bisecting fixing commit since 414510bc00a5fc954d8340c170083f518d09aa55 building syzkaller on acb5b744f96bcc435cd43a8f5af19aa36f7ae58c testing commit 414510bc00a5fc954d8340c170083f518d09aa55 with gcc (GCC) 8.1.0 kernel signature: 82bfd5e068c9de33446677da48eac51979b07f3a run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in mld_dad_timer_expire run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in br_handle_frame run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in addrconf_dad_work run #8: crashed: INFO: rcu detected stall in mld_ifc_timer_expire run #9: crashed: INFO: rcu detected stall in mld_dad_timer_expire testing current HEAD a844dc4c544291470aa69edbe2434b040794e269 testing commit a844dc4c544291470aa69edbe2434b040794e269 with gcc (GCC) 8.1.0 kernel signature: 5b3daf790387e687a6ef4456cf527d4c3c6af374 all runs: OK # git bisect start a844dc4c544291470aa69edbe2434b040794e269 414510bc00a5fc954d8340c170083f518d09aa55 Bisecting: 878 revisions left to test after this (roughly 10 steps) [a0128f369072548e4f3a0e9862a268fedf32c618] ASoC: tlv320dac31xx: mark expected switch fall-through testing commit a0128f369072548e4f3a0e9862a268fedf32c618 with gcc (GCC) 8.1.0 kernel signature: 83189ff0b11e83290776201e57e777b2bf8eaac1 all runs: OK # git bisect bad a0128f369072548e4f3a0e9862a268fedf32c618 Bisecting: 439 revisions left to test after this (roughly 9 steps) [8f25db0a2e89f529beccdd7c13dc70d6857e5dbe] timer: Read jiffies once when forwarding base clk testing commit 8f25db0a2e89f529beccdd7c13dc70d6857e5dbe with gcc (GCC) 8.1.0 kernel signature: 06a893b102f9151b6c5266a877e95ca23178384f all runs: OK # git bisect bad 8f25db0a2e89f529beccdd7c13dc70d6857e5dbe Bisecting: 219 revisions left to test after this (roughly 8 steps) [b6a2d6c11272b3cf5d2d902bb9aaf7558560a5eb] nfc: enforce CAP_NET_RAW for raw sockets testing commit b6a2d6c11272b3cf5d2d902bb9aaf7558560a5eb with gcc (GCC) 8.1.0 kernel signature: 8d78de70ea3a880672e91e7845c208bbcf862461 all runs: OK # git bisect bad b6a2d6c11272b3cf5d2d902bb9aaf7558560a5eb Bisecting: 109 revisions left to test after this (roughly 7 steps) [551649e587e7ce4682cd2a60a20bc8aafa1c9103] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID testing commit 551649e587e7ce4682cd2a60a20bc8aafa1c9103 with gcc (GCC) 8.1.0 kernel signature: 042a8dd2c456ce6818a1273cc8dc1d2c0dc66e9c all runs: OK # git bisect bad 551649e587e7ce4682cd2a60a20bc8aafa1c9103 Bisecting: 54 revisions left to test after this (roughly 6 steps) [dd17277c2483db588c470df406f63059f3975432] hv_sock: Fix hang when a connection is closed testing commit dd17277c2483db588c470df406f63059f3975432 with gcc (GCC) 8.1.0 kernel signature: e1ce65e20e32bc6947050bcc083c983a340d9b9e run #0: crashed: INFO: rcu detected stall in br_handle_frame run #1: crashed: INFO: rcu detected stall in addrconf_dad_work run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in br_handle_frame run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in br_handle_frame run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in br_handle_frame run #9: crashed: INFO: rcu detected stall in br_handle_frame # git bisect good dd17277c2483db588c470df406f63059f3975432 Bisecting: 27 revisions left to test after this (roughly 5 steps) [4a8683c33a1188dee924f75366211ccafc50703a] Btrfs: fix assertion failure during fsync and use of stale transaction testing commit 4a8683c33a1188dee924f75366211ccafc50703a with gcc (GCC) 8.1.0 kernel signature: f6cfad1a7c9a0fe84ba42c745856c43a7310b500 all runs: OK # git bisect bad 4a8683c33a1188dee924f75366211ccafc50703a Bisecting: 13 revisions left to test after this (roughly 4 steps) [55fb612bef7fd237fb70068e2b6ff1cd1543a8ef] net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list testing commit 55fb612bef7fd237fb70068e2b6ff1cd1543a8ef with gcc (GCC) 8.1.0 kernel signature: 5a70b982f38643ef35fbf566509e3cf9fa0f212d run #0: crashed: INFO: rcu detected stall in mld_ifc_timer_expire run #1: crashed: INFO: rcu detected stall in br_handle_frame run #2: crashed: INFO: rcu detected stall in br_handle_frame run #3: crashed: INFO: rcu detected stall in br_handle_frame run #4: crashed: INFO: rcu detected stall in addrconf_dad_work run #5: crashed: INFO: rcu detected stall in br_handle_frame run #6: crashed: INFO: rcu detected stall in br_handle_frame run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in br_handle_frame # git bisect good 55fb612bef7fd237fb70068e2b6ff1cd1543a8ef Bisecting: 6 revisions left to test after this (roughly 3 steps) [f37ed9bc10eca7e771ad3c14bfd04bdd29bcf37a] tun: fix use-after-free when register netdev failed testing commit f37ed9bc10eca7e771ad3c14bfd04bdd29bcf37a with gcc (GCC) 8.1.0 kernel signature: 0cc7c2fb063417203f5addbd0585bb04f1231053 all runs: OK # git bisect bad f37ed9bc10eca7e771ad3c14bfd04bdd29bcf37a Bisecting: 3 revisions left to test after this (roughly 2 steps) [e90daafad0dc80374bd204a404f030a5efa0b3ac] sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' testing commit e90daafad0dc80374bd204a404f030a5efa0b3ac with gcc (GCC) 8.1.0 kernel signature: 902401bbf3ec1d23283b485b2a5e28eec346e119 all runs: OK # git bisect bad e90daafad0dc80374bd204a404f030a5efa0b3ac Bisecting: 0 revisions left to test after this (roughly 1 step) [cc243e2427cef2a5dd7367cb0e0b846503350ffe] sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero testing commit cc243e2427cef2a5dd7367cb0e0b846503350ffe with gcc (GCC) 8.1.0 kernel signature: 9911a2a7524cefe910b414dcba43669fee0e8125 all runs: OK # git bisect bad cc243e2427cef2a5dd7367cb0e0b846503350ffe Bisecting: 0 revisions left to test after this (roughly 0 steps) [37a791c19a92a416ef00c0b5e4ee4d31d7094989] net: phylink: Fix flow control resolution testing commit 37a791c19a92a416ef00c0b5e4ee4d31d7094989 with gcc (GCC) 8.1.0 kernel signature: 8cb5d50e5a17c2a02152525196f633f4ecf46b66 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in addrconf_dad_work run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in br_handle_frame run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted # git bisect good 37a791c19a92a416ef00c0b5e4ee4d31d7094989 cc243e2427cef2a5dd7367cb0e0b846503350ffe is the first bad commit commit cc243e2427cef2a5dd7367cb0e0b846503350ffe Author: Cong Wang Date: Sun Sep 8 13:40:51 2019 -0700 sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero [ Upstream commit d4d6ec6dac07f263f06d847d6f732d6855522845 ] In case of TCA_HHF_NON_HH_WEIGHT or TCA_HHF_QUANTUM is zero, it would make no progress inside the loop in hhf_dequeue() thus kernel would get stuck. Fix this by checking this corner case in hhf_change(). Fixes: 10239edf86f1 ("net-qdisc-hhf: Heavy-Hitter Filter (HHF) qdisc") Reported-by: syzbot+bc6297c11f19ee807dc2@syzkaller.appspotmail.com Reported-by: syzbot+041483004a7f45f1f20a@syzkaller.appspotmail.com Reported-by: syzbot+55be5f513bed37fc4367@syzkaller.appspotmail.com Cc: Jamal Hadi Salim Cc: Jiri Pirko Cc: Terry Lam Signed-off-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman net/sched/sch_hhf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) kernel signature: 9911a2a7524cefe910b414dcba43669fee0e8125 previous signature: 8cb5d50e5a17c2a02152525196f633f4ecf46b66 revisions tested: 13, total time: 3h37m59.236375572s (build: 1h41m58.99629213s, test: 1h54m34.054409406s) first good commit: cc243e2427cef2a5dd7367cb0e0b846503350ffe sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero cc: ["davem@davemloft.net" "gregkh@linuxfoundation.org" "jhs@mojatatu.com" "jiri@resnulli.us" "vtlam@google.com" "xiyou.wangcong@gmail.com"]