From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 48ECEC43603 for ; Thu, 12 Dec 2019 13:38:48 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 19D812077B for ; Thu, 12 Dec 2019 13:38:48 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729507AbfLLNir (ORCPT ); Thu, 12 Dec 2019 08:38:47 -0500 Received: from zeniv.linux.org.uk ([195.92.253.2]:48040 "EHLO ZenIV.linux.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729405AbfLLNiq (ORCPT ); Thu, 12 Dec 2019 08:38:46 -0500 Received: from viro by ZenIV.linux.org.uk with local (Exim 4.92.3 #3 (Red Hat Linux)) id 1ifOg0-0005jt-HK; Thu, 12 Dec 2019 13:38:44 +0000 Date: Thu, 12 Dec 2019 13:38:44 +0000 From: Al Viro To: Dmitry Vyukov Cc: syzbot , linux-fsdevel , LKML , syzkaller-bugs Subject: Re: BUG: corrupted list in __dentry_kill (2) Message-ID: <20191212133844.GG4203@ZenIV.linux.org.uk> References: <000000000000b6b03205997b71cf@google.com> <20191212061206.GE4203@ZenIV.linux.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Dec 12, 2019 at 07:48:14AM +0100, Dmitry Vyukov wrote: > On Thu, Dec 12, 2019 at 7:12 AM Al Viro wrote: > > > > On Wed, Dec 11, 2019 at 09:59:11PM -0800, syzbot wrote: > > > Hello, > > > > > > syzbot found the following crash on: > > > > > > HEAD commit: 938f49c8 Add linux-next specific files for 20191211 > > > git tree: linux-next > > > console output: https://syzkaller.appspot.com/x/log.txt?x=150eba1ee00000 > > > kernel config: https://syzkaller.appspot.com/x/.config?x=96834c884ba7bb81 > > > dashboard link: https://syzkaller.appspot.com/bug?extid=31043da7725b6ec210f1 > > > compiler: gcc (GCC) 9.0.0 20181231 (experimental) > > > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12dc83dae00000 > > > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16ac8396e00000 > > > > > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > > > Reported-by: syzbot+31043da7725b6ec210f1@syzkaller.appspotmail.com > > > > Already fixed in a3d1e7eb5abe3aa1095bc75d1a6760d3809bd672 > > This commit was in the tested tree already as far as I can see. Broken version (653f0d05be0948e7610bb786e6570bb6c48a4e75) is there, its fixed replacement (a3d1e7eb5abe3aa1095bc75d1a6760d3809bd672) is not. Look, I realize that your setup is oriented to "followup commit Y fixes a bug in earlier commit X", and sometimes it's the only possibility (when X has already been in mainline), but in general it's spelled "bisection hazard for no damn reason". Fixes are folded in. Routinely. What's more, in this case the fixed version had been done (and pushed out) before syzbot has seen the original, so putting any metadata into commit message hadn't been an option. If there is some format understandable for syzbot for such cases ("bug is caused by commit X; Y is a replacement that should not exhibit the same bug, so if you see that behaviour on a tree that doesn't contain X, report it. X-containing trees ought to go extinct reasonably soon"), please tell what it is. Otherwise this situation will keep repeating - I am not going to stop folding fixes into developing patches. Speaking of bisect hazards, I'd recommend to check how your bisect went - the bug is definitely local to this commit and I really wonder what had caused the bisect to go wrong in this particular case.