ci2 starts bisection 2022-10-02 08:48:17.800497799 +0000 UTC m=+142763.715978209 bisecting cause commit starting from 391716695e7131abfa7eff725185ab51b1d5d30b building syzkaller on feb5635181eb12a6e3516172a3f5af06a3bc93e1 testing commit 391716695e7131abfa7eff725185ab51b1d5d30b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 72a4804b6cdec1f5cf50f1b9ee87002837c0c06c456d96a817c17f9aaa3d1057 run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in del_gendisk run #3: crashed: general protection fault in del_gendisk run #4: crashed: general protection fault in kernfs_name_hash run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in del_gendisk run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in kernfs_name_hash run #9: crashed: general protection fault in del_gendisk run #10: crashed: general protection fault in kernfs_name_hash run #11: crashed: general protection fault in del_gendisk run #12: crashed: general protection fault in del_gendisk run #13: crashed: general protection fault in del_gendisk run #14: crashed: general protection fault in kernfs_name_hash run #15: crashed: general protection fault in del_gendisk run #16: crashed: general protection fault in del_gendisk run #17: crashed: general protection fault in del_gendisk run #18: crashed: general protection fault in kernfs_name_hash run #19: crashed: general protection fault in del_gendisk testing release v5.10.146 testing commit 62aea694445d5fc0f51b45afe8003ff3b7431141 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 29fd8b1055ec675769eb8f261896096a81c44397451522e85faa4116256a07a2 all runs: OK # git bisect start 391716695e7131abfa7eff725185ab51b1d5d30b 62aea694445d5fc0f51b45afe8003ff3b7431141 Bisecting: 3078 revisions left to test after this (roughly 12 steps) [97860deed342fe3264e01f3e1494444a71073d6a] UPSTREAM: irqdomain: Mark fwnodes when their irqdomain is added/removed testing commit 97860deed342fe3264e01f3e1494444a71073d6a gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 91905396c8bd72b8efd8e41a9c535c3fadb6325f5d24ab29679d38e5d8a061a8 all runs: basic kernel testing failed: KASAN: use-after-free Read in task_active_pid_ns # git bisect skip 97860deed342fe3264e01f3e1494444a71073d6a Bisecting: 3075 revisions left to test after this (roughly 12 steps) [255ff8d6f56b42661620b25a10c53058f50f6be1] UPSTREAM: of: irq: make a stub for of_irq_parse_one() testing commit 255ff8d6f56b42661620b25a10c53058f50f6be1 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cc7f81e76b20a34da1ab9f7ee1635bde05e9f57a75ee8a7257dd66ed295222dd all runs: basic kernel testing failed: KASAN: use-after-free Read in task_active_pid_ns # git bisect skip 255ff8d6f56b42661620b25a10c53058f50f6be1 Bisecting: 3075 revisions left to test after this (roughly 12 steps) [aee113fcef3a143b4997377354546f4cffa81664] ANDROID: Incremental fs: Fix dentry get/put imbalance on vfs_mkdir() failure testing commit aee113fcef3a143b4997377354546f4cffa81664 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0a7fab032cf0e5a0a6cc4b78ff52bde5892906571ab286bcad5b3db37509708e run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in del_gendisk run #3: crashed: general protection fault in del_gendisk run #4: crashed: general protection fault in del_gendisk run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in kernfs_name_hash run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in del_gendisk run #9: crashed: general protection fault in del_gendisk # git bisect bad aee113fcef3a143b4997377354546f4cffa81664 Bisecting: 2630 revisions left to test after this (roughly 11 steps) [5154a59ef81b53b5efedc7762116163167e8ef8e] UPSTREAM: xhci: remove xhci_stream_id_to_ring() helper testing commit 5154a59ef81b53b5efedc7762116163167e8ef8e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: cc4c19178fffe2ed4e5278b3808582479874fc007bd1f344bfea3e756f2b15d9 all runs: basic kernel testing failed: KASAN: use-after-free Read in task_active_pid_ns # git bisect skip 5154a59ef81b53b5efedc7762116163167e8ef8e Bisecting: 2630 revisions left to test after this (roughly 11 steps) [457cf3aff7daa8ba8f526a8218e90683948578f2] FROMGIT: ASoC: codecs: wcd934x: add a sanity check in set channel map testing commit 457cf3aff7daa8ba8f526a8218e90683948578f2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a92263054dcb78f58ff9f6219bb208b17d12bb8e2888419d64dd6a9527e4cb2a all runs: basic kernel testing failed: KASAN: use-after-free Read in task_active_pid_ns # git bisect skip 457cf3aff7daa8ba8f526a8218e90683948578f2 Bisecting: 2630 revisions left to test after this (roughly 11 steps) [57e177ea01bde322590e5075d23dc4538881b1fa] Merge branch 'android12-5.10' into `android12-5.10-lts` testing commit 57e177ea01bde322590e5075d23dc4538881b1fa gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b758cb867f98592470ff9ccf70b0b2fa0365ac3f2b26fba6446b945f20125774 all runs: OK # git bisect good 57e177ea01bde322590e5075d23dc4538881b1fa Bisecting: 160 revisions left to test after this (roughly 7 steps) [62ad82b86bd6d182c046c56f650b068d675969b0] ANDROID: ABI: update allowed list for galaxy testing commit 62ad82b86bd6d182c046c56f650b068d675969b0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 31d3ae7e20a0342ad869eacaf839e0b85cdedd0a8ee9c39e6129f9aa0ce5263e run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in del_gendisk run #3: crashed: general protection fault in del_gendisk run #4: crashed: general protection fault in del_gendisk run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in del_gendisk run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in del_gendisk run #9: crashed: general protection fault in kernfs_name_hash # git bisect bad 62ad82b86bd6d182c046c56f650b068d675969b0 Bisecting: 80 revisions left to test after this (roughly 6 steps) [c0cce1da8ba4decab2e4bdd18242a4282591c2b3] UPSTREAM: kasan, slub: reset tag when printing address testing commit c0cce1da8ba4decab2e4bdd18242a4282591c2b3 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bd39263ad835d890bd347bb790cc427c4e3fe096a2d24cec704c7480dfbb4a95 all runs: crashed: general protection fault in del_gendisk # git bisect bad c0cce1da8ba4decab2e4bdd18242a4282591c2b3 Bisecting: 39 revisions left to test after this (roughly 5 steps) [2493757f88b40a798ec06979ab05ed80950042b3] BACKPORT: ALSA: usb-audio: fix incorrect clock source setting testing commit 2493757f88b40a798ec06979ab05ed80950042b3 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d1b8965d0034d2dbf4f71588dbec9360e3fbd1c861875e74ac577e397a479d62 run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in kernfs_name_hash run #3: crashed: general protection fault in del_gendisk run #4: crashed: general protection fault in del_gendisk run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in kernfs_name_hash run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in kernfs_name_hash run #9: crashed: general protection fault in del_gendisk # git bisect bad 2493757f88b40a798ec06979ab05ed80950042b3 Bisecting: 19 revisions left to test after this (roughly 4 steps) [4bb5a5c55bcd47c52dbfb3f050671fb5d7c24b8d] FROMGIT: sched/deadline: Fix reset_on_fork reporting of DL tasks testing commit 4bb5a5c55bcd47c52dbfb3f050671fb5d7c24b8d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 84aa41decf580fa736c3d3c6d68178d9fefbb8df3308078e13b2c33afd1e9ca8 run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in del_gendisk run #3: crashed: general protection fault in kernfs_name_hash run #4: crashed: general protection fault in del_gendisk run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in del_gendisk run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in kernfs_name_hash run #9: crashed: general protection fault in del_gendisk # git bisect bad 4bb5a5c55bcd47c52dbfb3f050671fb5d7c24b8d Bisecting: 10 revisions left to test after this (roughly 3 steps) [20c3903ad71d6c2f0e405635ec8a57e12690be15] ANDROID: ABI: update ABI XML testing commit 20c3903ad71d6c2f0e405635ec8a57e12690be15 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f010e0e5fe8c791af2133e47915ce1b3e7cf4dd1df52f60a2fd5f023a94c7083 all runs: OK # git bisect good 20c3903ad71d6c2f0e405635ec8a57e12690be15 Bisecting: 4 revisions left to test after this (roughly 3 steps) [bda49ad0602e5250a9d3dd61deda19d3e5615c54] FROMGIT: loop: Select I/O scheduler 'none' from inside add_disk() testing commit bda49ad0602e5250a9d3dd61deda19d3e5615c54 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c8598fddbbd650d3fc5792d41e269f60264bf56ca2e6b1b5a4b3ed04c525c26d run #0: crashed: general protection fault in del_gendisk run #1: crashed: general protection fault in del_gendisk run #2: crashed: general protection fault in del_gendisk run #3: crashed: general protection fault in kernfs_name_hash run #4: crashed: general protection fault in del_gendisk run #5: crashed: general protection fault in del_gendisk run #6: crashed: general protection fault in del_gendisk run #7: crashed: general protection fault in del_gendisk run #8: crashed: general protection fault in del_gendisk run #9: crashed: general protection fault in kernfs_name_hash # git bisect bad bda49ad0602e5250a9d3dd61deda19d3e5615c54 Bisecting: 2 revisions left to test after this (roughly 2 steps) [bed43a725d3c3f9fc153339f2e2a4f879e717be5] FROMGIT: usb: dwc3: gadget: Avoid runtime resume if disabling pullup testing commit bed43a725d3c3f9fc153339f2e2a4f879e717be5 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7543b31b8e1badb525d07efab0396a318d39a146ba1c86a104a64deafac0cd95 all runs: OK # git bisect good bed43a725d3c3f9fc153339f2e2a4f879e717be5 Bisecting: 1 revision left to test after this (roughly 1 step) [8914725a582861666a2a298efbcb5ae7613a47b7] FROMGIT: usb: typec: tcpm: Keep other events when receiving FRS and Sourcing_vbus events testing commit 8914725a582861666a2a298efbcb5ae7613a47b7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6cef2f18c452293da3d2f631b03415ff2251db26fada3d12691c12d8680aeece all runs: OK # git bisect good 8914725a582861666a2a298efbcb5ae7613a47b7 Bisecting: 0 revisions left to test after this (roughly 0 steps) [d8b946254effbe36780f0b855da509a07470b8d2] FROMGIT: blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag testing commit d8b946254effbe36780f0b855da509a07470b8d2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0445d7885b6cb64f574f5e216a0d993d58c133256708abb7a7a278528f994178 all runs: OK # git bisect good d8b946254effbe36780f0b855da509a07470b8d2 bda49ad0602e5250a9d3dd61deda19d3e5615c54 is the first bad commit commit bda49ad0602e5250a9d3dd61deda19d3e5615c54 Author: Bart Van Assche Date: Mon Aug 2 10:05:29 2021 -0700 FROMGIT: loop: Select I/O scheduler 'none' from inside add_disk() We noticed that the user interface of Android devices becomes very slow under memory pressure. This is because Android uses the zram driver on top of the loop driver for swapping, because under memory pressure the swap code alternates reads and writes quickly, because mq-deadline is the default scheduler for loop devices and because mq-deadline delays writes by five seconds for such a workload with default settings. Fix this by making the kernel select I/O scheduler 'none' from inside add_disk() for loop devices. This default can be overridden at any time from user space, e.g. via a udev rule. This approach has an advantage compared to changing the I/O scheduler from userspace from 'mq-deadline' into 'none', namely that synchronize_rcu() does not get called. Additionally, this patch reduces the Android boot time on my test setup with 0.5 seconds compared to configuring the loop I/O scheduler from user space. Signed-off-by: Bart Van Assche Bug: 194450129 (cherry picked from commit 2112f5c1330a671fa852051d85cb9eadc05d7eb7 git://git.kernel.dk/linux-block/ for-5.15/block) Change-Id: I6f9579b4cd2cb22fcb5c858d4f292f1870336fdd Signed-off-by: Bart Van Assche drivers/block/loop.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) culprit signature: c8598fddbbd650d3fc5792d41e269f60264bf56ca2e6b1b5a4b3ed04c525c26d parent signature: 0445d7885b6cb64f574f5e216a0d993d58c133256708abb7a7a278528f994178 revisions tested: 17, total time: 3h2m12.25963172s (build: 1h26m25.318830249s, test: 1h32m47.823403786s) first bad commit: bda49ad0602e5250a9d3dd61deda19d3e5615c54 FROMGIT: loop: Select I/O scheduler 'none' from inside add_disk() recipients (to): ["axboe@kernel.dk" "bvanassche@acm.org" "bvanassche@google.com" "linux-block@vger.kernel.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: general protection fault in kernfs_name_hash RSP: 002b:00007fb77febb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb780067f80 RCX: 00007fb77ff465a9 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 RBP: 00007fb77ffa1580 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdd993179f R14: 00007fb77febb300 R15: 0000000000022000 ---[ end trace 9535c488fef1ec59 ]--- general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 429 Comm: syz-executor.0 Tainted: G W 5.10.43-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 RIP: 0010:strlen+0x1f/0xa0 lib/string.c:568 Code: 48 8b 45 e8 eb 88 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 RSP: 0018:ffffc900008e7c90 EFLAGS: 00010286 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff84262aa9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc900008e7ca8 R08: 0000000000000001 R09: ffffc900008e7cbf R10: fffff5200011cf97 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008 FS: 00007fb77febb700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb7800690b0 CR3: 000000010d278000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kernfs_name_hash+0x16/0xc0 fs/kernfs/dir.c:302 kernfs_find_ns+0x84/0x210 fs/kernfs/dir.c:841 kernfs_remove_by_name_ns+0x32/0x80 fs/kernfs/dir.c:1514 kernfs_remove_by_name include/linux/kernfs.h:608 [inline] sysfs_remove_link+0x37/0xa0 fs/sysfs/symlink.c:152 del_gendisk+0x5f8/0xa60 block/genhd.c:951 loop_remove drivers/block/loop.c:2194 [inline] loop_control_ioctl drivers/block/loop.c:2293 [inline] loop_control_ioctl+0x30d/0x3d0 drivers/block/loop.c:2259 vfs_ioctl fs/ioctl.c:48 [inline] __do_sys_ioctl fs/ioctl.c:753 [inline] __se_sys_ioctl fs/ioctl.c:739 [inline] __x64_sys_ioctl+0x129/0x1a0 fs/ioctl.c:739 do_syscall_64+0x32/0x80 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7fb77ff465a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb77febb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb780067f80 RCX: 00007fb77ff465a9 RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 RBP: 00007fb77ffa1580 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdd993179f R14: 00007fb77febb300 R15: 0000000000022000 Modules linked in: ---[ end trace 9535c488fef1ec5a ]--- RIP: 0010:strlen+0x1f/0xa0 lib/string.c:568 Code: 48 8b 45 e8 eb 88 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 RSP: 0018:ffffc900008e7c90 EFLAGS: 00010286 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff84262aa9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc900008e7ca8 R08: 0000000000000001 R09: ffffc900008e7cbf R10: fffff5200011cf97 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000008 FS: 00007fb77febb700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb7800690b0 CR3: 000000010d278000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 8b 45 e8 mov -0x18(%rbp),%rax 4: eb 88 jmp 0xffffff8e 6: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) b: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 12: fc ff df 15: 55 push %rbp 16: 48 89 fa mov %rdi,%rdx 19: 48 89 e5 mov %rsp,%rbp 1c: 48 c1 ea 03 shr $0x3,%rdx 20: 41 54 push %r12 22: 49 89 fc mov %rdi,%r12 25: 53 push %rbx 26: 48 83 ec 08 sub $0x8,%rsp * 2a: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax <-- trapping instruction 2e: 48 89 fa mov %rdi,%rdx 31: 83 e2 07 and $0x7,%edx 34: 38 d0 cmp %dl,%al 36: 7f 04 jg 0x3c 38: 84 c0 test %al,%al 3a: 75 4d jne 0x89 3c: 41 rex.B 3d: 80 .byte 0x80 3e: 3c 24 cmp $0x24,%al