ci starts bisection 2023-03-03 19:07:08.604238508 +0000 UTC m=+204754.975491365 bisecting fixing commit since 972a278fe60c361eb8f37619f562f092e8786d7c building syzkaller on 95cb00d1ffccfb9043ac5d91ff8103bbb9befae8 ensuring issue is reproducible on original commit 972a278fe60c361eb8f37619f562f092e8786d7c testing commit 972a278fe60c361eb8f37619f562f092e8786d7c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ac40cd925399ae33ff24ba7d6fdd39f27c548b819b487c205534bd57f58c75ad all runs: crashed: KASAN: use-after-free Read in kill_fasync testing current HEAD 0a3f9a6b0265b64c02226fcabb5e9a958307913b testing commit 0a3f9a6b0265b64c02226fcabb5e9a958307913b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f1bf3b9fdfa70a065b785a536114858e643842759668dd23fc55aeb9e4e26093 all runs: OK # git bisect start 0a3f9a6b0265b64c02226fcabb5e9a958307913b 972a278fe60c361eb8f37619f562f092e8786d7c Bisecting: 31200 revisions left to test after this (roughly 15 steps) [ae558268371bb94da6d885430b910abd4d22eeda] Merge tag 'sound-6.1-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit ae558268371bb94da6d885430b910abd4d22eeda gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 448b2649730d1f7799296b5d488835af46305d096908d8373e28e8ec6b20f2cb all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good ae558268371bb94da6d885430b910abd4d22eeda Bisecting: 15606 revisions left to test after this (roughly 14 steps) [560d97e5f98c4261583592c85608b13ca0075b9d] ASoC: SOF: Extend the IPC ops optionality testing commit 560d97e5f98c4261583592c85608b13ca0075b9d gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d6bcbf9f2967ce2171349616101db74eb0c2b9ba5d2f5aae56fc7955e50c71d2 all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 560d97e5f98c4261583592c85608b13ca0075b9d Bisecting: 7727 revisions left to test after this (roughly 13 steps) [064d7dcf51a82b480e953a15cca47e5df0426502] Merge tag 'sound-6.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 064d7dcf51a82b480e953a15cca47e5df0426502 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 56218ad50b52a7e56735bc20c2d9006e46b6adca503713c39a2eb8e1094a74f8 all runs: OK # git bisect bad 064d7dcf51a82b480e953a15cca47e5df0426502 Bisecting: 4052 revisions left to test after this (roughly 12 steps) [38ae3192296924181537544e7cfc43ca78eadcda] wifi: rtl8xxxu: add LEDS_CLASS dependency testing commit 38ae3192296924181537544e7cfc43ca78eadcda gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d611adc04214850f9cf2a121f6aedd95408bd38051eaee73247d1f062b3c0a27 run #0: crashed: INFO: trying to register non-static key in net_free run #1: crashed: INFO: trying to register non-static key in net_free run #2: crashed: INFO: trying to register non-static key in net_free run #3: crashed: INFO: trying to register non-static key in net_free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: crashed: unregister_netdevice: waiting for DEV to become free # git bisect good 38ae3192296924181537544e7cfc43ca78eadcda Bisecting: 1913 revisions left to test after this (roughly 11 steps) [950b6662e26e381cf8834b9b78b08261890ee697] Merge tag 'soc-dt-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit 950b6662e26e381cf8834b9b78b08261890ee697 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b51c0a791dd77cc155bcd30dab37006fd3c84c2725bc8cfc197d791d0361e87a all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 950b6662e26e381cf8834b9b78b08261890ee697 Bisecting: 1001 revisions left to test after this (roughly 10 steps) [b327dfe05258e09c8db6e1e091c2e6d84dd426a6] Merge tag 'for-linus' of git://git.armlinux.org.uk/~rmk/linux-arm testing commit b327dfe05258e09c8db6e1e091c2e6d84dd426a6 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e40bc29e384832efa59c1ea5cca245c39b3f176ac1946b3c87fe5f186334ae85 all runs: OK # git bisect bad b327dfe05258e09c8db6e1e091c2e6d84dd426a6 Bisecting: 455 revisions left to test after this (roughly 9 steps) [4a7d37e824f57dbace61abf62f53843800bd245c] Merge tag 'hardening-v6.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux testing commit 4a7d37e824f57dbace61abf62f53843800bd245c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 05d36294cb4377942dc030efaefdf283a46a05e55a88a5d3837c59bcc570be52 all runs: OK # git bisect bad 4a7d37e824f57dbace61abf62f53843800bd245c Bisecting: 225 revisions left to test after this (roughly 8 steps) [efebca0ba9cfe2bae79dba7b2b09b129c41cfc8e] Merge tag 'x86_microcode_for_v6.3_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit efebca0ba9cfe2bae79dba7b2b09b129c41cfc8e gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 51026b5f2dba4650fd61b83209cd38010bfe7aa4ce0389b55497270282bd237b all runs: OK # git bisect bad efebca0ba9cfe2bae79dba7b2b09b129c41cfc8e Bisecting: 118 revisions left to test after this (roughly 7 steps) [7c4a5b89a0b5a57a64b601775b296abf77a9fe97] sched/rt: pick_next_rt_entity(): check list_entry testing commit 7c4a5b89a0b5a57a64b601775b296abf77a9fe97 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f79bade80d9c2e2796ccc1def40af7f23eadcfdae050610d6c71f365ab862f86 all runs: OK # git bisect bad 7c4a5b89a0b5a57a64b601775b296abf77a9fe97 Bisecting: 55 revisions left to test after this (roughly 6 steps) [00717eb8c9557b5fcdd338db6faef532f6991d63] cpuidle: Annotate poll_idle() testing commit 00717eb8c9557b5fcdd338db6faef532f6991d63 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 061f0ff2230a4c98c7b5f90133fb4fd0fbec1b32bc88b0491facd415db585726 all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 00717eb8c9557b5fcdd338db6faef532f6991d63 Bisecting: 27 revisions left to test after this (roughly 5 steps) [69d4c0d3218692ffa56b0e1b9c76c50c699d7044] entry, kasan, x86: Disallow overriding mem*() functions testing commit 69d4c0d3218692ffa56b0e1b9c76c50c699d7044 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3e73627816226ae80219a2597d9e638b788f38cf9e2e4aa6ab96b28d4a9de67d all runs: OK # git bisect bad 69d4c0d3218692ffa56b0e1b9c76c50c699d7044 Bisecting: 13 revisions left to test after this (roughly 4 steps) [10a099405fdf96c3205ae775abf19fcd301b31b4] cpuidle, xenpv: Make more PARAVIRT_XXL noinstr clean testing commit 10a099405fdf96c3205ae775abf19fcd301b31b4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d42386fd91669973d6bf6e4db9f514f18d0892c92e1a9b439fd26a1247c490e5 all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 10a099405fdf96c3205ae775abf19fcd301b31b4 Bisecting: 6 revisions left to test after this (roughly 3 steps) [8c0956aa76f97003e2ac96e86b00a2a4e82abf8e] cpuidle, OMAP3: Push RCU-idle into omap_sram_idle() testing commit 8c0956aa76f97003e2ac96e86b00a2a4e82abf8e gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8ba08d47335f9e109d31222219b77c4cbe12251fc8caf61c0a65897ff043b460 all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 8c0956aa76f97003e2ac96e86b00a2a4e82abf8e Bisecting: 3 revisions left to test after this (roughly 2 steps) [db8f50861da6b1129b744da3998587a5cceeffeb] cpuidle, ARM: OMAP2+: powerdomain: Remove trace_.*_rcuidle() testing commit db8f50861da6b1129b744da3998587a5cceeffeb gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3b4941f0a41084826c38cb6aed42cef2f3eb070b8b8d3d8a42742faa0e386128 all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good db8f50861da6b1129b744da3998587a5cceeffeb Bisecting: 1 revision left to test after this (roughly 1 step) [f18b0d7ee815abb33eb1cc540fdde64fbb922d1a] ubsan: Fix objtool UACCESS warns testing commit f18b0d7ee815abb33eb1cc540fdde64fbb922d1a gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bbce5763e46d0d0088fea8bae354905700b335b63f530b7fb5cd4ce3f104b53e all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good f18b0d7ee815abb33eb1cc540fdde64fbb922d1a Bisecting: 0 revisions left to test after this (roughly 0 steps) [365bd03ff63fb7433a49c453472cf54830b677bf] intel_idle: Add force_irq_on module param testing commit 365bd03ff63fb7433a49c453472cf54830b677bf gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f5b2a99698ff04650eed54825ba09736e094f55915ce39a29de14e829762fdaf all runs: crashed: KASAN: stack-out-of-bounds Read in post_one_notification # git bisect good 365bd03ff63fb7433a49c453472cf54830b677bf 69d4c0d3218692ffa56b0e1b9c76c50c699d7044 is the first bad commit commit 69d4c0d3218692ffa56b0e1b9c76c50c699d7044 Author: Peter Zijlstra Date: Thu Jan 12 20:43:58 2023 +0100 entry, kasan, x86: Disallow overriding mem*() functions KASAN cannot just hijack the mem*() functions, it needs to emit __asan_mem*() variants if it wants instrumentation (other sanitizers already do this). vmlinux.o: warning: objtool: sync_regs+0x24: call to memcpy() leaves .noinstr.text section vmlinux.o: warning: objtool: vc_switch_off_ist+0xbe: call to memcpy() leaves .noinstr.text section vmlinux.o: warning: objtool: fixup_bad_iret+0x36: call to memset() leaves .noinstr.text section vmlinux.o: warning: objtool: __sev_get_ghcb+0xa0: call to memcpy() leaves .noinstr.text section vmlinux.o: warning: objtool: __sev_put_ghcb+0x35: call to memcpy() leaves .noinstr.text section Remove the weak aliases to ensure nobody hijacks these functions and add them to the noinstr section. Signed-off-by: Peter Zijlstra (Intel) Signed-off-by: Ingo Molnar Tested-by: Tony Lindgren Tested-by: Ulf Hansson Acked-by: Rafael J. Wysocki Acked-by: Frederic Weisbecker Link: https://lore.kernel.org/r/20230112195542.028523143@infradead.org arch/x86/lib/memcpy_64.S | 5 ++--- arch/x86/lib/memmove_64.S | 4 +++- arch/x86/lib/memset_64.S | 4 +++- mm/kasan/kasan.h | 4 ++++ mm/kasan/shadow.c | 38 ++++++++++++++++++++++++++++++++++++++ tools/objtool/check.c | 3 +++ 6 files changed, 53 insertions(+), 5 deletions(-) culprit signature: 3e73627816226ae80219a2597d9e638b788f38cf9e2e4aa6ab96b28d4a9de67d parent signature: f5b2a99698ff04650eed54825ba09736e094f55915ce39a29de14e829762fdaf revisions tested: 18, total time: 5h15m54.255257576s (build: 2h54m31.10260682s, test: 2h18m16.870402482s) first good commit: 69d4c0d3218692ffa56b0e1b9c76c50c699d7044 entry, kasan, x86: Disallow overriding mem*() functions recipients (to): ["frederic@kernel.org" "mingo@kernel.org" "peterz@infradead.org" "rafael.j.wysocki@intel.com" "tony@atomide.com" "ulf.hansson@linaro.org"] recipients (cc): []