ci starts bisection 2024-12-09 01:38:43.420788894 +0000 UTC m=+213646.421044901 bisecting cause commit starting from af2ea8ab7a546b430726183458da0a173d331272 building syzkaller on 9ac0fdc66500475f1914254ef369b32d51adbff9 fetch other tags and check if the commit is present ensuring issue is reproducible on original commit af2ea8ab7a546b430726183458da0a173d331272 testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cbd6775b4af6a969e2dd48d48d5152194c8a1cd9194f76ea1902f0bbb76522a0 all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 69102b30ed7257edc65cda4f95ca005eda3b1570a0ccca3cd4eaa8bc52a9e9d0 all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=4045 full=8250 leaves diff=2128 split chunks (needed=false): <2128> split chunk #0 of len 2128 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 22c0c3caa76185bfcb51ad1d265dddb171c0c130a40252bf154c54f322c863e0 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 469c8bafee005f0158fab80c557d6df43c0fc543967d07c0d1b5023c58025195 all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 209223ca4efed5da3d78115ea9d25475365ab8aef54b5f31bac4ce3cd553362c all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 49e83d9e30bb0b26199e511e892255e9e3b977e46cdb28101f0271b422b4c48b all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit af2ea8ab7a546b430726183458da0a173d331272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 69be42e2ba7cfc8e8189ef32dc5e7f3b0c1d3ba2b205031e7c21b46c92893aeb all runs: crashed: WARNING in __alloc_frozen_pages_noprof representative crash: WARNING in __alloc_frozen_pages_noprof, types: [WARNING] the chunk can be dropped minimized to 426 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_EC ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_DEFAULT_CRASH_DUMP ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_HAS_CRC32 ARCH_HAS_CRC_T10DIF ARCH_HAS_EXECMEM_ROX ARCH_HAS_PREEMPT_LAZY ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_AUTOFDO_CLANG ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PROPELLER_CLANG ARCH_SUPPORTS_PUD_PFNMAP ARCH_SUPPORTS_RT ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC32_ARCH CRC32_IMPL_ARCH_PLUS_SLICEBY8 CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRC_T10DIF_IMPL_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRYPTD CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCTR CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_LIB DRM_CLIENT_SELECTION DRM_CLIENT_SETUP DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_DSC_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed picked [v6.12 v6.11 v6.10 v6.8 v6.6 v6.4 v6.2 v6.0 v5.17 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 35 release tags testing release v6.12 testing commit adc218676eef25575469234709c2d87185ca223a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 89e2689a9227e5ec514c1ab589b483a9d61c6b67cb79dcefb14f4e6760e60f2f all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.11 testing commit 98f7e32f20d28ec452afb208f9cffc08448a2652 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 224f398cdc35911ded0a24c4198ed700def8ebe514bd16f61ab57c440463c267 all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.10 testing commit 0c3836482481200ead7b416ca80c68a29cfdaabd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b098945ceecec8051d8372207833449e33f3e2b20e7eab9b1bbbaba32f9d0bd5 all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.8 testing commit e8f897f4afef0031fe618a8e94127a0934896aba gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dc9952c73267ad7944cf5ed53175c81a7fab45b0b1429ff66b760a5cd1783bcc all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 52b0ff41f534906f51a295b9418c26153c894abbf6f996995768018a3fb0d1c1 all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b32ba619de1a071fe47b8b41443f9d4a54f76066addfebec6f27992fa6d10ca7 all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8a86bdb7c81e4c2f0990fe56fb6ee1d603547672e607d55c5cc44a2ec05e32d8 all runs: crashed: WARNING in v9fs_fid_get_acl representative crash: WARNING in v9fs_fid_get_acl, types: [WARNING] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b553d4c0a6f7decb80bd960a2cc7f2a73865333ca6aaac7d3a3f3f6b3ac8d4cc all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6f92d85cfec39330607ad499e86bf61090a805dddc0c4ed44814dbf64399af98 all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fd8e4d5164bb93a17cc3efa084304e611e0f674d3585db4a35549ce8e10c14f2 all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6a2eabd008e7944809d8a0b83bc82de6b00a161f5d19e455bb84da64ca5e396e all runs: OK false negative chance: 0.000 # git bisect start 7d2a07b769330c34b4deabeed939325c77a7ec2f f40ddce88593482919761f74910f42f4b84c004b Bisecting: 24610 revisions left to test after this (roughly 15 steps) [85f3f17b5db2dd9f8a094a0ddc665555135afd22] Merge branch 'md-fixes' of https://git.kernel.org/pub/scm/linux/kernel/git/song/md into block-5.13 testing commit 85f3f17b5db2dd9f8a094a0ddc665555135afd22 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a4fedc64f8f913f5a32ed778dd199f5afd7d15bdd79476c3f1d9c9e234181e79 all runs: OK false negative chance: 0.000 # git bisect good 85f3f17b5db2dd9f8a094a0ddc665555135afd22 Bisecting: 12854 revisions left to test after this (roughly 14 steps) [222013f9ac30b9cec44301daa8dbd0aae38abffb] cryptoloop: add a deprecation warning testing commit 222013f9ac30b9cec44301daa8dbd0aae38abffb gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4665c99244d3dc5d6cd350dd35c2455b4a87f6caaf7945fc84fab8f2a1388c30 run #0: boot failed: WARNING in get_page_from_freelist run #1: boot failed: WARNING in get_page_from_freelist run #2: boot failed: WARNING in get_page_from_freelist run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 222013f9ac30b9cec44301daa8dbd0aae38abffb Bisecting: 6435 revisions left to test after this (roughly 13 steps) [24d1e49415be546470b20429d748e240d0518b7e] ALSA: intel8x0: Fix breakage at ac97 clock measurement testing commit 24d1e49415be546470b20429d748e240d0518b7e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 32c914c2e8a63e95c904f0eb3dcad87347af4bb8a6a89a28f74fefe3cb158c0f run #0: boot failed: WARNING in get_page_from_freelist run #1: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #2: boot failed: WARNING in get_page_from_freelist run #3: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #4: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #5: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #6: boot failed: WARNING in get_page_from_freelist run #7: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #8: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) run #9: boot failed: kernel panic: VFS: Unable to mount root fs on unknown-block(NUM,NUM) unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 24d1e49415be546470b20429d748e240d0518b7e Bisecting: 6435 revisions left to test after this (roughly 13 steps) [c81cfb6256d90ea5ba4a6fb280ea3b171be4e05c] bnxt_en: don't disable an already disabled PCI device testing commit c81cfb6256d90ea5ba4a6fb280ea3b171be4e05c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6b0f32fa7676eb5d9060acfb1dd84cc2cc8e5e9a7d3f8ae4c6d8c66c180e29b5 run #0: boot failed: WARNING in get_page_from_freelist run #1: boot failed: WARNING in get_page_from_freelist run #2: boot failed: WARNING in get_page_from_freelist run #3: boot failed: WARNING in get_page_from_freelist run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good c81cfb6256d90ea5ba4a6fb280ea3b171be4e05c Bisecting: 936 revisions left to test after this (roughly 10 steps) [e04480920d1eec9c061841399aa6f35b6f987d8b] Bluetooth: defer cleanup of resources in hci_unregister_dev() testing commit e04480920d1eec9c061841399aa6f35b6f987d8b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6d10f9490ad355b8aea3da30418145f72d09ec63a3a25c7d2bef7bc77ac352f1 all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] # git bisect bad e04480920d1eec9c061841399aa6f35b6f987d8b Bisecting: 456 revisions left to test after this (roughly 9 steps) [1e60cebf82948cfdc9497ea4553bab125587593c] net: let flow have same hash in two directions testing commit 1e60cebf82948cfdc9497ea4553bab125587593c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 40857ac5cdd1e735b51e0aac46973e4c253add22a6b53f2db3bda09d3a96b2da all runs: OK false negative chance: 0.000 # git bisect good 1e60cebf82948cfdc9497ea4553bab125587593c Bisecting: 228 revisions left to test after this (roughly 8 steps) [640b7ea5f888b521dcf28e2564ce75d08a783fd7] alpha: register early reserved memory in memblock testing commit 640b7ea5f888b521dcf28e2564ce75d08a783fd7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e6aec46212f6939230d16697ed834dc47d4bed9d8c7d6dd961ae0ffef8b11b0 all runs: OK false negative chance: 0.000 # git bisect good 640b7ea5f888b521dcf28e2564ce75d08a783fd7 Bisecting: 114 revisions left to test after this (roughly 7 steps) [051df241e44693dba8f4e1e74184237f55dd811d] Merge tag 'for-5.14-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux testing commit 051df241e44693dba8f4e1e74184237f55dd811d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2988ca74f5dd96884da93bac919fd750d40e603b6b3454c2974d605450581298 all runs: OK false negative chance: 0.000 # git bisect good 051df241e44693dba8f4e1e74184237f55dd811d Bisecting: 56 revisions left to test after this (roughly 6 steps) [c82357a7b32c0690b8581f72f197b1ce6118543c] Merge tag 'powerpc-5.14-4' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux testing commit c82357a7b32c0690b8581f72f197b1ce6118543c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: efd31ff9bc440fd40aa8d188eb0274fdea1b35af3c210c378cb0c098800c5b6a all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] # git bisect bad c82357a7b32c0690b8581f72f197b1ce6118543c Bisecting: 20 revisions left to test after this (roughly 5 steps) [c7d102232649226a69dddd58a4942cf13cff4f7c] Merge tag 'net-5.14-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit c7d102232649226a69dddd58a4942cf13cff4f7c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2ddcfd2333d054f5b574123af31bcb58f8cf356dac7357132f14d1c7408caf20 all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] # git bisect bad c7d102232649226a69dddd58a4942cf13cff4f7c Bisecting: 18 revisions left to test after this (roughly 4 steps) [928150fad41ba16df7fcc9f7f945747d0f56cbb6] can: esd_usb2: fix memory leak testing commit 928150fad41ba16df7fcc9f7f945747d0f56cbb6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bd15bc23dbe53e2328aae83094b0c40596ea6f3231355f3109f9b8a824273989 all runs: OK false negative chance: 0.000 # git bisect good 928150fad41ba16df7fcc9f7f945747d0f56cbb6 Bisecting: 9 revisions left to test after this (roughly 3 steps) [27eb687bcdb987d978da842ede944bee335b3524] Merge tag 'io_uring-5.14-2021-07-30' of git://git.kernel.dk/linux-block testing commit 27eb687bcdb987d978da842ede944bee335b3524 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 47880d9393aa90e23de8267f20ba63969f0e83351239c25d2180e21e0dc9a5b7 all runs: OK false negative chance: 0.000 # git bisect good 27eb687bcdb987d978da842ede944bee335b3524 Bisecting: 5 revisions left to test after this (roughly 2 steps) [e83f54eacf137de228a52c20c74e77f575684600] Merge branches 'acpi-resources' and 'acpi-dptf' testing commit e83f54eacf137de228a52c20c74e77f575684600 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 87d6f78fd821af52bf2d243b27563449adf95ca3aab1c4b019a1ab9feb05f10c all runs: OK false negative chance: 0.000 # git bisect good e83f54eacf137de228a52c20c74e77f575684600 Bisecting: 2 revisions left to test after this (roughly 2 steps) [e1dab4c02de0b495a9393915d71e452f8e77a464] Merge tag 'acpi-5.14-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm testing commit e1dab4c02de0b495a9393915d71e452f8e77a464 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0a61d356a5eb62b493e07ef017358a56bafd3f32f269f32c5b7ca7e931e26198 all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] # git bisect bad e1dab4c02de0b495a9393915d71e452f8e77a464 Bisecting: 0 revisions left to test after this (roughly 1 step) [3a34b13a88caeb2800ab44a4918f230041b37dd9] pipe: make pipe writes always wake up readers testing commit 3a34b13a88caeb2800ab44a4918f230041b37dd9 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: df8b74be84743ed7016b976217284d62a935ff1eb5a927e8ff52f655d0ffb08f all runs: crashed: WARNING in __v9fs_get_acl representative crash: WARNING in __v9fs_get_acl, types: [WARNING] # git bisect bad 3a34b13a88caeb2800ab44a4918f230041b37dd9 Bisecting: 0 revisions left to test after this (roughly 0 steps) [4669e13cd67f8532be12815ed3d37e775a9bdc16] Merge tag 'block-5.14-2021-07-30' of git://git.kernel.dk/linux-block testing commit 4669e13cd67f8532be12815ed3d37e775a9bdc16 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 96e67d0e30e93f80356af6c9e1ef883b060c623197e3025f6a0f13b12c919463 all runs: OK false negative chance: 0.000 # git bisect good 4669e13cd67f8532be12815ed3d37e775a9bdc16 3a34b13a88caeb2800ab44a4918f230041b37dd9 is the first bad commit commit 3a34b13a88caeb2800ab44a4918f230041b37dd9 Author: Linus Torvalds Date: Fri Jul 30 15:42:34 2021 -0700 pipe: make pipe writes always wake up readers Since commit 1b6b26ae7053 ("pipe: fix and clarify pipe write wakeup logic") we have sanitized the pipe write logic, and would only try to wake up readers if they needed it. In particular, if the pipe already had data in it before the write, there was no point in trying to wake up a reader, since any existing readers must have been aware of the pre-existing data already. Doing extraneous wakeups will only cause potential thundering herd problems. However, it turns out that some Android libraries have misused the EPOLL interface, and expected "edge triggered" be to "any new write will trigger it". Even if there was no edge in sight. Quoting Sandeep Patil: "The commit 1b6b26ae7053 ('pipe: fix and clarify pipe write wakeup logic') changed pipe write logic to wakeup readers only if the pipe was empty at the time of write. However, there are libraries that relied upon the older behavior for notification scheme similar to what's described in [1] One such library 'realm-core'[2] is used by numerous Android applications. The library uses a similar notification mechanism as GNU Make but it never drains the pipe until it is full. When Android moved to v5.10 kernel, all applications using this library stopped working. The library has since been fixed[3] but it will be a while before all applications incorporate the updated library" Our regression rule for the kernel is that if applications break from new behavior, it's a regression, even if it was because the application did something patently wrong. Also note the original report [4] by Michal Kerrisk about a test for this epoll behavior - but at that point we didn't know of any actual broken use case. So add the extraneous wakeup, to approximate the old behavior. [ I say "approximate", because the exact old behavior was to do a wakeup not for each write(), but for each pipe buffer chunk that was filled in. The behavior introduced by this change is not that - this is just "every write will cause a wakeup, whether necessary or not", which seems to be sufficient for the broken library use. ] It's worth noting that this adds the extraneous wakeup only for the write side, while the read side still considers the "edge" to be purely about reading enough from the pipe to allow further writes. See commit f467a6a66419 ("pipe: fix and clarify pipe read wakeup logic") for the pipe read case, which remains that "only wake up if the pipe was full, and we read something from it". Link: https://lore.kernel.org/lkml/CAHk-=wjeG0q1vgzu4iJhW5juPkTsjTYmiqiMUYAebWW+0bam6w@mail.gmail.com/ [1] Link: https://github.com/realm/realm-core [2] Link: https://github.com/realm/realm-core/issues/4666 [3] Link: https://lore.kernel.org/lkml/CAKgNAkjMBGeAwF=2MKK758BhxvW58wYTgYKB2V-gY1PwXxrH+Q@mail.gmail.com/ [4] Link: https://lore.kernel.org/lkml/20210729222635.2937453-1-sspatil@android.com/ Reported-by: Sandeep Patil Cc: Michael Kerrisk Signed-off-by: Linus Torvalds fs/pipe.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) accumulated error probability: 0.00 culprit signature: df8b74be84743ed7016b976217284d62a935ff1eb5a927e8ff52f655d0ffb08f parent signature: 96e67d0e30e93f80356af6c9e1ef883b060c623197e3025f6a0f13b12c919463 revisions tested: 34, total time: 6h49m56.306490701s (build: 2h37m1.49812329s, test: 3h38m15.41576397s) first bad commit: 3a34b13a88caeb2800ab44a4918f230041b37dd9 pipe: make pipe writes always wake up readers recipients (to): ["linux-kernel@vger.kernel.org" "torvalds@linux-foundation.org"] recipients (cc): ["linux-fsdevel@vger.kernel.org" "viro@zeniv.linux.org.uk"] crash: WARNING in __v9fs_get_acl ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3597 at mm/page_alloc.c:5366 __alloc_pages+0x938/0x1130 mm/page_alloc.c:5366 Modules linked in: CPU: 0 PID: 3597 Comm: syz.2.15 Not tainted 5.14.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__alloc_pages+0x938/0x1130 mm/page_alloc.c:5366 Code: 00 00 a8 01 89 44 24 68 74 1a 65 48 8b 04 25 c0 6e 01 00 f3 90 8b 90 58 11 00 00 f6 c2 01 75 f3 89 54 24 68 e9 0b fa ff ff 90 <0f> 0b 90 e9 f2 f8 ff ff 48 8b 7c 24 10 44 89 fe e8 b3 cc ff ff 48 RSP: 0018:ffffc900008b7c58 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000d40 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 RBP: ffff88810e5b8d20 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000080000 R11: ffff88810fa3bda8 R12: 0000090000000000 R13: 0000000000000020 R14: 0000090000000000 R15: ffff888109ea2618 FS: 00007f923e4546c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000112dfa000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kmalloc_order+0x24/0x90 mm/slab_common.c:955 kmalloc_order_trace+0x14/0xa0 mm/slab_common.c:971 kmalloc include/linux/slab.h:596 [inline] kzalloc include/linux/slab.h:721 [inline] __v9fs_get_acl+0x7c/0xd0 fs/9p/acl.c:36 v9fs_get_acl+0x5a/0x170 fs/9p/acl.c:70 v9fs_mount+0x1fc/0x300 fs/9p/vfs_super.c:182 legacy_get_tree+0x2b/0x50 fs/fs_context.c:610 vfs_get_tree+0x23/0xc0 fs/super.c:1498 do_new_mount fs/namespace.c:2905 [inline] path_mount+0x2b1/0xb40 fs/namespace.c:3235 do_mount fs/namespace.c:3248 [inline] __do_sys_mount fs/namespace.c:3456 [inline] __se_sys_mount fs/namespace.c:3433 [inline] __x64_sys_mount+0xfe/0x140 fs/namespace.c:3433 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3c/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f923f1d5ed9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f923e454058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f923f39bfa0 RCX: 00007f923f1d5ed9 RDX: 0000000020000b80 RSI: 00000000200003c0 RDI: 0000000000000000 RBP: 00007f923f249cc8 R08: 0000000020000580 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f923f39bfa0 R15: 00007ffe3a7ac378