bisecting cause commit starting from 503f375baa99edff894eb1a534d2ac0b4f799573 building syzkaller on be531bb42381b245eed805e49fd889d1c2118c76 testing commit 503f375baa99edff894eb1a534d2ac0b4f799573 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 52fd9885a3ea6a07f533f670e34582151a43ccc5d1f9c1d1514f3c7861fc824a run #0: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #1: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #2: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #3: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #4: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #5: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #6: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #7: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #8: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #9: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #10: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #11: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #12: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #13: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #14: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #15: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #16: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #17: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #18: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #19: boot failed: KASAN: slab-out-of-bounds Read in copy_data testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 803d2a4b357f9dd45e33ac8c519f36aa025defd2f62007993f10c8f7274e3a5d all runs: OK # git bisect start 503f375baa99edff894eb1a534d2ac0b4f799573 7d2a07b769330c34b4deabeed939325c77a7ec2f Bisecting: 12862 revisions left to test after this (roughly 14 steps) [0e545dbaa2797133f57bf8387e8f74cd245cedea] Merge branch 'libbpf: Deprecate bpf_{map,program}__{prev,next} APIs since v0.7' testing commit 0e545dbaa2797133f57bf8387e8f74cd245cedea compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6ff39df41a927ad703cd0a30ffe756d0b7249f301df3682e9e352a53e2ca3468 all runs: OK # git bisect good 0e545dbaa2797133f57bf8387e8f74cd245cedea Bisecting: 6708 revisions left to test after this (roughly 13 steps) [0243c4b406a21c687a1a4d8c85e4dcb0fcff09ec] Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git testing commit 0243c4b406a21c687a1a4d8c85e4dcb0fcff09ec compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 46f34561e3bd4134cb27fbd15871ea63cc82d8e965a1347ee3ad66b233651fd3 all runs: OK # git bisect good 0243c4b406a21c687a1a4d8c85e4dcb0fcff09ec Bisecting: 3361 revisions left to test after this (roughly 12 steps) [3f43a66bb62dd68733339484dfa4b153f8bf4072] Merge branch 'irq/irqchip-next' of git://git.kernel.org/pub/scm/linux/kernel/git/maz/arm-platforms.git testing commit 3f43a66bb62dd68733339484dfa4b153f8bf4072 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2a21cd122791d0d4a74d889dfb235ef64d04abc8bfc5e3f8b3032c32424124e4 all runs: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests # git bisect bad 3f43a66bb62dd68733339484dfa4b153f8bf4072 Bisecting: 1853 revisions left to test after this (roughly 11 steps) [f010c8d4695540bcea289d34b99041135a232df2] Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git testing commit f010c8d4695540bcea289d34b99041135a232df2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7cdc6ef7de4671cf14216ce97f724d39492e1f221113635b96efa88800aa243d all runs: OK # git bisect good f010c8d4695540bcea289d34b99041135a232df2 Bisecting: 876 revisions left to test after this (roughly 10 steps) [d83d03a91a81d47b0651cea784db0c7a792b8f5a] Merge branch 'for-next' of git://git.kernel.dk/linux-block.git testing commit d83d03a91a81d47b0651cea784db0c7a792b8f5a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d01dc1f0633362a701e24981e3ec6f837d38d26d41c44fdd33bee6efd912ab19 run #0: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #1: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #2: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #3: crashed: KASAN: slab-out-of-bounds Read in __blk_mq_alloc_requests run #4: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #5: crashed: KASAN: slab-out-of-bounds Read in __blk_mq_alloc_requests run #6: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #7: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #8: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests run #9: crashed: KASAN: use-after-free Read in __blk_mq_alloc_requests # git bisect bad d83d03a91a81d47b0651cea784db0c7a792b8f5a Bisecting: 482 revisions left to test after this (roughly 9 steps) [783459f24e06da5059c2541f751b8b604ec6e75e] Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input.git testing commit 783459f24e06da5059c2541f751b8b604ec6e75e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6e0aa30f3042183d12620e91b696e1cd9d076b2cbe4f8f0d03faaf0d7f36dd59 all runs: OK # git bisect good 783459f24e06da5059c2541f751b8b604ec6e75e Bisecting: 228 revisions left to test after this (roughly 8 steps) [23799b0f0689cc4dc8d1b84ad234284777365c93] Merge branch 'for-5.16/io_uring' into for-next testing commit 23799b0f0689cc4dc8d1b84ad234284777365c93 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 63734c3db2c96ce3abd9d9cd44a35cb8a6d7d93a69ae4f6d0fadebd7295c58e9 all runs: OK # git bisect good 23799b0f0689cc4dc8d1b84ad234284777365c93 Bisecting: 120 revisions left to test after this (roughly 7 steps) [60069ac90ba24cec5a9d161a12f318635b57e4c8] Merge branch 'for-5.16/cdrom' into for-next testing commit 60069ac90ba24cec5a9d161a12f318635b57e4c8 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d9097e3d310ff16a6484cf3426eba9e34755b209da045a271e3dc6af7d23e690 all runs: OK # git bisect good 60069ac90ba24cec5a9d161a12f318635b57e4c8 Bisecting: 60 revisions left to test after this (roughly 6 steps) [b24c62c2f4892243ffa348fe2e1e687178a5e691] Merge branch 'for-5.16/block' into for-next testing commit b24c62c2f4892243ffa348fe2e1e687178a5e691 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: af2350e0135f5d0b792515029b801cbf2ad4717d4530375d34554d530ed22b44 all runs: OK # git bisect good b24c62c2f4892243ffa348fe2e1e687178a5e691 Bisecting: 31 revisions left to test after this (roughly 5 steps) [36413f42eaf5ccaa42f9a79756129abc34cd27c9] Merge branch 'for-5.16/drivers' into for-next testing commit 36413f42eaf5ccaa42f9a79756129abc34cd27c9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6fa359492325d5b7a5aad19554e1e122d87671c68ea601285d55cf6cf29aa02c all runs: OK # git bisect good 36413f42eaf5ccaa42f9a79756129abc34cd27c9 Bisecting: 15 revisions left to test after this (roughly 4 steps) [7c5835a8640c8eaae0d6059d0ad185da6b946945] Merge branch 'for-5.16/scsi-ma' into for-next testing commit 7c5835a8640c8eaae0d6059d0ad185da6b946945 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cc28b619972874b46888a0d63065fc141e0f9149bda33f904df92eb3cc3c8d92 run #0: crashed: no output from test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky # git bisect bad 7c5835a8640c8eaae0d6059d0ad185da6b946945 Bisecting: 8 revisions left to test after this (roughly 3 steps) [9184ca4331cf4ab483b856c8abbe4c55a84de399] Merge branch 'for-5.16/block' into for-next testing commit 9184ca4331cf4ab483b856c8abbe4c55a84de399 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ecd28ff0b3201649bba27f6819f92cb24a7a731afcefa632bb560276537d36b9 all runs: OK # git bisect good 9184ca4331cf4ab483b856c8abbe4c55a84de399 Bisecting: 4 revisions left to test after this (roughly 2 steps) [801cafd639486ccce436a152c496eb96d0d9c5dd] Merge branch 'for-5.16/block' into for-next testing commit 801cafd639486ccce436a152c496eb96d0d9c5dd compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8901703ad1a309657954e66c65b43355ec86dfc3f9c9cfb924cdde23e0fa4ead all runs: OK # git bisect good 801cafd639486ccce436a152c496eb96d0d9c5dd Bisecting: 2 revisions left to test after this (roughly 1 step) [fe22e1c2f705676a705d821301fc52eecc2fe055] libata: support concurrent positioning ranges log testing commit fe22e1c2f705676a705d821301fc52eecc2fe055 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c78324fec43fc6b55509890020b81c06740746a76431f1f2e38ee1735b7bb299 all runs: OK # git bisect good fe22e1c2f705676a705d821301fc52eecc2fe055 Bisecting: 0 revisions left to test after this (roughly 1 step) [9d824642889823c464847342d6ff530b9eee3241] doc: Fix typo in request queue sysfs documentation testing commit 9d824642889823c464847342d6ff530b9eee3241 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c78324fec43fc6b55509890020b81c06740746a76431f1f2e38ee1735b7bb299 all runs: OK # git bisect good 9d824642889823c464847342d6ff530b9eee3241 7c5835a8640c8eaae0d6059d0ad185da6b946945 is the first bad commit commit 7c5835a8640c8eaae0d6059d0ad185da6b946945 Merge: 801cafd63948 9d8246428898 Author: Jens Axboe Date: Tue Oct 26 21:01:55 2021 -0600 Merge branch 'for-5.16/scsi-ma' into for-next * for-5.16/scsi-ma: doc: Fix typo in request queue sysfs documentation doc: document sysfs queue/independent_access_ranges attributes libata: support concurrent positioning ranges log scsi: sd: add concurrent positioning ranges support Documentation/block/queue-sysfs.rst | 33 ++++++++++++++- drivers/ata/libata-core.c | 57 +++++++++++++++++++++++++- drivers/ata/libata-scsi.c | 48 +++++++++++++++++----- drivers/scsi/sd.c | 81 +++++++++++++++++++++++++++++++++++++ drivers/scsi/sd.h | 1 + include/linux/ata.h | 1 + include/linux/libata.h | 15 +++++++ 7 files changed, 224 insertions(+), 12 deletions(-) Reproducer flagged being flaky revisions tested: 17, total time: 4h15m4.244599409s (build: 1h47m42.683616285s, test: 2h25m26.754501058s) first bad commit: 7c5835a8640c8eaae0d6059d0ad185da6b946945 Merge branch 'for-5.16/scsi-ma' into for-next recipients (to): ["axboe@kernel.dk"] recipients (cc): [] crash: no output from test machine