From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-57-252.mail.qq.com (out162-62-57-252.mail.qq.com [162.62.57.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E758130B53A for ; Mon, 16 Mar 2026 02:22:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.57.252 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773627745; cv=none; b=er1eeF2h0O2peU/PJr9ywlmOAnV7c1XCxJSeFPIeRC8y+ZYpKYJiLhJXijt3J0PYdYJ3guddb2U/jrPyB2ssxbsfRnadPtOzKMGwLRdRsuy/C5ENBrknD0V4aN6Z+NYxCwDtJDkImdgtnTD6qvaOuqqe//E/6AmZqK6Lfs24wWY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773627745; c=relaxed/simple; bh=3zDv3vKgfRbkZZmfhTKIhkwlOb7Tfe3Bcua47wStlt0=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=aM93GBDoVFeh2uAnyejoaaZcL2s14kgD8Ze6HZzZ+JMVbpH1u4J9bZHkFF+eFLhr+FVhLQtcHnYQmFgJy3iyJ4g52CSalg9rwltwqr5wYbr1+C0usNSBhCohw9RKG5cE1HveoJb6uTrWHWIqgdp1hHTB/GK1ui7BRNfhpmNvm+g= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=qaF/QAx9; arc=none smtp.client-ip=162.62.57.252 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="qaF/QAx9" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1773627738; bh=Xes9IQs5KrJZSgTHT6pbs34F6YvK3wYxMne929Zmta0=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=qaF/QAx9gbzeZd8WbrN+HStxFV1oD0n8z2bFy+O39cWItLTRQi55sGeOrerdEGrEe 2s41NXrTL6TSDsdwL48v9HmPDLBbsObmU6hHryz7VCAzbOzXrWt930BY6StneTerfu sTTEMQOU2j40MivTCAIxuR0Mx1NJYlc1L6U/gAPw= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc41-0.qq.com (NewEsmtp) with SMTP id 5470E69D; Mon, 16 Mar 2026 10:21:07 +0800 X-QQ-mid: xmsmtpt1773627667tdb01m2va Message-ID: X-QQ-XMAILINFO: MMwjR1C73eIsUz8n+rcZE9igTSe/hDGy1PRy4fpnqciDJiM6L65fE8RdqkHimQ dhy4XhgWJKnWy/aQlF0oeI3q7vJIRG6CKhoVl98v58SZ9fvPxCcjMVjcyqTQbIgF2gDFpYBPmuL/ Lyg+RpeV+Zz1oTcOLc0W40ff1Ot36AAP5QngY1vNkoQGUImx8c+xaFD7S2RnfQr52e4miXyZQO7p Li/Tl1uQ2+k6Dx2bERjUKDNnbqhXXTE2Cmvzg0SUl6wi3F6QxghXiz+pyKXHNyv41OdCstZWLl8A mzS54plSnO0xGyi1aDWBOtkyUKuVPhZGgtRdD9W8dFYirNHr7ppwDBH1t4efn3Ry7xTJtnkflXcz ORZLCvgZYWYDPH56UKb0oFoqM1/iiZGM7n5b+W2n7S1WS+HhJWMbif6l5ctTuZcvXE4mlNZD/HrL c+ksNYGz/k9zGqwSrN5/sgMKF0ogjOtfEorjPcZtBoMCMpH4KfSdooL8rPhGFskLv08/Mk/DWzTP Wv7nI+5QvraFrT7QJXfMa7b2epLAwiczw3nMNe9j36CfkLQ/boDt14WWttHJD0v4F08IzQeVWPv3 I2BjcMq+yGMVl5kr2F7SMtLEE8XnYk3+WtaVwEgkPs18T1CekZgY99DXz8LSO20cJOTnQ3o8wgVg aBF6k69zOf9xkTWxYHnkbWF7u3b3V6uShuvqBZ9hSvhqshz8RJboJY42uERDrDTR+Y3bO+4pgIbE m+a2HW853B8Oc9W6hA1CSTMabHOCKpj9osDS5X5C1+0B9f4IHvxBlPUBbMFrl/S8gKJ9nx8NbdxR zf6JSYidD2uY5SEH988vSaB4rj6Q3QylfvrSZaCu6qT+GZ0De9G5hlPs+Y/1nkPccLTN3eWSBHlM nab0btXVHTkSqkRLBymRlXYc/VhGPA41fJsXr5fEfqcL9YOxQ/IBRrWGQdt5WXogPtncDyjTnt+C m9aX7Tb4DgnTc+RCeZq3LMxmPtxOh9dIUoM+llSlTc2FUkXrf7ERRs+rkeflcsYKTOstvgXiIRR9 lHlQkNavuapPHdrVzkYrAPZLopFLU= X-QQ-XMRINFO: M/715EihBoGS47X28/vv4NpnfpeBLnr4Qg== From: Edward Adam Davis To: syzbot+c473aa669b5e8a6f48d2@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [mm?] possible deadlock in mfill_get_vma Date: Mon, 16 Mar 2026 10:21:07 +0800 X-OQ-MSGID: <20260316022106.122666-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69b6fc68.a00a0220.3b25d1.001e.GAE@google.com> References: <69b6fc68.a00a0220.3b25d1.001e.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/mm/userfaultfd.c b/mm/userfaultfd.c index 9ffc80d0a51b..a3333d5c6454 100644 --- a/mm/userfaultfd.c +++ b/mm/userfaultfd.c @@ -218,6 +218,7 @@ static int mfill_get_vma(struct mfill_state *state) if (IS_ERR(dst_vma)) return PTR_ERR(dst_vma); + state->vma = dst_vma; /* * If memory mappings are changing because of non-cooperative * operation (e.g. mremap) running in parallel, bail out and @@ -257,7 +258,6 @@ static int mfill_get_vma(struct mfill_state *state) goto out_unlock; out: - state->vma = dst_vma; return 0; out_unlock: