ci starts bisection 2023-12-21 10:28:10.760921235 +0000 UTC m=+36853.337193677 bisecting cause commit starting from 1a44b0073b9235521280e19d963b6dfef7888f18 building syzkaller on 4f9530a3b62297342999c9097c77dde726522618 ensuring issue is reproducible on original commit 1a44b0073b9235521280e19d963b6dfef7888f18 testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7a72993bf485645e7dcc073f4a02f47d450bca5795b0c131e0299adfe591c49f all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7365977fb391834008073cdcdf2fffde5a91a9f431f008cddd85a925bc38fde1 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=3923 full=7658 leaves diff=2005 split chunks (needed=false): <2005> split chunk #0 of len 2005 into 5 parts testing without sub-chunk 1/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7c589956199c5d40a4e59c5907c448993effc314158fb821e50e3ea05ca1ecc3 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d9fb963a8fb2eb39c78752fafe1608b5e0be53038eee92023787145c73ba06dd all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2c3ef27aac96e881c191be85e603757dfa9da75f9819738364f2d7960ba94e44 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 78733a911858b6b8295cdc34da718684f77c815749c5856c8f12457cc7b1cd04 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1a44b0073b9235521280e19d963b6dfef7888f18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 64ace4604875c1b86bd31a9635892a9d79fe7311c9a5c8017b89956a80db99b5 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] the chunk can be dropped minimized to 401 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB_CORE FSCACHE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_MMIO KVM_PROVE_MMU KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7224a54969e54a0fcdd61655ccda5a20b6b97534dca10fcacf29fe86e3c7c36c all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d88c2d66586807a678515238573cb100891b27b75e5e50e142f6f64404478eb5 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c8371ee828fb34e49e75b9d921dcdd512312e7e1e2d432c1ed41588d5eab4b3 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c10407b58979d46865a4c028f55e8639a8702cfc0409876eae355920d5b81941 run #0: crashed: WARNING: ODEBUG bug in advance_sched run #1: crashed: WARNING: ODEBUG bug in advance_sched run #2: crashed: WARNING: ODEBUG bug in advance_sched run #3: crashed: WARNING: ODEBUG bug in advance_sched run #4: crashed: WARNING: ODEBUG bug in advance_sched run #5: crashed: WARNING: ODEBUG bug in advance_sched run #6: crashed: WARNING: ODEBUG bug in advance_sched run #7: crashed: BUG: workqueue lockup run #8: crashed: BUG: workqueue lockup run #9: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor2594758165" "root@10.128.1.115:./syz-executor2594758165"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.1.115, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u1, OpenSSL 3.0.11 19 Sep 2023 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.1.115 [10.128.1.115] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u1 Connection timed out during banner exchange Connection to 10.128.1.115 port 22 timed out scp: Connection closed representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8dd27a2aa3763c28f73fe7ec9064f7c20577fee94d92eaa01bcade0757c6cdc8 all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 33bac819a3eb2a46c3739e67ceef57b52a1c3c1d87396d8498ffa0b65c1ab4cb all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 236ff082b2fc1ce53b0aa4eb6e41fd581831c236b82a8a8c399006d7c810191b all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2fea1293c34a294a09ef0f6f49ba57f54c05b735a5523906ff6b67f82f96982b all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d1c6654f37af4d7afe2cf25126618250281ec7111426b300d7ed575f06f11b7d all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c gcc compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a8e6f466ad3213dc4dd80abc483e1be51f1e9e29aee5482550c30e1f0d29ca8e all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 19d84bb72f719cba13d2ab06fae5570c6eaa0c9d9308556d119a59f8def6214f all runs: crashed: WARNING: ODEBUG bug in advance_sched representative crash: WARNING: ODEBUG bug in advance_sched, types: [WARNING] testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 6e2b88da4e8b39ff605c7463d3fa58bd5bdc2b0633e9013c1acee66d3fd10277 all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 20909bca9df0d79945efda0e1eefd67f833bf6793ad9df7d907fe26de7767a75 all runs: OK false negative chance: 0.000 # git bisect start 0ecfebd2b52404ae0c54a878c872bb93363ada36 8fe28cb58bcb235034b64cbbb7550a8a43fd88be Bisecting: 22163 revisions left to test after this (roughly 14 steps) [b5dd0c658c31b469ccff1b637e5124851e7a4a1c] Merge branch 'akpm' (patches from Andrew) testing commit b5dd0c658c31b469ccff1b637e5124851e7a4a1c gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a3c547534c5be111924cc1381e03a903bcf22b448201ed28472ad6fbecb0472c all runs: OK false negative chance: 0.000 # git bisect good b5dd0c658c31b469ccff1b637e5124851e7a4a1c Bisecting: 11579 revisions left to test after this (roughly 14 steps) [82efe439599439a5e1e225ce5740e6cfb777a7dd] Merge tag 'devicetree-for-5.2' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux testing commit 82efe439599439a5e1e225ce5740e6cfb777a7dd gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 102ca4d48ec82c3f8d62b340a7d6831694b62c3276865a211514fd546f8d49a1 all runs: OK false negative chance: 0.000 # git bisect good 82efe439599439a5e1e225ce5740e6cfb777a7dd Bisecting: 5780 revisions left to test after this (roughly 13 steps) [ea5aee6d97fd2d4499b1eebc233861c1def70f06] Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux testing commit ea5aee6d97fd2d4499b1eebc233861c1def70f06 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2d06bc14c2de01c6ee5a1390fa037fce4386b5e3025d415c672d87e19c51cf9f all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad ea5aee6d97fd2d4499b1eebc233861c1def70f06 Bisecting: 2955 revisions left to test after this (roughly 12 steps) [2646719a48c21ba0cae82a3f57382a9573fd8400] Merge tag 'kbuild-v5.2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit 2646719a48c21ba0cae82a3f57382a9573fd8400 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 77a78b8506ec9cd0169ade4d299d690a0798ba8254b051cbda4cdfa8bf727fed all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad 2646719a48c21ba0cae82a3f57382a9573fd8400 Bisecting: 1421 revisions left to test after this (roughly 11 steps) [8c79f0ea5d6087645ed5ed5d638c338962052766] taprio: Fix potencial use of invalid memory during dequeue() testing commit 8c79f0ea5d6087645ed5ed5d638c338962052766 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 5c37a4b686310e8e2ed995742d7e761be840eb38a7aefdcfde1d0c006354a2df all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad 8c79f0ea5d6087645ed5ed5d638c338962052766 Bisecting: 710 revisions left to test after this (roughly 10 steps) [92f11ea177cd77ebc790916eb9d3331e1d676b62] net: hns3: fix set port based VLAN issue for VF testing commit 92f11ea177cd77ebc790916eb9d3331e1d676b62 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 0d71b574875690aa49b5769472bb062b7fdc8bd06fbaa79aa4449891c2ae625a all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad 92f11ea177cd77ebc790916eb9d3331e1d676b62 Bisecting: 354 revisions left to test after this (roughly 9 steps) [a4e76ba6b4994773fbe7a4eed8228e47862ac8a3] mlxsw: spectrum_acl: Rename rehash_dis trace testing commit a4e76ba6b4994773fbe7a4eed8228e47862ac8a3 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 65a32f115f24ec57271a1e711502c314fc757cf45117a0121e0d41a6b0917af5 all runs: OK false negative chance: 0.000 # git bisect good a4e76ba6b4994773fbe7a4eed8228e47862ac8a3 Bisecting: 177 revisions left to test after this (roughly 8 steps) [6f5f68d05ec0f648a4e59a07442d663d1e1a4d2f] bpf: Handle ipv6 gateway in bpf_ipv4_fib_lookup testing commit 6f5f68d05ec0f648a4e59a07442d663d1e1a4d2f gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ab5a90b0d9b51d8b7ddb942c31c97c28ad234277f5d4bfc8ba86364ab55ea3e6 all runs: OK false negative chance: 0.000 # git bisect good 6f5f68d05ec0f648a4e59a07442d663d1e1a4d2f Bisecting: 110 revisions left to test after this (roughly 7 steps) [947e8b595b82d3551750641445d0a97b8f29b536] bpf: explicitly prohibit ctx_{in, out} in non-skb BPF_PROG_TEST_RUN testing commit 947e8b595b82d3551750641445d0a97b8f29b536 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a249b055bc68914c268b43110b60f238d0c475792dc2cda60f3d4897e0d1c948 all runs: OK false negative chance: 0.000 # git bisect good 947e8b595b82d3551750641445d0a97b8f29b536 Bisecting: 55 revisions left to test after this (roughly 6 steps) [702cea56852c6e57e997890ae8202e5385c63691] ipv6: Pass fib6_nh and flags to rt6_score_route testing commit 702cea56852c6e57e997890ae8202e5385c63691 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: d019097c699429f3aab3c7ce5e79a8567bb87d65ff0431a2580ad49643fa9f7e all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad 702cea56852c6e57e997890ae8202e5385c63691 Bisecting: 27 revisions left to test after this (roughly 5 steps) [b7f29f8ce170c1b22779d62cbd24bf336ef0372b] net: phy: fix setting autoneg_complete in genphy_update_link testing commit b7f29f8ce170c1b22779d62cbd24bf336ef0372b gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 50729f96199d9c8e310b0100ad1decddd99acd15e2d82c73fdab7fccf1de0f20 all runs: OK false negative chance: 0.000 # git bisect good b7f29f8ce170c1b22779d62cbd24bf336ef0372b Bisecting: 13 revisions left to test after this (roughly 4 steps) [d73f80f921fd323af8f35644fb9f3b129f465f66] ipv4: Handle RTA_GATEWAY set to 0 testing commit d73f80f921fd323af8f35644fb9f3b129f465f66 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 83ef22dd659facb6f8184ea49c1e233254691b0733f2331ea013cd3700b809fc all runs: OK false negative chance: 0.000 # git bisect good d73f80f921fd323af8f35644fb9f3b129f465f66 Bisecting: 6 revisions left to test after this (roughly 3 steps) [ecce39ec10937fb0d9f34ab43c75482d6c243292] netns: read NETNSA_NSID as s32 attribute in rtnl_net_getid() testing commit ecce39ec10937fb0d9f34ab43c75482d6c243292 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 496838b955f920f84c3a92e48784dee19eead2ba72878c406c0e636cc28473b2 all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad ecce39ec10937fb0d9f34ab43c75482d6c243292 Bisecting: 2 revisions left to test after this (roughly 2 steps) [b8c7e2c39dd5369d1cfcdab4630725d97f8987ac] Merge branch 'net-sched-taprio-fix-picos_per_byte-miscalculation' testing commit b8c7e2c39dd5369d1cfcdab4630725d97f8987ac gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 52d46c01627feb5e920c46766d9e0418c5227f774b6dcb97fe8376618f53d907 all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad b8c7e2c39dd5369d1cfcdab4630725d97f8987ac Bisecting: 1 revision left to test after this (roughly 1 step) [7b9eba7ba0c1b24df42b70b62d154b284befbccf] net/sched: taprio: fix picos_per_byte miscalculation testing commit 7b9eba7ba0c1b24df42b70b62d154b284befbccf gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 182940f7f327c1eddf5c7ed21f1b466706899776694e56467994b982b5e75b93 all runs: crashed: WARNING in taprio_dequeue representative crash: WARNING in taprio_dequeue, types: [WARNING] # git bisect bad 7b9eba7ba0c1b24df42b70b62d154b284befbccf Bisecting: 0 revisions left to test after this (roughly 0 steps) [93e2125477006a98200628940e66c922572c0e73] net: strparser: fix comment testing commit 93e2125477006a98200628940e66c922572c0e73 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 83ef22dd659facb6f8184ea49c1e233254691b0733f2331ea013cd3700b809fc all runs: OK false negative chance: 0.000 # git bisect good 93e2125477006a98200628940e66c922572c0e73 7b9eba7ba0c1b24df42b70b62d154b284befbccf is the first bad commit commit 7b9eba7ba0c1b24df42b70b62d154b284befbccf Author: Leandro Dorileo Date: Mon Apr 8 10:12:17 2019 -0700 net/sched: taprio: fix picos_per_byte miscalculation The Time Aware Priority Scheduler is heavily dependent to link speed, it relies on it to calculate transmission bytes per cycle, we can't properly calculate the so called budget if the device has failed to report the link speed. In that case we can't dequeue packets assuming a wrong budget. This patch makes sure we fail to dequeue case: 1) __ethtool_get_link_ksettings() reports error or 2) the ethernet driver failed to set the ksettings' speed value (setting link speed to SPEED_UNKNOWN). Additionally we re calculate the budget whenever the link speed is changed. Fixes: 5a781ccbd19e4 ("tc: Add support for configuring the taprio scheduler") Signed-off-by: Leandro Dorileo Reviewed-by: Vedang Patel Signed-off-by: David S. Miller net/sched/sch_taprio.c | 97 +++++++++++++++++++++++++++++++++++++++++--------- 1 file changed, 81 insertions(+), 16 deletions(-) accumulated error probability: 0.00 culprit signature: 182940f7f327c1eddf5c7ed21f1b466706899776694e56467994b982b5e75b93 parent signature: 83ef22dd659facb6f8184ea49c1e233254691b0733f2331ea013cd3700b809fc revisions tested: 36, total time: 9h3m42.599880242s (build: 5h22m56.155949546s, test: 3h24m58.037915427s) first bad commit: 7b9eba7ba0c1b24df42b70b62d154b284befbccf net/sched: taprio: fix picos_per_byte miscalculation recipients (to): ["davem@davemloft.net" "leandro.maciel.dorileo@intel.com" "vedang.patel@intel.com"] recipients (cc): [] crash: WARNING in taprio_dequeue ------------[ cut here ]------------ taprio: dequeue() called with unknown picos per byte. WARNING: CPU: 0 PID: 4682 at net/sched/sch_taprio.c:137 taprio_dequeue+0x1c1/0x210 net/sched/sch_taprio.c:137 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 4682 Comm: syz-executor.4 Not tainted 5.1.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x4d/0x6a lib/dump_stack.c:113 panic+0xf6/0x283 kernel/panic.c:214 __warn.cold.7+0x31/0x32 kernel/panic.c:571 report_bug+0xb6/0xe0 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:179 [inline] fixup_bug arch/x86/kernel/traps.c:174 [inline] do_error_trap+0x99/0xb0 arch/x86/kernel/traps.c:272 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973 RIP: 0010:taprio_dequeue+0x1c1/0x210 net/sched/sch_taprio.c:137 Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 80 3d 81 c3 f1 00 00 75 15 48 c7 c7 40 c0 68 82 c6 05 71 c3 f1 00 01 e8 8c 80 61 ff <0f> 0b 48 8d 65 d8 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 83 c6 RSP: 0018:ffff888237a03e88 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff888226294000 RCX: ffff888237a03d2c RDX: 0000000000000003 RSI: ffffffff82875c78 RDI: ffffffff82875c60 RBP: ffff888237a03ec0 R08: 0000000000000000 R09: 0000000000000035 R10: 0000000080000000 R11: 0000000000000000 R12: ffff888226294180 R13: ffff888226294180 R14: ffff888226294138 R15: ffff888226294000 dequeue_skb net/sched/sch_generic.c:261 [inline] qdisc_restart net/sched/sch_generic.c:364 [inline] __qdisc_run+0x7d/0x550 net/sched/sch_generic.c:382 qdisc_run include/net/pkt_sched.h:121 [inline] net_tx_action+0x141/0x2c0 net/core/dev.c:4636 __do_softirq+0xe8/0x33f kernel/softirq.c:293 invoke_softirq kernel/softirq.c:374 [inline] irq_exit+0x82/0xb0 kernel/softirq.c:414 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xa3/0x1a0 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 RIP: 0010:_raw_spin_unlock_irqrestore+0x2a/0x30 kernel/locking/spinlock.c:185 Code: 55 48 89 e5 41 54 49 89 f4 be 01 00 00 00 48 8b 55 08 53 48 89 fb 48 8d 7f 18 e8 a1 36 31 ff 48 89 df e8 99 76 31 ff 41 54 9d <5b> 41 5c 5d c3 90 55 be 01 00 00 00 48 89 e5 53 48 89 fb 48 8b 55 RSP: 0018:ffffc900012a38a8 EFLAGS: 00000287 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000001 RBX: ffff888237a1b940 RCX: ffffc900012a3864 RDX: 0000000000000001 RSI: ffff888237a1b958 RDI: ffff888237a1b940 RBP: ffffc900012a38b8 R08: 0000000000000000 R09: 0000000000000002 R10: 0000000000000000 R11: 000000000000004f R12: 0000000000000287 R13: ffff888226294348 R14: ffff888237a1b940 R15: ffffffff828796c0 unlock_hrtimer_base kernel/time/hrtimer.c:878 [inline] hrtimer_start_range_ns+0x1a8/0x300 kernel/time/hrtimer.c:1109 hrtimer_start include/linux/hrtimer.h:395 [inline] taprio_start_sched net/sched/sch_taprio.c:585 [inline] taprio_change net/sched/sch_taprio.c:719 [inline] taprio_init+0x394/0x5f0 net/sched/sch_taprio.c:793 qdisc_create+0x1aa/0x470 net/sched/sch_api.c:1240 tc_modify_qdisc+0x135/0x760 net/sched/sch_api.c:1655 rtnetlink_rcv_msg+0x2ed/0x3f0 net/core/rtnetlink.c:5195 netlink_rcv_skb+0x47/0x110 net/netlink/af_netlink.c:2485 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:5213 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0x18c/0x230 net/netlink/af_netlink.c:1336 netlink_sendmsg+0x208/0x3b0 net/netlink/af_netlink.c:1925 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0x2e/0x40 net/socket.c:661 ___sys_sendmsg+0x285/0x2e0 net/socket.c:2260 __sys_sendmsg+0x57/0xa0 net/socket.c:2298 __do_sys_sendmsg net/socket.c:2307 [inline] __se_sys_sendmsg net/socket.c:2305 [inline] __x64_sys_sendmsg+0x1a/0x20 net/socket.c:2305 do_syscall_64+0x4f/0x150 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7fe8ab18ece9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe8aad110c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fe8ab2adf80 RCX: 00007fe8ab18ece9 RDX: 0000000004008000 RSI: 00000000200000c0 RDI: 0000000000000004 RBP: 00007fe8ab1db47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007fe8ab2adf80 R15: 00007ffef4c64d38 Kernel Offset: disabled Rebooting in 86400 seconds.. ---------------- Code disassembly (best guess): 0: 55 push %rbp 1: 48 89 e5 mov %rsp,%rbp 4: 41 54 push %r12 6: 49 89 f4 mov %rsi,%r12 9: be 01 00 00 00 mov $0x1,%esi e: 48 8b 55 08 mov 0x8(%rbp),%rdx 12: 53 push %rbx 13: 48 89 fb mov %rdi,%rbx 16: 48 8d 7f 18 lea 0x18(%rdi),%rdi 1a: e8 a1 36 31 ff call 0xff3136c0 1f: 48 89 df mov %rbx,%rdi 22: e8 99 76 31 ff call 0xff3176c0 27: 41 54 push %r12 29: 9d popf * 2a: 5b pop %rbx <-- trapping instruction 2b: 41 5c pop %r12 2d: 5d pop %rbp 2e: c3 ret 2f: 90 nop 30: 55 push %rbp 31: be 01 00 00 00 mov $0x1,%esi 36: 48 89 e5 mov %rsp,%rbp 39: 53 push %rbx 3a: 48 89 fb mov %rdi,%rbx 3d: 48 rex.W 3e: 8b .byte 0x8b 3f: 55 push %rbp