Received-SPF: pass (google.com: domain of linux-kernel+bounces-213881-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249;
Date: Thu, 13 Jun 2024 15:02:14 -0400
From: "Liam R. Howlett" <Liam.Howlett@oracle.com>
To: syzbot <syzbot+c67d06ab25a9bc4adf35@syzkaller.appspotmail.com>,
        akpm@linux-foundation.org, linux-kernel@vger.kernel.org,
        linux-mm@kvack.org, maple-tree@lists.infradead.org,
        syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [maple-tree?] BUG: unable to handle kernel paging
 request in mas_walk
Message-ID: <2evz26hvycen5il3jij6znplf42i7b77ofunby2w4hncayoxp7@yn2p4tt3e4fh>
Mail-Followup-To: "Liam R. Howlett" <Liam.Howlett@oracle.com>, 
	syzbot <syzbot+c67d06ab25a9bc4adf35@syzkaller.appspotmail.com>, akpm@linux-foundation.org, linux-kernel@vger.kernel.org, 
	linux-mm@kvack.org, maple-tree@lists.infradead.org, syzkaller-bugs@googlegroups.com
References: <00000000000066aa68061a072231@google.com>
 <pe4qk33vuo5o2y3cpz6wiz2cpx4d3ka3esqfe4jkayhakb3k2h@7yti4hkgmwvo>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <pe4qk33vuo5o2y3cpz6wiz2cpx4d3ka3esqfe4jkayhakb3k2h@7yti4hkgmwvo>
User-Agent: NeoMutt/20231103
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
	=?us-ascii?Q?xF77S3Q4XHrIKS/0r3Ek4JNMYrMecyz8rwONiypT8PERBAHNHtpisGX/pnGx?=
 =?us-ascii?Q?c4kJ32cfEKKKxLWjAYey6wJOAddK701o3bqFyXDESm4ZiMyf1DOMSmP8NlDp?=
 =?us-ascii?Q?8yMRrfHPv4tpGao8C0ZfzyPCKoGLZK+iOVuFMp0yETsz+EwclmnrHFaDYdyy?=
 =?us-ascii?Q?x/Qa/GwGQHSRIWyoeo2Cx290cKkS7eMKhmlE2LFKeb/TC6cJfNAU3rGnNIHU?=
 =?us-ascii?Q?Qd4i1lDG23gp9LnzA6MWVa8UY+6e3xdUHuQppq8Xq+njDCoapFld+BGx/yV6?=
 =?us-ascii?Q?7I7a6Wj+86JKLGqSaqx1f5Ip/bbxyKrGzk5R6Ik9a+O6U37ESn6HUkJro2Yu?=
 =?us-ascii?Q?tzczFCpI3wmB1XxVoyforncEqlLByboMz2yb0BHmRE4MS1eC31xxDfMiccy0?=
 =?us-ascii?Q?8o10ByhAI7zw9wLp1IZ516L/No2L9tk7OzYDxbt9z7Z8d1F5OEW6bLucOvCJ?=
 =?us-ascii?Q?casz/SFnPsViC8EvVsQ/m85QVIEGKXmW6mLADWySXZ+QfYB8WuIOhPph2K+6?=
 =?us-ascii?Q?EwjbRosEllITzNqadbgC6CxTof0oRjCHzcwl9pvEGbiSm6g/S0zduQuB1hJX?=
 =?us-ascii?Q?Seb/5vf0Gn28rqvC/RccT1BLlbFZC5Puhv5wF6QT9BifYqQlsRMa40n4YAQS?=
 =?us-ascii?Q?OKvmSuHQKqmBWFb8Am6AOq565P0BQN/kWnuO58WLYt/iHWo6Q9E+30CRldxf?=
 =?us-ascii?Q?E1mwX2ix8mdgVsXxjrCQ0azwtB63+I9zIKp23djGO3273/TckRANsBybGD3l?=
 =?us-ascii?Q?Zbp85AWlpFaoTRjjigXXYPmbuOtuVMdFCZ9FJ9Y4m8BpYe3RKbEuAjpQMsY5?=
 =?us-ascii?Q?NgOo1qDsVC81XjrIVOGAp0zC/hU1BfBIx3ROc7IPJ47gGFUNLjw4iZKIVu1r?=
 =?us-ascii?Q?PZq45yJyLdGjalqfXuopPu9jjLOHrlDspE2BdM4dABwQ+WynS0KZ9hZzmju4?=
 =?us-ascii?Q?FPgRxQaz0iOcGF9/j6c5maHzROnY8P3kpXxfoNdhHcv3plsHrR+niMgMMlFM?=
 =?us-ascii?Q?lnPYl4k5tPR4lbG7iM4jquBadZtPR9feEqZIwuIqI12cAyNp2nlqhek1WM4h?=
 =?us-ascii?Q?WEfI6z8WFJSNmxK8HXbsbYFQ3Vd6GoRMWRlk+U+uM6SbVzLYkNI0YrtXYcrN?=
 =?us-ascii?Q?iC+0UC7jXXkh0xWD8+7ITqT2a64nSBF5CO7YVO8KAnhqEs/D5vP8aizHa+WI?=
 =?us-ascii?Q?pnd66ySBqv4mAjYfo7qj9ceNm5OF5leEdgx9OZoLuPePdqbM31BJ+yPbKtCt?=
 =?us-ascii?Q?CQxvOASR0Bdzqq5AkGcA3ojok3CW6hIUfb3meHc6tMMs6rb7TL4ma0BZAqy2?=
 =?us-ascii?Q?og5ol7XmEgl7qlh+uWF/LDxfMpLQOXTf7aML0twPaVxHQ4iuOeBOVY9a7+O/?=
 =?us-ascii?Q?6OUdncyKDBuXNxLc4oUL+TKOBbW5x1ZSU7sozT1l+wF5Vtg6OWI6LqAkDAKr?=
 =?us-ascii?Q?mz1Cksq2AtiWLoLFwA+tye3egqvp4jnmqJxckMicmw52QUxqlnYZgNBcrKNx?=
 =?us-ascii?Q?t51K5uLmckufc106nd/tlX+bvRkuXdNudBzPj/1qaQAdr2LmDirSCyw6U2+X?=
 =?us-ascii?Q?HWTkCRY1MBtLu04DHNHA1hx5cFol27jeW07pd45a?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 641e2146-88c4-4c10-5599-08dc8bdb5819
X-MS-Exchange-CrossTenant-AuthSource: DS0PR10MB7933.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jun 2024 19:02:17.3614
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: td9jsSHQdr6Uz0+LSn1CNBxCFtsqKTmK11sVxg+GMfVuMx3285x2aswLSdgyz+TLCFAlPtEdMf7kLxKNIsCUlw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR10MB6857
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16
 definitions=2024-06-13_11,2024-06-13_02,2024-05-17_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 suspectscore=0
 phishscore=0 bulkscore=0 malwarescore=0 spamscore=0 mlxscore=0
 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2405010000 definitions=main-2406130135
X-Proofpoint-GUID: dtFOvPvyjxe4xUNZF6HkCpbIcrirk_rL
X-Proofpoint-ORIG-GUID: dtFOvPvyjxe4xUNZF6HkCpbIcrirk_rL

* Liam R. Howlett <Liam.Howlett@oracle.com> [240604 14:08]:
> * syzbot <syzbot+c67d06ab25a9bc4adf35@syzkaller.appspotmail.com> [240603 22:23]:
> > Hello,
> > 
> > syzbot found the following issue on:
> > 
> > HEAD commit:    4a4be1ad3a6e Revert "vfs: Delete the associated dentry whe..
> > git tree:       upstream
> > console output: https://syzkaller.appspot.com/x/log.txt?x=128638ba980000
> > kernel config:  https://syzkaller.appspot.com/x/.config?x=bd6024aedb15e15c
> > dashboard link: https://syzkaller.appspot.com/bug?extid=c67d06ab25a9bc4adf35
> > compiler:       aarch64-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
> > userspace arch: arm64
> > syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=106f71aa980000
> > C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=16b4ffc6980000
> > 
> > Downloadable assets:
> > disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/384ffdcca292/non_bootable_disk-4a4be1ad.raw.xz
> > vmlinux: https://storage.googleapis.com/syzbot-assets/75957361122b/vmlinux-4a4be1ad.xz
> > kernel image: https://storage.googleapis.com/syzbot-assets/6c766b0ec377/Image-4a4be1ad.gz.xz
> > 
> > IMPORTANT: if you fix the issue, please add the following tag to the commit:
> > Reported-by: syzbot+c67d06ab25a9bc4adf35@syzkaller.appspotmail.com
> > 
> > Unable to handle kernel paging request at virtual address 00700000077b9b78
> 
> I don't think the bot is testing my forced update of the tree, so I'll
> try again.
> 
> #sys test git://git.infradead.org/users/jedix/linux-maple.git syz_20240603_v2
> 
> This is a revert a some patches - which seems to stop all the crashing
> for me.
> 
> Looks to be the same as this [1] syzbot report.  All seem to be related
> to madvise and these patches are the last to modify the area (besides
> mseal() specifically calling out madvise, but that would not cause the
> issue).
> 
> The patches I revered also name arm64 as special.
> 
> [1] https://syzkaller.appspot.com/bug?extid=7eaa0d7b9fccf21052f1

This should be fixed in 6.10-rc3 because of the arm fix in the area I
suspected.  I have no way of verifying that since the bot decided to
stop responding.

This puts us in a difficult situation of needing to jump on bot bugs for
security concerns and wasting copious amounts of time chasing our own
tails.