ci starts bisection 2022-07-24 08:29:31.928084881 +0000 UTC m=+164645.369690190 bisecting cause commit starting from cb71b93c2dc36d18a8b05245973328d018272cdf building syzkaller on 22343af4ef8625de38ebba6b7c1758a27dabde73 testing commit cb71b93c2dc36d18a8b05245973328d018272cdf compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 44e81ae9e1f7196ecd6a705230c6afe7d6f610fcbbc53015a836ed1759f3e23d run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: crashed: WARNING in p9_client_destroy run #8: crashed: WARNING in p9_client_destroy run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: crashed: WARNING in p9_client_destroy run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b7004bad416654365f3ea189ba01a607bcb821d20b70c4bbcdecb6fe2987133e run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d15d72edad03be6a6fe709eb58485d5698285370e5034987b624f22a24f53231 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: OK run #8: OK run #9: OK testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 61e938a2db4c9cc6130fd083427d2371eedb7dffb5701ff867e1cb2e78288fa0 all runs: OK # git bisect start f443e374ae131c168a065ea1748feac6b2e76613 df0cc57e057f18e44dac8e6c18aba47ab53202f9 Bisecting: 6995 revisions left to test after this (roughly 13 steps) [22ef12195e13c5ec58320dbf99ef85059a2c0820] Merge tag 'staging-5.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging testing commit 22ef12195e13c5ec58320dbf99ef85059a2c0820 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 30854eaf8ca2f8fdd4397167c1287d899f7d1acc7d0482c21111ccc6ee4892a4 all runs: OK # git bisect good 22ef12195e13c5ec58320dbf99ef85059a2c0820 Bisecting: 3520 revisions left to test after this (roughly 12 steps) [51620150ca2df62f8ea472ab8962be590c957288] cifs: update internal module number testing commit 51620150ca2df62f8ea472ab8962be590c957288 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 313f5664578e818eb1d6951ad47c5d40f9af8d3f8c6644ec5b1aa6a026d637cb run #0: OK run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: crashed: WARNING in p9_client_destroy run #8: crashed: WARNING in p9_client_destroy run #9: OK # git bisect bad 51620150ca2df62f8ea472ab8962be590c957288 Bisecting: 1737 revisions left to test after this (roughly 11 steps) [3fb561b1e0bf4c75bc5f4d799845b08fa5ab3853] Merge tag 'mips_5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux testing commit 3fb561b1e0bf4c75bc5f4d799845b08fa5ab3853 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ff39de34bad8b4c038068a062adbcbcba3d3974b0742d9d496beb6588daeb3ae all runs: OK # git bisect good 3fb561b1e0bf4c75bc5f4d799845b08fa5ab3853 Bisecting: 857 revisions left to test after this (roughly 10 steps) [f56caedaf94f9ced5dbfcdb0060a3e788d2078af] Merge branch 'akpm' (patches from Andrew) testing commit f56caedaf94f9ced5dbfcdb0060a3e788d2078af compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0fd8c56f95416c96a357ebd347fded81377baab37f2a752e53caf28e27819e91 run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: OK run #8: OK run #9: OK # git bisect bad f56caedaf94f9ced5dbfcdb0060a3e788d2078af Bisecting: 455 revisions left to test after this (roughly 9 steps) [d47c7407b4c88cf66098eba8893bc38279f301fc] Merge tag 'gnss-5.17-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/johan/gnss into char-misc-next testing commit d47c7407b4c88cf66098eba8893bc38279f301fc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 99e9a7aad09ce3e92705770b011e26feff9f6fa26a594ba9be7ad3d15739673e all runs: OK # git bisect good d47c7407b4c88cf66098eba8893bc38279f301fc Bisecting: 227 revisions left to test after this (roughly 8 steps) [29562a9da29478834e57f81e3804e9ec7a6b350b] powerpc/code-patching: Move patch_exception() outside code-patching.c testing commit 29562a9da29478834e57f81e3804e9ec7a6b350b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b20478430d5d9bc6a1a3b73e27d79199e888bed84ef3b106e1676fc36d5d03ff all runs: OK # git bisect good 29562a9da29478834e57f81e3804e9ec7a6b350b Bisecting: 113 revisions left to test after this (roughly 7 steps) [8c57c07741bf28e7d867f1200aa80120b8ca663e] mm: memcg/percpu: account extra objcg space to memory cgroups testing commit 8c57c07741bf28e7d867f1200aa80120b8ca663e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2598806d0ec7694fae29e8e78ec8cb4083184c8885d30fe401550ae7babf4317 run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky # git bisect bad 8c57c07741bf28e7d867f1200aa80120b8ca663e Bisecting: 56 revisions left to test after this (roughly 6 steps) [9a10064f5625d5572c3626c1516e0bebc6c9fe9b] mm: add a field to store names for private anonymous memory testing commit 9a10064f5625d5572c3626c1516e0bebc6c9fe9b compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7c82d1076490f3101a05bf53a3751eae8ff43c75a350429181f6e73d601eff5d run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: crashed: WARNING in p9_client_destroy run #8: crashed: WARNING in p9_client_destroy run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 9a10064f5625d5572c3626c1516e0bebc6c9fe9b Bisecting: 28 revisions left to test after this (roughly 5 steps) [c4386bd8ee3a921c3c799b7197dc898ade76a453] mm/memremap: add ZONE_DEVICE support for compound pages testing commit c4386bd8ee3a921c3c799b7197dc898ade76a453 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6aa41919cdaba68696de2f40f8b0c4e9b013844ae81b406fba260fb73d0e02cb run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: crashed: WARNING in p9_client_destroy run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad c4386bd8ee3a921c3c799b7197dc898ade76a453 Bisecting: 13 revisions left to test after this (roughly 4 steps) [783cc68d6143da3c8bc6322b80abd96640f6066f] ocfs2: use BUG_ON instead of if condition followed by BUG. testing commit 783cc68d6143da3c8bc6322b80abd96640f6066f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6a2a915e37ef2851834e99f4ce5f62b0fe8c6ead125b636ffb35186684ab6e00 all runs: OK # git bisect good 783cc68d6143da3c8bc6322b80abd96640f6066f Bisecting: 6 revisions left to test after this (roughly 3 steps) [7302e91f39a81a9c2efcf4bc5749d18128366945] mm/slab_common: use WARN() if cache still has objects on destroy testing commit 7302e91f39a81a9c2efcf4bc5749d18128366945 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e0ab09972a323011a5f2b55693e928293735c030c707e7c8d0a433e8a1eabb3e run #0: crashed: WARNING in p9_client_destroy run #1: crashed: WARNING in p9_client_destroy run #2: crashed: WARNING in p9_client_destroy run #3: crashed: WARNING in p9_client_destroy run #4: crashed: WARNING in p9_client_destroy run #5: crashed: WARNING in p9_client_destroy run #6: crashed: WARNING in p9_client_destroy run #7: crashed: WARNING in p9_client_destroy run #8: crashed: WARNING in p9_client_destroy run #9: crashed: WARNING in p9_client_destroy run #10: crashed: WARNING in p9_client_destroy run #11: crashed: WARNING in p9_client_destroy run #12: crashed: WARNING in p9_client_destroy run #13: crashed: WARNING in p9_client_destroy run #14: crashed: WARNING in p9_client_destroy run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 7302e91f39a81a9c2efcf4bc5749d18128366945 Bisecting: 3 revisions left to test after this (roughly 2 steps) [f018844f834a2fc3bc7ba5f6915d5020e930a086] ocfs2: remove redundant assignment to pointer root_bh testing commit f018844f834a2fc3bc7ba5f6915d5020e930a086 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8a79aab7a9d8274821e06449e885b7262fdb2e41c7d86468e4ad125a1d3c2c6b all runs: OK # git bisect good f018844f834a2fc3bc7ba5f6915d5020e930a086 Bisecting: 1 revision left to test after this (roughly 1 step) [9a25d051502ca1f19af3fd8e196c408a4a9c9fbb] ocfs2: remove redundant assignment to variable free_space testing commit 9a25d051502ca1f19af3fd8e196c408a4a9c9fbb compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 65fb0500ffcf26f023e3f37fd39c2e67d5b2939f9ff96a5a1a17e453cc504c78 all runs: OK # git bisect good 9a25d051502ca1f19af3fd8e196c408a4a9c9fbb Bisecting: 0 revisions left to test after this (roughly 0 steps) [a12cf8b32ceed9c60c8bba7c46077ebffbfb9db2] fs/ioctl: remove unnecessary __user annotation testing commit a12cf8b32ceed9c60c8bba7c46077ebffbfb9db2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 65fb0500ffcf26f023e3f37fd39c2e67d5b2939f9ff96a5a1a17e453cc504c78 all runs: OK # git bisect good a12cf8b32ceed9c60c8bba7c46077ebffbfb9db2 7302e91f39a81a9c2efcf4bc5749d18128366945 is the first bad commit commit 7302e91f39a81a9c2efcf4bc5749d18128366945 Author: Marco Elver Date: Fri Jan 14 14:03:58 2022 -0800 mm/slab_common: use WARN() if cache still has objects on destroy Calling kmem_cache_destroy() while the cache still has objects allocated is a kernel bug, and will usually result in the entire cache being leaked. While the message in kmem_cache_destroy() resembles a warning, it is currently not implemented using a real WARN(). This is problematic for infrastructure testing the kernel, all of which rely on the specific format of WARN()s to pick up on bugs. Some 13 years ago this used to be a simple WARN_ON() in slub, but commit d629d8195793 ("slub: improve kmem_cache_destroy() error message") changed it into an open-coded warning to avoid confusion with a bug in slub itself. Instead, turn the open-coded warning into a real WARN() with the message preserved, so that test systems can actually identify these issues, and we get all the other benefits of using a normal WARN(). The warning message is extended with "when called from " to make it even clearer where the fault lies. For most configurations this is only a cosmetic change, however, note that WARN() here will now also respect panic_on_warn. Link: https://lkml.kernel.org/r/20211102170733.648216-1-elver@google.com Signed-off-by: Marco Elver Reviewed-by: Vlastimil Babka Acked-by: David Rientjes Cc: Christoph Lameter Cc: Pekka Enberg Cc: Joonsoo Kim Cc: Dmitry Vyukov Cc: Alexander Potapenko Cc: Ingo Molnar Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds mm/slab_common.c | 11 +++-------- 1 file changed, 3 insertions(+), 8 deletions(-) culprit signature: e0ab09972a323011a5f2b55693e928293735c030c707e7c8d0a433e8a1eabb3e parent signature: 65fb0500ffcf26f023e3f37fd39c2e67d5b2939f9ff96a5a1a17e453cc504c78 Reproducer flagged being flaky revisions tested: 18, total time: 4h46m28.683465669s (build: 2h7m58.757585801s, test: 2h36m19.8166527s) first bad commit: 7302e91f39a81a9c2efcf4bc5749d18128366945 mm/slab_common: use WARN() if cache still has objects on destroy recipients (to): ["akpm@linux-foundation.org" "elver@google.com" "rientjes@google.com" "torvalds@linux-foundation.org" "vbabka@suse.cz"] recipients (cc): [] crash: WARNING in p9_client_destroy ------------[ cut here ]------------ kmem_cache_destroy 9p-fcall-cache: Slab cache still has objects when called from p9_client_destroy+0x1c1/0x2c0 net/9p/client.c:1095 WARNING: CPU: 1 PID: 4066 at mm/slab_common.c:502 kmem_cache_destroy+0x129/0x130 mm/slab_common.c:502 Modules linked in: CPU: 1 PID: 4066 Comm: syz-executor.0 Not tainted 5.16.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 RIP: 0010:kmem_cache_destroy+0x129/0x130 mm/slab_common.c:502 Code: 48 89 ef e8 39 50 12 00 e9 1d ff ff ff c3 48 8b 55 60 48 c7 c6 40 44 d5 88 48 c7 c7 88 73 46 8a 48 8b 4c 24 18 e8 3c 37 a4 06 <0f> 0b e9 f9 fe ff ff 55 48 89 e5 41 57 41 89 d7 41 56 49 89 f6 41 RSP: 0018:ffffc9000263fd20 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 1ffff920004c7fab RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff520004c7f96 RBP: ffff88807389d140 R08: 0000000000000001 R09: ffff8880b9d27aab R10: ffffed10173a4f55 R11: 0000000000000001 R12: 0000000000000000 R13: ffff8880111738c8 R14: dffffc0000000000 R15: ffffc9000263fd98 FS: 0000555555913400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffd5fb7e88 CR3: 0000000074315000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: p9_client_destroy+0x1c1/0x2c0 net/9p/client.c:1095 v9fs_session_close+0x38/0x290 fs/9p/v9fs.c:500 v9fs_kill_super+0x44/0x90 fs/9p/vfs_super.c:225 deactivate_locked_super+0x7b/0x130 fs/super.c:335 cleanup_mnt+0x324/0x4d0 fs/namespace.c:1137 task_work_run+0xc0/0x160 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop kernel/entry/common.c:175 [inline] exit_to_user_mode_prepare+0x27e/0x290 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300 do_syscall_64+0x42/0x80 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff41f98b677 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffd5fb85c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff41f98b677 RDX: 00007fffd5fb869c RSI: 000000000000000a RDI: 00007fffd5fb8690 RBP: 00007fffd5fb8690 R08: 00000000ffffffff R09: 00007fffd5fb8460 R10: 00005555559148b3 R11: 0000000000000246 R12: 00007ff41f9e32a6 R13: 00007fffd5fb9750 R14: 0000555555914810 R15: 00007fffd5fb9790