From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-ot1-f71.google.com (mail-ot1-f71.google.com [209.85.210.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B21C4439F8F for ; Mon, 17 Aug 2026 13:42:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.71 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786974128; cv=none; b=dfSX7Kcj+rA5UKKUak7pii1T6g4RURILo6ZtQSpl24uEQZhcXq3rlOWTiXbl2sdxLwUPv1VQUXxpB5wsp9zw5y6usRzsBGgVsmGl4iLCLtB/Po1JuDtEhTWj7OWgHixkk5dCiXMr2EIvSBRIOZpuFXXPSi/HPx2U877Po1FUioM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786974128; c=relaxed/simple; bh=aX6C4I6qSjoQMxeJ+OPzLeCTstwwhUCCr4q0NmAXO+4=; h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To: Content-Type; b=aZQXn9s4pGVHbvLMV54cLd9nHQXf/qegLF8ttINi+WWjfIdDK4OVW/S7AwnJX4kiFxiJXhNm03ynA2HCZVIsBP+MxhQUgWHr1QHnufOtJyvbTShoEKwYbQOMcFCXChVT22M42aoxN+SD4JYHdBUJH5cgNFl2HfdF4VcA+ItF2tg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.210.71 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-7ee1e335245so3478144a34.1 for ; Mon, 17 Aug 2026 06:42:05 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786974123; x=1787578923; h=content-type:to:from:subject:message-id:in-reply-to:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=6OqqhA80wtcU3IsPjUZveXdR6cUhDI1A/Qh9dqHqO8Q=; b=iDActCCsPJZXiXsPXSaBn5mJkSkBit4xWeX22CZi2M7VIFFq70sprrja4qIGW31FsW 2itIw5vXAke9KtgeWouIAfLUrk9p3UdgWWn0Z6nlaDshX5tuYUu1Ds1SbGo8ZWf/Mmvf OgVcQZrQ3L1EmdkGdKIIzqXskfoHpF8+heUGrJUpYvSIAcqJyWNjcME4J7OwJi7HCN5J Peuyl9POLKOG9P3SO5Mctxj4N7FLEvbTs4qNO92RUHpKJpAmKxHHBjP5X0kioKqtUVTp AOG7jr1jmNa1SNABm4ClXd9rv1EO7XBTGDLBGL7moP6UTY83xV5Xp2TjbKOd5lDreARf HM3Q== X-Forwarded-Encrypted: i=1; AHgh+RqpkptG0CkdYuMZg2r9moZZW+mWtTINSSPraX33J7YjnqRY2tY21CFG2jSHhN9CSfGUFWSQqkc1RA==@vger.kernel.org X-Gm-Message-State: AOJu0YwCah6I1qpntHhRCJRxFnCB9OMzUJjTaj52cCBaX4uYCAcJAoVJ 3YYpzQXNbCfjCs0LN8WhOiRmmggfGAaF/D88dEe1q8IBk1nHYSrAXMbOYSg/Faqk/fpY6rXuzVI /ZwIVUW3P+r9+C01Oxc1GUmaQ9c/3cwQIuR6jpcWQzeWPGnKACRf4YY0p/VY= Precedence: bulk X-Mailing-List: io-uring@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Received: by 2002:a05:6820:f07:b0:6ae:55f6:2cdb with SMTP id 006d021491bc7-6b0d5fca98bmr22016036eaf.1.1786974123322; Mon, 17 Aug 2026 06:42:03 -0700 (PDT) Date: Mon, 17 Aug 2026 06:42:03 -0700 In-Reply-To: <6a6bfa43.1b55b669.19788.0016.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6a830fab.dbb3a75c.20434b.005d.GAE@google.com> Subject: Re: [syzbot] [usb?] KASAN: slab-use-after-free Read in ep_open From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, brauner@kernel.org, gregkh@linuxfoundation.org, io-uring@vger.kernel.org, jack@suse.cz, kartikey406@gmail.com, kees@kernel.org, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, mjguzik@gmail.com, nogikh@google.com, stern@rowland.harvard.edu, syzbot@kernel.org, syzbot@lists.linux.dev, syzkaller-bugs@googlegroups.com, syzkaller-upstream-moderation@googlegroups.com, torvalds@ppc970.osdl.org, viro@zeniv.linux.org.uk Content-Type: text/plain; charset="UTF-8" syzbot has bisected this issue to: commit aa00f67adc2c0d6439f81b5a81ff181377c47a7e Author: Jens Axboe Date: Tue Oct 22 19:47:00 2024 +0000 io_uring: add support for fixed wait regions bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=10e60679580000 start commit: 9a143525f62b Merge tag 'ata-7.2-rc7' of git://git.kernel.o.. git tree: upstream final oops: https://syzkaller.appspot.com/x/report.txt?x=12e60679580000 console output: https://syzkaller.appspot.com/x/log.txt?x=14e60679580000 kernel config: https://syzkaller.appspot.com/x/.config?x=c44651ea7dd2f307 dashboard link: https://syzkaller.appspot.com/bug?extid=df9e891bf8ea586f846b syz repro: https://syzkaller.appspot.com/x/repro.syz?x=120defb9580000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16323fb9580000 Reported-by: syzbot+df9e891bf8ea586f846b@syzkaller.appspotmail.com Fixes: aa00f67adc2c ("io_uring: add support for fixed wait regions") For information about bisection process see: https://goo.gl/tpsmEJ#bisection