bisecting fixing commit since bec4c2968fce2f44ce62d05288a633cd99a722eb building syzkaller on 6593fd32d71a33f76462f347ef263e26600d998e testing commit bec4c2968fce2f44ce62d05288a633cd99a722eb with gcc (GCC) 10.2.1 20210217 kernel signature: 6cd810bc04c2bdc115f6fef6749b3bf5ecf976ab53e81584f9a3f3418d6ba393 run #0: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #1: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #2: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #3: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #4: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #5: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #6: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #7: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #8: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #9: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #10: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #11: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #12: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #13: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #14: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #15: crashed: INFO: task hung in usb_get_descriptor run #16: crashed: INFO: task hung in usb_get_descriptor run #17: crashed: INFO: task hung in usb_get_descriptor run #18: crashed: INFO: task hung in usb_get_descriptor run #19: crashed: INFO: task hung in usb_get_descriptor testing current HEAD 9cdbf6467424045617cd6e79dcaad06bb8efa31c testing commit 9cdbf6467424045617cd6e79dcaad06bb8efa31c with gcc (GCC) 10.2.1 20210217 kernel signature: 11da1570a6f5ce2096db0faf547a8b62d1358c4ed261c127951cc51ea33bcb95 all runs: OK # git bisect start 9cdbf6467424045617cd6e79dcaad06bb8efa31c bec4c2968fce2f44ce62d05288a633cd99a722eb Bisecting: 6621 revisions left to test after this (roughly 13 steps) [d99676af540c2dc829999928fb81c58c80a1dce4] Merge tag 'drm-next-2021-02-19' of git://anongit.freedesktop.org/drm/drm testing commit d99676af540c2dc829999928fb81c58c80a1dce4 with gcc (GCC) 10.2.1 20210217 kernel signature: 173d5d57d18eea6002dd95d7bcf8a4f345a6ead42a7977e4937ce6df5a17562e run #0: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #1: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #2: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #3: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #4: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #5: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #6: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #7: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #8: crashed: INFO: task hung in usb_get_descriptor run #9: crashed: INFO: task hung in usb_get_descriptor # git bisect good d99676af540c2dc829999928fb81c58c80a1dce4 Bisecting: 3309 revisions left to test after this (roughly 12 steps) [b9d62433114108eb45d4cae04abccb9b30ac005d] Merge branch 'work.sparc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs testing commit b9d62433114108eb45d4cae04abccb9b30ac005d with gcc (GCC) 10.2.1 20210217 kernel signature: 1880911cd36c3af19b3a7a6033b31c683b649f851f537a22711aee5713648356 all runs: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection # git bisect good b9d62433114108eb45d4cae04abccb9b30ac005d Bisecting: 1654 revisions left to test after this (roughly 11 steps) [e65eaded4cc4de6bf153def9dde6b25392d9a236] Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf testing commit e65eaded4cc4de6bf153def9dde6b25392d9a236 with gcc (GCC) 10.2.1 20210217 kernel signature: f3ba89448f84ccbea0e66b50f3ae39676f892d02ed93771085d911a814ec5634 run #0: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #1: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #2: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #3: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #4: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #5: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #6: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #7: crashed: KASAN: null-ptr-deref Write in vhci_shutdown_connection run #8: crashed: INFO: task hung in usb_get_descriptor run #9: crashed: INFO: task hung in usb_get_descriptor # git bisect good e65eaded4cc4de6bf153def9dde6b25392d9a236 Bisecting: 826 revisions left to test after this (roughly 10 steps) [002322402dafd846c424ffa9240a937f49b48c42] Merge branch 'akpm' (patches from Andrew) testing commit 002322402dafd846c424ffa9240a937f49b48c42 with gcc (GCC) 10.2.1 20210217 kernel signature: b90fd9476b9224a1071846670deff66429cf30e0b1251c8a7cd1ccd11fe20014 all runs: crashed: general protection fault in try_to_wake_up # git bisect good 002322402dafd846c424ffa9240a937f49b48c42 Bisecting: 411 revisions left to test after this (roughly 9 steps) [e0a472fffe435af52ea4e21e1e0001c5c8ffc6c7] Merge tag 'sound-5.12-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit e0a472fffe435af52ea4e21e1e0001c5c8ffc6c7 with gcc (GCC) 10.2.1 20210217 kernel signature: 79e1407045d993a3f272acb291a76242d79577132abba4dfbbbde8112f025886 all runs: crashed: general protection fault in try_to_wake_up # git bisect good e0a472fffe435af52ea4e21e1e0001c5c8ffc6c7 Bisecting: 205 revisions left to test after this (roughly 8 steps) [cd7e963d2f0875789ddb5c3746b628716bd0a8c9] net: hns3: Trivial spell fix in hns3 driver testing commit cd7e963d2f0875789ddb5c3746b628716bd0a8c9 with gcc (GCC) 10.2.1 20210217 kernel signature: 9d31dcc6e6dd701a1e7e6767d8f3521b28d2d135578a0960fe5defc47b800deb all runs: crashed: general protection fault in try_to_wake_up # git bisect good cd7e963d2f0875789ddb5c3746b628716bd0a8c9 Bisecting: 102 revisions left to test after this (roughly 7 steps) [12a0cf7241f9ee6b9b62e4c5aad53c43f46817a4] Merge branch 'i2c/for-current' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux testing commit 12a0cf7241f9ee6b9b62e4c5aad53c43f46817a4 with gcc (GCC) 10.2.1 20210217 kernel signature: c1cd0a3800e6c59f64b9a17bf1efb3c0bd47231be67e09122e1a75277492446f all runs: crashed: general protection fault in try_to_wake_up # git bisect good 12a0cf7241f9ee6b9b62e4c5aad53c43f46817a4 Bisecting: 56 revisions left to test after this (roughly 6 steps) [e70b911acc1687100c31e550251715dbdac96a12] Merge tag 'vfio-v5.12-rc8' of git://github.com/awilliam/linux-vfio testing commit e70b911acc1687100c31e550251715dbdac96a12 with gcc (GCC) 10.2.1 20210217 kernel signature: b862edff55cdbd24902c30af0cbd3cd4a46960e30dadcd2008ad0af896ddb397 all runs: OK # git bisect bad e70b911acc1687100c31e550251715dbdac96a12 Bisecting: 20 revisions left to test after this (roughly 5 steps) [efc2da9241e643cb90897ac4ed3542daa3edf3bc] Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit efc2da9241e643cb90897ac4ed3542daa3edf3bc with gcc (GCC) 10.2.1 20210217 kernel signature: a20f705fdcc3fa1148d30b999e44afe3362cd5be13eb8ef2fd3e831c5b983e26 all runs: OK # git bisect bad efc2da9241e643cb90897ac4ed3542daa3edf3bc Bisecting: 12 revisions left to test after this (roughly 4 steps) [d5fa1dad75bef69fbff5a193b7a99ada624a0154] Merge tag 'driver-core-5.12-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core testing commit d5fa1dad75bef69fbff5a193b7a99ada624a0154 with gcc (GCC) 10.2.1 20210217 kernel signature: 82ad0a8fd042815cd12d40a3c0028e25c203f5f1e173a4d47e87df76c04cad14 all runs: OK # git bisect bad d5fa1dad75bef69fbff5a193b7a99ada624a0154 Bisecting: 5 revisions left to test after this (roughly 3 steps) [363eaa3a450abb4e63bd6e3ad79d1f7a0f717814] usbip: synchronize event handler with sysfs code paths testing commit 363eaa3a450abb4e63bd6e3ad79d1f7a0f717814 with gcc (GCC) 10.2.1 20210217 kernel signature: 6d8f4ea433929fbb23310e8ad2482ef47ec22d1a4e12b646cda9684550a85b8a all runs: OK # git bisect bad 363eaa3a450abb4e63bd6e3ad79d1f7a0f717814 Bisecting: 2 revisions left to test after this (roughly 2 steps) [4e9c93af7279b059faf5bb1897ee90512b258a12] usbip: add sysfs_lock to synchronize sysfs code paths testing commit 4e9c93af7279b059faf5bb1897ee90512b258a12 with gcc (GCC) 10.2.1 20210217 kernel signature: 5d137a249ac0574996aa8cd7fd862c1a54b5829d25671e61b816e3c3d05d1f2a all runs: crashed: general protection fault in try_to_wake_up # git bisect good 4e9c93af7279b059faf5bb1897ee90512b258a12 Bisecting: 0 revisions left to test after this (roughly 1 step) [bd8b82042269a95db48074b8bb400678dbac1815] usbip: vudc synchronize sysfs code paths testing commit bd8b82042269a95db48074b8bb400678dbac1815 with gcc (GCC) 10.2.1 20210217 kernel signature: d8890a4efb09640365ebf344139fa589d82792e2904b50096ce191f30b700abc all runs: crashed: general protection fault in try_to_wake_up # git bisect good bd8b82042269a95db48074b8bb400678dbac1815 363eaa3a450abb4e63bd6e3ad79d1f7a0f717814 is the first bad commit commit 363eaa3a450abb4e63bd6e3ad79d1f7a0f717814 Author: Shuah Khan Date: Mon Mar 29 19:36:51 2021 -0600 usbip: synchronize event handler with sysfs code paths Fuzzing uncovered race condition between sysfs code paths in usbip drivers. Device connect/disconnect code paths initiated through sysfs interface are prone to races if disconnect happens during connect and vice versa. Use sysfs_lock to synchronize event handler with sysfs paths in usbip drivers. Cc: stable@vger.kernel.org Reported-and-tested-by: syzbot+a93fba6d384346a761e3@syzkaller.appspotmail.com Signed-off-by: Shuah Khan Link: https://lore.kernel.org/r/c5c8723d3f29dfe3d759cfaafa7dd16b0dfe2918.1616807117.git.skhan@linuxfoundation.org Signed-off-by: Greg Kroah-Hartman drivers/usb/usbip/usbip_event.c | 2 ++ 1 file changed, 2 insertions(+) culprit signature: 6d8f4ea433929fbb23310e8ad2482ef47ec22d1a4e12b646cda9684550a85b8a parent signature: d8890a4efb09640365ebf344139fa589d82792e2904b50096ce191f30b700abc revisions tested: 15, total time: 2h55m53.170239649s (build: 1h26m43.103474417s, test: 1h27m27.514744317s) first good commit: 363eaa3a450abb4e63bd6e3ad79d1f7a0f717814 usbip: synchronize event handler with sysfs code paths recipients (to): ["gregkh@linuxfoundation.org" "skhan@linuxfoundation.org" "syzbot+a93fba6d384346a761e3@syzkaller.appspotmail.com"] recipients (cc): []