bisecting fixing commit since f6d5cb9e2c06f7d583dd9f4f7cca21d13d78c32a building syzkaller on d5a3ae1f760e7cb2cd5a721d9645ae22eae114fe testing commit f6d5cb9e2c06f7d583dd9f4f7cca21d13d78c32a with gcc (GCC) 8.1.0 kernel signature: 30f641609eb8308b705fa161c65e296d0cbae6890c59a62046bc29f4b0ac9fd4 run #0: crashed: BUG: corrupted list in mousedev_detach_client run #1: crashed: BUG: corrupted list in mousedev_detach_client run #2: crashed: KASAN: use-after-free Read in mousedev_release run #3: crashed: BUG: corrupted list in mousedev_detach_client run #4: crashed: BUG: corrupted list in mousedev_detach_client run #5: crashed: BUG: corrupted list in mousedev_detach_client run #6: crashed: BUG: corrupted list in mousedev_detach_client run #7: crashed: WARNING: ODEBUG bug in exit_to_usermode_loop run #8: crashed: BUG: corrupted list in mousedev_detach_client run #9: crashed: BUG: corrupted list in mousedev_detach_client testing current HEAD 10ad6cfd57360760116cde00a8ef756e121367a9 testing commit 10ad6cfd57360760116cde00a8ef756e121367a9 with gcc (GCC) 8.1.0 kernel signature: d1fa633ffe3de9465e32bccd8c4288107b965b84dcdc97fc54f6ba865958b7c6 all runs: OK # git bisect start 10ad6cfd57360760116cde00a8ef756e121367a9 f6d5cb9e2c06f7d583dd9f4f7cca21d13d78c32a Bisecting: 194 revisions left to test after this (roughly 8 steps) [c0a7b7fe0e0f7baa7c1779e401d293d176307c51] ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO testing commit c0a7b7fe0e0f7baa7c1779e401d293d176307c51 with gcc (GCC) 8.1.0 kernel signature: cf76fbcca8de28d25c2ffc48d50a44eba44dd54d7ba807fa05fd7b591702cf4c all runs: OK # git bisect bad c0a7b7fe0e0f7baa7c1779e401d293d176307c51 Bisecting: 96 revisions left to test after this (roughly 7 steps) [567e1a915e8f0897972d190fd7a7ef8e9a35954c] usb: host: xhci: fix ep context print mismatch in debugfs testing commit 567e1a915e8f0897972d190fd7a7ef8e9a35954c with gcc (GCC) 8.1.0 kernel signature: 5489b11dc0f52e585452240dbbdc0fcdddb48280f54fa160d3ee4218f36db6c0 all runs: crashed: BUG: corrupted list in mousedev_detach_client # git bisect good 567e1a915e8f0897972d190fd7a7ef8e9a35954c Bisecting: 48 revisions left to test after this (roughly 6 steps) [04b3604008265fb84f8fc7d7646ee652b4546834] MIPS: mm: BMIPS5000 has inclusive physical caches testing commit 04b3604008265fb84f8fc7d7646ee652b4546834 with gcc (GCC) 8.1.0 kernel signature: 024321725fa5d6413d921271311afe46acf3ed53787a3c0e941242db851f4232 run #0: crashed: KASAN: use-after-free Read in mousedev_release run #1: crashed: BUG: corrupted list in mousedev_detach_client run #2: crashed: WARNING: ODEBUG bug in get_signal run #3: crashed: BUG: corrupted list in mousedev_detach_client run #4: crashed: WARNING: ODEBUG bug in exit_to_usermode_loop run #5: crashed: WARNING: ODEBUG bug in exit_to_usermode_loop run #6: crashed: BUG: corrupted list in mousedev_detach_client run #7: crashed: BUG: corrupted list in mousedev_detach_client run #8: crashed: BUG: corrupted list in mousedev_detach_client run #9: crashed: BUG: corrupted list in mousedev_detach_client # git bisect good 04b3604008265fb84f8fc7d7646ee652b4546834 Bisecting: 24 revisions left to test after this (roughly 5 steps) [ab2413892e2d26015eae2f279f30935846ca24aa] xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files testing commit ab2413892e2d26015eae2f279f30935846ca24aa with gcc (GCC) 8.1.0 kernel signature: bf0116042c60a02e2debdf6670a2e678d76ff768d143a9f26d149bbfd1d5baae all runs: OK # git bisect bad ab2413892e2d26015eae2f279f30935846ca24aa Bisecting: 11 revisions left to test after this (roughly 4 steps) [8674defc50ba2026203a99d2ce11d01ebffb03bc] bnxt_en: Check for zero dir entries in NVRAM. testing commit 8674defc50ba2026203a99d2ce11d01ebffb03bc with gcc (GCC) 8.1.0 kernel signature: 17d18b3f930d4745738090bc8f1456657aea0509bf7fc4748c21f9b34521cdbb run #0: crashed: BUG: corrupted list in mousedev_detach_client run #1: crashed: BUG: corrupted list in mousedev_detach_client run #2: crashed: BUG: corrupted list in mousedev_detach_client run #3: crashed: BUG: corrupted list in mousedev_detach_client run #4: crashed: BUG: corrupted list in mousedev_detach_client run #5: crashed: BUG: corrupted list in mousedev_detach_client run #6: crashed: WARNING: ODEBUG bug in get_signal run #7: crashed: KASAN: use-after-free Read in mousedev_release run #8: crashed: KASAN: use-after-free Read in mousedev_release run #9: crashed: BUG: corrupted list in mousedev_detach_client # git bisect good 8674defc50ba2026203a99d2ce11d01ebffb03bc Bisecting: 5 revisions left to test after this (roughly 3 steps) [9ad2f018636c6741c41867f14d49d9441b50930d] netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS testing commit 9ad2f018636c6741c41867f14d49d9441b50930d with gcc (GCC) 8.1.0 kernel signature: f1ba4360e0ceb78902b3cd2a18cb959b2c8b4d80de09ce88e40803b8fe09a156 run #0: crashed: BUG: corrupted list in mousedev_detach_client run #1: crashed: KASAN: use-after-free Read in mousedev_release run #2: crashed: BUG: corrupted list in mousedev_detach_client run #3: crashed: BUG: corrupted list in mousedev_detach_client run #4: crashed: BUG: corrupted list in mousedev_detach_client run #5: crashed: BUG: corrupted list in mousedev_detach_client run #6: crashed: BUG: corrupted list in mousedev_detach_client run #7: crashed: BUG: corrupted list in mousedev_detach_client run #8: crashed: WARNING: ODEBUG bug in exit_to_usermode_loop run #9: crashed: BUG: corrupted list in mousedev_detach_client # git bisect good 9ad2f018636c6741c41867f14d49d9441b50930d Bisecting: 2 revisions left to test after this (roughly 2 steps) [f00d82c3fb4368afb41cba89b287801a7888627c] net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() testing commit f00d82c3fb4368afb41cba89b287801a7888627c with gcc (GCC) 8.1.0 kernel signature: b1423e4d41a0e5378b25a9e13d3de055fb53c1b3e72d7b9214811a729ad2df25 run #0: crashed: KASAN: use-after-free Read in mousedev_release run #1: crashed: BUG: corrupted list in mousedev_detach_client run #2: crashed: BUG: corrupted list in mousedev_detach_client run #3: crashed: BUG: corrupted list in mousedev_detach_client run #4: crashed: BUG: corrupted list in mousedev_detach_client run #5: crashed: BUG: corrupted list in mousedev_detach_client run #6: crashed: BUG: corrupted list in mousedev_detach_client run #7: crashed: BUG: corrupted list in mousedev_detach_client run #8: crashed: BUG: corrupted list in mousedev_detach_client run #9: crashed: BUG: corrupted list in mousedev_detach_client # git bisect good f00d82c3fb4368afb41cba89b287801a7888627c Bisecting: 0 revisions left to test after this (roughly 1 step) [2a7241fe4d340bce8c13854976f0eabf2a72d4eb] net: gemini: Fix another missing clk_disable_unprepare() in probe testing commit 2a7241fe4d340bce8c13854976f0eabf2a72d4eb with gcc (GCC) 8.1.0 kernel signature: fd658c0ad56e720e569aa53c0ecba9a8e526503c0cc32096602d2b6aebf6852b all runs: OK # git bisect bad 2a7241fe4d340bce8c13854976f0eabf2a72d4eb Bisecting: 0 revisions left to test after this (roughly 0 steps) [37d933e8b41b83bb8278815e366aec5a542b7e31] fix regression in "epoll: Keep a reference on files added to the check list" testing commit 37d933e8b41b83bb8278815e366aec5a542b7e31 with gcc (GCC) 8.1.0 kernel signature: 1a87660b7f436f0f184b69e0dab59f06033cd8eb5fbc5aeabfb0a714bd394e96 all runs: OK # git bisect bad 37d933e8b41b83bb8278815e366aec5a542b7e31 37d933e8b41b83bb8278815e366aec5a542b7e31 is the first bad commit commit 37d933e8b41b83bb8278815e366aec5a542b7e31 Author: Al Viro Date: Wed Sep 2 11:30:48 2020 -0400 fix regression in "epoll: Keep a reference on files added to the check list" [ Upstream commit 77f4689de17c0887775bb77896f4cc11a39bf848 ] epoll_loop_check_proc() can run into a file already committed to destruction; we can't grab a reference on those and don't need to add them to the set for reverse path check anyway. Tested-by: Marc Zyngier Fixes: a9ed4a6560b8 ("epoll: Keep a reference on files added to the check list") Signed-off-by: Al Viro Signed-off-by: Sasha Levin fs/eventpoll.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) culprit signature: 1a87660b7f436f0f184b69e0dab59f06033cd8eb5fbc5aeabfb0a714bd394e96 parent signature: b1423e4d41a0e5378b25a9e13d3de055fb53c1b3e72d7b9214811a729ad2df25 revisions tested: 11, total time: 2h51m54.287512786s (build: 1h41m1.044110331s, test: 1h9m31.102855203s) first good commit: 37d933e8b41b83bb8278815e366aec5a542b7e31 fix regression in "epoll: Keep a reference on files added to the check list" recipients (to): ["maz@kernel.org" "sashal@kernel.org" "viro@zeniv.linux.org.uk"] recipients (cc): []