ci2 starts bisection 2024-03-24 00:44:36.151275716 +0000 UTC m=+72235.266827571 bisecting fixing commit since ea2937bdd12f6ebc51e6698c5696a1b16507999b building syzkaller on 551587c192ecb4df26fcdab775ed145ee69c07d4 ensuring issue is reproducible on original commit ea2937bdd12f6ebc51e6698c5696a1b16507999b testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8df30c09c9ef0973692536ad6ef8b472fc22ea4a81388db1dabeb49382db0c30 run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: crashed: BUG: corrupted list in p9_fd_cancelled run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1cc7439284f4cf08576d77fb67a5a68f2d7585c237443b278a3dc06ba35472b8 run #0: OK run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: crashed: BUG: corrupted list in p9_fd_cancelled run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] kconfig minimization: base=4920 full=6161 leaves diff=243 split chunks (needed=false): <243> split chunk #0 of len 243 into 5 parts testing without sub-chunk 1/5 testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0bcc4b71fd176d12b627793f8d11d7dbb2bf90aef1c1e0c845321f615139185a run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: crashed: BUG: corrupted list in p9_fd_cancelled run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: crashed: BUG: corrupted list in p9_fd_cancelled run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 806e8cfd6feb7056a94e4499555a7c48247ffe4e25671ba5969a9dc069e29188 run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: crashed: BUG: corrupted list in p9_fd_cancelled run #3: crashed: BUG: corrupted list in p9_fd_cancelled run #4: crashed: BUG: corrupted list in p9_fd_cancelled run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c2598888b53ceb96b723fb4ca25e3b0cec3357f0918ec5e9bc0d903653965a7c run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: crashed: BUG: corrupted list in p9_fd_cancelled run #3: crashed: BUG: corrupted list in p9_fd_cancelled run #4: crashed: BUG: corrupted list in p9_fd_cancelled run #5: crashed: BUG: corrupted list in p9_fd_cancelled run #6: crashed: BUG: corrupted list in p9_fd_cancelled run #7: crashed: BUG: corrupted list in p9_fd_cancelled run #8: OK run #9: OK run #10: OK run #11: OK run #12: crashed: BUG: corrupted list in p9_fd_cancelled run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 209641ec264385e523291ab0d43434f50dc17d4730a2caa842d6f09b67c43be4 run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: crashed: BUG: corrupted list in p9_fd_cancelled run #3: crashed: BUG: corrupted list in p9_fd_cancelled run #4: crashed: BUG: corrupted list in p9_fd_cancelled run #5: crashed: BUG: corrupted list in p9_fd_cancelled run #6: crashed: BUG: corrupted list in p9_fd_cancelled run #7: crashed: BUG: corrupted list in p9_fd_cancelled run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 testing commit ea2937bdd12f6ebc51e6698c5696a1b16507999b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building ea2937bdd12f6ebc51e6698c5696a1b16507999b: net/socket.c:1189: undefined reference to `wext_handle_ioctl' net/socket.c:3383: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:343: undefined reference to `wext_proc_exit' net/core/net-procfs.c:327: undefined reference to `wext_proc_init' minimized to 47 configs; suspects: [HID_ZEROPLUS USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] testing current HEAD 993bed180178156a70afdafe8aaf23a117107352 testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2bfbe388e3d8db3244b377cc5524a0d389d4ad60dcc6c6c23161df18beda936f run #0: crashed: BUG: corrupted list in p9_fd_cancelled run #1: crashed: BUG: corrupted list in p9_fd_cancelled run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: crashed: BUG: corrupted list in p9_fd_cancelled run #8: OK run #9: OK run #10: crashed: BUG: corrupted list in p9_fd_cancelled run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: corrupted list in p9_fd_cancelled, types: [BUG] crash still not fixed/happens on the oldest tested release reproducer is flaky (0.40 repro chance estimate) revisions tested: 7, total time: 1h23m28.080449947s (build: 15m31.837196375s, test: 1h6m7.543439951s) crash still not fixed or there were kernel test errors commit msg: Merge "Merge branch 'android13-5.15' into branch 'android13-5.15-lts'" into android13-5.15-lts crash: BUG: corrupted list in p9_fd_cancelled list_del corruption. prev->next should be ffff88812510f6b8, but was ffffc9000028fc70 ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:59! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 875 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 RIP: 0010:__list_del_entry_valid.cold+0xf/0x6c lib/list_debug.c:59 Code: e8 24 36 fc ff 0f 0b 48 89 f1 48 c7 c7 c0 31 a4 84 4c 89 e6 e8 10 36 fc ff 0f 0b 4c 89 e6 48 c7 c7 20 34 a4 84 e8 ff 35 fc ff <0f> 0b 4c 89 e6 48 c7 c7 00 33 a4 84 e8 ee 35 fc ff 0f 0b 4c 89 ea RSP: 0018:ffffc90001c876c8 EFLAGS: 00010282 RAX: 0000000000000054 RBX: ffff88812510f6c0 RCX: 0000000000000000 RDX: 0000000000000002 RSI: ffffffff84a42f40 RDI: fffff52000390ecc RBP: ffffc90001c876e0 R08: 0000000000000054 R09: ffff8881f72330c7 R10: ffffed103ee46618 R11: 6c65645f7473696c R12: ffff88812510f6b8 R13: ffffc9000028fc70 R14: ffffc9000028fc70 R15: ffff88812510f6b8 FS: 00007f292216f6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc251c7ff65 CR3: 0000000114478000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:132 [inline] list_del include/linux/list.h:146 [inline] p9_fd_cancelled+0x87/0x260 net/9p/trans_fd.c:736 p9_client_flush+0x344/0x520 net/9p/client.c:679 p9_client_rpc+0xbc2/0xd60 net/9p/client.c:786 p9_client_version net/9p/client.c:954 [inline] p9_client_create+0x966/0x10a0 net/9p/client.c:1054 v9fs_session_init+0x1d7/0x13b0 fs/9p/v9fs.c:409 v9fs_mount+0x72/0x810 fs/9p/vfs_super.c:126 legacy_get_tree+0xf5/0x1d0 fs/fs_context.c:611 vfs_get_tree+0x7f/0x2b0 fs/super.c:1517 do_new_mount fs/namespace.c:3005 [inline] path_mount+0x4b4/0x1de0 fs/namespace.c:3335 do_mount fs/namespace.c:3348 [inline] __do_sys_mount fs/namespace.c:3556 [inline] __se_sys_mount fs/namespace.c:3533 [inline] __x64_sys_mount+0x20e/0x280 fs/namespace.c:3533 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f292260dda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f292216f0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f292273d050 RCX: 00007f292260dda9 RDX: 00000000200001c0 RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007f292265a47a R08: 0000000020000300 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f292273d050 R15: 00007ffee9c3f968 Modules linked in: ---[ end trace 23a79ca8368ff83e ]--- RIP: 0010:__list_del_entry_valid.cold+0xf/0x6c lib/list_debug.c:59 Code: e8 24 36 fc ff 0f 0b 48 89 f1 48 c7 c7 c0 31 a4 84 4c 89 e6 e8 10 36 fc ff 0f 0b 4c 89 e6 48 c7 c7 20 34 a4 84 e8 ff 35 fc ff <0f> 0b 4c 89 e6 48 c7 c7 00 33 a4 84 e8 ee 35 fc ff 0f 0b 4c 89 ea RSP: 0018:ffffc90001c876c8 EFLAGS: 00010282 RAX: 0000000000000054 RBX: ffff88812510f6c0 RCX: 0000000000000000 RDX: 0000000000000002 RSI: ffffffff84a42f40 RDI: fffff52000390ecc RBP: ffffc90001c876e0 R08: 0000000000000054 R09: ffff8881f72330c7 R10: ffffed103ee46618 R11: 6c65645f7473696c R12: ffff88812510f6b8 R13: ffffc9000028fc70 R14: ffffc9000028fc70 R15: ffff88812510f6b8 FS: 00007f292216f6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc251c7ff65 CR3: 0000000114478000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400