ci starts bisection 2022-12-23 08:25:18.32063472 +0000 UTC m=+39126.643816886 bisecting fixing commit since d1dc87763f406d4e67caf16dbe438a5647692395 building syzkaller on 5783034f220fa03dd9407034a4804be5890c3377 ensuring issue is reproducible on original commit d1dc87763f406d4e67caf16dbe438a5647692395 testing commit d1dc87763f406d4e67caf16dbe438a5647692395 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b2851f17daf889a6c2f52b449b440fd98d2eb2147ef2f282537409b428c89ebd run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF run #1: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #2: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #3: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #4: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #5: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #6: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #7: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #8: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #9: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #10: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #11: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #12: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #13: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #14: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #15: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #16: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #17: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #18: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #19: crashed: KASAN: use-after-free Read in io_poll_remove_entries testing current HEAD 8395ae05cb5a2e31d36106e8c85efa11cda849be testing commit 8395ae05cb5a2e31d36106e8c85efa11cda849be gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a5243f95f0397cdd47886e62a3c86755798ca721d905c14bdc2f1b56ad3f4240 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect start 8395ae05cb5a2e31d36106e8c85efa11cda849be d1dc87763f406d4e67caf16dbe438a5647692395 Bisecting: 24914 revisions left to test after this (roughly 15 steps) [7e6739b9336e61fe23ca4e2c8d1fda8f19f979bf] Merge tag 'drm-next-2022-10-05' of git://anongit.freedesktop.org/drm/drm testing commit 7e6739b9336e61fe23ca4e2c8d1fda8f19f979bf gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 71b0601f2ddf293d394ff6ced43962bd03f7c8cdf4becc90b7c4d45b0a31f969 all runs: OK # git bisect bad 7e6739b9336e61fe23ca4e2c8d1fda8f19f979bf Bisecting: 12828 revisions left to test after this (roughly 14 steps) [723c188d5cd42a07344f997b0b7e1d83b4173c8d] Merge tag 'staging-6.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging testing commit 723c188d5cd42a07344f997b0b7e1d83b4173c8d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 27ecd58574dafa6e4441e611e6c9eb8f0575b623a7de140f6300f66117a55d9f all runs: basic kernel testing failed: WARNING: ODEBUG bug in mgmt_index_removed # git bisect skip 723c188d5cd42a07344f997b0b7e1d83b4173c8d Bisecting: 12828 revisions left to test after this (roughly 14 steps) [a693ff3ed5610a07b1b0dd831d10f516e13cf6c6] selftests/xsk: Add support for executing tests on physical device testing commit a693ff3ed5610a07b1b0dd831d10f516e13cf6c6 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 090aeef4e806428246f0227c1d22498d538796045f99dd0e45f86546bc3e5903 all runs: OK # git bisect bad a693ff3ed5610a07b1b0dd831d10f516e13cf6c6 Bisecting: 8791 revisions left to test after this (roughly 13 steps) [f86d1fbbe7858884d6754534a0afbb74fc30bc26] Merge tag 'net-next-6.0' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit f86d1fbbe7858884d6754534a0afbb74fc30bc26 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f008edb8587f641e65c7b2906393d55600f7c9f6eb155d2af4d19d4807d7cc11 all runs: basic kernel testing failed: WARNING: ODEBUG bug in mgmt_index_removed # git bisect skip f86d1fbbe7858884d6754534a0afbb74fc30bc26 Bisecting: 8791 revisions left to test after this (roughly 13 steps) [b3bb8628bf64440065976c71e4ab09186c393597] tsnep: Fix tsnep_tx_unmap() error path usage testing commit b3bb8628bf64440065976c71e4ab09186c393597 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5bfdd0228892c5e44894443df82948ba90082b44ec462089e5cc3ce65cd625fe all runs: basic kernel testing failed: WARNING: ODEBUG bug in mgmt_index_removed # git bisect skip b3bb8628bf64440065976c71e4ab09186c393597 Bisecting: 8791 revisions left to test after this (roughly 13 steps) [7e89476b59ca0e00cb5499267edec3f62e8ef67d] media: camss: Move and unexport functions specific to ISPIF testing commit 7e89476b59ca0e00cb5499267edec3f62e8ef67d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b9f37da20390762b5566bfd5e7178d383240d5064eb1fde4cfe6260716b0f949 all runs: OK # git bisect bad 7e89476b59ca0e00cb5499267edec3f62e8ef67d Bisecting: 1537 revisions left to test after this (roughly 10 steps) [54c2cc79194c961a213c1d375fe3aa4165664cc4] Merge tag 'usb-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit 54c2cc79194c961a213c1d375fe3aa4165664cc4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: dd500c6f12f4cc3e30c684462382b7158a38fa7958207d08ea2d307104b45bc1 run #0: boot failed: INFO: task hung in add_early_randomness run #1: boot failed: INFO: task hung in add_early_randomness run #2: boot failed: INFO: task hung in add_early_randomness run #3: boot failed: INFO: task hung in add_early_randomness run #4: boot failed: INFO: task hung in add_early_randomness run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 54c2cc79194c961a213c1d375fe3aa4165664cc4 Bisecting: 692 revisions left to test after this (roughly 9 steps) [04d93b2b8bc7a68ec45a6a156f34a611ede5aa60] Merge tag 'spdx-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/spdx testing commit 04d93b2b8bc7a68ec45a6a156f34a611ede5aa60 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9fe4c5886895924c3e8eace4c1ae4553757609db003d404f064aee1767918d47 run #0: boot failed: INFO: task hung in add_early_randomness run #1: boot failed: INFO: task hung in add_early_randomness run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 04d93b2b8bc7a68ec45a6a156f34a611ede5aa60 Bisecting: 221 revisions left to test after this (roughly 8 steps) [09a018176ba246f00d6b6b526047d38dcd2955d3] Merge tag 'arm-late-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit 09a018176ba246f00d6b6b526047d38dcd2955d3 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 698415198554e91bc2af99025aec8c2b62bda79422f859069863eb1afe01775a all runs: crashed: KASAN: use-after-free Read in io_poll_remove_entries # git bisect good 09a018176ba246f00d6b6b526047d38dcd2955d3 Bisecting: 129 revisions left to test after this (roughly 7 steps) [6f6ebb9899861c8a4e49cc7d9796d024f731b512] Merge tag 'sound-fix-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 6f6ebb9899861c8a4e49cc7d9796d024f731b512 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1bd6b9c685cc95059f76831117b290819b7e3a8f523e4f5f97d4e05e210e6a53 all runs: crashed: KASAN: use-after-free Read in io_poll_remove_entries # git bisect good 6f6ebb9899861c8a4e49cc7d9796d024f731b512 Bisecting: 64 revisions left to test after this (roughly 6 steps) [6e5f6a86915d65210e90acac0402e6f37e21fc7b] Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost testing commit 6e5f6a86915d65210e90acac0402e6f37e21fc7b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9063d73bea7f83fa0c53ea7e58d6dfda14efd72791bb722d17db106669b1c636 run #0: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #1: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #2: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #3: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #4: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #5: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #6: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #7: boot failed: INFO: task hung in add_early_randomness run #8: boot failed: INFO: task hung in add_early_randomness run #9: boot failed: INFO: task hung in add_early_randomness # git bisect good 6e5f6a86915d65210e90acac0402e6f37e21fc7b Bisecting: 36 revisions left to test after this (roughly 5 steps) [72fbbc3d0e3e3117c29a73d0b4d928dc00ed99ce] Merge tag 'for-5.19/block-exec-2022-06-02' of git://git.kernel.dk/linux-block testing commit 72fbbc3d0e3e3117c29a73d0b4d928dc00ed99ce gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2e9b381a7b67b6294118b351b6b41ac8e2b296c4f71cb3cf62dde94d618e88f0 run #0: boot failed: INFO: task hung in add_early_randomness run #1: boot failed: INFO: task hung in add_early_randomness run #2: boot failed: INFO: task hung in add_early_randomness run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 72fbbc3d0e3e3117c29a73d0b4d928dc00ed99ce Bisecting: 14 revisions left to test after this (roughly 4 steps) [5ac8bdb9ad47334a9590e29daf7e4149b0a34729] Merge tag 'io_uring-5.19-2022-06-02' of git://git.kernel.dk/linux-block testing commit 5ac8bdb9ad47334a9590e29daf7e4149b0a34729 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7bfc833e2dc8dcf011f023740dcad5ae0e96dc25bb5886cf4bf38638c7c217eb run #0: boot failed: INFO: task hung in add_early_randomness run #1: boot failed: INFO: task hung in add_early_randomness run #2: boot failed: INFO: task hung in add_early_randomness run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 5ac8bdb9ad47334a9590e29daf7e4149b0a34729 Bisecting: 6 revisions left to test after this (roughly 3 steps) [21870e02fcd385c39fe635e6531ce78302f3cd71] io_uring: fix a memory leak of buffer group list on exit testing commit 21870e02fcd385c39fe635e6531ce78302f3cd71 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f5711c37afaf9c9154117499da7d57584d6424a20136ce7e0c488ae94768601b all runs: crashed: KASAN: use-after-free Read in io_poll_remove_entries # git bisect good 21870e02fcd385c39fe635e6531ce78302f3cd71 Bisecting: 3 revisions left to test after this (roughly 2 steps) [4278a0deb1f6cac40ded3362fe2a9827d7efee3d] io_uring: defer alloc_hint update to io_file_bitmap_set() testing commit 4278a0deb1f6cac40ded3362fe2a9827d7efee3d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e2e10840d90b4f20940ee06233efbda3ac215857191e4d9840482800ead10302 all runs: crashed: KASAN: use-after-free Read in io_poll_remove_entries # git bisect good 4278a0deb1f6cac40ded3362fe2a9827d7efee3d Bisecting: 1 revision left to test after this (roughly 1 step) [61c1b44a21d70d4783db02198fbf68b132f4953c] io_uring: fix deadlock on iowq file slot alloc testing commit 61c1b44a21d70d4783db02198fbf68b132f4953c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 032a2facf1ca9eec9acdecf5aedb802a479d845e66d95ed902468c5fd2c81b14 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF run #1: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #2: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #3: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #4: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #5: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #6: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #7: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #8: crashed: KASAN: use-after-free Read in io_poll_remove_entries run #9: crashed: KASAN: use-after-free Read in io_poll_remove_entries # git bisect good 61c1b44a21d70d4783db02198fbf68b132f4953c Bisecting: 0 revisions left to test after this (roughly 0 steps) [9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7] io_uring: reinstate the inflight tracking testing commit 9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3801db9b1c7401b968cf6ff625310b12b238d7a8664fa4e89a25f65a6127ffb8 all runs: OK # git bisect bad 9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7 9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7 is the first bad commit commit 9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7 Author: Jens Axboe Date: Wed Jun 1 23:57:02 2022 -0600 io_uring: reinstate the inflight tracking After some debugging, it was realized that we really do still need the old inflight tracking for any file type that has io_uring_fops assigned. If we don't, then trivial circular references will mean that we never get the ctx cleaned up and hence it'll leak. Just bring back the inflight tracking, which then also means we can eliminate the conditional dropping of the file when task_work is queued. Fixes: d5361233e9ab ("io_uring: drop the old style inflight file tracking") Signed-off-by: Jens Axboe fs/io_uring.c | 82 ++++++++++++++++++++++++++++++++++++++++------------------- 1 file changed, 56 insertions(+), 26 deletions(-) culprit signature: 3801db9b1c7401b968cf6ff625310b12b238d7a8664fa4e89a25f65a6127ffb8 parent signature: 032a2facf1ca9eec9acdecf5aedb802a479d845e66d95ed902468c5fd2c81b14 revisions tested: 19, total time: 4h34m48.116717874s (build: 2h14m28.913648323s, test: 2h16m51.661056045s) first good commit: 9cae36a094e7e9d6e5fe8b6dcd4642138b3eb0c7 io_uring: reinstate the inflight tracking recipients (to): ["axboe@kernel.dk" "linux-kernel@vger.kernel.org"] recipients (cc): ["linux-fsdevel@vger.kernel.org" "viro@zeniv.linux.org.uk"]