bisecting cause commit starting from 9d004b2f4fea97cde123e7f1939b80e77bf2e695
building syzkaller on a46af3462c457f5f23b620200144d9a2a430f49f
testing commit 9d004b2f4fea97cde123e7f1939b80e77bf2e695
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 1622b4cc63e55321616ae91f36bed196fae15e29367c830012c14488a1c21095
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: crashed: INFO: task hung in hci_dev_close_sync
run #2: crashed: INFO: task hung in hci_dev_close_sync
run #3: crashed: INFO: task hung in hci_dev_close_sync
run #4: crashed: INFO: task hung in hci_dev_close_sync
run #5: crashed: INFO: task hung in hci_dev_close_sync
run #6: crashed: INFO: task hung in hci_dev_close_sync
run #7: crashed: INFO: task hung in hci_dev_close_sync
run #8: crashed: INFO: task hung in hci_dev_close_sync
run #9: crashed: INFO: task hung in hci_dev_close_sync
run #10: crashed: INFO: task hung in hci_dev_close_sync
run #11: crashed: INFO: task hung in hci_dev_close_sync
run #12: crashed: INFO: task hung in hci_dev_close_sync
run #13: crashed: INFO: task hung in hci_dev_close_sync
run #14: crashed: INFO: task hung in hci_dev_close_sync
run #15: crashed: INFO: task hung in hci_dev_close_sync
run #16: crashed: INFO: task hung in hci_dev_close_sync
run #17: crashed: INFO: task hung in hci_dev_close_sync
run #18: crashed: INFO: task hung in hci_dev_close_sync
run #19: crashed: INFO: task hung in hci_dev_close_sync
testing release v5.18
testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: b40594362ef4307c433f2cfc0e92ae3d13384a977b5c97061ac3628ac7eafd07
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: crashed: WARNING: ODEBUG bug in netdev_run_todo
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
reproducer seems to be flaky
testing release v5.17
testing commit f443e374ae131c168a065ea1748feac6b2e76613
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 943fb04e21c3448b01fbca3a4cabe7fcc6a465383b73688d5f96e0e3b201f4dc
all runs: OK
# git bisect start 4b0986a3613c92f4ec1bdc7f60ec66fea135991f f443e374ae131c168a065ea1748feac6b2e76613
Bisecting: 8498 revisions left to test after this (roughly 13 steps)
[25fd2d41b505d0640bdfe67aa77c549de2d3c18a] selftests: kselftest framework: provide "finished" helper

testing commit 25fd2d41b505d0640bdfe67aa77c549de2d3c18a
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 493924a0f95d1fbfaf3409ff1bacf17dd7b8815e64197659a6ae5fb8b2ab1c66
run #0: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #1: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #2: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 25fd2d41b505d0640bdfe67aa77c549de2d3c18a
Bisecting: 3943 revisions left to test after this (roughly 12 steps)
[b4bc93bd76d4da32600795cd323c971f00a2e788] Merge tag 'arm-drivers-5.18' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc

testing commit b4bc93bd76d4da32600795cd323c971f00a2e788
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 990102257b0ccd0e7940f402e28f5b37fd6eedd1a8c4f7a39ec36fe78d9694a3
run #0: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #1: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #2: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #3: crashed: WARNING: ODEBUG bug in netdev_run_todo
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad b4bc93bd76d4da32600795cd323c971f00a2e788
Bisecting: 1986 revisions left to test after this (roughly 11 steps)
[3fe2f7446f1e029b220f7f650df6d138f91651f2] Merge tag 'sched-core-2022-03-22' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

testing commit 3fe2f7446f1e029b220f7f650df6d138f91651f2
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: f6deb7f98cc4d3512a2483fef3aa27d55b77c8961827ff0fe47b58c169469a2e
run #0: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #1: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #2: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #3: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #4: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #5: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad 3fe2f7446f1e029b220f7f650df6d138f91651f2
Bisecting: 898 revisions left to test after this (roughly 10 steps)
[b080cee72ef355669cbc52ff55dc513d37433600] Merge tag 'for-5.18/io_uring-statx-2022-03-18' of git://git.kernel.dk/linux-block

testing commit b080cee72ef355669cbc52ff55dc513d37433600
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 56c81e9d808741988832ca792c7c951d1f53dcaac5818ccf626b44ff777fa291
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good b080cee72ef355669cbc52ff55dc513d37433600
Bisecting: 420 revisions left to test after this (roughly 9 steps)
[ad9c6ee642a61adae93dfa35582b5af16dc5173a] Merge tag 'spi-v5.18' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

testing commit ad9c6ee642a61adae93dfa35582b5af16dc5173a
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: c1d45ab165edc3f70b867446349e0261e93a48ebe200f1c4258ee49798aab6dc
run #0: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #1: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #2: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #3: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad ad9c6ee642a61adae93dfa35582b5af16dc5173a
Bisecting: 261 revisions left to test after this (roughly 8 steps)
[d347ee54a70e45c082ca7a373fbdf0c34109d575] Merge tag 'for-5.18/alloc-cleanups-2022-03-18' of git://git.kernel.dk/linux-block

testing commit d347ee54a70e45c082ca7a373fbdf0c34109d575
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 50fe7a6753c98b6357b2ba80fdc60230fb904d8285c71524c4969641f4c0384c
run #0: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #1: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #2: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #3: crashed: SYZFATAL: executor failed NUM times: executor NUM: EOF
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad d347ee54a70e45c082ca7a373fbdf0c34109d575
Bisecting: 107 revisions left to test after this (roughly 7 steps)
[44f331a630bdc7c61de9c6760c4eec0133ee9f04] nvmet-tcp: replace ida_simple[get|remove] with the simler ida_[alloc|free]

testing commit 44f331a630bdc7c61de9c6760c4eec0133ee9f04
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: e84faddbc1dd272bbd65c4459e394d19f567ba2a0031e1de863aeedfb0f2a006
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good 44f331a630bdc7c61de9c6760c4eec0133ee9f04
Bisecting: 53 revisions left to test after this (roughly 6 steps)
[ae53aea611b7a532a52ba966281a8b7a8cfd008a] Merge tag 'nvme-5.18-2022-03-17' of git://git.infradead.org/nvme into for-5.18/drivers

testing commit ae53aea611b7a532a52ba966281a8b7a8cfd008a
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 498f371480900a1185e85d044ad5c98d930f0cba0883c68dad937556dd11d7d0
run #0: OK
run #1: OK
run #2: crashed: WARNING: ODEBUG bug in netdev_run_todo
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect bad ae53aea611b7a532a52ba966281a8b7a8cfd008a
Bisecting: 26 revisions left to test after this (roughly 5 steps)
[daae161fd2e568b4f481b177b8be34374df98b68] md: raid1/raid10: drop pending_cnt

testing commit daae161fd2e568b4f481b177b8be34374df98b68
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 293dd1d0ad1a629493f807864a86ab4c1c39b7aba1730d4dd8119b176ec33e4f
all runs: OK
# git bisect good daae161fd2e568b4f481b177b8be34374df98b68
Bisecting: 13 revisions left to test after this (roughly 4 steps)
[8f31dded50d927974a5a696196052ed53f1baf66] nvme-multipath: call bio_io_error in nvme_ns_head_submit_bio

testing commit 8f31dded50d927974a5a696196052ed53f1baf66
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 125716875589975cbb18a3e017fe7c8fe5de4b25ece33cae361e66a9075f1ba6
all runs: OK
# git bisect good 8f31dded50d927974a5a696196052ed53f1baf66
Bisecting: 6 revisions left to test after this (roughly 3 steps)
[73d77c53ff342bfa23daedf4475cdd06618e447b] nvmet: don't fold lines

testing commit 73d77c53ff342bfa23daedf4475cdd06618e447b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 5d6f3e22822a82be4978a31ceef919fe17fe4ac98f9022c9917200dea7bf8db1
run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: EOF
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
run #10: OK
run #11: OK
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
# git bisect good 73d77c53ff342bfa23daedf4475cdd06618e447b
Bisecting: 3 revisions left to test after this (roughly 2 steps)
[b739e137052069c996ab8b3bc9c25be501ecc63b] nvme: cleanup how disk->disk_name is assigned

testing commit b739e137052069c996ab8b3bc9c25be501ecc63b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 4ef39d4901495199168c1650150d57be82675b55bb88288b379fc09bc745008f
all runs: OK
# git bisect good b739e137052069c996ab8b3bc9c25be501ecc63b
Bisecting: 1 revision left to test after this (roughly 1 step)
[ce8d78616a6b637d1b763eb18e32045687a84305] nvme: warn about shared namespaces without CONFIG_NVME_MULTIPATH

testing commit ce8d78616a6b637d1b763eb18e32045687a84305
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: e06159cc59962df646e72943c9b4bf72d876801ecd3a243f9cb574823c0630ca
all runs: OK
# git bisect good ce8d78616a6b637d1b763eb18e32045687a84305
Bisecting: 0 revisions left to test after this (roughly 0 steps)
[bcfe9b6cbb4438b8c1cc4bd475221652c8f9301b] virtio_blk: eliminate anonymous module_init & module_exit

testing commit bcfe9b6cbb4438b8c1cc4bd475221652c8f9301b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 81589ca78857391ccea992bd8a8662739bfad8ebcbd39c0c80db2ae674989b6c
all runs: OK
# git bisect good bcfe9b6cbb4438b8c1cc4bd475221652c8f9301b
ae53aea611b7a532a52ba966281a8b7a8cfd008a is the first bad commit
commit ae53aea611b7a532a52ba966281a8b7a8cfd008a
Merge: bcfe9b6cbb44 ce8d78616a6b
Author: Jens Axboe <axboe@kernel.dk>
Date:   Thu Mar 17 20:46:22 2022 -0600

    Merge tag 'nvme-5.18-2022-03-17' of git://git.infradead.org/nvme into for-5.18/drivers
    
    Pull NVMe updates from Christoph:
    
    "Second round of nvme updates for Linux 5.18
    
     - add lockdep annotations for in-kernel sockets (Chris Leech)
     - use vmalloc for ANA log buffer (Hannes Reinecke)
     - kerneldoc fixes (Chaitanya Kulkarni)
     - cleanups (Guoqing Jiang, Chaitanya Kulkarni, me)
     - warn about shared namespaces without multipathing (me)"
    
    * tag 'nvme-5.18-2022-03-17' of git://git.infradead.org/nvme:
      nvme: warn about shared namespaces without CONFIG_NVME_MULTIPATH
      nvme: remove nvme_alloc_request and nvme_alloc_request_qid
      nvme: cleanup how disk->disk_name is assigned
      nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate
      nvmet: use snprintf() with PAGE_SIZE in configfs
      nvmet: don't fold lines
      nvmet-rdma: fix kernel-doc warning for nvmet_rdma_device_removal
      nvmet-fc: fix kernel-doc warning for nvmet_fc_unregister_targetport
      nvmet-fc: fix kernel-doc warning for nvmet_fc_register_targetport
      nvme-tcp: lockdep: annotate in-kernel sockets
      nvme-tcp: don't fold the line
      nvme-tcp: don't initialize ret variable
      nvme-multipath: call bio_io_error in nvme_ns_head_submit_bio
      nvme-multipath: use vmalloc for ANA log buffer

 drivers/block/loop.c            |  1 +
 drivers/nvme/host/core.c        | 76 ++++++++++++++++++++---------------------
 drivers/nvme/host/ioctl.c       |  3 +-
 drivers/nvme/host/multipath.c   | 32 +++--------------
 drivers/nvme/host/nvme.h        | 16 ++++-----
 drivers/nvme/host/pci.c         | 17 +++++----
 drivers/nvme/host/tcp.c         | 45 ++++++++++++++++++++++--
 drivers/nvme/target/admin-cmd.c |  6 +++-
 drivers/nvme/target/configfs.c  | 30 ++++++++--------
 drivers/nvme/target/core.c      |  5 ++-
 drivers/nvme/target/fc.c        |  4 +--
 drivers/nvme/target/nvmet.h     |  2 +-
 drivers/nvme/target/passthru.c  |  3 +-
 drivers/nvme/target/rdma.c      |  2 +-
 drivers/nvme/target/zns.c       |  6 +++-
 15 files changed, 138 insertions(+), 110 deletions(-)

Reproducer flagged being flaky
revisions tested: 17, total time: 4h55m10.743803301s (build: 1h43m57.192623263s, test: 3h9m43.161054727s)
first bad commit: ae53aea611b7a532a52ba966281a8b7a8cfd008a Merge tag 'nvme-5.18-2022-03-17' of git://git.infradead.org/nvme into for-5.18/drivers
recipients (to): ["axboe@kernel.dk"]
recipients (cc): []
crash: WARNING: ODEBUG bug in netdev_run_todo
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 include/linux/find.h:144
WARNING: CPU: 1 PID: 15286 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 lib/debugobjects.c:505
Modules linked in:
CPU: 1 PID: 15286 Comm: kworker/u4:7 Not tainted 5.17.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:505
Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 40 d0 42 89 4c 89 ee 48 c7 c7 40 c4 42 89 e8 49 f4 ab 04 <0f> 0b 83 05 95 30 0f 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3
RSP: 0018:ffffc9000274f8b0 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff8942bfe0 RDI: fffff520004e9f08
RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880b9f341c7
R10: ffffed10173e6838 R11: 0000000000000001 R12: ffffffff88ed7ec0
R13: ffffffff8942ca80 R14: ffffffff815d3c80 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0642e52e3c CR3: 000000006401e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:992 [inline]
 debug_check_no_obj_freed+0x301/0x420 lib/debugobjects.c:1023
 slab_free_hook mm/slub.c:1703 [inline]
 slab_free_freelist_hook+0xeb/0x1c0 mm/slub.c:1754
 slab_free mm/slub.c:3509 [inline]
 kfree+0xcb/0x280 mm/slub.c:4562
 device_release+0x93/0x200 drivers/base/core.c:2229
 kobject_cleanup lib/kobject.c:705 [inline]
 kobject_release lib/kobject.c:736 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x139/0x410 lib/kobject.c:753
 netdev_run_todo+0x659/0x930 net/core/dev.c:9973
 default_device_exit_batch+0x2aa/0x360 net/core/dev.c:10946
 cleanup_net+0x423/0x980 net/core/net_namespace.c:597
 process_one_work+0x879/0x1410 kernel/workqueue.c:2307
 worker_thread+0x5a0/0xf60 kernel/workqueue.c:2454
 kthread+0x299/0x340 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>