ci starts bisection 2024-11-07 06:18:31.824076108 +0000 UTC m=+33982.057779399 bisecting cause commit starting from 2e1b3cc9d7f790145a80cb705b168f05dab65df2 building syzkaller on 3a4654820e658eac4775498511ddef4f1019ed67 ensuring issue is reproducible on original commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4619438d95f42cc1d55fd06fcafae8f5b60d683b032bf3f8c77639e46cd8cd23 all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 98e10745ef5030573637e9af04057f062b8eb29a9032d96b608db83eb3eff85e all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed kconfig minimization: base=4045 full=8192 leaves diff=2109 split chunks (needed=false): <2109> split chunk #0 of len 2109 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 037ad0e5c3da8002ff0f25ae1d8846cb45fd18ebcd073fd0846286b40aefc31a all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 82789ca820b8c908b910598e2ee77d0e2e341e023e32aa90ce864536b2001f2e all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bbf64730599733bdeac35fa05ba683ef831dd43ba56474b97aa12a79b1d07023 all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0ddaad4d1d009bf63f3fa98244d7b3987c639ac818f982a5b846fa09297ba1e9 all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 2e1b3cc9d7f790145a80cb705b168f05dab65df2 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 26d426bff3237caeca0801c90e0cba315d08ffdbdebbf562cf335c5f85837e63 all runs: crashed: INFO: task hung in btree_write_buffer_flush_seq representative crash: INFO: task hung in btree_write_buffer_flush_seq, types: [HANG] the chunk can be dropped minimized to 422 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_SUPPORTS_RT ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCTR CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed picked [v6.11 v6.10 v6.9 v6.7 v6.5 v6.3 v6.1 v5.19 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 34 release tags testing release v6.11 testing commit 98f7e32f20d28ec452afb208f9cffc08448a2652 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c24cec80cd9bc8d93dac67e3a09af47e67c1626efe3719625cc2792570f3806c all runs: OK false negative chance: 0.000 # git bisect start 2e1b3cc9d7f790145a80cb705b168f05dab65df2 98f7e32f20d28ec452afb208f9cffc08448a2652 Bisecting: 7001 revisions left to test after this (roughly 13 steps) [de848da12f752170c2ebe114804a985314fd5a6a] Merge tag 'drm-next-2024-09-19' of https://gitlab.freedesktop.org/drm/kernel testing commit de848da12f752170c2ebe114804a985314fd5a6a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fe8aecaff66001f53186a4779a7f4440b667a012ce5237b435d037f7c791e6d9 all runs: OK false negative chance: 0.000 # git bisect good de848da12f752170c2ebe114804a985314fd5a6a Bisecting: 3496 revisions left to test after this (roughly 12 steps) [b2149f948c2d60880f94a68cc784eeefe1e78b77] Merge tag 'rtc-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux testing commit b2149f948c2d60880f94a68cc784eeefe1e78b77 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3098e8b63c28c28e7b1047351cd8be4ffdf15d3e0b58701d1f18585fb5672516 all runs: OK false negative chance: 0.000 # git bisect good b2149f948c2d60880f94a68cc784eeefe1e78b77 Bisecting: 1748 revisions left to test after this (roughly 11 steps) [e1043b6765d6ca310a10be342e25d5451d58ee53] Merge tag 'acpi-6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm testing commit e1043b6765d6ca310a10be342e25d5451d58ee53 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 51e4524442195310ddc4d9a9260d030c63f7dd514d7097476bc3fca4593b2bf6 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad e1043b6765d6ca310a10be342e25d5451d58ee53 Bisecting: 873 revisions left to test after this (roughly 10 steps) [ab9a9a9e9647392a19e7a885b08000e89c86b535] net: add more sanity checks to qdisc_pkt_len_init() testing commit ab9a9a9e9647392a19e7a885b08000e89c86b535 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 91910127bd9541a21e8e69a21aeff35c9ccfd320cebeea2f7faa85748d6e6a5b all runs: OK false negative chance: 0.000 # git bisect good ab9a9a9e9647392a19e7a885b08000e89c86b535 Bisecting: 380 revisions left to test after this (roughly 9 steps) [3efc57369a0ce8f76bf0804f7e673982384e4ac9] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit 3efc57369a0ce8f76bf0804f7e673982384e4ac9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b10463f215660feec848705e7fb2fc77d45df427424bca8e34f666b6918d74f1 all runs: OK false negative chance: 0.000 # git bisect good 3efc57369a0ce8f76bf0804f7e673982384e4ac9 Bisecting: 200 revisions left to test after this (roughly 8 steps) [9c02404b52f56b2c8acc8c0ac16d525b1226dfe5] Merge tag 'v6.12-rc1-ksmbd-fixes' of git://git.samba.org/ksmbd testing commit 9c02404b52f56b2c8acc8c0ac16d525b1226dfe5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 24f0fd2512ace2efb45a8533830364b29b2c4e5ab25e246a3bac78eaabf386c2 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad 9c02404b52f56b2c8acc8c0ac16d525b1226dfe5 Bisecting: 78 revisions left to test after this (roughly 7 steps) [3ed7df085225ea8736b80d1e1a247a40d91281c8] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi testing commit 3ed7df085225ea8736b80d1e1a247a40d91281c8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8cdcc247e10675184439ebe3751f78224b0601e5735ea2b4a4a89e0084aa3d06 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad 3ed7df085225ea8736b80d1e1a247a40d91281c8 Bisecting: 65 revisions left to test after this (roughly 6 steps) [3a5895e3ac2bb4b252a4e816575eeec6ac3deeec] bcachefs: check_subvol_path() now prints subvol root inode testing commit 3a5895e3ac2bb4b252a4e816575eeec6ac3deeec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 39500d69ec152f47ad1a75916a5881a7ea85ccdebb7fe375e23af5efdec02751 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad 3a5895e3ac2bb4b252a4e816575eeec6ac3deeec Bisecting: 17 revisions left to test after this (roughly 4 steps) [3672bda8f5edd8ed23c745965500ceb53286d48d] bcachefs: fix transaction restart handling in check_extents(), check_dirents() testing commit 3672bda8f5edd8ed23c745965500ceb53286d48d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6d4893422bf058e56cbb645baa96cd1f9f137fdc825109afe9c1dcae97486738 all runs: OK false negative chance: 0.000 # git bisect good 3672bda8f5edd8ed23c745965500ceb53286d48d Bisecting: 8 revisions left to test after this (roughly 3 steps) [cf49f8a8c277f9f2b78e2a56189a741a508a9820] bcachefs: rename version -> bversion testing commit cf49f8a8c277f9f2b78e2a56189a741a508a9820 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dc0affb19f252549cbb9c4c3b0bc66e8182682b3a784e6ceda69c7bb7fe9b3c6 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad cf49f8a8c277f9f2b78e2a56189a741a508a9820 Bisecting: 4 revisions left to test after this (roughly 2 steps) [431312b59cf54f9cc99352d0c3d80ed30e9b7df5] bcachefs: Fix disk accounting attempting to mark invalid replicas entry testing commit 431312b59cf54f9cc99352d0c3d80ed30e9b7df5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1309031436b60aaef44001c393b482b6417d00f8652d1200825dc1b59e10e9ca all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad 431312b59cf54f9cc99352d0c3d80ed30e9b7df5 Bisecting: 1 revision left to test after this (roughly 1 step) [9104fc1928704ee5708ec7f43ab8dfbdc66e2ce8] bcachefs: Fix accounting read + device removal testing commit 9104fc1928704ee5708ec7f43ab8dfbdc66e2ce8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d5635807c70915aca674dc9902cefac442db899c5bb8f0a9312eefd81e9b51e1 all runs: OK false negative chance: 0.000 # git bisect good 9104fc1928704ee5708ec7f43ab8dfbdc66e2ce8 Bisecting: 0 revisions left to test after this (roughly 0 steps) [49fd90b2cc332b8607a616d99d4bb792f18208b9] bcachefs: Fix unlocked access to c->disk_sb.sb in bch2_replicas_entry_validate() testing commit 49fd90b2cc332b8607a616d99d4bb792f18208b9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: eda08319c3b070b7c6f14e4531628e94a13bbbcc76d60abb521b0dc66747ba30 all runs: crashed: INFO: task hung in bch2_replicas_entry_validate representative crash: INFO: task hung in bch2_replicas_entry_validate, types: [HANG] # git bisect bad 49fd90b2cc332b8607a616d99d4bb792f18208b9 49fd90b2cc332b8607a616d99d4bb792f18208b9 is the first bad commit commit 49fd90b2cc332b8607a616d99d4bb792f18208b9 Author: Kent Overstreet Date: Wed Sep 25 18:17:31 2024 -0400 bcachefs: Fix unlocked access to c->disk_sb.sb in bch2_replicas_entry_validate() Signed-off-by: Kent Overstreet fs/bcachefs/journal_io.c | 2 +- fs/bcachefs/replicas.c | 18 ++++++++++++++---- fs/bcachefs/replicas.h | 2 +- 3 files changed, 16 insertions(+), 6 deletions(-) accumulated error probability: 0.00 culprit signature: eda08319c3b070b7c6f14e4531628e94a13bbbcc76d60abb521b0dc66747ba30 parent signature: d5635807c70915aca674dc9902cefac442db899c5bb8f0a9312eefd81e9b51e1 revisions tested: 21, total time: 7h13m29.207042651s (build: 4h30m19.426313793s, test: 2h29m9.029979428s) first bad commit: 49fd90b2cc332b8607a616d99d4bb792f18208b9 bcachefs: Fix unlocked access to c->disk_sb.sb in bch2_replicas_entry_validate() recipients (to): ["kent.overstreet@linux.dev" "kent.overstreet@linux.dev" "linux-bcachefs@vger.kernel.org"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: INFO: task hung in bch2_replicas_entry_validate INFO: task syz.2.15:3353 blocked for more than 143 seconds. Not tainted 6.11.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.15 state:D stack:12392 pid:3353 tgid:3352 ppid:2953 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x627/0x9c0 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xac/0x140 kernel/sched/core.c:6621 schedule_preempt_disabled+0x32/0x60 kernel/sched/core.c:6678 __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0x44a/0x970 kernel/locking/mutex.c:752 bch2_replicas_entry_validate+0x25/0x50 fs/bcachefs/replicas.c:101 journal_entry_data_usage_validate+0x14b/0x270 fs/bcachefs/journal_io.c:608 bch2_sb_clean_validate_late fs/bcachefs/sb-clean.c:40 [inline] bch2_read_superblock_clean+0xbd/0x1c0 fs/bcachefs/sb-clean.c:168 bch2_fs_recovery+0x5e/0x18f0 fs/bcachefs/recovery.c:639 bch2_fs_start+0x1b9/0x270 fs/bcachefs/super.c:1037 bch2_fs_get_tree+0x2b5/0x640 fs/bcachefs/fs.c:2069 vfs_get_tree+0x26/0xb0 fs/super.c:1800 do_new_mount+0x15a/0x3a0 fs/namespace.c:3472 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount+0x148/0x1b0 fs/namespace.c:3997 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x8d/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdae717feba RSP: 002b:00007fdae7f7ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fdae7f7aef0 RCX: 00007fdae717feba RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00007fdae7f7aeb0 RBP: 00000000200000c0 R08: 00007fdae7f7aef0 R09: 0000000000800000 R10: 0000000000800000 R11: 0000000000000246 R12: 0000000020000080 R13: 00007fdae7f7aeb0 R14: 000000000000591a R15: 0000000020006c80 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff83d81dd0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff83d81dd0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff83d81dd0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x30/0x100 kernel/locking/lockdep.c:6626 2 locks held by getty/1525: #0: ffff88810c2c58a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x20/0x40 drivers/tty/tty_ldisc.c:243 #1: ffffc90002bd72f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x243/0x910 drivers/tty/n_tty.c:2211 3 locks held by syz.2.15/3353: #0: ffff88817c300278 (&c->state_lock){....}-{3:3}, at: bch2_fs_start+0x30/0x270 fs/bcachefs/super.c:1007 #1: ffff88817c300908 (&c->sb_lock){....}-{3:3}, at: bch2_read_superblock_clean+0x21/0x1c0 fs/bcachefs/sb-clean.c:149 #2: ffff88817c300908 (&c->sb_lock){....}-{3:3}, at: bch2_replicas_entry_validate+0x25/0x50 fs/bcachefs/replicas.c:101 1 lock held by syz.3.904/13044: #0: ffffffff83d82b40 (rcu_state.barrier_mutex){....}-{3:3}, at: rcu_barrier+0x34/0x260 kernel/rcu/tree.c:4486 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x3e/0xe0 lib/dump_stack.c:119 nmi_cpu_backtrace+0x146/0x160 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x8e/0x140 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0x5e4/0x610 kernel/hung_task.c:379 kthread+0xec/0x100 kernel/kthread.c:389 ret_from_fork+0x34/0x40 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:111