bisecting cause commit starting from f1244c81da13009dbf61cb807f45881501c44789 building syzkaller on 131df97d431404458e805009bda794abfb00f45f testing commit f1244c81da13009dbf61cb807f45881501c44789 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4bc7e1ec8add0bb1f0c472a25b32daacff737c2276c7feda7c2390c15789c733 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #2: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #3: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #4: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #5: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #6: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #7: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #8: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #9: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #10: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #11: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #12: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #13: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #14: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #15: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #16: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #17: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #18: crashed: WARNING: suspicious RCU usage in hsr_node_get_first run #19: crashed: WARNING: suspicious RCU usage in hsr_node_get_first testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6e08ee7c94aaa46571ba08d3c8f35c3580aa4333e88c3bdba4f072f604635c9f all runs: OK # git bisect start f1244c81da13009dbf61cb807f45881501c44789 f443e374ae131c168a065ea1748feac6b2e76613 Bisecting: 9917 revisions left to test after this (roughly 13 steps) [1f1c153e406a7375ae0fc3d6000b64e7ba27cf8a] Merge tag 'powerpc-5.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux testing commit 1f1c153e406a7375ae0fc3d6000b64e7ba27cf8a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 633009fd250653ca4bc9165ae532995ceba16f56419829be47c61a7473274f2b run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 1f1c153e406a7375ae0fc3d6000b64e7ba27cf8a Bisecting: 4962 revisions left to test after this (roughly 12 steps) [fbb9c58e56f2ee56e77b19fdfac131d57d3341c1] Merge tag 'timers-urgent-2022-04-17' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit fbb9c58e56f2ee56e77b19fdfac131d57d3341c1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f00036f1148e5f54e8c9e5b8cbde4630ea443f45460c30041d5b29a3056f6ee1 all runs: crashed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect bad fbb9c58e56f2ee56e77b19fdfac131d57d3341c1 Bisecting: 2668 revisions left to test after this (roughly 11 steps) [266d17a8c0d857a579813ad185cd1640b0d6ccac] Merge tag 'driver-core-5.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core testing commit 266d17a8c0d857a579813ad185cd1640b0d6ccac compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e0fa7f4b6636eb4c44f2a299403946bbc27e10c7bab075be2b9b24b15ce97167 all runs: OK # git bisect good 266d17a8c0d857a579813ad185cd1640b0d6ccac Bisecting: 1334 revisions left to test after this (roughly 10 steps) [a3ebe92a0f2dfaeac257b685531decf8c9cd8eee] net: ipv6mr: fix unused variable warning with CONFIG_IPV6_PIMSM_V2=n testing commit a3ebe92a0f2dfaeac257b685531decf8c9cd8eee compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a202cf9fd8ca468b7f98f88afde7c9fa3bfb69ee5bfd2bb48f4de07c95c44059 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good a3ebe92a0f2dfaeac257b685531decf8c9cd8eee Bisecting: 667 revisions left to test after this (roughly 9 steps) [dc7d19d27d019d223e74f2f47ef47e778781cb52] Merge tag 'amd-drm-fixes-5.18-2022-04-06' of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes testing commit dc7d19d27d019d223e74f2f47ef47e778781cb52 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1a3990aada2188dec87ae7ebe59f89c2649fceb82b0185fe754effe19c3966af all runs: crashed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect bad dc7d19d27d019d223e74f2f47ef47e778781cb52 Bisecting: 323 revisions left to test after this (roughly 8 steps) [9ae24d5aa001622035270de8f46c0634e6c6d55a] Merge tag 's390-5.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux testing commit 9ae24d5aa001622035270de8f46c0634e6c6d55a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f127a2e9dab23c0eac1be4a9c7287fff1614c40a372bcc07ebaf0c481431b928 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 9ae24d5aa001622035270de8f46c0634e6c6d55a Bisecting: 162 revisions left to test after this (roughly 7 steps) [9a212aaf95369d56f811b60a1ebdfa7e6b0ca030] Merge tag 'pci-v5.18-changes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci testing commit 9a212aaf95369d56f811b60a1ebdfa7e6b0ca030 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f69ff76691ea81c80a785abba71dc27cdba79edd859547ce5701c6a8c1496563 all runs: crashed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect bad 9a212aaf95369d56f811b60a1ebdfa7e6b0ca030 Bisecting: 86 revisions left to test after this (roughly 6 steps) [fe35fdb30511f845608571f7c09062ebb94d96c2] Merge tag 'for-5.18/dm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm testing commit fe35fdb30511f845608571f7c09062ebb94d96c2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f7b95cbf8e074367d765274c11c03eeb5c8c52519e9e39cb0cec8d4000d4cdd9 all runs: OK # git bisect good fe35fdb30511f845608571f7c09062ebb94d96c2 Bisecting: 40 revisions left to test after this (roughly 6 steps) [8467b0ed6ce37f7e3f87aa3826627dc9cc55ecb2] Merge tag 'for-5.18/drivers-2022-04-01' of git://git.kernel.dk/linux-block testing commit 8467b0ed6ce37f7e3f87aa3826627dc9cc55ecb2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0ee552723ac0e6a7b2fb783020baed05a3ca70d4e647ff6026003d98a85f4dc3 all runs: crashed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect bad 8467b0ed6ce37f7e3f87aa3826627dc9cc55ecb2 Bisecting: 25 revisions left to test after this (roughly 5 steps) [3b1509f275ce13865c28ce254c36dc7c915808eb] Merge tag 'for-5.18/io_uring-2022-04-01' of git://git.kernel.dk/linux-block testing commit 3b1509f275ce13865c28ce254c36dc7c915808eb compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: aa028cfe9dd24c487bcd1cd9ce6dbc27e7aab0bf81b2f0aaa1dfb93bd3c7f260 all runs: OK # git bisect good 3b1509f275ce13865c28ce254c36dc7c915808eb Bisecting: 12 revisions left to test after this (roughly 4 steps) [f941c51eeac7ebe0f8ec30943bf78e7f60aad039] loop: fix ioctl calls using compat_loop_info testing commit f941c51eeac7ebe0f8ec30943bf78e7f60aad039 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5ef7a10dc80213d3d146d20b836cb75058005ecafade8c215147d85456e60826 all runs: OK # git bisect good f941c51eeac7ebe0f8ec30943bf78e7f60aad039 Bisecting: 6 revisions left to test after this (roughly 3 steps) [8d7829ebc1e48208b3c02c2a10c5f8856246033c] blk-wbt: remove wbt_track stub testing commit 8d7829ebc1e48208b3c02c2a10c5f8856246033c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e68d069596e35174dde5f605d15090d8bbc5af23793bf9d0346036a9c9ca72ef all runs: OK # git bisect good 8d7829ebc1e48208b3c02c2a10c5f8856246033c Bisecting: 3 revisions left to test after this (roughly 2 steps) [6d35d04a9e18990040e87d2bbf72689252669d54] nbd: fix possible overflow on 'first_minor' in nbd_dev_add() testing commit 6d35d04a9e18990040e87d2bbf72689252669d54 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4ed8350d1e8877da74588b6b4b3070ea468f49d685848e6254799bd9bfb4de61 all runs: OK # git bisect good 6d35d04a9e18990040e87d2bbf72689252669d54 Bisecting: 1 revision left to test after this (roughly 1 step) [2651ee5ae43241831ca63d7158bb2b151a6a0e1f] drbd: remove check of list iterator against head past the loop body testing commit 2651ee5ae43241831ca63d7158bb2b151a6a0e1f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bcf905f5875b6b8cb37f4e3f89f173b61e4362d50bd99ceda876aba4514a8033 all runs: OK # git bisect good 2651ee5ae43241831ca63d7158bb2b151a6a0e1f Bisecting: 0 revisions left to test after this (roughly 0 steps) [d589ae0d44607a0af65b83113e4cfba1a8af7eb3] Merge tag 'for-5.18/block-2022-04-01' of git://git.kernel.dk/linux-block testing commit d589ae0d44607a0af65b83113e4cfba1a8af7eb3 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0b0ab4742ae18aa1864a869a1a7968ffb5e51d70beae6477a1c79a200b5621ad all runs: crashed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect bad d589ae0d44607a0af65b83113e4cfba1a8af7eb3 d589ae0d44607a0af65b83113e4cfba1a8af7eb3 is the first bad commit commit d589ae0d44607a0af65b83113e4cfba1a8af7eb3 Merge: 3b1509f275ce 8d7829ebc1e4 Author: Linus Torvalds Date: Fri Apr 1 16:20:00 2022 -0700 Merge tag 'for-5.18/block-2022-04-01' of git://git.kernel.dk/linux-block Pull block fixes from Jens Axboe: "Either fixes or a few additions that got missed in the initial merge window pull. In detail: - List iterator fix to avoid leaking value post loop (Jakob) - One-off fix in minor count (Christophe) - Fix for a regression in how io priority setting works for an exiting task (Jiri) - Fix a regression in this merge window with blkg_free() being called in an inappropriate context (Ming) - Misc fixes (Ming, Tom)" * tag 'for-5.18/block-2022-04-01' of git://git.kernel.dk/linux-block: blk-wbt: remove wbt_track stub block: use dedicated list iterator variable block: Fix the maximum minor value is blk_alloc_ext_minor() block: restore the old set_task_ioprio() behaviour wrt PF_EXITING block: avoid calling blkg_free() in atomic context lib/sbitmap: allocate sb->map via kvzalloc_node block/blk-cgroup.c | 32 ++++++++++++++++++++++---------- block/blk-ioc.c | 3 +-- block/blk-mq.c | 25 ++++++++++++++++--------- block/blk-wbt.h | 3 --- block/genhd.c | 2 +- include/linux/blk-cgroup.h | 5 ++++- include/linux/sbitmap.h | 2 +- lib/sbitmap.c | 2 +- 8 files changed, 46 insertions(+), 28 deletions(-) revisions tested: 17, total time: 3h33m53.685188732s (build: 1h42m46.711931188s, test: 1h49m18.846379125s) first bad commit: d589ae0d44607a0af65b83113e4cfba1a8af7eb3 Merge tag 'for-5.18/block-2022-04-01' of git://git.kernel.dk/linux-block recipients (to): ["torvalds@linux-foundation.org"] recipients (cc): [] crash: WARNING: suspicious RCU usage in hsr_node_get_first netlink: 'syz-executor.0': attribute type 2 has an invalid length. netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. ============================= WARNING: suspicious RCU usage 5.17.0-syzkaller #0 Not tainted ----------------------------- net/hsr/hsr_framereg.c:41 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by syz-executor.0/4007: #0: ffffffff8c7379f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x10/0x30 net/netlink/genetlink.c:802 #1: ffffffff8c737aa8 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:33 [inline] #1: ffffffff8c737aa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x315/0x4a0 net/netlink/genetlink.c:790 #2: ffffffff8af78560 (rcu_read_lock){....}-{1:2}, at: hsr_get_node_list+0xc1/0x8f0 net/hsr/hsr_netlink.c:425 stack backtrace: CPU: 1 PID: 4007 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 hsr_node_get_first+0x76/0xa0 net/hsr/hsr_framereg.c:41 hsr_get_next_node+0x1b3/0x330 net/hsr/hsr_framereg.c:608 hsr_get_node_list+0x2c2/0x8f0 net/hsr/hsr_netlink.c:461 genl_family_rcv_msg_doit+0x1e4/0x2f0 net/netlink/genetlink.c:731 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline] genl_rcv_msg+0x27a/0x4a0 net/netlink/genetlink.c:792 netlink_rcv_skb+0x118/0x370 net/netlink/af_netlink.c:2496 genl_rcv+0x1f/0x30 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x433/0x710 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x770/0xc20 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg+0xab/0xe0 net/socket.c:725 ____sys_sendmsg+0x5b9/0x7a0 net/socket.c:2413 ___sys_sendmsg+0xd3/0x150 net/socket.c:2467 __sys_sendmsg+0xb2/0x140 net/socket.c:2496 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fed512890e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fed52449168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fed5139bf60 RCX: 00007fed512890e9 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 00007fed512e308d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe9f0c798f R14: 00007fed52449300 R15: 0000000000022000