Received: by 2002:a25:31c3:0:0:0:0:0 with SMTP id x186csp4932882ybx; Sun, 10 Nov 2019 03:50:31 -0800 (PST) X-Google-Smtp-Source: APXvYqzRD9U9G1tGDJIQImaUNxBJ+kZkBVtvWSqHoY36au+q8qzyIFduvtb1cEIRsEeqaOur+nPl X-Received: by 2002:aa7:c887:: with SMTP id p7mr20408161eds.268.1573386631103; Sun, 10 Nov 2019 03:50:31 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1573386631; cv=none; d=google.com; s=arc-20160816; b=JdwkV44cWUXazGZQB5Q/c/s/1Puvkk8TSm+pbFe/fOe9YnbzrBSTPi3fLWrinwJH+A 6pXERXKqZzOyfmGa2rVkad7UE4GSqmBGrNwdylZltmPhcJ4ctulwLDjOClZE19e4Gxv+ OY2in4SC3/deWPCk2Ub8qdFr8vID0Yed/KEudWeJd8AIqcxmeuuQ/8/S9f841anSbWJV Trh1VDkH9oni816Nk2cVajUyY+FIo6YJDAUmNuLwk//xDyl8D8iTwatcLjaM2Zw96Q0a werCoziuGF5QEbEu44VdpGMdQbsVyct0x9FtpR0daHkefaXRfn4GOfam1g8fUp7G73TD j1+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:to:from:subject:message-id:in-reply-to :date:mime-version; bh=muS40/M+U7unS7Nwdhba7+0opY/I2Z2pZGBBgPUq8C0=; b=WZQUXaIVFtSKXTdf5snpyQ7kpECutENuz/gtTxTOAVVMkxqKO8vxiHTVJASHe/W9bb JOooDWzJCVdy+p0jEWbOzgZ8dbwrV9qmySLw8Pk+00GwBUgnZ2OjN+im3ScGj6IFZ8+k UcgIXa+C6y6hSM0GhoeiNVI0xLRLY5UbRohxAkBiU7yJ0p2218UivFu7mpu3ilAvQcqF MhcGmvpm7tF8i3xD3R7dqKiKFRHSn83ZyyeE5pGEn7CxNgE+eZVdUn4fYLvDjSBoqipn bwqD5VFYxdO443H+SD9n5GVhdczx3aIYw9kTjzuFDbJqzsAiWnhtALzNWYTMnl6KE7v4 2tCw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=appspotmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id b37si9127450edf.186.2019.11.10.03.50.08; Sun, 10 Nov 2019 03:50:31 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=appspotmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726830AbfKJLtC (ORCPT + 99 others); Sun, 10 Nov 2019 06:49:02 -0500 Received: from mail-il1-f197.google.com ([209.85.166.197]:53449 "EHLO mail-il1-f197.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726684AbfKJLtB (ORCPT ); Sun, 10 Nov 2019 06:49:01 -0500 Received: by mail-il1-f197.google.com with SMTP id y17so13712732ila.20 for ; Sun, 10 Nov 2019 03:49:01 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:date:in-reply-to:message-id:subject :from:to; bh=muS40/M+U7unS7Nwdhba7+0opY/I2Z2pZGBBgPUq8C0=; b=two3lPNPM+sQiSV14DN4MmD7JMEHp8igOEUgzrfGvP2u1Yd3GZSp8wHUJvaMoYTC/j Wdu1m2nOA9aT3T2dik+HFOOT2NCqvgDS+2AHq6UzOE1ZaZ/JmqZ9/2A5Xa2GOcWIemnl 5AfNIqw6Tm32/w6hiBaIj2WaIdqBp8rrP7yvo/1X+Td+zwHS9QVvOyTLsKlMDAgUsejD FdroQfX9CFIvCSwKpQQYQMmz7f0X++bNWqZdZr3T8Sr/tRlCBZ6VT7TTnJsbhN+FSaut AfFYuOyb6CopL3moRVKZNS2fY5tzJUrhwzqjPlP33fnbd0A+n3xFbeuu0vjDalnWkuXU Z5Ew== X-Gm-Message-State: APjAAAXI8QP2wG/ZepqVB5km61UeCJXbDwWpCRG0o+V8Elrk26IeKkm+ T0LcsaGdDQhD3U5MoaBXH5eUE8uj9N1oTKVGuCqWuT5yMWiF MIME-Version: 1.0 X-Received: by 2002:a92:16d4:: with SMTP id 81mr24840022ilw.198.1573386541143; Sun, 10 Nov 2019 03:49:01 -0800 (PST) Date: Sun, 10 Nov 2019 03:49:01 -0800 In-Reply-To: <0000000000003659ef0596fa4cae@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <000000000000e11df90596fc9955@google.com> Subject: Re: KASAN: invalid-free in io_sqe_files_unregister From: syzbot To: axboe@kernel.dk, io-uring@vger.kernel.org, linux-block@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com, viro@zeniv.linux.org.uk Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org syzbot has bisected this bug to: commit 65e19f54d29cd8559ce60cfd0d751bef7afbdc5c Author: Jens Axboe Date: Sat Oct 26 13:20:21 2019 +0000 io_uring: support for larger fixed file sets bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=154f483ce00000 start commit: 5591cf00 Add linux-next specific files for 20191108 git tree: linux-next final crash: https://syzkaller.appspot.com/x/report.txt?x=174f483ce00000 console output: https://syzkaller.appspot.com/x/log.txt?x=134f483ce00000 kernel config: https://syzkaller.appspot.com/x/.config?x=e1036c6ef52866f9 dashboard link: https://syzkaller.appspot.com/bug?extid=3254bc44113ae1e331ee syz repro: https://syzkaller.appspot.com/x/repro.syz?x=116bb33ae00000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=173f133ae00000 Reported-by: syzbot+3254bc44113ae1e331ee@syzkaller.appspotmail.com Fixes: 65e19f54d29c ("io_uring: support for larger fixed file sets") For information about bisection process see: https://goo.gl/tpsmEJ#bisection