Re: kernel BUG in memory_bm_free

From: Catalin Marinas
Date: Mon Mar 15 2021 - 08:10:41 EST


On Mon, Mar 15, 2021 at 08:08:06AM +0100, Dmitry Vyukov wrote:
> On Wed, Feb 3, 2021 at 6:59 AM syzbot
> <syzbot+5ecbe63baca437585bd4@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> > syzbot found the following issue on:
> >
> > HEAD commit: 3aaf0a27 Merge tag 'clang-format-for-linux-v5.11-rc7' of g..
> > git tree: upstream
> > console output: https://syzkaller.appspot.com/x/log.txt?x=17ef6108d00000
> > kernel config: https://syzkaller.appspot.com/x/.config?x=10152c2ea16351e7
> > dashboard link: https://syzkaller.appspot.com/bug?extid=5ecbe63baca437585bd4
> > userspace arch: arm64
> >
> > Unfortunately, I don't have any reproducer for this issue yet.
> >
> > IMPORTANT: if you fix the issue, please add the following tag to the commit:
> > Reported-by: syzbot+5ecbe63baca437585bd4@xxxxxxxxxxxxxxxxxxxxxxxxx
>
> The BUG is:
> BUG_ON(!virt_addr_valid(addr));
>
> #syz fix: arm64: Do not pass tagged addresses to __is_lm_address()

Does this mean that commit 91cb2c8b072e ("arm64: Do not pass tagged
addresses to __is_lm_address()") fixes the regression? The patch was
merged in -5.11-rc7 I think.

--
Catalin