From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-16.8 required=3.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,PDS_SHORTFWD_URISHRT_QP,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1FCA3C433E0 for ; Thu, 11 Mar 2021 06:53:10 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id CB31464FC0 for ; Thu, 11 Mar 2021 06:53:09 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231512AbhCKGwk (ORCPT ); Thu, 11 Mar 2021 01:52:40 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:45962 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231473AbhCKGwX (ORCPT ); Thu, 11 Mar 2021 01:52:23 -0500 Received: from mail-qk1-x733.google.com (mail-qk1-x733.google.com [IPv6:2607:f8b0:4864:20::733]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1A003C061574 for ; Wed, 10 Mar 2021 22:52:23 -0800 (PST) Received: by mail-qk1-x733.google.com with SMTP id l132so19634276qke.7 for ; Wed, 10 Mar 2021 22:52:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=2Xnkspo4qNSphhzAFXJRHS5e9UpHqKP5zCX5rODZtrU=; b=v9ArJpuOMIq4sl7PCnBfBb9NOM3R0qrK9glcvIjJNXSpYiO1nkk1MwE+2kA9QvnjOW DYYW10zOiUO4V9qI00i20TivD8GpWSPJHVtDGFP9WtbcJj2dBvAzkSs93lWuCz72hTiQ Avf9ZHMiQLgMl1xW/l8pAdFstjvdmBp4bzJ+HfsAXE3X+HvfCyyXzgA0vzMBuqZpmVhO IGPCkjd0rTz7GdLKTU/zvv8x0vGRI/ZCggYWZT5QXc/XyfLDVaQOvaL6Rk9f6kyiOWqq fwx2qi8cRGkOQYEV7vg+wgSsn58abyd70tAjCnkrvWoSkF0rQQl2e+kVYygLyDq82ohd ZaeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=2Xnkspo4qNSphhzAFXJRHS5e9UpHqKP5zCX5rODZtrU=; b=APMITwp88tbLSQy4al5d1JRU1tYb4eRFixEw7povg7daTEoOMmsLIgrH5fKY+/vKJH UTqDAcZvnfxd63F7G0SHEWfrGPysANqJZgfUQopbq6XFcqZq+bsIywSHJ2b77i/yDpy3 FNAl13IFkKWpeFxZOg5jgL7sUXrw9I5TntWaJhExHJlRYW2dPhcLFeHnEfIC2x31Cekv j/zQdOyg6BP2AfFPhwQLla3khR7fBlZqvSaGTFWFAtv7WNAezbIgIv7Nyp6mKxeWV3TI V1qtuKYbkKReoLwYyY7vTUMrs36s6ioqSJJPBJXjB+r3gfhn4/uZb/VmcKAakAlcjbPP B1hA== X-Gm-Message-State: AOAM532OrraA6/gSyD99T6L8r73A1+QRztgKQ5ME2Z+6H+d9lcfem9Zq n+QqPZA4shoVniNjLS1pGPG4aqhUs6HdUObiUVsr0w== X-Google-Smtp-Source: ABdhPJy6tujiGSvScHukDkZ+WBI9oWkuJmXpqp/kEvh7IhUwWgGhPxWOglQ8uFWf2njWSAEgZpPdiPsBlUMMlxX3qtY= X-Received: by 2002:a37:4743:: with SMTP id u64mr6309751qka.350.1615445542005; Wed, 10 Mar 2021 22:52:22 -0800 (PST) MIME-Version: 1.0 References: <000000000000b74f1b05bd316729@google.com> <9a0823f4-de19-c2a2-5333-41c6caadbc11@ghiti.fr> In-Reply-To: From: Dmitry Vyukov Date: Thu, 11 Mar 2021 07:52:10 +0100 Message-ID: Subject: Re: [syzbot] BUG: unable to handle kernel access to user memory in schedule_tail To: Alex Ghiti Cc: Ben Dooks , syzbot , Paul Walmsley , Palmer Dabbelt , Albert Ou , linux-riscv , Daniel Bristot de Oliveira , Benjamin Segall , dietmar.eggemann@arm.com, Juri Lelli , LKML , Mel Gorman , Ingo Molnar , Peter Zijlstra , Steven Rostedt , syzkaller-bugs , Vincent Guittot Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Mar 11, 2021 at 7:50 AM Dmitry Vyukov wrote: > > On Thu, Mar 11, 2021 at 7:40 AM Alex Ghiti wrote: > > > > Hi Ben, > > > > Le 3/10/21 =C3=A0 5:24 PM, Ben Dooks a =C3=A9crit : > > > On 10/03/2021 17:16, Dmitry Vyukov wrote: > > >> On Wed, Mar 10, 2021 at 5:46 PM syzbot > > >> wrote: > > >>> > > >>> Hello, > > >>> > > >>> syzbot found the following issue on: > > >>> > > >>> HEAD commit: 0d7588ab riscv: process: Fix no prototype for > > >>> arch_dup_tas.. > > >>> git tree: > > >>> git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes > > >>> console output: https://syzkaller.appspot.com/x/log.txt?x=3D1212c6e= 6d00000 > > >>> kernel config: > > >>> https://syzkaller.appspot.com/x/.config?x=3De3c595255fb2d136 > > >>> dashboard link: > > >>> https://syzkaller.appspot.com/bug?extid=3De74b94fe601ab9552d69 > > >>> userspace arch: riscv64 > > >>> > > >>> Unfortunately, I don't have any reproducer for this issue yet. > > >>> > > >>> IMPORTANT: if you fix the issue, please add the following tag to th= e > > >>> commit: > > >>> Reported-by: syzbot+e74b94fe601ab9552d69@syzkaller.appspotmail.com > > >> > > >> +riscv maintainers > > >> > > >> This is riscv64-specific. > > >> I've seen similar crashes in put_user in other places. It looks like > > >> put_user crashes in the user address is not mapped/protected (?). > > > > > > The unmapped case should have been handled. > > > > > > I think this issue is that the check for user-mode access added. From > > > what I read the code may be wrong in > > > > > > + if (!user_mode(regs) && addr < TASK_SIZE && > > > + unlikely(!(regs->status & SR_SUM))) > > > + die_kernel_fault("access to user memory without uaccess rout= ines", > > > + addr, regs); > > > > > > I think the SR_SUM check might be wrong, as I read the standard the > > > SR_SUM should be set to disable user-space access. So the check > > > should be unlikely(regs->status & SR_SUM) to say access without > > > having disabled the protection. > > > > The check that is done seems correct to me: "The SUM (permit Supervisor > > User Memory access) bit modifies the privilege with which S-mode loads > > and stores access virtual memory. *When SUM=3D0, S-mode memory accesse= s > > to pages that are accessible by U-mode (U=3D1 in Figure 4.15) will faul= t*. > > When SUM=3D1, these accesses are permitted.SUM has no effect when > > page-based virtual memory is not in effect". > > > > I will try to reproduce the problem locally. > > Weird. It crashes with this all the time: > https://syzkaller.appspot.com/bug?extid=3De74b94fe601ab9552d69 > > Even on trivial programs that almost don't do anything. > Maybe it's qemu bug? Do registers look sane in the dump? That SR_SUM, etc= . > > > 00:13:27 executing program 1: > openat$drirender128(0xffffffffffffff9c, > &(0x7f0000000040)=3D'/dev/dri/renderD128\x00', 0x0, 0x0) > > [ 812.318182][ T4833] Unable to handle kernel access to user memory > without uaccess routines at virtual address 00000000250b60d0 > [ 812.322304][ T4833] Oops [#1] > [ 812.323196][ T4833] Modules linked in: > [ 812.324110][ T4833] CPU: 1 PID: 4833 Comm: syz-executor.1 Not > tainted 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 > [ 812.325862][ T4833] Hardware name: riscv-virtio,qemu (DT) > [ 812.327561][ T4833] epc : schedule_tail+0x72/0xb2 > [ 812.328640][ T4833] ra : schedule_tail+0x70/0xb2 > [ 812.330088][ T4833] epc : ffffffe00008c8b0 ra : ffffffe00008c8ae sp > : ffffffe0238bbec0 > [ 812.331312][ T4833] gp : ffffffe005d25378 tp : ffffffe00a275b00 t0 > : 0000000000000000 > [ 812.333014][ T4833] t1 : 0000000000000001 t2 : 00000000000f4240 s0 > : ffffffe0238bbee0 > [ 812.334137][ T4833] s1 : 00000000250b60d0 a0 : 0000000000000036 a1 > : 0000000000000003 > [ 812.336063][ T4833] a2 : 1ffffffc0cfa8b00 a3 : ffffffe0000c80cc a4 > : 7f467e72c6adf800 > [ 812.337398][ T4833] a5 : 0000000000000000 a6 : 0000000000f00000 a7 > : ffffffe0000f8c84 > [ 812.339287][ T4833] s2 : 0000000000040000 s3 : ffffffe0077a96c0 s4 > : ffffffe020e67fe0 > [ 812.340658][ T4833] s5 : 0000000000004020 s6 : ffffffe0077a9b58 s7 > : ffffffe067d74850 > [ 812.342492][ T4833] s8 : ffffffe067d73e18 s9 : 0000000000000000 > s10: ffffffe00bd72280 > [ 812.343668][ T4833] s11: 000000bd067bf638 t3 : 7f467e72c6adf800 t4 > : ffffffc403ee7fb2 > [ 812.345510][ T4833] t5 : ffffffc403ee7fba t6 : 0000000000040000 > [ 812.347004][ T4833] status: 0000000000000120 badaddr: > 00000000250b60d0 cause: 000000000000000f > [ 812.348091][ T4833] Call Trace: > [ 812.349291][ T4833] [] schedule_tail+0x72/0xb2 > [ 812.350796][ T4833] [] ret_from_exception+0x0/0x14 > [ 812.352799][ T4833] Dumping ftrace buffer: > [ 812.354328][ T4833] (ftrace buffer empty) > [ 812.428145][ T4833] ---[ end trace 94b077e4d677ee73 ]--- > > > 00:10:42 executing program 1: > bpf$ENABLE_STATS(0x20, 0x0, 0x0) > bpf$ENABLE_STATS(0x20, 0x0, 0x0) > > [ 646.536862][ T5163] loop0: detected capacity change from 0 to 1 > [ 646.566730][ T5165] Unable to handle kernel access to user memory > without uaccess routines at virtual address 00000000032f80d0 > [ 646.586024][ T5165] Oops [#1] > [ 646.586640][ T5165] Modules linked in: > [ 646.587350][ T5165] CPU: 1 PID: 5165 Comm: syz-executor.1 Not > tainted 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 > [ 646.588209][ T5165] Hardware name: riscv-virtio,qemu (DT) > [ 646.589019][ T5165] epc : schedule_tail+0x72/0xb2 > [ 646.589811][ T5165] ra : schedule_tail+0x70/0xb2 > [ 646.590435][ T5165] epc : ffffffe00008c8b0 ra : ffffffe00008c8ae sp > : ffffffe008013ec0 > [ 646.591142][ T5165] gp : ffffffe005d25378 tp : ffffffe007634440 t0 > : 0000000000000000 > [ 646.591836][ T5165] t1 : 0000000000000001 t2 : 0000000000000008 s0 > : ffffffe008013ee0 > [ 646.592509][ T5165] s1 : 00000000032f80d0 a0 : 0000000000000004 a1 > : 0000000000000003 > [ 646.593188][ T5165] a2 : 1ffffffc0cfac500 a3 : ffffffe0000c80cc a4 > : 8d229faaffda9500 > [ 646.593878][ T5165] a5 : 0000000000000000 a6 : 0000000000f00000 a7 > : ffffffe000082eba > [ 646.594552][ T5165] s2 : 0000000000040000 s3 : ffffffe00c82c440 s4 > : ffffffe00e61ffe0 > [ 646.595253][ T5165] s5 : 0000000000004000 s6 : ffffffe067d57e00 s7 > : ffffffe067d57850 > [ 646.595938][ T5165] s8 : ffffffe067d56e18 s9 : ffffffe067d57e00 > s10: ffffffe00c82c878 > [ 646.596627][ T5165] s11: 000000967ba7a1cc t3 : 8d229faaffda9500 t4 > : ffffffc4011bc79b > [ 646.597319][ T5165] t5 : ffffffc4011bc79d t6 : ffffffe008de3ce8 > [ 646.597909][ T5165] status: 0000000000000120 badaddr: > 00000000032f80d0 cause: 000000000000000f > [ 646.598682][ T5165] Call Trace: > [ 646.599294][ T5165] [] schedule_tail+0x72/0xb2 > [ 646.600115][ T5165] [] ret_from_exception+0x0/0x14 > [ 646.601333][ T5165] Dumping ftrace buffer: > [ 646.602322][ T5165] (ftrace buffer empty) > [ 646.663691][ T5165] ---[ end trace e7b7847ce74cdfca ]--- Is it reasonable that schedule_tail is called from ret_from_exception? Maybe the issue is in ret_from_exception? I see it does something with registers. > > Thanks, > > > > Alex > > > > > > > > Without this, you can end up with an infinite loop in the fault handl= er. > > > > > >> > > >>> Unable to handle kernel access to user memory without uaccess > > >>> routines at virtual address 000000002749f0d0 > > >>> Oops [#1] > > >>> Modules linked in: > > >>> CPU: 1 PID: 4875 Comm: syz-executor.0 Not tainted > > >>> 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 > > >>> Hardware name: riscv-virtio,qemu (DT) > > >>> epc : schedule_tail+0x72/0xb2 kernel/sched/core.c:4264 > > >>> ra : task_pid_vnr include/linux/sched.h:1421 [inline] > > >>> ra : schedule_tail+0x70/0xb2 kernel/sched/core.c:4264 > > >>> epc : ffffffe00008c8b0 ra : ffffffe00008c8ae sp : ffffffe025d17ec0 > > >>> gp : ffffffe005d25378 tp : ffffffe00f0d0000 t0 : 0000000000000000 > > >>> t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe025d17ee0 > > >>> s1 : 000000002749f0d0 a0 : 000000000000002a a1 : 0000000000000003 > > >>> a2 : 1ffffffc0cfac500 a3 : ffffffe0000c80cc a4 : 5ae9db91c19bbe00 > > >>> a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000082eba > > >>> s2 : 0000000000040000 s3 : ffffffe00eef96c0 s4 : ffffffe022c77fe0 > > >>> s5 : 0000000000004000 s6 : ffffffe067d74e00 s7 : ffffffe067d74850 > > >>> s8 : ffffffe067d73e18 s9 : ffffffe067d74e00 s10: ffffffe00eef96e8 > > >>> s11: 000000ae6cdf8368 t3 : 5ae9db91c19bbe00 t4 : ffffffc4043cafb2 > > >>> t5 : ffffffc4043cafba t6 : 0000000000040000 > > >>> status: 0000000000000120 badaddr: 000000002749f0d0 cause: > > >>> 000000000000000f > > >>> Call Trace: > > >>> [] schedule_tail+0x72/0xb2 kernel/sched/core.c:42= 64 > > >>> [] ret_from_exception+0x0/0x14 > > >>> Dumping ftrace buffer: > > >>> (ftrace buffer empty) > > >>> ---[ end trace b5f8f9231dc87dda ]--- > > >>> > > >>> > > >>> --- > > >>> This report is generated by a bot. It may contain errors. > > >>> See https://goo.gl/tpsmEJ for more information about syzbot. > > >>> syzbot engineers can be reached at syzkaller@googlegroups.com. > > >>> > > >>> syzbot will keep track of this issue. See: > > >>> https://goo.gl/tpsmEJ#status for how to communicate with syzbot. > > >>> > > >>> -- > > >>> You received this message because you are subscribed to the Google > > >>> Groups "syzkaller-bugs" group. > > >>> To unsubscribe from this group and stop receiving emails from it, > > >>> send an email to syzkaller-bugs+unsubscribe@googlegroups.com. > > >>> To view this discussion on the web visit > > >>> https://groups.google.com/d/msgid/syzkaller-bugs/000000000000b74f1b= 05bd316729%40google.com. > > >>> > > >> > > >> _______________________________________________ > > >> linux-riscv mailing list > > >> linux-riscv@lists.infradead.org > > >> http://lists.infradead.org/mailman/listinfo/linux-riscv > > >> > > > > > > From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.0 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_ADSP_CUSTOM_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4376FC433DB for ; Thu, 11 Mar 2021 06:52:44 +0000 (UTC) Received: from desiato.infradead.org (desiato.infradead.org [90.155.92.199]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 8D08C64F4D for ; Thu, 11 Mar 2021 06:52:43 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 8D08C64F4D Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=desiato.20200630; h=Sender:Content-Transfer-Encoding :Content-Type:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:Cc:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=4OkgAy6MABFt6gjQisEyS470g2C1ajfpOWe4Nb+ow8o=; b=Gs0BN8nBG71EU5VgHujCT/yds 8Ezpj+knMDbWsWbWEztmlF0NwzYJAjcwynJIqJwmJG49L0NUlxLuX+oQmP1AdCKcl4tdYPFI2U2wQ zt0Giv6EHqoL9Z+B/0FC6IqteN0kFvzyluxW4dmeIGOsD4vB73lIh7IgVan8pXYU2rkMykC0xQsHW OqqiOHZprFSrscK11wMKhtr79EyUx6elApMp1Qi6021bxVQnJWuOArrslzPG2h22HwTb5J8UPxBX6 UJ+QckWdJ2no+7Mh6TH82GLUF+QoAbCsxmRm1nKeNXKmQf5VbxIMvPOe9KJFzC/B0s0TghUnaKJCD UjuGGEXqA==; Received: from localhost ([::1] helo=desiato.infradead.org) by desiato.infradead.org with esmtp (Exim 4.94 #2 (Red Hat Linux)) id 1lKFBN-008YUH-5Q; Thu, 11 Mar 2021 06:52:29 +0000 Received: from mail-qk1-x734.google.com ([2607:f8b0:4864:20::734]) by desiato.infradead.org with esmtps (Exim 4.94 #2 (Red Hat Linux)) id 1lKFBI-008YT0-Au for linux-riscv@lists.infradead.org; Thu, 11 Mar 2021 06:52:28 +0000 Received: by mail-qk1-x734.google.com with SMTP id l4so19647327qkl.0 for ; Wed, 10 Mar 2021 22:52:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=2Xnkspo4qNSphhzAFXJRHS5e9UpHqKP5zCX5rODZtrU=; b=v9ArJpuOMIq4sl7PCnBfBb9NOM3R0qrK9glcvIjJNXSpYiO1nkk1MwE+2kA9QvnjOW DYYW10zOiUO4V9qI00i20TivD8GpWSPJHVtDGFP9WtbcJj2dBvAzkSs93lWuCz72hTiQ Avf9ZHMiQLgMl1xW/l8pAdFstjvdmBp4bzJ+HfsAXE3X+HvfCyyXzgA0vzMBuqZpmVhO IGPCkjd0rTz7GdLKTU/zvv8x0vGRI/ZCggYWZT5QXc/XyfLDVaQOvaL6Rk9f6kyiOWqq fwx2qi8cRGkOQYEV7vg+wgSsn58abyd70tAjCnkrvWoSkF0rQQl2e+kVYygLyDq82ohd ZaeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=2Xnkspo4qNSphhzAFXJRHS5e9UpHqKP5zCX5rODZtrU=; b=Ba86KOK00zkpnHiWfAS/+cxNMANmmeCfuBE/2OThq/rk8yaqI8jRke8tg+C0x2DJvb 22SuQLZs00959QaZMXfKawZlu4UDcm7Sohg9dLkuJHFhadLCWbL/ZLJ9tWvs34JJpsXa EPXaUIszF0EWCRQskPP7hh8UwpxCDAAzm0daX8OSmlGohWxi6xliQWsMqcBeU+X6Mtr1 o9x2ZNjPNA0y1YpH3gexva1Kk1MNieRMnPOl0+Iqlnr+JSLKtKuxe/fnmRr13y3hrdKW rWtp7U96i4yFi7OYqc+oJkYLXXy1159KiaWGJNBX7+j402ANiScaElwz13uVWishNdwH jb7Q== X-Gm-Message-State: AOAM531OQGSSJ6bHf4ddUNctbCfs9qnQs8R2R8a9TCeEr4+4KNPoE/Wy q8bE9nUzH+qqMlgKNeGBBjBpYEmqLMHa5Dvevm8sNjJ6LaZZIg== X-Google-Smtp-Source: ABdhPJy6tujiGSvScHukDkZ+WBI9oWkuJmXpqp/kEvh7IhUwWgGhPxWOglQ8uFWf2njWSAEgZpPdiPsBlUMMlxX3qtY= X-Received: by 2002:a37:4743:: with SMTP id u64mr6309751qka.350.1615445542005; Wed, 10 Mar 2021 22:52:22 -0800 (PST) MIME-Version: 1.0 References: <000000000000b74f1b05bd316729@google.com> <9a0823f4-de19-c2a2-5333-41c6caadbc11@ghiti.fr> In-Reply-To: From: Dmitry Vyukov Date: Thu, 11 Mar 2021 07:52:10 +0100 Message-ID: Subject: Re: [syzbot] BUG: unable to handle kernel access to user memory in schedule_tail To: Alex Ghiti Cc: Ben Dooks , syzbot , Paul Walmsley , Palmer Dabbelt , Albert Ou , linux-riscv , Daniel Bristot de Oliveira , Benjamin Segall , dietmar.eggemann@arm.com, Juri Lelli , LKML , Mel Gorman , Ingo Molnar , Peter Zijlstra , Steven Rostedt , syzkaller-bugs , Vincent Guittot X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210311_065224_492354_FEE0BEC4 X-CRM114-Status: GOOD ( 39.47 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org T24gVGh1LCBNYXIgMTEsIDIwMjEgYXQgNzo1MCBBTSBEbWl0cnkgVnl1a292IDxkdnl1a292QGdv b2dsZS5jb20+IHdyb3RlOgo+Cj4gT24gVGh1LCBNYXIgMTEsIDIwMjEgYXQgNzo0MCBBTSBBbGV4 IEdoaXRpIDxhbGV4QGdoaXRpLmZyPiB3cm90ZToKPiA+Cj4gPiBIaSBCZW4sCj4gPgo+ID4gTGUg My8xMC8yMSDDoCA1OjI0IFBNLCBCZW4gRG9va3MgYSDDqWNyaXQgOgo+ID4gPiBPbiAxMC8wMy8y MDIxIDE3OjE2LCBEbWl0cnkgVnl1a292IHdyb3RlOgo+ID4gPj4gT24gV2VkLCBNYXIgMTAsIDIw MjEgYXQgNTo0NiBQTSBzeXpib3QKPiA+ID4+IDxzeXpib3QrZTc0Yjk0ZmU2MDFhYjk1NTJkNjlA c3l6a2FsbGVyLmFwcHNwb3RtYWlsLmNvbT4gd3JvdGU6Cj4gPiA+Pj4KPiA+ID4+PiBIZWxsbywK PiA+ID4+Pgo+ID4gPj4+IHN5emJvdCBmb3VuZCB0aGUgZm9sbG93aW5nIGlzc3VlIG9uOgo+ID4g Pj4+Cj4gPiA+Pj4gSEVBRCBjb21taXQ6ICAgIDBkNzU4OGFiIHJpc2N2OiBwcm9jZXNzOiBGaXgg bm8gcHJvdG90eXBlIGZvcgo+ID4gPj4+IGFyY2hfZHVwX3Rhcy4uCj4gPiA+Pj4gZ2l0IHRyZWU6 Cj4gPiA+Pj4gZ2l0Oi8vZ2l0Lmtlcm5lbC5vcmcvcHViL3NjbS9saW51eC9rZXJuZWwvZ2l0L3Jp c2N2L2xpbnV4LmdpdCBmaXhlcwo+ID4gPj4+IGNvbnNvbGUgb3V0cHV0OiBodHRwczovL3N5emth bGxlci5hcHBzcG90LmNvbS94L2xvZy50eHQ/eD0xMjEyYzZlNmQwMDAwMAo+ID4gPj4+IGtlcm5l bCBjb25maWc6Cj4gPiA+Pj4gaHR0cHM6Ly9zeXprYWxsZXIuYXBwc3BvdC5jb20veC8uY29uZmln P3g9ZTNjNTk1MjU1ZmIyZDEzNgo+ID4gPj4+IGRhc2hib2FyZCBsaW5rOgo+ID4gPj4+IGh0dHBz Oi8vc3l6a2FsbGVyLmFwcHNwb3QuY29tL2J1Zz9leHRpZD1lNzRiOTRmZTYwMWFiOTU1MmQ2OQo+ ID4gPj4+IHVzZXJzcGFjZSBhcmNoOiByaXNjdjY0Cj4gPiA+Pj4KPiA+ID4+PiBVbmZvcnR1bmF0 ZWx5LCBJIGRvbid0IGhhdmUgYW55IHJlcHJvZHVjZXIgZm9yIHRoaXMgaXNzdWUgeWV0Lgo+ID4g Pj4+Cj4gPiA+Pj4gSU1QT1JUQU5UOiBpZiB5b3UgZml4IHRoZSBpc3N1ZSwgcGxlYXNlIGFkZCB0 aGUgZm9sbG93aW5nIHRhZyB0byB0aGUKPiA+ID4+PiBjb21taXQ6Cj4gPiA+Pj4gUmVwb3J0ZWQt Ynk6IHN5emJvdCtlNzRiOTRmZTYwMWFiOTU1MmQ2OUBzeXprYWxsZXIuYXBwc3BvdG1haWwuY29t Cj4gPiA+Pgo+ID4gPj4gK3Jpc2N2IG1haW50YWluZXJzCj4gPiA+Pgo+ID4gPj4gVGhpcyBpcyBy aXNjdjY0LXNwZWNpZmljLgo+ID4gPj4gSSd2ZSBzZWVuIHNpbWlsYXIgY3Jhc2hlcyBpbiBwdXRf dXNlciBpbiBvdGhlciBwbGFjZXMuIEl0IGxvb2tzIGxpa2UKPiA+ID4+IHB1dF91c2VyIGNyYXNo ZXMgaW4gdGhlIHVzZXIgYWRkcmVzcyBpcyBub3QgbWFwcGVkL3Byb3RlY3RlZCAoPykuCj4gPiA+ Cj4gPiA+IFRoZSB1bm1hcHBlZCBjYXNlIHNob3VsZCBoYXZlIGJlZW4gaGFuZGxlZC4KPiA+ID4K PiA+ID4gSSB0aGluayB0aGlzIGlzc3VlIGlzIHRoYXQgdGhlIGNoZWNrIGZvciB1c2VyLW1vZGUg YWNjZXNzIGFkZGVkLiBGcm9tCj4gPiA+IHdoYXQgSSByZWFkIHRoZSBjb2RlIG1heSBiZSB3cm9u ZyBpbgo+ID4gPgo+ID4gPiArICAgIGlmICghdXNlcl9tb2RlKHJlZ3MpICYmIGFkZHIgPCBUQVNL X1NJWkUgJiYKPiA+ID4gKyAgICAgICAgICAgIHVubGlrZWx5KCEocmVncy0+c3RhdHVzICYgU1Jf U1VNKSkpCj4gPiA+ICsgICAgICAgIGRpZV9rZXJuZWxfZmF1bHQoImFjY2VzcyB0byB1c2VyIG1l bW9yeSB3aXRob3V0IHVhY2Nlc3Mgcm91dGluZXMiLAo+ID4gPiArICAgICAgICAgICAgICAgIGFk ZHIsIHJlZ3MpOwo+ID4gPgo+ID4gPiBJIHRoaW5rIHRoZSBTUl9TVU0gY2hlY2sgbWlnaHQgYmUg d3JvbmcsIGFzIEkgcmVhZCB0aGUgc3RhbmRhcmQgdGhlCj4gPiA+IFNSX1NVTSBzaG91bGQgYmUg c2V0IHRvIGRpc2FibGUgdXNlci1zcGFjZSBhY2Nlc3MuIFNvIHRoZSBjaGVjawo+ID4gPiBzaG91 bGQgYmUgdW5saWtlbHkocmVncy0+c3RhdHVzICYgU1JfU1VNKSB0byBzYXkgYWNjZXNzIHdpdGhv dXQKPiA+ID4gaGF2aW5nIGRpc2FibGVkIHRoZSBwcm90ZWN0aW9uLgo+ID4KPiA+IFRoZSBjaGVj ayB0aGF0IGlzIGRvbmUgc2VlbXMgY29ycmVjdCB0byBtZTogIlRoZSBTVU0gKHBlcm1pdCBTdXBl cnZpc29yCj4gPiBVc2VyIE1lbW9yeSBhY2Nlc3MpIGJpdCBtb2RpZmllcyB0aGUgcHJpdmlsZWdl IHdpdGggd2hpY2ggUy1tb2RlIGxvYWRzCj4gPiBhbmQgc3RvcmVzIGFjY2VzcyB2aXJ0dWFsIG1l bW9yeS4gICpXaGVuIFNVTT0wLCBTLW1vZGUgbWVtb3J5IGFjY2Vzc2VzCj4gPiB0byBwYWdlcyB0 aGF0IGFyZSBhY2Nlc3NpYmxlIGJ5IFUtbW9kZSAoVT0xIGluIEZpZ3VyZSA0LjE1KSB3aWxsIGZh dWx0Ki4KPiA+ICAgV2hlbiBTVU09MSwgdGhlc2UgYWNjZXNzZXMgYXJlIHBlcm1pdHRlZC5TVU0g IGhhcyAgbm8gIGVmZmVjdCAgd2hlbgo+ID4gcGFnZS1iYXNlZCAgdmlydHVhbCAgbWVtb3J5ICBp cyAgbm90ICBpbiAgZWZmZWN0Ii4KPiA+Cj4gPiBJIHdpbGwgdHJ5IHRvIHJlcHJvZHVjZSB0aGUg cHJvYmxlbSBsb2NhbGx5Lgo+Cj4gV2VpcmQuIEl0IGNyYXNoZXMgd2l0aCB0aGlzIGFsbCB0aGUg dGltZToKPiBodHRwczovL3N5emthbGxlci5hcHBzcG90LmNvbS9idWc/ZXh0aWQ9ZTc0Yjk0ZmU2 MDFhYjk1NTJkNjkKPgo+IEV2ZW4gb24gdHJpdmlhbCBwcm9ncmFtcyB0aGF0IGFsbW9zdCBkb24n dCBkbyBhbnl0aGluZy4KPiBNYXliZSBpdCdzIHFlbXUgYnVnPyBEbyByZWdpc3RlcnMgbG9vayBz YW5lIGluIHRoZSBkdW1wPyBUaGF0IFNSX1NVTSwgZXRjLgo+Cj4KPiAwMDoxMzoyNyBleGVjdXRp bmcgcHJvZ3JhbSAxOgo+IG9wZW5hdCRkcmlyZW5kZXIxMjgoMHhmZmZmZmZmZmZmZmZmZjljLAo+ ICYoMHg3ZjAwMDAwMDAwNDApPScvZGV2L2RyaS9yZW5kZXJEMTI4XHgwMCcsIDB4MCwgMHgwKQo+ Cj4gWyAgODEyLjMxODE4Ml1bIFQ0ODMzXSBVbmFibGUgdG8gaGFuZGxlIGtlcm5lbCBhY2Nlc3Mg dG8gdXNlciBtZW1vcnkKPiB3aXRob3V0IHVhY2Nlc3Mgcm91dGluZXMgYXQgdmlydHVhbCBhZGRy ZXNzIDAwMDAwMDAwMjUwYjYwZDAKPiBbICA4MTIuMzIyMzA0XVsgVDQ4MzNdIE9vcHMgWyMxXQo+ IFsgIDgxMi4zMjMxOTZdWyBUNDgzM10gTW9kdWxlcyBsaW5rZWQgaW46Cj4gWyAgODEyLjMyNDEx MF1bIFQ0ODMzXSBDUFU6IDEgUElEOiA0ODMzIENvbW06IHN5ei1leGVjdXRvci4xIE5vdAo+IHRh aW50ZWQgNS4xMi4wLXJjMi1zeXprYWxsZXItMDA0NjctZzBkNzU4OGFiOWVmOSAjMAo+IFsgIDgx Mi4zMjU4NjJdWyBUNDgzM10gSGFyZHdhcmUgbmFtZTogcmlzY3YtdmlydGlvLHFlbXUgKERUKQo+ IFsgIDgxMi4zMjc1NjFdWyBUNDgzM10gZXBjIDogc2NoZWR1bGVfdGFpbCsweDcyLzB4YjIKPiBb ICA4MTIuMzI4NjQwXVsgVDQ4MzNdICByYSA6IHNjaGVkdWxlX3RhaWwrMHg3MC8weGIyCj4gWyAg ODEyLjMzMDA4OF1bIFQ0ODMzXSBlcGMgOiBmZmZmZmZlMDAwMDhjOGIwIHJhIDogZmZmZmZmZTAw MDA4YzhhZSBzcAo+IDogZmZmZmZmZTAyMzhiYmVjMAo+IFsgIDgxMi4zMzEzMTJdWyBUNDgzM10g IGdwIDogZmZmZmZmZTAwNWQyNTM3OCB0cCA6IGZmZmZmZmUwMGEyNzViMDAgdDAKPiA6IDAwMDAw MDAwMDAwMDAwMDAKPiBbICA4MTIuMzMzMDE0XVsgVDQ4MzNdICB0MSA6IDAwMDAwMDAwMDAwMDAw MDEgdDIgOiAwMDAwMDAwMDAwMGY0MjQwIHMwCj4gOiBmZmZmZmZlMDIzOGJiZWUwCj4gWyAgODEy LjMzNDEzN11bIFQ0ODMzXSAgczEgOiAwMDAwMDAwMDI1MGI2MGQwIGEwIDogMDAwMDAwMDAwMDAw MDAzNiBhMQo+IDogMDAwMDAwMDAwMDAwMDAwMwo+IFsgIDgxMi4zMzYwNjNdWyBUNDgzM10gIGEy IDogMWZmZmZmZmMwY2ZhOGIwMCBhMyA6IGZmZmZmZmUwMDAwYzgwY2MgYTQKPiA6IDdmNDY3ZTcy YzZhZGY4MDAKPiBbICA4MTIuMzM3Mzk4XVsgVDQ4MzNdICBhNSA6IDAwMDAwMDAwMDAwMDAwMDAg YTYgOiAwMDAwMDAwMDAwZjAwMDAwIGE3Cj4gOiBmZmZmZmZlMDAwMGY4Yzg0Cj4gWyAgODEyLjMz OTI4N11bIFQ0ODMzXSAgczIgOiAwMDAwMDAwMDAwMDQwMDAwIHMzIDogZmZmZmZmZTAwNzdhOTZj MCBzNAo+IDogZmZmZmZmZTAyMGU2N2ZlMAo+IFsgIDgxMi4zNDA2NThdWyBUNDgzM10gIHM1IDog MDAwMDAwMDAwMDAwNDAyMCBzNiA6IGZmZmZmZmUwMDc3YTliNTggczcKPiA6IGZmZmZmZmUwNjdk NzQ4NTAKPiBbICA4MTIuMzQyNDkyXVsgVDQ4MzNdICBzOCA6IGZmZmZmZmUwNjdkNzNlMTggczkg OiAwMDAwMDAwMDAwMDAwMDAwCj4gczEwOiBmZmZmZmZlMDBiZDcyMjgwCj4gWyAgODEyLjM0MzY2 OF1bIFQ0ODMzXSAgczExOiAwMDAwMDBiZDA2N2JmNjM4IHQzIDogN2Y0NjdlNzJjNmFkZjgwMCB0 NAo+IDogZmZmZmZmYzQwM2VlN2ZiMgo+IFsgIDgxMi4zNDU1MTBdWyBUNDgzM10gIHQ1IDogZmZm ZmZmYzQwM2VlN2ZiYSB0NiA6IDAwMDAwMDAwMDAwNDAwMDAKPiBbICA4MTIuMzQ3MDA0XVsgVDQ4 MzNdIHN0YXR1czogMDAwMDAwMDAwMDAwMDEyMCBiYWRhZGRyOgo+IDAwMDAwMDAwMjUwYjYwZDAg Y2F1c2U6IDAwMDAwMDAwMDAwMDAwMGYKPiBbICA4MTIuMzQ4MDkxXVsgVDQ4MzNdIENhbGwgVHJh Y2U6Cj4gWyAgODEyLjM0OTI5MV1bIFQ0ODMzXSBbPGZmZmZmZmUwMDAwOGM4YjA+XSBzY2hlZHVs ZV90YWlsKzB4NzIvMHhiMgo+IFsgIDgxMi4zNTA3OTZdWyBUNDgzM10gWzxmZmZmZmZlMDAwMDA1 NTcwPl0gcmV0X2Zyb21fZXhjZXB0aW9uKzB4MC8weDE0Cj4gWyAgODEyLjM1Mjc5OV1bIFQ0ODMz XSBEdW1waW5nIGZ0cmFjZSBidWZmZXI6Cj4gWyAgODEyLjM1NDMyOF1bIFQ0ODMzXSAgICAoZnRy YWNlIGJ1ZmZlciBlbXB0eSkKPiBbICA4MTIuNDI4MTQ1XVsgVDQ4MzNdIC0tLVsgZW5kIHRyYWNl IDk0YjA3N2U0ZDY3N2VlNzMgXS0tLQo+Cj4KPiAwMDoxMDo0MiBleGVjdXRpbmcgcHJvZ3JhbSAx Ogo+IGJwZiRFTkFCTEVfU1RBVFMoMHgyMCwgMHgwLCAweDApCj4gYnBmJEVOQUJMRV9TVEFUUygw eDIwLCAweDAsIDB4MCkKPgo+IFsgIDY0Ni41MzY4NjJdWyBUNTE2M10gbG9vcDA6IGRldGVjdGVk IGNhcGFjaXR5IGNoYW5nZSBmcm9tIDAgdG8gMQo+IFsgIDY0Ni41NjY3MzBdWyBUNTE2NV0gVW5h YmxlIHRvIGhhbmRsZSBrZXJuZWwgYWNjZXNzIHRvIHVzZXIgbWVtb3J5Cj4gd2l0aG91dCB1YWNj ZXNzIHJvdXRpbmVzIGF0IHZpcnR1YWwgYWRkcmVzcyAwMDAwMDAwMDAzMmY4MGQwCj4gWyAgNjQ2 LjU4NjAyNF1bIFQ1MTY1XSBPb3BzIFsjMV0KPiBbICA2NDYuNTg2NjQwXVsgVDUxNjVdIE1vZHVs ZXMgbGlua2VkIGluOgo+IFsgIDY0Ni41ODczNTBdWyBUNTE2NV0gQ1BVOiAxIFBJRDogNTE2NSBD b21tOiBzeXotZXhlY3V0b3IuMSBOb3QKPiB0YWludGVkIDUuMTIuMC1yYzItc3l6a2FsbGVyLTAw NDY3LWcwZDc1ODhhYjllZjkgIzAKPiBbICA2NDYuNTg4MjA5XVsgVDUxNjVdIEhhcmR3YXJlIG5h bWU6IHJpc2N2LXZpcnRpbyxxZW11IChEVCkKPiBbICA2NDYuNTg5MDE5XVsgVDUxNjVdIGVwYyA6 IHNjaGVkdWxlX3RhaWwrMHg3Mi8weGIyCj4gWyAgNjQ2LjU4OTgxMV1bIFQ1MTY1XSAgcmEgOiBz Y2hlZHVsZV90YWlsKzB4NzAvMHhiMgo+IFsgIDY0Ni41OTA0MzVdWyBUNTE2NV0gZXBjIDogZmZm ZmZmZTAwMDA4YzhiMCByYSA6IGZmZmZmZmUwMDAwOGM4YWUgc3AKPiA6IGZmZmZmZmUwMDgwMTNl YzAKPiBbICA2NDYuNTkxMTQyXVsgVDUxNjVdICBncCA6IGZmZmZmZmUwMDVkMjUzNzggdHAgOiBm ZmZmZmZlMDA3NjM0NDQwIHQwCj4gOiAwMDAwMDAwMDAwMDAwMDAwCj4gWyAgNjQ2LjU5MTgzNl1b IFQ1MTY1XSAgdDEgOiAwMDAwMDAwMDAwMDAwMDAxIHQyIDogMDAwMDAwMDAwMDAwMDAwOCBzMAo+ IDogZmZmZmZmZTAwODAxM2VlMAo+IFsgIDY0Ni41OTI1MDldWyBUNTE2NV0gIHMxIDogMDAwMDAw MDAwMzJmODBkMCBhMCA6IDAwMDAwMDAwMDAwMDAwMDQgYTEKPiA6IDAwMDAwMDAwMDAwMDAwMDMK PiBbICA2NDYuNTkzMTg4XVsgVDUxNjVdICBhMiA6IDFmZmZmZmZjMGNmYWM1MDAgYTMgOiBmZmZm ZmZlMDAwMGM4MGNjIGE0Cj4gOiA4ZDIyOWZhYWZmZGE5NTAwCj4gWyAgNjQ2LjU5Mzg3OF1bIFQ1 MTY1XSAgYTUgOiAwMDAwMDAwMDAwMDAwMDAwIGE2IDogMDAwMDAwMDAwMGYwMDAwMCBhNwo+IDog ZmZmZmZmZTAwMDA4MmViYQo+IFsgIDY0Ni41OTQ1NTJdWyBUNTE2NV0gIHMyIDogMDAwMDAwMDAw MDA0MDAwMCBzMyA6IGZmZmZmZmUwMGM4MmM0NDAgczQKPiA6IGZmZmZmZmUwMGU2MWZmZTAKPiBb ICA2NDYuNTk1MjUzXVsgVDUxNjVdICBzNSA6IDAwMDAwMDAwMDAwMDQwMDAgczYgOiBmZmZmZmZl MDY3ZDU3ZTAwIHM3Cj4gOiBmZmZmZmZlMDY3ZDU3ODUwCj4gWyAgNjQ2LjU5NTkzOF1bIFQ1MTY1 XSAgczggOiBmZmZmZmZlMDY3ZDU2ZTE4IHM5IDogZmZmZmZmZTA2N2Q1N2UwMAo+IHMxMDogZmZm ZmZmZTAwYzgyYzg3OAo+IFsgIDY0Ni41OTY2MjddWyBUNTE2NV0gIHMxMTogMDAwMDAwOTY3YmE3 YTFjYyB0MyA6IDhkMjI5ZmFhZmZkYTk1MDAgdDQKPiA6IGZmZmZmZmM0MDExYmM3OWIKPiBbICA2 NDYuNTk3MzE5XVsgVDUxNjVdICB0NSA6IGZmZmZmZmM0MDExYmM3OWQgdDYgOiBmZmZmZmZlMDA4 ZGUzY2U4Cj4gWyAgNjQ2LjU5NzkwOV1bIFQ1MTY1XSBzdGF0dXM6IDAwMDAwMDAwMDAwMDAxMjAg YmFkYWRkcjoKPiAwMDAwMDAwMDAzMmY4MGQwIGNhdXNlOiAwMDAwMDAwMDAwMDAwMDBmCj4gWyAg NjQ2LjU5ODY4Ml1bIFQ1MTY1XSBDYWxsIFRyYWNlOgo+IFsgIDY0Ni41OTkyOTRdWyBUNTE2NV0g WzxmZmZmZmZlMDAwMDhjOGIwPl0gc2NoZWR1bGVfdGFpbCsweDcyLzB4YjIKPiBbICA2NDYuNjAw MTE1XVsgVDUxNjVdIFs8ZmZmZmZmZTAwMDAwNTU3MD5dIHJldF9mcm9tX2V4Y2VwdGlvbisweDAv MHgxNAo+IFsgIDY0Ni42MDEzMzNdWyBUNTE2NV0gRHVtcGluZyBmdHJhY2UgYnVmZmVyOgo+IFsg IDY0Ni42MDIzMjJdWyBUNTE2NV0gICAgKGZ0cmFjZSBidWZmZXIgZW1wdHkpCj4gWyAgNjQ2LjY2 MzY5MV1bIFQ1MTY1XSAtLS1bIGVuZCB0cmFjZSBlN2I3ODQ3Y2U3NGNkZmNhIF0tLS0KCklzIGl0 IHJlYXNvbmFibGUgdGhhdCBzY2hlZHVsZV90YWlsIGlzIGNhbGxlZCBmcm9tIHJldF9mcm9tX2V4 Y2VwdGlvbj8KTWF5YmUgdGhlIGlzc3VlIGlzIGluIHJldF9mcm9tX2V4Y2VwdGlvbj8gSSBzZWUg aXQgZG9lcyBzb21ldGhpbmcgd2l0aApyZWdpc3RlcnMuCgoKCj4gPiBUaGFua3MsCj4gPgo+ID4g QWxleAo+ID4KPiA+ID4KPiA+ID4gV2l0aG91dCB0aGlzLCB5b3UgY2FuIGVuZCB1cCB3aXRoIGFu IGluZmluaXRlIGxvb3AgaW4gdGhlIGZhdWx0IGhhbmRsZXIuCj4gPiA+Cj4gPiA+Pgo+ID4gPj4+ IFVuYWJsZSB0byBoYW5kbGUga2VybmVsIGFjY2VzcyB0byB1c2VyIG1lbW9yeSB3aXRob3V0IHVh Y2Nlc3MKPiA+ID4+PiByb3V0aW5lcyBhdCB2aXJ0dWFsIGFkZHJlc3MgMDAwMDAwMDAyNzQ5ZjBk MAo+ID4gPj4+IE9vcHMgWyMxXQo+ID4gPj4+IE1vZHVsZXMgbGlua2VkIGluOgo+ID4gPj4+IENQ VTogMSBQSUQ6IDQ4NzUgQ29tbTogc3l6LWV4ZWN1dG9yLjAgTm90IHRhaW50ZWQKPiA+ID4+PiA1 LjEyLjAtcmMyLXN5emthbGxlci0wMDQ2Ny1nMGQ3NTg4YWI5ZWY5ICMwCj4gPiA+Pj4gSGFyZHdh cmUgbmFtZTogcmlzY3YtdmlydGlvLHFlbXUgKERUKQo+ID4gPj4+IGVwYyA6IHNjaGVkdWxlX3Rh aWwrMHg3Mi8weGIyIGtlcm5lbC9zY2hlZC9jb3JlLmM6NDI2NAo+ID4gPj4+ICAgcmEgOiB0YXNr X3BpZF92bnIgaW5jbHVkZS9saW51eC9zY2hlZC5oOjE0MjEgW2lubGluZV0KPiA+ID4+PiAgIHJh IDogc2NoZWR1bGVfdGFpbCsweDcwLzB4YjIga2VybmVsL3NjaGVkL2NvcmUuYzo0MjY0Cj4gPiA+ Pj4gZXBjIDogZmZmZmZmZTAwMDA4YzhiMCByYSA6IGZmZmZmZmUwMDAwOGM4YWUgc3AgOiBmZmZm ZmZlMDI1ZDE3ZWMwCj4gPiA+Pj4gICBncCA6IGZmZmZmZmUwMDVkMjUzNzggdHAgOiBmZmZmZmZl MDBmMGQwMDAwIHQwIDogMDAwMDAwMDAwMDAwMDAwMAo+ID4gPj4+ICAgdDEgOiAwMDAwMDAwMDAw MDAwMDAxIHQyIDogMDAwMDAwMDAwMDBmNDI0MCBzMCA6IGZmZmZmZmUwMjVkMTdlZTAKPiA+ID4+ PiAgIHMxIDogMDAwMDAwMDAyNzQ5ZjBkMCBhMCA6IDAwMDAwMDAwMDAwMDAwMmEgYTEgOiAwMDAw MDAwMDAwMDAwMDAzCj4gPiA+Pj4gICBhMiA6IDFmZmZmZmZjMGNmYWM1MDAgYTMgOiBmZmZmZmZl MDAwMGM4MGNjIGE0IDogNWFlOWRiOTFjMTliYmUwMAo+ID4gPj4+ICAgYTUgOiAwMDAwMDAwMDAw MDAwMDAwIGE2IDogMDAwMDAwMDAwMGYwMDAwMCBhNyA6IGZmZmZmZmUwMDAwODJlYmEKPiA+ID4+ PiAgIHMyIDogMDAwMDAwMDAwMDA0MDAwMCBzMyA6IGZmZmZmZmUwMGVlZjk2YzAgczQgOiBmZmZm ZmZlMDIyYzc3ZmUwCj4gPiA+Pj4gICBzNSA6IDAwMDAwMDAwMDAwMDQwMDAgczYgOiBmZmZmZmZl MDY3ZDc0ZTAwIHM3IDogZmZmZmZmZTA2N2Q3NDg1MAo+ID4gPj4+ICAgczggOiBmZmZmZmZlMDY3 ZDczZTE4IHM5IDogZmZmZmZmZTA2N2Q3NGUwMCBzMTA6IGZmZmZmZmUwMGVlZjk2ZTgKPiA+ID4+ PiAgIHMxMTogMDAwMDAwYWU2Y2RmODM2OCB0MyA6IDVhZTlkYjkxYzE5YmJlMDAgdDQgOiBmZmZm ZmZjNDA0M2NhZmIyCj4gPiA+Pj4gICB0NSA6IGZmZmZmZmM0MDQzY2FmYmEgdDYgOiAwMDAwMDAw MDAwMDQwMDAwCj4gPiA+Pj4gc3RhdHVzOiAwMDAwMDAwMDAwMDAwMTIwIGJhZGFkZHI6IDAwMDAw MDAwMjc0OWYwZDAgY2F1c2U6Cj4gPiA+Pj4gMDAwMDAwMDAwMDAwMDAwZgo+ID4gPj4+IENhbGwg VHJhY2U6Cj4gPiA+Pj4gWzxmZmZmZmZlMDAwMDhjOGIwPl0gc2NoZWR1bGVfdGFpbCsweDcyLzB4 YjIga2VybmVsL3NjaGVkL2NvcmUuYzo0MjY0Cj4gPiA+Pj4gWzxmZmZmZmZlMDAwMDA1NTcwPl0g cmV0X2Zyb21fZXhjZXB0aW9uKzB4MC8weDE0Cj4gPiA+Pj4gRHVtcGluZyBmdHJhY2UgYnVmZmVy Ogo+ID4gPj4+ICAgICAoZnRyYWNlIGJ1ZmZlciBlbXB0eSkKPiA+ID4+PiAtLS1bIGVuZCB0cmFj ZSBiNWY4ZjkyMzFkYzg3ZGRhIF0tLS0KPiA+ID4+Pgo+ID4gPj4+Cj4gPiA+Pj4gLS0tCj4gPiA+ Pj4gVGhpcyByZXBvcnQgaXMgZ2VuZXJhdGVkIGJ5IGEgYm90LiBJdCBtYXkgY29udGFpbiBlcnJv cnMuCj4gPiA+Pj4gU2VlIGh0dHBzOi8vZ29vLmdsL3Rwc21FSiBmb3IgbW9yZSBpbmZvcm1hdGlv biBhYm91dCBzeXpib3QuCj4gPiA+Pj4gc3l6Ym90IGVuZ2luZWVycyBjYW4gYmUgcmVhY2hlZCBh dCBzeXprYWxsZXJAZ29vZ2xlZ3JvdXBzLmNvbS4KPiA+ID4+Pgo+ID4gPj4+IHN5emJvdCB3aWxs IGtlZXAgdHJhY2sgb2YgdGhpcyBpc3N1ZS4gU2VlOgo+ID4gPj4+IGh0dHBzOi8vZ29vLmdsL3Rw c21FSiNzdGF0dXMgZm9yIGhvdyB0byBjb21tdW5pY2F0ZSB3aXRoIHN5emJvdC4KPiA+ID4+Pgo+ ID4gPj4+IC0tCj4gPiA+Pj4gWW91IHJlY2VpdmVkIHRoaXMgbWVzc2FnZSBiZWNhdXNlIHlvdSBh cmUgc3Vic2NyaWJlZCB0byB0aGUgR29vZ2xlCj4gPiA+Pj4gR3JvdXBzICJzeXprYWxsZXItYnVn cyIgZ3JvdXAuCj4gPiA+Pj4gVG8gdW5zdWJzY3JpYmUgZnJvbSB0aGlzIGdyb3VwIGFuZCBzdG9w IHJlY2VpdmluZyBlbWFpbHMgZnJvbSBpdCwKPiA+ID4+PiBzZW5kIGFuIGVtYWlsIHRvIHN5emth bGxlci1idWdzK3Vuc3Vic2NyaWJlQGdvb2dsZWdyb3Vwcy5jb20uCj4gPiA+Pj4gVG8gdmlldyB0 aGlzIGRpc2N1c3Npb24gb24gdGhlIHdlYiB2aXNpdAo+ID4gPj4+IGh0dHBzOi8vZ3JvdXBzLmdv b2dsZS5jb20vZC9tc2dpZC9zeXprYWxsZXItYnVncy8wMDAwMDAwMDAwMDBiNzRmMWIwNWJkMzE2 NzI5JTQwZ29vZ2xlLmNvbS4KPiA+ID4+Pgo+ID4gPj4KPiA+ID4+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCj4gPiA+PiBsaW51eC1yaXNjdiBtYWlsaW5n IGxpc3QKPiA+ID4+IGxpbnV4LXJpc2N2QGxpc3RzLmluZnJhZGVhZC5vcmcKPiA+ID4+IGh0dHA6 Ly9saXN0cy5pbmZyYWRlYWQub3JnL21haWxtYW4vbGlzdGluZm8vbGludXgtcmlzY3YKPiA+ID4+ Cj4gPiA+Cj4gPiA+CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpsaW51eC1yaXNjdiBtYWlsaW5nIGxpc3QKbGludXgtcmlzY3ZAbGlzdHMuaW5mcmFkZWFk Lm9yZwpodHRwOi8vbGlzdHMuaW5mcmFkZWFkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LXJp c2N2Cg==