ci2 starts bisection 2023-08-14 08:56:37.736067756 +0000 UTC m=+238091.434636640 bisecting cause commit starting from f8de32cc060ba3f63171aaa0e8764d22d8c37978 building syzkaller on 39990d513277ce9372a4cc89bdac23d9fc30b056 ensuring issue is reproducible on original commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 02d8f99fa3c154d393f57cdade10d2f75b43e8ca278bfce4acae1494ca91f757 run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: out-of-bounds Read in udf_sync_fs run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Write in udf_close_lvid run #9: crashed: KASAN: use-after-free Read in udf_sync_fs run #10: crashed: KASAN: use-after-free Write in udf_close_lvid run #11: crashed: KASAN: use-after-free Write in udf_close_lvid run #12: crashed: KASAN: use-after-free Read in udf_sync_fs run #13: crashed: KASAN: use-after-free Read in udf_sync_fs run #14: crashed: KASAN: use-after-free Read in udf_sync_fs run #15: crashed: KASAN: use-after-free Write in udf_close_lvid run #16: crashed: KASAN: use-after-free Write in udf_close_lvid run #17: crashed: KASAN: use-after-free Read in udf_sync_fs run #18: crashed: KASAN: use-after-free Write in udf_close_lvid run #19: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d4d81945d807b7abe650859875dd3a1377c30a3cffa6ee6e311c1553a441a89b run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Write in udf_close_lvid run #6: crashed: KASAN: use-after-free Write in udf_close_lvid run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Write in udf_close_lvid run #9: crashed: KASAN: slab-use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] the bug reproduces without the instrumentation disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed kconfig minimization: base=3876 full=7645 leaves diff=1998 split chunks (needed=false): <1998> split chunk #0 of len 1998 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9dd92c230497c4ceda47fa2456900a5749592920f3a13c002598d20927523468 run #0: crashed: KASAN: out-of-bounds Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: out-of-bounds Read in udf_sync_fs representative crash: KASAN: out-of-bounds Read in udf_sync_fs, types: [KASAN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a5f484c2be6e7337ecfe50aa24ba1113ecfeda04b9cd0475c0f610c43e7f7ff5 run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1e3a5a1a76e708d6d6b38cd93e5c2fde7cf1a39ef92647c5e74db532c1523ba6 run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Read in udf_sync_fs run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: BUG: unable to handle kernel paging request in udf_close_lvid run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 62803bfe059da6556a4496fa5c10b17f089696b3494eff72f85840a02180415d all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit f8de32cc060ba3f63171aaa0e8764d22d8c37978 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7ace9f450663d3023ddfbafbbf2b8774f103c049c08040ec5d06e5cecfa9b73b run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] the chunk can be dropped minimized to 400 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 CFG80211 CMA DAX DLM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_SENSOR_HUB HID_SMARTJOYPLUS HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN IP_SCTP L2TP LIBNVDIMM MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_RETU MMC MTD MTD_UBI NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NF_TABLES NF_TABLES_ARP NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NTFS_FS NTFS_RW NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAGE_POOL PAGE_REPORTING PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOE_HASH_BITS_4 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PRISM2_USB PROC_CHILDREN PSI PSTORE PSTORE_842_COMPRESS PSTORE_COMPRESS PSTORE_DEFLATE_COMPRESS PSTORE_DEFLATE_COMPRESS_DEFAULT PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGULATOR REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SECURITY_SMACK_NETFILTER SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_SINGLE SQUASHFS_DECOMP_SINGLE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TASKS_TRACE_RCU TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_FUSB302 TYPEC_TCPCI TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_HOST USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_DWC2 USB_GADGET USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN ZONE_DEVICE] disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a60fa990d027fdda737fde9b7f9b72293e27aa4479b2a083bf8ab585c2095b30 run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: BUG: unable to handle kernel paging request in udf_close_lvid run #8: crashed: KASAN: use-after-free Write in udf_close_lvid run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7ab3e6a8e7887622e7f6a8d7a9dd9bcf657ed53372eb191a81a32808868b08f7 run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Write in udf_close_lvid run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 753616e312b62191e7656a6014a8f6addd286831b64e8f9697a26ef635c571e9 run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Write in udf_close_lvid run #6: crashed: KASAN: use-after-free Write in udf_close_lvid run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Write in udf_close_lvid run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 386f6da72ffcf47a0601447d17824e292ccf7aff378261ecfd226f20b2fb417a run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Write in udf_close_lvid run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d66749d116e9560b78d91230d7419442cb4095daf84ce0cf3882519af362ebea run #0: crashed: KASAN: use-after-free Read in udf_sync_fs run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Read in udf_sync_fs, types: [KASAN] testing release v5.19 testing commit 3d7cb6b04c3f3115719235cc6866b10326de34cd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 65edf41dc403b63dca7b55b792d473a95254270b5e8c4be0ed62f88e5d869690 run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Read in udf_sync_fs run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Write in udf_close_lvid run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e8b3d36e53f11706d224437b0abc914636d7ff57eebb7eace3d2065a2b4c3924 run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Read in udf_sync_fs run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ebfca955c3211a7e5a63693dbcb5d31fc22c30f1ff3ddc6839bac242dbf78485 run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Write in udf_close_lvid run #2: crashed: KASAN: use-after-free Read in udf_sync_fs run #3: crashed: KASAN: use-after-free Read in udf_sync_fs run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Read in udf_sync_fs run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Read in udf_sync_fs run #9: crashed: KASAN: use-after-free Read in udf_sync_fs representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1e51658197556e4949a6d775e3399667fcf2cb3b55ae580665b07be366fd865a run #0: crashed: KASAN: use-after-free Write in udf_close_lvid run #1: crashed: KASAN: use-after-free Read in udf_sync_fs run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Write in udf_close_lvid run #4: crashed: KASAN: use-after-free Write in udf_close_lvid run #5: crashed: KASAN: use-after-free Write in udf_close_lvid run #6: crashed: KASAN: use-after-free Read in udf_sync_fs run #7: crashed: KASAN: use-after-free Read in udf_sync_fs run #8: crashed: KASAN: use-after-free Write in udf_close_lvid run #9: crashed: KASAN: use-after-free Write in udf_close_lvid representative crash: KASAN: use-after-free Write in udf_close_lvid, types: [KASAN] testing release v5.15 testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d809e5275977e521503c41eae509b83e555fc25d86fe026839bccfd5e249f607 run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Write in udf_close_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Write in udf_close_lvid run #7: crashed: KASAN: use-after-free Write in udf_close_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e777e1f70860a277a02b024619b63ff978f0f30cf931ce22809389e0962d8123 all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 232bbc9c0a54ed062deb77887dc68eacc67cd71512d6f6a637b5044208e75d37 all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fae70f5766a6739fcb6ae0fb87cd0be6df0d76f41631baaec9070b31f142fcd2 all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d545da805429e666b8ccf538fa389c8ccd2f469222aed48247090b6f2d0244ac run #0: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: slab-out-of-bounds Read in udf_finalize_lvid, types: [KASAN] testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4eb17fdab94b5f2ac3096723272f47068e88a1b87cc5b85407dcb2639e59b444 run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 704fbb13d8a65a316c821a5a9f39b8d298917caf4fdcc9c936f916e8b32efdce all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c gcc compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a79852e5a298165e4d2e7528f6aa665539d3fbf6ba2ec9d98d848fb652c0a1cf run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 210d30293a3953bbb2078d1f19a886158bface69f89c140c5e5fe3a66fe50a6b all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: abccf8cb5af2a22ebd2b2fe8756278de9aa7beae406b4c39ad110cc7455749fa all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 857a0f586a58974a6ab8ec5cde99657f83d645f4c3afbb8dc48bce378d95fb7c all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 9993bf8a8053d0944e6b34ecb789c274638568615cd0f1c8b36ed0ac9d49740b run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: edcf61edc6f7108ec3345556f2527a4b00e94269fa43029535e5999bb0b70620 all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2b61fadf7b11ba1c486d62810038b98d0508a3cae4bfac2b38a9ba4d790d4630 all runs: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: bb8ab699c3e42e870cc2d43face770fbe9b1368da536a0c48a6fdd8e976a89c0 run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #6: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #7: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 475fc1f71e8789e919f17107efaf173c7cf071aff675b4ff2ab34576d378270f all runs: OK false negative chance: 0.000 # git bisect start e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd 1c163f4c7b3f621efff9b28a47abb36f7378d783 Bisecting: 7074 revisions left to test after this (roughly 13 steps) [b5dd0c658c31b469ccff1b637e5124851e7a4a1c] Merge branch 'akpm' (patches from Andrew) testing commit b5dd0c658c31b469ccff1b637e5124851e7a4a1c gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 3d92a451f87fc25536efaf065863d554038336c228638a974630ee47d15126f8 run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] # git bisect bad b5dd0c658c31b469ccff1b637e5124851e7a4a1c Bisecting: 3569 revisions left to test after this (roughly 12 steps) [3478588b5136966c80c571cf0006f08e9e5b8f04] Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 3478588b5136966c80c571cf0006f08e9e5b8f04 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 36fe83634423f9752809144d71c5f3aafa15c139d2a22987ffe68756d92b24a3 all runs: OK false negative chance: 0.000 # git bisect good 3478588b5136966c80c571cf0006f08e9e5b8f04 Bisecting: 1580 revisions left to test after this (roughly 11 steps) [da2577fe63f865cd9dc785a42c29c0071f567a35] Merge tag 'sound-5.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit da2577fe63f865cd9dc785a42c29c0071f567a35 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 8f334aedd6f4fd1f244936b641b35938d4902ebbdee4a82b9a3f0565c721766a all runs: OK false negative chance: 0.000 # git bisect good da2577fe63f865cd9dc785a42c29c0071f567a35 Bisecting: 860 revisions left to test after this (roughly 10 steps) [67e79a6dc2664a3ef85113440e60f7aaca3c7815] Merge tag 'tty-5.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty testing commit 67e79a6dc2664a3ef85113440e60f7aaca3c7815 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 53aef0e6612414ec6114ce462e25eca48f3825ce8ac1c9e8907e966c5f42ae59 all runs: OK false negative chance: 0.000 # git bisect good 67e79a6dc2664a3ef85113440e60f7aaca3c7815 Bisecting: 462 revisions left to test after this (roughly 9 steps) [1fc1cd8399ab5541a488a7e47b2f21537dd76c2d] Merge branch 'for-5.1' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup testing commit 1fc1cd8399ab5541a488a7e47b2f21537dd76c2d gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 75187e849d7a0f9a4541b97d4a1e77e5f99d9803f38bc10395f238658d65f5fa run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] # git bisect bad 1fc1cd8399ab5541a488a7e47b2f21537dd76c2d Bisecting: 206 revisions left to test after this (roughly 8 steps) [a9913f23f39f4aa74956587a03e78b758a10c314] Merge tag 'fs_for_v5.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs testing commit a9913f23f39f4aa74956587a03e78b758a10c314 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 87ab470030d9a7b2d2e015734cd7a0befc8f0ff2397a8f06fd7c3586f8bf9c77 run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #6: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #7: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] # git bisect bad a9913f23f39f4aa74956587a03e78b758a10c314 Bisecting: 95 revisions left to test after this (roughly 7 steps) [96a6d031ca9930938bd66d0052fc7ed2b56e3583] usb: typec: mux: Find the muxes by also matching against the device node testing commit 96a6d031ca9930938bd66d0052fc7ed2b56e3583 gcc compiler: gcc version 8.4.1 20210217 (GCC) failed building 96a6d031ca9930938bd66d0052fc7ed2b56e3583: scripts/extract-cert.c:46:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/extract-cert.c:59:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/sign-file.c:89:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/sign-file.c:102:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] drivers/base/devcon.c:27:6: error: 'struct device_connection' has no member named 'fwnode' drivers/base/devcon.c:28:38: error: 'struct device_connection' has no member named 'fwnode' drivers/base/devcon.c:32:24: error: 'struct device_connection' has no member named 'fwnode' drivers/base/devcon.c:121:47: error: 'struct device_connection' has no member named 'fwnode' drivers/base/devcon.c:137:9: error: 'struct device_connection' has no member named 'fwnode' # git bisect skip 96a6d031ca9930938bd66d0052fc7ed2b56e3583 Bisecting: 94 revisions left to test after this (roughly 7 steps) [09aa11cfda9d8186046bcd1adcd6498b688114f4] device connection: Add fwnode member to struct device_connection testing commit 09aa11cfda9d8186046bcd1adcd6498b688114f4 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 7cf5253f4f2f2cb4094e4094f9f7a6c81e1f290a68f722e3b465061b444df556 all runs: OK false negative chance: 0.000 # git bisect good 09aa11cfda9d8186046bcd1adcd6498b688114f4 Bisecting: 46 revisions left to test after this (roughly 6 steps) [8e9fd85c59fb22f4dfa55d2d155401aa935d6ab4] usb: host: oxu210hp-hcd: remove set but not used variables 'uframes, transfer_buffer_length' testing commit 8e9fd85c59fb22f4dfa55d2d155401aa935d6ab4 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: bca2fe32ec19645c277824f83f7589559f151c35499d7041ccc1d903452a0453 all runs: OK false negative chance: 0.000 # git bisect good 8e9fd85c59fb22f4dfa55d2d155401aa935d6ab4 Bisecting: 22 revisions left to test after this (roughly 5 steps) [30097374e6ff6997f6c7104b62d7e2c6d15578f0] dt-bindings: usb: ci-hdrc-usb2: add property power-active-high testing commit 30097374e6ff6997f6c7104b62d7e2c6d15578f0 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ff2384966576ed427775c73951e699aa70b097213083885bd21eb06e00253df0 all runs: OK false negative chance: 0.000 # git bisect good 30097374e6ff6997f6c7104b62d7e2c6d15578f0 Bisecting: 10 revisions left to test after this (roughly 4 steps) [52b9666efd8b0874d334de718a7d561e7b0eb1cc] udf: Drop pointless check from udf_sync_fs() testing commit 52b9666efd8b0874d334de718a7d561e7b0eb1cc gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: df3fbfefe63553124a066e18313c0ebecff139ed5e4d427892657fb36272920a run #0: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #5: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: use-after-free Read in udf_finalize_lvid, types: [KASAN] # git bisect bad 52b9666efd8b0874d334de718a7d561e7b0eb1cc Bisecting: 5 revisions left to test after this (roughly 3 steps) [4bc74ba1c7320933ba8d59a42563b722fe539a36] ext2: Fix a typo in comment testing commit 4bc74ba1c7320933ba8d59a42563b722fe539a36 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a2c0a8bf7b4387dc9e3be2e264c6493a29f8d3e708b4a147de31f9aca9dc5370 all runs: OK false negative chance: 0.000 # git bisect good 4bc74ba1c7320933ba8d59a42563b722fe539a36 Bisecting: 2 revisions left to test after this (roughly 2 steps) [e8b4274735e416621cfb28c2802b4ad52da35d0f] udf: finalize integrity descriptor before writeback testing commit e8b4274735e416621cfb28c2802b4ad52da35d0f gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 07fd052b34077fc714661d7f4148e561c3190c3b9d4197c301040738e223cdbf run #0: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #1: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #2: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #3: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #4: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #5: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #6: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #7: crashed: KASAN: use-after-free Read in udf_finalize_lvid run #8: crashed: KASAN: slab-out-of-bounds Read in udf_finalize_lvid run #9: crashed: KASAN: use-after-free Read in udf_finalize_lvid representative crash: KASAN: slab-out-of-bounds Read in udf_finalize_lvid, types: [KASAN] # git bisect bad e8b4274735e416621cfb28c2802b4ad52da35d0f Bisecting: 1 revision left to test after this (roughly 1 step) [1c2d14212b15a60300a2d4f6364753e87394c521] ext2: Fix underflow in ext2_max_size() testing commit 1c2d14212b15a60300a2d4f6364753e87394c521 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a2c0a8bf7b4387dc9e3be2e264c6493a29f8d3e708b4a147de31f9aca9dc5370 all runs: OK false negative chance: 0.000 # git bisect good 1c2d14212b15a60300a2d4f6364753e87394c521 Bisecting: 0 revisions left to test after this (roughly 0 steps) [ebbd5e99f60aca79b6c723c17a4ad1a8f26fcd98] udf: factor out LVID finalization for reuse testing commit ebbd5e99f60aca79b6c723c17a4ad1a8f26fcd98 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b7f59b5f8a42e790c6b4a0853896c4ab3874727d6ada1096f7a8d793a09f6eb1 all runs: OK false negative chance: 0.000 # git bisect good ebbd5e99f60aca79b6c723c17a4ad1a8f26fcd98 e8b4274735e416621cfb28c2802b4ad52da35d0f is the first bad commit commit e8b4274735e416621cfb28c2802b4ad52da35d0f Author: Steve Magnani Date: Fri Feb 8 11:34:55 2019 -0600 udf: finalize integrity descriptor before writeback Make sure the CRC and tag checksum of the Logical Volume Integrity Descriptor are valid before the structure is written out to disk. Otherwise, unless the filesystem is unmounted gracefully, the on-disk LVID will be invalid - which is unnecessary filesystem damage. Signed-off-by: Steven J. Magnani Signed-off-by: Jan Kara fs/udf/super.c | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) accumulated error probability: 0.00 culprit signature: 07fd052b34077fc714661d7f4148e561c3190c3b9d4197c301040738e223cdbf parent signature: b7f59b5f8a42e790c6b4a0853896c4ab3874727d6ada1096f7a8d793a09f6eb1 revisions tested: 46, total time: 11h9m8.039920511s (build: 7h5m19.983912996s, test: 3h43m29.178157879s) first bad commit: e8b4274735e416621cfb28c2802b4ad52da35d0f udf: finalize integrity descriptor before writeback recipients (to): ["jack@suse.cz" "steve.magnani@digidescorp.com" "steve@digidescorp.com"] recipients (cc): [] crash: KASAN: slab-out-of-bounds Read in udf_finalize_lvid Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) ================================================================== BUG: KASAN: slab-out-of-bounds in crc_itu_t+0xb3/0xe0 lib/crc-itu-t.c:62 Read of size 1 at addr ffff8880ac3dc0a8 by task syz-executor.0/2710 CPU: 0 PID: 2710 Comm: syz-executor.0 Not tainted 5.0.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x62/0x9a lib/dump_stack.c:113 print_address_description.cold.3+0x9/0x244 mm/kasan/report.c:187 kasan_report.cold.4+0x1b/0x35 mm/kasan/report.c:317 __asan_report_load1_noabort+0x14/0x20 mm/kasan/generic_report.c:132 crc_itu_t+0xb3/0xe0 lib/crc-itu-t.c:62 udf_finalize_lvid+0xd7/0x1e0 fs/udf/super.c:1952 udf_sync_fs+0xc2/0x140 fs/udf/super.c:2327 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem+0xcb/0x1f0 fs/sync.c:64 generic_shutdown_super+0x69/0x330 fs/super.c:443 kill_block_super+0x96/0xd0 fs/super.c:1186 deactivate_locked_super+0x77/0xd0 fs/super.c:330 deactivate_super fs/super.c:361 [inline] deactivate_super+0x13f/0x160 fs/super.c:357 cleanup_mnt+0x97/0x120 fs/namespace.c:1096 __cleanup_mnt+0xd/0x10 fs/namespace.c:1103 task_work_run+0x108/0x170 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop+0x10e/0x140 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x254/0x2c0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f7d1dafce17 Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffcb91906b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7d1dafce17 RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffcb9190770 RBP: 00007ffcb9190770 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb9191830 R13: 00007f7d1db463b9 R14: 000000000000b1c6 R15: 0000000000000007 Allocated by task 2053: save_stack mm/kasan/common.c:73 [inline] set_track mm/kasan/common.c:85 [inline] __kasan_kmalloc.part.0+0x66/0x100 mm/kasan/common.c:496 __kasan_kmalloc.constprop.1+0xb5/0xc0 mm/kasan/common.c:477 kasan_kmalloc+0x9/0x10 mm/kasan/common.c:504 kmem_cache_alloc_trace+0x12c/0x240 mm/slub.c:2766 kmalloc include/linux/slab.h:545 [inline] kzalloc include/linux/slab.h:740 [inline] kernfs_iattrs.isra.1+0x8f/0x340 fs/kernfs/inode.c:45 kernfs_xattr_get+0x57/0x90 fs/kernfs/inode.c:316 __vfs_getxattr+0xbe/0x120 fs/xattr.c:310 smk_fetch.part.6+0x70/0xb0 security/smack/smack_lsm.c:294 smk_fetch security/smack/smack_lsm.c:3346 [inline] smack_d_instantiate+0x77e/0xf40 security/smack/smack_lsm.c:3425 security_d_instantiate+0x47/0xc0 security/security.c:1318 d_splice_alias+0x69/0xb50 fs/dcache.c:2911 kernfs_iop_lookup+0x199/0x250 fs/kernfs/dir.c:1103 lookup_open+0x5bd/0x1d10 fs/namei.c:3213 do_last fs/namei.c:3324 [inline] path_openat+0x157e/0x2860 fs/namei.c:3534 do_filp_open+0x177/0x250 fs/namei.c:3564 do_sys_open+0x1dc/0x3b0 fs/open.c:1063 __do_sys_openat fs/open.c:1090 [inline] __se_sys_openat fs/open.c:1084 [inline] __x64_sys_openat+0x98/0xf0 fs/open.c:1084 do_syscall_64+0x94/0x2c0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Freed by task 0: (stack is not available) The buggy address belongs to the object at ffff8880ac3dc000 which belongs to the cache kmalloc-192 of size 192 The buggy address is located 168 bytes inside of 192-byte region [ffff8880ac3dc000, ffff8880ac3dc0c0) The buggy address belongs to the page: page:ffffea0002b0f700 count:1 mapcount:0 mapping:ffff88813ff35000 index:0x0 flags: 0xfff00000000200(slab) raw: 00fff00000000200 dead000000000100 dead000000000200 ffff88813ff35000 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page allocated via order 0, migratetype Unmovable, gfp_mask 0x6012c0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY) set_page_owner include/linux/page_owner.h:31 [inline] post_alloc_hook mm/page_alloc.c:1950 [inline] prep_new_page mm/page_alloc.c:1958 [inline] get_page_from_freelist.part.23+0x2dc6/0x42f0 mm/page_alloc.c:3500 get_page_from_freelist mm/page_alloc.c:3390 [inline] __alloc_pages_nodemask+0x284/0x2340 mm/page_alloc.c:4535 alloc_pages_current+0xfd/0x290 mm/mempolicy.c:2106 alloc_pages include/linux/gfp.h:509 [inline] alloc_slab_page mm/slub.c:1477 [inline] allocate_slab mm/slub.c:1622 [inline] new_slab+0x40e/0x750 mm/slub.c:1696 new_slab_objects mm/slub.c:2450 [inline] ___slab_alloc+0x5ce/0x870 mm/slub.c:2602 __slab_alloc.isra.22+0x49/0x60 mm/slub.c:2642 slab_alloc_node mm/slub.c:2705 [inline] slab_alloc mm/slub.c:2747 [inline] kmem_cache_alloc_trace+0x1f6/0x240 mm/slub.c:2764 kmalloc include/linux/slab.h:545 [inline] kzalloc include/linux/slab.h:740 [inline] kernfs_iattrs.isra.1+0x8f/0x340 fs/kernfs/inode.c:45 kernfs_xattr_get+0x57/0x90 fs/kernfs/inode.c:316 __vfs_getxattr+0xbe/0x120 fs/xattr.c:310 smk_fetch.part.6+0x70/0xb0 security/smack/smack_lsm.c:294 smk_fetch security/smack/smack_lsm.c:3346 [inline] smack_d_instantiate+0x77e/0xf40 security/smack/smack_lsm.c:3425 security_d_instantiate+0x47/0xc0 security/security.c:1318 d_splice_alias+0x69/0xb50 fs/dcache.c:2911 kernfs_iop_lookup+0x199/0x250 fs/kernfs/dir.c:1103 lookup_open+0x5bd/0x1d10 fs/namei.c:3213 Memory state around the buggy address: ffff8880ac3dbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8880ac3dc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8880ac3dc080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc ^ ffff8880ac3dc100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8880ac3dc180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc ==================================================================