Received: by 2002:a05:6a10:d5a5:0:0:0:0 with SMTP id gn37csp2807471pxb; Sun, 3 Oct 2021 06:17:42 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxGuoenxWoYc/42xQrgksFfY7HkqYFtSdpz8QO6gaKkTBjGQj34OWLhLmzzd9ShVigvw4P2 X-Received: by 2002:a63:ef01:: with SMTP id u1mr6609582pgh.336.1633267061757; Sun, 03 Oct 2021 06:17:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1633267061; cv=none; d=google.com; s=arc-20160816; b=xiXF/qPJJdKQEgr3d6o+0NwmpaU8PYLxjgsGgtAfti5TpVDQ4977etr37uMcdWjeJ1 wf8Wanil6mAfnlZUjDwr4RjMRDcRddUsuzjGGkee5NK21h4eUx2IjSX7cmDENlgjHkCp T4DUhIGG6XClZeHZmQn2G3B92JwRvvU7LvqCF4A3YTv0poYUx9WCBswfxTGjxEU5irsu mOkZSNuF3yPetoI5/w2SPGEVKVYeutNbReCUWd9dhs29mY0d/Kyj4vRvA/JljPoI842G yFoELSbwd3Wsd3M3Wb7uISD4QV2uU2ddvjLIZdW15RcXLRjF18XHW14df/5lob9QNEVM /zUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:content-language :in-reply-to:mime-version:user-agent:date:message-id:from:references :to:subject:dkim-signature; bh=iQO0zbqGfFg861M8tcJXeO1xQAbguD5zVE5yDhTAq3Y=; b=xcDX+f+lA45SGPc72/Hq2XecW545R3NHC7sYHGLdXLcTLZpAudAmkxA48k1eKgxH3V oXvfo+Ps3S8t8mQCCRXBDMimkNJR+iu7iVgdejJqo3B2giAd7a8xjaF+CVhE5ETJ1N+S Z0YNEPELPia8bCyMzFDfY4jfshqgc1WXp+g8FP4IyPghDy3FwIPUBliHS4TwnAJlfkQj Is1DgiXzmDj1PQ1jBUyVTeOBnjFQo8Lngs84ffHTpHBt5HR/0YpJgXL1VhGDraQOCtex w/J7Sik5CG7KqlMamJeSpRPTQj+J5c7WGXyltVkbl9IpSuCMeN24dcxaIieCf4fLX4Oh 2k7Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel-dk.20210112.gappssmtp.com header.s=20210112 header.b=5rKQzjoR; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id m125si14314405pfb.54.2021.10.03.06.17.07; Sun, 03 Oct 2021 06:17:41 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel-dk.20210112.gappssmtp.com header.s=20210112 header.b=5rKQzjoR; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230050AbhJCNG4 (ORCPT + 99 others); Sun, 3 Oct 2021 09:06:56 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49412 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230184AbhJCNG4 (ORCPT ); Sun, 3 Oct 2021 09:06:56 -0400 Received: from mail-il1-x134.google.com (mail-il1-x134.google.com [IPv6:2607:f8b0:4864:20::134]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C02C7C061780 for ; Sun, 3 Oct 2021 06:05:08 -0700 (PDT) Received: by mail-il1-x134.google.com with SMTP id i13so15508689ilm.4 for ; Sun, 03 Oct 2021 06:05:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel-dk.20210112.gappssmtp.com; s=20210112; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=iQO0zbqGfFg861M8tcJXeO1xQAbguD5zVE5yDhTAq3Y=; b=5rKQzjoR0KmhW35Gf+kkJa4DaXD/gF9O22vc2aZ9HtWQZr/XZCBQtjSsWdG7j49h+B toYUQWK5dPAgLasgyJyRspJytDTJbgywK0JZ0grwlTz07k6Gng1GV1RZDzfmyfbkJ2sl OpH+y8z/048WsxX+nufbj6+DLJd3ngtPbLY2CCfAedmQAleTu2kv+tP/kKG+w4tePXP/ ZTJt8CLYHp2OEalrxO4qHLPHfv+E5eAeSM/9Q02fWup5jtaeXMpSMG+YR5FLmp/cKseZ AUdSBI/nDoN8zkoyacXooLY/+rp4ZpVSUvRA7wxbnWrQRN4lgwLwvsmO1PZOT3JePLcj 5iHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=iQO0zbqGfFg861M8tcJXeO1xQAbguD5zVE5yDhTAq3Y=; b=QRUOL3bf7hUy8aWbib9hpZwuSyKJ8eR/dk9Lgyctv1lt2vhOrgR08nJOCHFoDtL9Ot 7empIsfTr0i6Nf1MWxz/pKLodfsJY7EjjUS9wrmUfhIDb1Yr43U/ox26NzjZw9aAsMH6 /VitF9bTBoSNMvSg0IZ9zT4F99c/cB5/70sM0N+ZUzOoRoia0lgQqYuGgMWLVl6eSsj5 UK+Z23Ys4y/iFJAx31mwzrZWPg0xXv56JAmAlk8evQtgetUSbbF/NY5dYvk8sjopPfGX JA+yDo5liiuBxrcVMT+1luLDUia+Vm0Igo683UphYaXzF4KFSIC47MCgktfByIcF/aKz THTw== X-Gm-Message-State: AOAM532JYHHQkkMi0eFi5X3Y2BpwUvTaojmw7Ca0CYtVO8SdT8yU+qF3 WPM0W1WAuRN2E4oDUBxdiyP8FA== X-Received: by 2002:a05:6e02:16c6:: with SMTP id 6mr1503168ilx.220.1633266308016; Sun, 03 Oct 2021 06:05:08 -0700 (PDT) Received: from [192.168.1.116] ([66.219.217.159]) by smtp.gmail.com with ESMTPSA id e10sm6999168iov.10.2021.10.03.06.05.07 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 03 Oct 2021 06:05:07 -0700 (PDT) Subject: Re: [syzbot] BUG: unable to handle kernel NULL pointer dereference in kiocb_done To: syzbot , asml.silence@gmail.com, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com References: <00000000000062ec7d05cd6dd2f6@google.com> From: Jens Axboe Message-ID: Date: Sun, 3 Oct 2021 07:05:04 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <00000000000062ec7d05cd6dd2f6@google.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 10/3/21 1:34 AM, syzbot wrote: > syzbot suspects this issue was fixed by commit: > > commit b8ce1b9d25ccf81e1bbabd45b963ed98b2222df8 > Author: Pavel Begunkov > Date: Tue Aug 31 13:13:11 2021 +0000 > > io_uring: don't submit half-prepared drain request > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=17b14b67300000 > start commit: 4ac6d90867a4 Merge tag 'docs-5.15' of git://git.lwn.net/li.. > git tree: upstream > kernel config: https://syzkaller.appspot.com/x/.config?x=3c3a5498e99259cf > dashboard link: https://syzkaller.appspot.com/bug?extid=726f2ce6dbbf2ad8d133 > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=124a3b49300000 > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=142e610b300000 > > If the result looks correct, please mark the issue as fixed by replying with: #syz fix: io_uring: don't submit half-prepared drain request -- Jens Axboe