnLNPd98PfHCu/zE90WW x3hrO4lLNEgvlK52koc4AodkRJ0+NlHJgBDh7sM2mPKRlBJiBbjypfxcYC4s= Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6820:22a6:b0:65c:fdbc:666c with SMTP id 006d021491bc7-661179d826cmr1308628eaf.42.1768571461092; Fri, 16 Jan 2026 05:51:01 -0800 (PST) Date: Fri, 16 Jan 2026 05:51:01 -0800 In-Reply-To: X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <696a4245.050a0220.58bed.004e.GAE@google.com> Subject: [syzbot ci] Re: add and use vma_assert_stabilised() helper From: syzbot ci To: akpm@linux-foundation.org, david@kernel.org, jannh@google.com, liam.howlett@oracle.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org, lorenzo.stoakes@oracle.com, mhocko@suse.com, rppt@kernel.org, shakeel.butt@linux.dev, surenb@google.com, vbabka@suse.cz Cc: syzbot@lists.linux.dev, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" syzbot ci has tested the following series [v1] add and use vma_assert_stabilised() helper https://lore.kernel.org/all/cover.1768558900.git.lorenzo.stoakes@oracle.com * [PATCH 1/2] mm/vma: add vma_is_*_locked() helpers * [PATCH 2/2] mm: add + use vma_is_stabilised(), vma_assert_stabilised() helpers and found the following issue: kernel BUG in anon_vma_name Full report is available here: https://ci.syzbot.org/series/a3867085-bae4-4416-9704-3b23ef9c6006 *** kernel BUG in anon_vma_name tree: mm-new URL: https://kernel.googlesource.com/pub/scm/linux/kernel/git/akpm/mm.git base: eeb33083cc4749bdb61582eaeb5c200702607703 arch: amd64 compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 config: https://ci.syzbot.org/builds/2e5b4d7e-a1a9-48c8-ae3b-654d3ac32e5c/config Loaded X.509 cert 'Build time autogenerated kernel key: 65176d093d4baf94ab1e788ee9f46804766f83ba' ima: Allocated hash algorithm: sha256 ima: No architecture policies found evm: Initialising EVM extended attributes: evm: security.selinux (disabled) evm: security.SMACK64 (disabled) evm: security.SMACK64EXEC (disabled) evm: security.SMACK64TRANSMUTE (disabled) evm: security.SMACK64MMAP (disabled) evm: security.apparmor evm: security.ima evm: security.capability evm: HMAC attrs: 0x1 PM: Magic number: 10:472:582 tty ptyc0: hash matches netconsole: network logging started gtp: GTP module loaded (pdp ctx size 128 bytes) rdma_rxe: loaded cfg80211: Loading compiled-in X.509 certificates for regulatory database Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600' clk: Disabling unused clocks ALSA device list: #0: Dummy 1 #1: Loopback 1 #2: Virtual MIDI Card 1 check access for rdinit=/init failed: -2, ignoring md: Waiting for all devices to be available before autodetect md: If you don't use raid, use raid=noautodetect md: Autodetecting RAID arrays. md: autorun ... md: ... autorun DONE. EXT4-fs (sda1): mounted filesystem b4773fba-1738-4da0-8a90-0fe043d0a496 ro with ordered data mode. Quota mode: none. VFS: Mounted root (ext4 filesystem) readonly on device 8:1. devtmpfs: mounted Freeing unused kernel image (initmem) memory: 26044K Write protecting the kernel read-only data: 212992k Freeing unused kernel image (text/rodata gap) memory: 388K Freeing unused kernel image (rodata/data gap) memory: 1776K x86/mm: Checked W+X mappings: passed, no W+X pages found. x86/mm: Checking user space page tables x86/mm: Checked W+X mappings: passed, no W+X pages found. Failed to set sysctl parameter 'max_rcu_stall_to_panic=1': parameter not found Run /sbin/init as init process vma ffff888175272d80 start 00007fffffffe000 end 00007ffffffff000 mm ffff888100079880 prot 8000000000000025 anon_vma ffff888110bf8000 vm_ops 0000000000000000 pgoff 7fffffffe file 0000000000000000 private_data 0000000000000000 refcnt 1 flags: 0x8118173(read|write|mayread|maywrite|mayexec|growsdown|seqread|randread|account|softdirty) ------------[ cut here ]------------ kernel BUG at ./include/linux/mmap_lock.h:476! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 1 Comm: init Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:anon_vma_name+0x253/0x260 Code: ff 4c 89 ff e8 8e 7d 0a 00 e9 e9 fe ff ff e8 34 db a2 ff eb 0c e8 2d db a2 ff eb 05 e8 26 db a2 ff 48 89 df e8 6e 77 08 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 RSP: 0000:ffffc90000067550 EFLAGS: 00010286 RAX: 000000000000014c RBX: ffff888175272d80 RCX: 37717524f4bb9000 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1c3ae40 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88818e405000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88823ffff000 CR3: 0000000110c5a000 CR4: 00000000000006f0 Call Trace: vma_modify_flags+0x203/0x330 mprotect_fixup+0x46a/0xa50 setup_arg_pages+0x565/0xae0 load_elf_binary+0xc5e/0x2980 bprm_execve+0x93d/0x1410 kernel_execve+0x8ef/0x9e0 try_to_run_init_process+0x13/0x60 kernel_init+0xad/0x1d0 ret_from_fork+0x51b/0xa40 ret_from_fork_asm+0x1a/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:anon_vma_name+0x253/0x260 Code: ff 4c 89 ff e8 8e 7d 0a 00 e9 e9 fe ff ff e8 34 db a2 ff eb 0c e8 2d db a2 ff eb 05 e8 26 db a2 ff 48 89 df e8 6e 77 08 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 RSP: 0000:ffffc90000067550 EFLAGS: 00010286 RAX: 000000000000014c RBX: ffff888175272d80 RCX: 37717524f4bb9000 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1c3ae40 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88818e405000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88823ffff000 CR3: 0000000110c5a000 CR4: 00000000000006f0 *** If these findings have caused you to resend the series or submit a separate fix, please add the following tag to your commit message: Tested-by: syzbot@syzkaller.appspotmail.com --- This report is generated by a bot. It may contain errors. syzbot ci engineers can be reached at syzkaller@googlegroups.com.