ci2 starts bisection 2025-08-14 13:18:59.070707603 +0000 UTC m=+61.994336333
bisecting fixing commit since da3c5173c55f7a0cf65c967d864386c79dcba3f7
building syzkaller on ed351ea732d889c7798e7f0226bcaec65a8a6b52
ensuring issue is reproducible on original commit da3c5173c55f7a0cf65c967d864386c79dcba3f7

testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: abb6900dbe5fcdc997575d37cd4ba791993487ad66c38c82b918fec5fd4271ab
run #0: crashed: kernel BUG in close_ctree
run #1: crashed: kernel BUG in close_ctree
run #2: crashed: kernel BUG in close_ctree
run #3: crashed: kernel BUG in close_ctree
run #4: crashed: kernel BUG in close_ctree
run #5: crashed: kernel BUG in close_ctree
run #6: crashed: kernel BUG in close_ctree
run #7: crashed: kernel BUG in close_ctree
run #8: crashed: kernel BUG in close_ctree
run #9: crashed: WARNING in btrfs_remove_chunk
run #10: crashed: kernel BUG in close_ctree
run #11: crashed: kernel BUG in close_ctree
run #12: crashed: kernel BUG in close_ctree
run #13: crashed: kernel BUG in close_ctree
run #14: crashed: kernel BUG in close_ctree
run #15: crashed: WARNING in btrfs_remove_chunk
run #16: crashed: kernel BUG in close_ctree
run #17: crashed: kernel BUG in close_ctree
run #18: OK
run #19: OK
representative crash: kernel BUG in close_ctree, types: [BUG]
check whether we can drop unnecessary instrumentation
disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: fad58e0c1ff3a00a04746719400049999a8e11fb6e8e214cd51c1d2d3be461b8
all runs: OK
false negative chance: 0.000
kconfig minimization: base=7505 full=9721 leaves diff=1999
split chunks (needed=false): <1999>
split chunk #0 of len 1999 into 5 parts
testing without sub-chunk 1/5
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: f64afc42ac4eedec7833862e60bc6d9e7065e1547a3d4c8555069c3e1c53233a
all runs: OK
false negative chance: 0.000
testing without sub-chunk 2/5
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 1b2deeff2661c86489e3e4f77860d28867faf76707d882230072b3273faada0c
all runs: crashed: kernel BUG in close_ctree
representative crash: kernel BUG in close_ctree, types: [BUG]
the chunk can be dropped
testing without sub-chunk 3/5
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 8b62bc3d3d960f3027ec7ccf1acfe8e2a0c2551c04c0315f1220f757c0cc263e
all runs: crashed: kernel BUG in close_ctree
representative crash: kernel BUG in close_ctree, types: [BUG]
the chunk can be dropped
testing without sub-chunk 4/5
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 1147928fc3b43cc23f14d15ab6b3d388100778a554e5abad12fd245b4bd1a613
all runs: crashed: kernel BUG in close_ctree
representative crash: kernel BUG in close_ctree, types: [BUG]
the chunk can be dropped
testing without sub-chunk 5/5
testing commit da3c5173c55f7a0cf65c967d864386c79dcba3f7 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: b5ebf6899549891c1e0741e392347456193f2139ce6b168319382d95e2cc4e7b
all runs: crashed: kernel BUG in close_ctree
representative crash: kernel BUG in close_ctree, types: [BUG]
the chunk can be dropped
minimized to 400 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_DOCK ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APPLE_MFI_FASTCHARGE AR5523 ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATA_PIIX ATH10K ATH10K_CE ATH10K_PCI ATH10K_SNOC ATH10K_USB ATH11K ATH11K_AHB ATH11K_PCI ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BINFMT_MISC BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_INITRD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_SR BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_JIT_ALWAYS_ON BPF_STREAM_PARSER BPQETHER BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_MRP BRIDGE_NF_EBTABLES BSD_DISKLABEL BTRFS_ASSERT BTRFS_FS_REF_VERIFY BT_6LOWPAN BT_ATH3K BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_MTK BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIVHCI BT_HS BT_LE BT_MSFTEXT BT_MTK BT_RFCOMM BT_RFCOMM_TTY CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN_8DEV_USB CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_GS_USB CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CDROM CEC_CORE CEC_NOTIFIER CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_RDMA CHARGER_BQ24190 CHARGER_ISP1704 CHECKPOINT_RESTORE CHECK_SIGNATURE CHR_DEV_SG CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONNECTOR COUNTER CPU_FREQ_DEFAULT_GOV_USERSPACE CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AES_ARM64 CRYPTO_AES_TI CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_CAMELLIA CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CRC32 CRYPTO_CTS CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_VIRTIO CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECRDSA CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_NHPOLY1305 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_NEON CRYPTO_POLYVAL CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SEQIV CRYPTO_SM2 CRYPTO_SM4_ARM64_CE CRYPTO_SM4_ARM64_CE_BLK CRYPTO_SM4_ARM64_NEON_BLK CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_COMMON CRYPTO_USER CRYPTO_USER_API_AEAD CRYPTO_USER_API_HASH CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCB DEFAULT_CUBIC DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_ANALOGIX_DP DRM_BOCHS DRM_BRIDGE DRM_CDNS_MHDP8546 DRM_CDNS_MHDP8546_J721E DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_CONNECTOR DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DW_HDMI DRM_DW_HDMI_AHB_AUDIO DRM_DW_HDMI_CEC DRM_DW_HDMI_I2S_AUDIO DRM_DW_MIPI_DSI DRM_ETNAVIV DRM_ETNAVIV_THERMAL DRM_EXYNOS DRM_EXYNOS5433_DECON DRM_EXYNOS7_DECON DRM_EXYNOS_DSI DRM_EXYNOS_HDMI DRM_EXYNOS_MIC DRM_FBDEV_EMULATION DRM_GEM_DMA_HELPER DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_HDLCD DRM_HISI_HIBMC DRM_HISI_KIRIN DRM_I2C_ADV7511 DRM_I2C_ADV7511_AUDIO DRM_I2C_ADV7511_CEC DRM_I2C_CH7006 DRM_I2C_NXP_TDA998X DRM_I2C_SIL164 DRM_IMX_DCSS DRM_KMS_HELPER DRM_KOMEDA DRM_LEGACY DRM_LIMA DRM_LONTIUM_LT8912B DRM_LONTIUM_LT9611 DRM_LONTIUM_LT9611UXC DRM_MALI_DISPLAY DRM_MEDIATEK DRM_MEDIATEK_HDMI DRM_MESON DRM_MESON_DW_HDMI DRM_MIPI_DSI DRM_MSM DRM_MSM_DP DRM_MSM_DPU DRM_MSM_DSI DRM_MSM_DSI_10NM_PHY DRM_MSM_DSI_14NM_PHY DRM_MSM_DSI_20NM_PHY DRM_MSM_DSI_28NM_8960_PHY DRM_MSM_DSI_28NM_PHY DRM_MSM_DSI_7NM_PHY DRM_MSM_GPU_STATE DRM_MSM_HDMI DRM_MSM_HDMI_HDCP DRM_MSM_MDP4 DRM_MSM_MDP5 DRM_MSM_MDSS DRM_MXS DRM_MXSFB DRM_NOMODESET DRM_NOUVEAU DRM_NOUVEAU_BACKLIGHT DRM_NWL_MIPI_DSI DRM_PANEL DRM_PANEL_BOE_TV101WUM_NL6 DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_LVDS DRM_PANEL_MANTIX_MLAF057WE51 DRM_PANEL_RAYDIUM_RM67191 DRM_PANEL_SIMPLE DRM_PANEL_SITRONIX_ST7703 DRM_PANEL_TRULY_NT35597_WQXGA DRM_PANFROST DRM_PARADE_PS8640 DRM_PL111 DRM_RCAR_CMM DRM_RCAR_DU DRM_RCAR_DW_HDMI DRM_RCAR_LVDS DRM_RCAR_MIPI_DSI DRM_RCAR_USE_CMM DRM_RCAR_USE_LVDS DRM_RCAR_USE_MIPI_DSI DRM_RCAR_VSP DRM_RCAR_WRITEBACK DRM_SCHED DRM_SII902X DRM_SIMPLEDRM DRM_SIMPLE_BRIDGE DRM_SUN4I DRM_SUN6I_DSI DRM_SUN8I_DW_HDMI DRM_SUN8I_MIXER DRM_SUN8I_TCON_TOP DRM_TEGRA DRM_THINE_THC63LVD1024 DRM_TIDSS DRM_TI_SN65DSI86 DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS ENCRYPTED_KEYS FSCACHE HAMRADIO HID_DRAGONRISE INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ ISDN ISDN_CAPI MAC80211 MAC80211_LEDS MFD_DLN2 NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SND SND_SOC SOUND TCP_CONG_ADVANCED TLS TLS_DEVICE TRUSTED_KEYS WEXT_CORE WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ATH ZONE_DEVICE]
testing current HEAD 3594f306da129190de25938b823f353ef7f9e322
testing commit 3594f306da129190de25938b823f353ef7f9e322 gcc
compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7
kernel signature: 72f57361ce42a8dbb6139c0fe01aa27fc481752a7d4a0023e6de0114876c89c7
all runs: crashed: kernel BUG in close_ctree
representative crash: kernel BUG in close_ctree, types: [BUG]
crash still not fixed/happens on the oldest tested release
revisions tested: 8, total time: 3h20m2.131787714s (build: 1h18m50.162074813s, test: 52m23.184748643s)
crash still not fixed or there were kernel test errors
commit msg: Linux 6.1.147
crash: kernel BUG in close_ctree
BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
BTRFS warning (device loop4): transaction 15 (with 0 dirty metadata bytes) is not committed
assertion failed: !found, in fs/btrfs/disk-io.c:4583
------------[ cut here ]------------
kernel BUG at fs/btrfs/ctree.h:3722!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 3513 Comm: syz-executor Not tainted 6.1.147-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : assertfail+0x28/0x2c fs/btrfs/ctree.h:3721
lr : assertfail+0x28/0x2c fs/btrfs/ctree.h:3721
sp : ffff80001b097810
x29: ffff80001b097810 x28: ffff80001b097840 x27: dfff800000000000
x26: ffff0000d5ac8540 x25: ffff0000d5ac8ce8 x24: ffff0000d6b16000
x23: ffff0000d6b16028 x22: 1fffe0001ab590a8 x21: ffff0000d5ac8ce8
x20: 1fffe0001ad62c05 x19: ffff0000d5ac8000 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000005
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001
x11: 1fffe00034b1697d x10: 0000000000000001 x9 : 6179624180b2dc00
x8 : 6179624180b2dc00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001b0972d8 x4 : ffff80001072cd40 x3 : ffff800008474a3c
x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000034
Call trace:
 assertfail+0x28/0x2c fs/btrfs/ctree.h:3721
 warn_about_uncommitted_trans fs/btrfs/disk-io.c:4583 [inline]
 close_ctree+0x898/0x928 fs/btrfs/disk-io.c:4789
 btrfs_put_super+0x68/0x78 fs/btrfs/super.c:397
 generic_shutdown_super+0x108/0x2b0 fs/super.c:501
 kill_anon_super+0x40/0x74 fs/super.c:1128
 btrfs_kill_super+0x40/0x58 fs/btrfs/super.c:2448
 deactivate_locked_super+0xb4/0x100 fs/super.c:332
 deactivate_super+0xb4/0xd0 fs/super.c:363
 cleanup_mnt+0x308/0x388 fs/namespace.c:1182
 __cleanup_mnt+0x14/0x20 fs/namespace.c:1189
 task_work_run+0x17c/0x21c kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x12c8/0x1f48 arch/arm64/kernel/signal.c:1137
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 91200000 d0001d02 912b8042 97ffda32 (d4210000) 
---[ end trace 0000000000000000 ]---