bisecting fixing commit since 3af409ca278d4a8d50e91f9f7c4c33b175645cf3 building syzkaller on 3e5ed8b45e7a561d6344a4d3d7bf3bfb8f24a7b3 testing commit 3af409ca278d4a8d50e91f9f7c4c33b175645cf3 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 76371c369477d29ec656068a31c8e417b41e0aeee35b226699a10659c3296ce8 run #0: crashed: KASAN: use-after-free Read in nbd_genl_connect run #1: crashed: KASAN: use-after-free Read in nbd_genl_connect run #2: crashed: KASAN: use-after-free Read in nbd_genl_connect run #3: crashed: KASAN: use-after-free Read in nbd_genl_connect run #4: crashed: WARNING: refcount bug in nbd_config_put run #5: crashed: WARNING: refcount bug in nbd_config_put run #6: crashed: KASAN: use-after-free Read in nbd_genl_connect run #7: crashed: WARNING: refcount bug in nbd_config_put run #8: crashed: KASAN: use-after-free Read in nbd_genl_connect run #9: crashed: KASAN: use-after-free Read in nbd_genl_connect run #10: crashed: KASAN: use-after-free Read in nbd_genl_connect run #11: crashed: WARNING: refcount bug in nbd_config_put run #12: crashed: KASAN: use-after-free Read in nbd_genl_connect run #13: crashed: WARNING: refcount bug in nbd_config_put run #14: crashed: KASAN: use-after-free Read in nbd_genl_connect run #15: crashed: KASAN: use-after-free Read in nbd_release run #16: crashed: WARNING: refcount bug in nbd_config_put run #17: crashed: KASAN: use-after-free Write in nbd_release run #18: crashed: KASAN: use-after-free Read in nbd_genl_connect run #19: crashed: KASAN: use-after-free Read in nbd_release testing current HEAD 111b64e35ea03d58c882832744f571a88bb2e2e2 testing commit 111b64e35ea03d58c882832744f571a88bb2e2e2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1be1f464e974fa93c4783b1a1d2173ab700645557ce4a8e704cc77dd35eaf8dc run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/tmp/syz-executor461490115" "root@10.128.15.197:./syz-executor461490115"]: exit status 1 Connection timed out during banner exchange Connection to 10.128.15.197 port 22 timed out lost connection run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect start 111b64e35ea03d58c882832744f571a88bb2e2e2 3af409ca278d4a8d50e91f9f7c4c33b175645cf3 Bisecting: 28734 revisions left to test after this (roughly 15 steps) [7ac86b3dca1b00f5391d346fdea3ac010d230667] Merge tag 'ceph-for-5.13-rc1' of git://github.com/ceph/ceph-client testing commit 7ac86b3dca1b00f5391d346fdea3ac010d230667 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 427eda3f416b7128058c6e078ab346783fb7665ef86668f9dae36d594b03f5ff run #0: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #1: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #2: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #3: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #4: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #5: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #6: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #7: basic kernel testing failed: WARNING in __nf_unregister_net_hook run #8: crashed: WARNING in __nf_unregister_net_hook run #9: crashed: WARNING in __nf_unregister_net_hook # git bisect good 7ac86b3dca1b00f5391d346fdea3ac010d230667 Bisecting: 14281 revisions left to test after this (roughly 14 steps) [79160a603bdb51916226caf4a6616cc4e1c58a58] Merge tag 'usb-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit 79160a603bdb51916226caf4a6616cc4e1c58a58 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 796ac32299236be3a4d9a2a3f9680fee5a0ae0608fa2c5e5500d67ac3721af7b all runs: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) # git bisect skip 79160a603bdb51916226caf4a6616cc4e1c58a58 Bisecting: 14281 revisions left to test after this (roughly 14 steps) [c6c2066db3963e519a7ff8f432fcec956f4d23b4] xfs: move xfs_inactive call to xfs_inode_mark_reclaimable testing commit c6c2066db3963e519a7ff8f432fcec956f4d23b4 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1af26d47c8e5b044790a92ee9cdd011e7f802413a784aaef5c096564b335cf77 all runs: crashed: possible deadlock in del_gendisk # git bisect good c6c2066db3963e519a7ff8f432fcec956f4d23b4 Bisecting: 5580 revisions left to test after this (roughly 13 steps) [7c314bdfb64e4bb8d2f829376ed56ce663483752] Merge tag 'tty-5.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty testing commit 7c314bdfb64e4bb8d2f829376ed56ce663483752 arch/x86/kernel/setup.c:916:6: error: implicit declaration of function 'acpi_mps_check' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1110:2: error: implicit declaration of function 'acpi_table_upgrade' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1112:2: error: implicit declaration of function 'acpi_boot_table_init' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1120:2: error: implicit declaration of function 'early_acpi_boot_init'; did you mean 'early_cpu_init'? [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1162:2: error: implicit declaration of function 'acpi_boot_init' [-Werror=implicit-function-declaration] # git bisect skip 7c314bdfb64e4bb8d2f829376ed56ce663483752 Bisecting: 5580 revisions left to test after this (roughly 13 steps) [a72808b65834e99534f6c5c7134c201c72fe92aa] net: dsa: create a helper for locating EtherType DSA headers on TX testing commit a72808b65834e99534f6c5c7134c201c72fe92aa compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4d62a86c61d5eaba782bc1ea953ed0d07a3582276d16825ae7105774ea552ba6 all runs: crashed: possible deadlock in del_gendisk # git bisect good a72808b65834e99534f6c5c7134c201c72fe92aa Bisecting: 4965 revisions left to test after this (roughly 12 steps) [0d290223a6c77107b1c3988959e49279a8dafaba] Merge tag 'sound-5.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 0d290223a6c77107b1c3988959e49279a8dafaba compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3ef7210265804feef8f824a074defdeb2b10347fa6f32bf04c2eafe1c0efd317 run #0: crashed: KASAN: use-after-free Read in __d_alloc run #1: crashed: KASAN: use-after-free Read in __d_alloc run #2: crashed: KASAN: use-after-free Read in __d_alloc run #3: crashed: KASAN: use-after-free Read in __d_alloc run #4: crashed: KASAN: use-after-free Read in __d_alloc run #5: crashed: KASAN: use-after-free Read in __d_alloc run #6: crashed: KASAN: use-after-free Read in __d_alloc run #7: OK run #8: OK run #9: OK # git bisect good 0d290223a6c77107b1c3988959e49279a8dafaba Bisecting: 2494 revisions left to test after this (roughly 11 steps) [1c500ad706383f1a6609e63d0b5d1723fd84dab9] loop: reduce the loop_ctl_mutex scope testing commit 1c500ad706383f1a6609e63d0b5d1723fd84dab9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 136ca1363bfefe3646d15e92649cd52d4bf4d3ed37fe8e91bfc8f9347da975db all runs: crashed: KASAN: use-after-free Read in __d_alloc # git bisect good 1c500ad706383f1a6609e63d0b5d1723fd84dab9 Bisecting: 1249 revisions left to test after this (roughly 10 steps) [3de18c865f504ab59ed2588b1e11acd4bcb9ea09] Merge branch 'stable/for-linus-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/swiotlb testing commit 3de18c865f504ab59ed2588b1e11acd4bcb9ea09 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8a2118a5a2daed54b5338fa5761347af984c829548839238437c0430b858ab93 all runs: crashed: KASAN: use-after-free Read in __d_alloc # git bisect good 3de18c865f504ab59ed2588b1e11acd4bcb9ea09 Bisecting: 640 revisions left to test after this (roughly 9 steps) [58ca24158758f1784400d32743373d7d6227d018] Merge tag 'trace-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace testing commit 58ca24158758f1784400d32743373d7d6227d018 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6ccdc82f2a0b09d56d8aed2330b98e897d379604f6308e10c3ada122fed9be81 all runs: OK # git bisect bad 58ca24158758f1784400d32743373d7d6227d018 Bisecting: 316 revisions left to test after this (roughly 8 steps) [4e71add02821bdd204dd29c35e66baecc9b6a235] Merge branch 'stable/for-linus-5.15-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/ibft testing commit 4e71add02821bdd204dd29c35e66baecc9b6a235 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ecf58528a20685bb87a0b0d934dd3e6f9434e8ff5cb89af1ef5a7c2b3dd33e22 run #0: crashed: KASAN: use-after-free Read in bdev_free_inode run #1: crashed: KASAN: use-after-free Read in __d_alloc run #2: crashed: KASAN: use-after-free Read in __d_alloc run #3: crashed: KASAN: use-after-free Read in __d_alloc run #4: crashed: KASAN: use-after-free Read in __d_alloc run #5: crashed: KASAN: use-after-free Read in __d_alloc run #6: crashed: KASAN: use-after-free Read in __d_alloc run #7: OK run #8: OK run #9: OK # git bisect good 4e71add02821bdd204dd29c35e66baecc9b6a235 Bisecting: 145 revisions left to test after this (roughly 7 steps) [f7464060f7ab9a2424428008f0ee9f1e267e410f] Merge git://github.com/Paragon-Software-Group/linux-ntfs3 testing commit f7464060f7ab9a2424428008f0ee9f1e267e410f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 455b8eee2b691bae895e47d4e72a6517560d36ec11be1dc5452a016fe3c13eeb run #0: crashed: KASAN: use-after-free Read in __d_alloc run #1: crashed: KASAN: use-after-free Read in __d_alloc run #2: crashed: KASAN: use-after-free Read in __d_alloc run #3: crashed: KASAN: use-after-free Read in __d_alloc run #4: crashed: KASAN: use-after-free Read in __d_alloc run #5: crashed: KASAN: use-after-free Read in __d_alloc run #6: crashed: KASAN: use-after-free Read in __d_alloc run #7: crashed: KASAN: use-after-free Read in __d_alloc run #8: OK run #9: OK # git bisect good f7464060f7ab9a2424428008f0ee9f1e267e410f Bisecting: 69 revisions left to test after this (roughly 6 steps) [063df71a574b88e94391a3a719cf66d1b46df884] Merge tag 'riscv-for-linus-5.15-mw0' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux testing commit 063df71a574b88e94391a3a719cf66d1b46df884 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c291e0fe92c97e09dd3f79b094e1c372684b6c4e672e37194708b45482f6c53a all runs: OK # git bisect bad 063df71a574b88e94391a3a719cf66d1b46df884 Bisecting: 34 revisions left to test after this (roughly 5 steps) [6b6dc4f40c5264556223ba94693f20d83796ab1f] Merge tag 'mtd/for-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux testing commit 6b6dc4f40c5264556223ba94693f20d83796ab1f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3e54d9cadbb379b094dac8c5a6894bedcdc96270d9f79cac6c4d3e73e455376a all runs: OK # git bisect bad 6b6dc4f40c5264556223ba94693f20d83796ab1f Bisecting: 21 revisions left to test after this (roughly 4 steps) [ee28b42006c37aaeb68c83300fe5608db662082f] mtd_blkdevs: simplify the refcounting in blktrans_{open, release} testing commit ee28b42006c37aaeb68c83300fe5608db662082f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5de8936660a31bb575143930f924c9aff1160a141dc98ccb6f7705975daa3ee6 all runs: crashed: possible deadlock in del_gendisk # git bisect good ee28b42006c37aaeb68c83300fe5608db662082f Bisecting: 10 revisions left to test after this (roughly 4 steps) [6b430c7595e4eb95fae8fb54adc3c3ce002e75ae] mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' testing commit 6b430c7595e4eb95fae8fb54adc3c3ce002e75ae compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3fc6c755ce3c12d704300c923f9a93a308ac46a7152025e05c07b5e0985ee726 all runs: crashed: possible deadlock in del_gendisk # git bisect good 6b430c7595e4eb95fae8fb54adc3c3ce002e75ae Bisecting: 4 revisions left to test after this (roughly 3 steps) [6128b3af2a5e42386aa7faf37609b57f39fb7d00] mm: ignore MAP_DENYWRITE in ksys_mmap_pgoff() testing commit 6128b3af2a5e42386aa7faf37609b57f39fb7d00 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2147d14a7cfc9de765ff4c53ce798f9cae0024265ad6b82cf7e9d06c41cc4198 all runs: crashed: possible deadlock in del_gendisk # git bisect good 6128b3af2a5e42386aa7faf37609b57f39fb7d00 Bisecting: 1 revision left to test after this (roughly 1 step) [0319b848b155185815724e1b46103c550627a845] binfmt: a.out: Fix bogus semicolon testing commit 0319b848b155185815724e1b46103c550627a845 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 94f823cb20b0d5d5f40ddbf93e7f77eb9914952660299cb9c2a44a54371dcd73 run #0: crashed: KASAN: use-after-free Read in __d_alloc run #1: crashed: KASAN: use-after-free Read in __d_alloc run #2: crashed: KASAN: use-after-free Read in __d_alloc run #3: crashed: KASAN: use-after-free Read in __d_alloc run #4: crashed: KASAN: use-after-free Read in __d_alloc run #5: crashed: KASAN: use-after-free Read in __d_alloc run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 0319b848b155185815724e1b46103c550627a845 Bisecting: 0 revisions left to test after this (roughly 0 steps) [c1fe77e42440d2cad76055df6fb58caabf622d51] Merge tag 'nand/for-5.15' into mtd/next testing commit c1fe77e42440d2cad76055df6fb58caabf622d51 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5de8936660a31bb575143930f924c9aff1160a141dc98ccb6f7705975daa3ee6 all runs: crashed: possible deadlock in del_gendisk # git bisect good c1fe77e42440d2cad76055df6fb58caabf622d51 6b6dc4f40c5264556223ba94693f20d83796ab1f is the first bad commit commit 6b6dc4f40c5264556223ba94693f20d83796ab1f Merge: 0319b848b155 c1fe77e42440 Author: Linus Torvalds Date: Sun Sep 5 10:50:12 2021 -0700 Merge tag 'mtd/for-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux Pull MTD updates from Miquel Raynal: "MTD changes: - blkdevs: - Simplify the refcounting in blktrans_{open, release} - Simplify blktrans_getgeo - Remove blktrans_ref_mutex - Simplify blktrans_dev_get - Use lockdep_assert_held - Don't hold del_mtd_blktrans_dev in blktrans_{open, release} - ftl: - Don't cast away the type when calling add_mtd_blktrans_dev - Don't cast away the type when calling add_mtd_blktrans_dev - Use container_of() rather than cast - Fix use-after-free - Add discard support - Allow use of MTD_RAM for testing purposes - concat: - Check _read, _write callbacks existence before assignment - Judge callback existence based on the master - maps: - Maps: remove dead MTD map driver for PMC-Sierra MSP boards - mtdblock: - Warn if added for a NAND device - Add comment about UBI block devices - Update old JFFS2 mention in Kconfig - partitions: - Redboot: convert to YAML NAND core changes: - Repair Miquel Raynal's email address in MAINTAINERS - Fix a couple of spelling mistakes in Kconfig - bbt: Skip bad blocks when searching for the BBT in NAND - Remove never changed ret variable Raw NAND changes: - cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - intel: Fix error handling in probe - omap: Fix kernel doc warning on 'calcuate' typo - gpmc: Fix the ECC bytes vs. OOB bytes equation SPI-NAND core changes: - Properly fill the OOB area. - Fix comment SPI-NAND drivers changes: - macronix: Add Quad support for serial NAND flash" * tag 'mtd/for-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux: (30 commits) mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' mtd_blkdevs: simplify the refcounting in blktrans_{open, release} mtd_blkdevs: simplify blktrans_getgeo mtd_blkdevs: remove blktrans_ref_mutex mtd_blkdevs: simplify blktrans_dev_get mtd/rfd_ftl: don't cast away the type when calling add_mtd_blktrans_dev mtd/ftl: don't cast away the type when calling add_mtd_blktrans_dev mtd_blkdevs: use lockdep_assert_held mtd_blkdevs: don't hold del_mtd_blktrans_dev in blktrans_{open, release} mtd: rawnand: intel: Fix error handling in probe mtd: mtdconcat: Check _read, _write callbacks existence before assignment mtd: mtdconcat: Judge callback existence based on the master mtd: maps: remove dead MTD map driver for PMC-Sierra MSP boards mtd: rfd_ftl: use container_of() rather than cast mtd: rfd_ftl: fix use-after-free mtd: rfd_ftl: add discard support mtd: rfd_ftl: allow use of MTD_RAM for testing purposes mtdblock: Warn if added for a NAND device mtd: spinand: macronix: Add Quad support for serial NAND flash mtdblock: Add comment about UBI block devices ... .../devicetree/bindings/mtd/gpmc-nand.txt | 2 +- .../bindings/mtd/partitions/redboot-fis.txt | 27 --- .../bindings/mtd/partitions/redboot-fis.yaml | 42 ++++ MAINTAINERS | 4 +- drivers/mtd/Kconfig | 10 +- drivers/mtd/ftl.c | 2 +- drivers/mtd/maps/Kconfig | 23 --- drivers/mtd/maps/Makefile | 1 - drivers/mtd/maps/pmcmsp-flash.c | 227 --------------------- drivers/mtd/mtd_blkdevs.c | 60 +----- drivers/mtd/mtdblock.c | 4 + drivers/mtd/mtdblock_ro.c | 4 + drivers/mtd/mtdconcat.c | 33 ++- drivers/mtd/nand/raw/Kconfig | 4 +- drivers/mtd/nand/raw/cafe_nand.c | 4 +- drivers/mtd/nand/raw/intel-nand-controller.c | 27 ++- drivers/mtd/nand/raw/meson_nand.c | 4 +- drivers/mtd/nand/raw/nand_bbt.c | 33 +++ drivers/mtd/nand/raw/omap2.c | 2 +- drivers/mtd/nand/spi/core.c | 4 +- drivers/mtd/nand/spi/macronix.c | 16 +- drivers/mtd/rfd_ftl.c | 46 ++++- 22 files changed, 198 insertions(+), 381 deletions(-) delete mode 100644 Documentation/devicetree/bindings/mtd/partitions/redboot-fis.txt create mode 100644 Documentation/devicetree/bindings/mtd/partitions/redboot-fis.yaml delete mode 100644 drivers/mtd/maps/pmcmsp-flash.c revisions tested: 19, total time: 4h45m6.087902788s (build: 2h15m12.47584974s, test: 2h27m29.038390723s) first good commit: 6b6dc4f40c5264556223ba94693f20d83796ab1f Merge tag 'mtd/for-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux recipients (to): ["torvalds@linux-foundation.org"] recipients (cc): []