bisecting fixing commit since 13af6c74b14a883366e7702c40c52ff548096e7f building syzkaller on 96dd36234d97bbf6b403f3a7f03cfc0296422879 testing commit 13af6c74b14a883366e7702c40c52ff548096e7f with gcc (GCC) 8.4.1 20210217 kernel signature: 9d1c70d266119852df97ecd88f5ca99a823b6ea4fc5a102e26e8f36309f1a881 run #0: crashed: WARNING in __queue_work run #1: crashed: KASAN: use-after-free Read in hci_dev_reset run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: crashed: KASAN: use-after-free Read in hci_dev_reset run #4: crashed: KASAN: use-after-free Read in hci_dev_reset run #5: crashed: KASAN: use-after-free Read in skb_dequeue run #6: crashed: KASAN: use-after-free Read in skb_dequeue run #7: crashed: KASAN: use-after-free Read in skb_dequeue run #8: crashed: KASAN: use-after-free Read in hci_dev_reset run #9: crashed: KASAN: use-after-free Read in skb_dequeue run #10: crashed: KASAN: use-after-free Read in hci_dev_reset run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing current HEAD 78fec1611cbf7b0bdaddfdbf174a3a2463663bff testing commit 78fec1611cbf7b0bdaddfdbf174a3a2463663bff with gcc (GCC) 8.4.1 20210217 kernel signature: 077f913f0ee00de98cfb5d7fd4a082e29d4828345381da144c1a1280593e981e all runs: OK # git bisect start 78fec1611cbf7b0bdaddfdbf174a3a2463663bff 13af6c74b14a883366e7702c40c52ff548096e7f Bisecting: 1700 revisions left to test after this (roughly 11 steps) [b177d2d915cea2d0a590f0034a20299dd1ee3ef2] fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent testing commit b177d2d915cea2d0a590f0034a20299dd1ee3ef2 with gcc (GCC) 8.4.1 20210217 kernel signature: 794742b278428ebeb414731c840ac00dff5e44b581d95a0d00484755da8df597 run #0: crashed: KASAN: use-after-free Read in hci_dev_reset run #1: crashed: KASAN: use-after-free Read in hci_dev_reset run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky # git bisect good b177d2d915cea2d0a590f0034a20299dd1ee3ef2 Bisecting: 850 revisions left to test after this (roughly 10 steps) [73c1365ed1b1bb288e71fb525e4381db3d39e81f] wil6210: select CONFIG_CRC32 testing commit 73c1365ed1b1bb288e71fb525e4381db3d39e81f with gcc (GCC) 8.4.1 20210217 kernel signature: 9a9fc2136a1c4c63ca47e694a47184410db98d0e655ee48e43db4b278f50f481 run #0: OK run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: crashed: KASAN: use-after-free Read in skb_dequeue run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 73c1365ed1b1bb288e71fb525e4381db3d39e81f Bisecting: 425 revisions left to test after this (roughly 9 steps) [73bce30e79b1fe58fd9eec3062ebd71c52cf532a] media: lmedm04: Fix misuse of comma testing commit 73bce30e79b1fe58fd9eec3062ebd71c52cf532a with gcc (GCC) 8.4.1 20210217 kernel signature: d3b53ced4f536222935417d30da2c633b461560bd5d4e486d57ce7c017e37432 run #0: crashed: KASAN: use-after-free Read in skb_dequeue run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 73bce30e79b1fe58fd9eec3062ebd71c52cf532a Bisecting: 212 revisions left to test after this (roughly 8 steps) [c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a] btrfs: raid56: simplify tracking of Q stripe presence testing commit c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a with gcc (GCC) 8.4.1 20210217 kernel signature: 646da2ec5947c4597c4c98899c1a551663b0d043e5ed0c5fc01b3ae31a874fdc all runs: OK # git bisect bad c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a Bisecting: 106 revisions left to test after this (roughly 7 steps) [643a663251e07ea55178fd9bfede9a7a4199cc24] KEYS: trusted: Fix migratable=1 failing testing commit 643a663251e07ea55178fd9bfede9a7a4199cc24 with gcc (GCC) 8.4.1 20210217 kernel signature: abc43b653713688b43daf53860ffe53672954ebca60a730d40b2970f16d48654 run #0: crashed: KASAN: use-after-free Read in hci_dev_reset run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 643a663251e07ea55178fd9bfede9a7a4199cc24 Bisecting: 53 revisions left to test after this (roughly 6 steps) [dfb571610ba392179348c8472bfb131d4173d585] Linux 4.19.178 testing commit dfb571610ba392179348c8472bfb131d4173d585 with gcc (GCC) 8.4.1 20210217 kernel signature: edfd0f7fb33290beb18deaf9698e5dddae5bfdfb03aea29f3d81fa36e26a832e run #0: crashed: KASAN: use-after-free Read in skb_dequeue run #1: crashed: KASAN: use-after-free Read in hci_dev_reset run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good dfb571610ba392179348c8472bfb131d4173d585 Bisecting: 26 revisions left to test after this (roughly 5 steps) [e0ea994b77a32763138b33ac784ab91cfb91eefd] ath10k: fix wmi mgmt tx queue full due to race condition testing commit e0ea994b77a32763138b33ac784ab91cfb91eefd with gcc (GCC) 8.4.1 20210217 kernel signature: 3cfb2739cee20a500507a4cfc558eaa9a11f3295d02542209a2ed8ffd6f6b127 run #0: crashed: KASAN: use-after-free Read in hci_dev_reset run #1: crashed: KASAN: use-after-free Read in hci_dev_reset run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: crashed: KASAN: use-after-free Read in skb_dequeue run #4: crashed: KASAN: use-after-free Read in hci_dev_reset run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: crashed: KASAN: use-after-free Read in hci_dev_reset run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good e0ea994b77a32763138b33ac784ab91cfb91eefd Bisecting: 13 revisions left to test after this (roughly 4 steps) [76716de514e5f7318893fbce5bc04bc3a5543a0a] ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet testing commit 76716de514e5f7318893fbce5bc04bc3a5543a0a with gcc (GCC) 8.4.1 20210217 kernel signature: faf443c85630374cc8d1f719885cfb46198a716dd2351bc0753b0830ddd07d60 run #0: crashed: KASAN: use-after-free Read in skb_dequeue run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: crashed: KASAN: use-after-free Read in hci_dev_reset run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: crashed: KASAN: use-after-free Read in hci_dev_reset # git bisect good 76716de514e5f7318893fbce5bc04bc3a5543a0a Bisecting: 6 revisions left to test after this (roughly 3 steps) [b62d8b5c814be957ce164453ddf4852167908841] xen-netback: respect gnttab_map_refs()'s return value testing commit b62d8b5c814be957ce164453ddf4852167908841 with gcc (GCC) 8.4.1 20210217 kernel signature: e0f3854f9a109a02ca3d1510cab795ace9ad443f5fce8158659132a7c87e7bcb run #0: crashed: KASAN: use-after-free Read in hci_dev_reset run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: crashed: KASAN: use-after-free Read in hci_dev_reset run #3: crashed: KASAN: use-after-free Read in skb_dequeue run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: crashed: KASAN: use-after-free Read in skb_dequeue # git bisect good b62d8b5c814be957ce164453ddf4852167908841 Bisecting: 3 revisions left to test after this (roughly 2 steps) [ff2111a6fab31923685b6ca8ea466ea0576b8a0e] media: v4l: ioctl: Fix memory leak in video_usercopy testing commit ff2111a6fab31923685b6ca8ea466ea0576b8a0e with gcc (GCC) 8.4.1 20210217 kernel signature: dee056f0ec73ad3c792a84ad009683ea1d63d2eba995c05fff88dd7373e6a9ec run #0: crashed: KASAN: use-after-free Read in hci_dev_reset run #1: crashed: KASAN: use-after-free Read in hci_dev_reset run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good ff2111a6fab31923685b6ca8ea466ea0576b8a0e Bisecting: 1 revision left to test after this (roughly 1 step) [5ad0869ae41823003ef5efc0a206730bcc352c08] ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board testing commit 5ad0869ae41823003ef5efc0a206730bcc352c08 with gcc (GCC) 8.4.1 20210217 kernel signature: 475951a47770733254d8c65e4db496198dcef5796ec925dfc77e3b125bbf97cc run #0: crashed: KASAN: use-after-free Read in skb_dequeue run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 5ad0869ae41823003ef5efc0a206730bcc352c08 Bisecting: 0 revisions left to test after this (roughly 0 steps) [2cae3e25b70668fd413311277d56b6fe41900789] Linux 4.19.179 testing commit 2cae3e25b70668fd413311277d56b6fe41900789 with gcc (GCC) 8.4.1 20210217 kernel signature: 9ad1e87bfc0ac77e0053b991c1c0843f5211cceb8f9017e3d833188585051d50 run #0: crashed: KASAN: use-after-free Read in skb_dequeue run #1: crashed: KASAN: use-after-free Read in skb_dequeue run #2: crashed: KASAN: use-after-free Read in skb_dequeue run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 2cae3e25b70668fd413311277d56b6fe41900789 c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a is the first bad commit commit c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a Author: David Sterba Date: Wed Feb 19 15:17:20 2020 +0100 btrfs: raid56: simplify tracking of Q stripe presence commit c17af96554a8a8777cbb0fd53b8497250e548b43 upstream. There are temporary variables tracking the index of P and Q stripes, but none of them is really used as such, merely for determining if the Q stripe is present. This leads to compiler warnings with -Wunused-but-set-variable and has been reported several times. fs/btrfs/raid56.c: In function ‘finish_rmw’: fs/btrfs/raid56.c:1199:6: warning: variable ‘p_stripe’ set but not used [-Wunused-but-set-variable] 1199 | int p_stripe = -1; | ^~~~~~~~ fs/btrfs/raid56.c: In function ‘finish_parity_scrub’: fs/btrfs/raid56.c:2356:6: warning: variable ‘p_stripe’ set but not used [-Wunused-but-set-variable] 2356 | int p_stripe = -1; | ^~~~~~~~ Replace the two variables with one that has a clear meaning and also get rid of the warnings. The logic that verifies that there are only 2 valid cases is unchanged. Reviewed-by: Johannes Thumshirn Signed-off-by: David Sterba Signed-off-by: Greg Kroah-Hartman fs/btrfs/raid56.c | 37 +++++++++++++++---------------------- 1 file changed, 15 insertions(+), 22 deletions(-) culprit signature: 646da2ec5947c4597c4c98899c1a551663b0d043e5ed0c5fc01b3ae31a874fdc parent signature: 9ad1e87bfc0ac77e0053b991c1c0843f5211cceb8f9017e3d833188585051d50 Reproducer flagged being flaky revisions tested: 14, total time: 3h59m3.401721979s (build: 1h52m48.407607441s, test: 2h5m0.435463278s) first good commit: c1a77dbcaa2d7f45fc9cb9f0c525e1c11957bf2a btrfs: raid56: simplify tracking of Q stripe presence recipients (to): ["dsterba@suse.com" "gregkh@linuxfoundation.org" "johannes.thumshirn@wdc.com"] recipients (cc): []