ci2 starts bisection 2023-04-27 06:23:34.472662301 +0000 UTC m=+29963.670198976 bisecting fixing commit since 8020ae3c051d1c9ec7b7a872e226f9720547649b building syzkaller on 7939252e4ddf50bbb9912069a40d32f6c83c4f8e ensuring issue is reproducible on original commit 8020ae3c051d1c9ec7b7a872e226f9720547649b testing commit 8020ae3c051d1c9ec7b7a872e226f9720547649b gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3d24033d7469d7963369f1462d1221e34174630c102e97341a100bbfe2157d13 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003440050] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0034400f0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f20a0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #3: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2190] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #4: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2280] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #5: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2550] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #6: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003440280] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #7: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000b2c410] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #8: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000b2c690] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #9: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003440550] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #10: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2960] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #11: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003440960] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #12: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #13: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #14: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #15: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #16: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #17: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #18: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #19: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler testing current HEAD f48aeeaaa64c628519273f6007a745cf55b68d95 testing commit f48aeeaaa64c628519273f6007a745cf55b68d95 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 37450108b7f1ef979902425d942e5a315c384bc2411fa0855142df73c4e51e20 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0006be3c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0007aeff0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect start f48aeeaaa64c628519273f6007a745cf55b68d95 8020ae3c051d1c9ec7b7a872e226f9720547649b Bisecting: 304 revisions left to test after this (roughly 8 steps) [c8e7ff3071bf1de3f1e8bf56b4f7cda52554ad40] drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state testing commit c8e7ff3071bf1de3f1e8bf56b4f7cda52554ad40 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 17174f0bf33e5dcbedb5d68229c58bc566a38cdc5b791c3f6ee070d06300cc05 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000a76c80] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000a76d70] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad c8e7ff3071bf1de3f1e8bf56b4f7cda52554ad40 Bisecting: 151 revisions left to test after this (roughly 7 steps) [e686b78a003a3bfba0de64930108f7cf125bd982] drm/i915/gt: perform uc late init after probe error injection testing commit e686b78a003a3bfba0de64930108f7cf125bd982 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b3110168a28301b92b2cd8701517cc0bea079c734b505a081fd6462c2ee3ddfe run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000a76aa0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0008696d0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad e686b78a003a3bfba0de64930108f7cf125bd982 Bisecting: 75 revisions left to test after this (roughly 6 steps) [86afb633beaa02ee95b5126a14c9f22cfade4fd9] firmware: xilinx: don't make a sleepable memory allocation from an atomic context testing commit 86afb633beaa02ee95b5126a14c9f22cfade4fd9 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5d6d26024fcfcca9b610a168f53cf99f53fdd8bc34dc276a47d5bc60023450e7 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000c2efa0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000868cd0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #3: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #4: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #5: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #6: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #7: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #8: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #9: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler # git bisect good 86afb633beaa02ee95b5126a14c9f22cfade4fd9 Bisecting: 37 revisions left to test after this (roughly 5 steps) [02904e8a2f6530b3d8381fabde8feebfcb6d03f6] HID: uhid: Over-ride the default maximum data buffer value with our own testing commit 02904e8a2f6530b3d8381fabde8feebfcb6d03f6 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ec6619bde887f2b5cf7a0affe4e1db2340cbfdcd06be82760bf0d60b16bf074c run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000869590] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc002f388c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 02904e8a2f6530b3d8381fabde8feebfcb6d03f6 Bisecting: 18 revisions left to test after this (roughly 4 steps) [ad7f9c6982b1387267fff3a1456ec05c1b0011bd] mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket() testing commit ad7f9c6982b1387267fff3a1456ec05c1b0011bd gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 10ff2a712b0c34158a47b3680f81d0163ad1395b0420ff785cbe9d02ec4f23d8 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc003b44c30] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000a320f0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #3: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #4: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #5: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #6: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #7: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #8: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #9: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler # git bisect good ad7f9c6982b1387267fff3a1456ec05c1b0011bd Bisecting: 9 revisions left to test after this (roughly 3 steps) [8575c98224b20542d3eec7883d4e1b8fe43f3035] cpuidle: psci: Iterate backwards over list in psci_pd_remove() testing commit 8575c98224b20542d3eec7883d4e1b8fe43f3035 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9850d8a6d13f116497f3d0c5f1bc0aed834cccad8943c5a239cf5e5e4bca0920 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2cd0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f2d70] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #3: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #4: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #5: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #6: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #7: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #8: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #9: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler # git bisect good 8575c98224b20542d3eec7883d4e1b8fe43f3035 Bisecting: 4 revisions left to test after this (roughly 2 steps) [6ab7d33617559cced63d467928f478ea5c459021] drm/i915/active: Fix misuse of non-idle barriers as fence trackers testing commit 6ab7d33617559cced63d467928f478ea5c459021 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9850d8a6d13f116497f3d0c5f1bc0aed834cccad8943c5a239cf5e5e4bca0920 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ac1630] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000ac16d0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #3: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #4: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #5: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #6: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #7: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #8: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler run #9: crashed: BUG: unable to handle kernel paging request in io_arm_poll_handler # git bisect good 6ab7d33617559cced63d467928f478ea5c459021 Bisecting: 2 revisions left to test after this (roughly 1 step) [09795f82aecc3e7a32271fbf9e2120be47fa0ce4] PCI: Unify delay handling for reset and resume testing commit 09795f82aecc3e7a32271fbf9e2120be47fa0ce4 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fb1bf0d6dbbdfd8abc27324c244bcb41749138ae7ccd0c8ae728a4275eb7f649 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000870b90] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc002f38eb0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 09795f82aecc3e7a32271fbf9e2120be47fa0ce4 Bisecting: 0 revisions left to test after this (roughly 0 steps) [f4ba55411cc8ffa883df861ce79af4bd35885b11] io_uring: avoid null-ptr-deref in io_arm_poll_handler testing commit f4ba55411cc8ffa883df861ce79af4bd35885b11 gcc compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4fe4dabd8f20cf3a4b11152a6bdefcf847a2a39a631fc614982ef74cedd6a514 run #0: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc000c2f040] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: boot failed: create image operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0035f21e0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 64.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad f4ba55411cc8ffa883df861ce79af4bd35885b11 f4ba55411cc8ffa883df861ce79af4bd35885b11 is the first bad commit commit f4ba55411cc8ffa883df861ce79af4bd35885b11 Author: Fedor Pchelkin Date: Thu Mar 16 21:56:16 2023 +0300 io_uring: avoid null-ptr-deref in io_arm_poll_handler No upstream commit exists for this commit. The issue was introduced with backporting upstream commit c16bda37594f ("io_uring/poll: allow some retries for poll triggering spuriously"). Memory allocation can possibly fail causing invalid pointer be dereferenced just before comparing it to NULL value. Move the pointer check in proper place (upstream has the similar location of the check). In case the request has REQ_F_POLLED flag up, apoll can't be NULL so no need to check there. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. Signed-off-by: Fedor Pchelkin Signed-off-by: Greg Kroah-Hartman io_uring/io_uring.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) culprit signature: 4fe4dabd8f20cf3a4b11152a6bdefcf847a2a39a631fc614982ef74cedd6a514 parent signature: 9850d8a6d13f116497f3d0c5f1bc0aed834cccad8943c5a239cf5e5e4bca0920 revisions tested: 11, total time: 5h1m59.152658198s (build: 3h52m11.508050177s, test: 1h7m49.409426072s) first good commit: f4ba55411cc8ffa883df861ce79af4bd35885b11 io_uring: avoid null-ptr-deref in io_arm_poll_handler recipients (to): ["gregkh@linuxfoundation.org" "pchelkin@ispras.ru"] recipients (cc): []