ci starts bisection 2023-07-14 09:44:29.69689239 +0000 UTC m=+10262.345662206 bisecting cause commit starting from a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 building syzkaller on 6e553898b1a72d31248a221bb0bff5bc62fce879 ensuring issue is reproducible on original commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85fc3ad3b8d4ed7e6d334ab3d4c65723294dac8910859682187acea51fad2b59 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b4f91de4b6fbd009b61782ffdf799d3e5d6daa4fa4818bde5136ea690872267b all runs: OK kconfig minimization: base=3883 full=7627 leaves diff=1998 split chunks (needed=false): <1998> split chunk #0 of len 1998 into 5 parts testing without sub-chunk 1/5 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3aaf90edeb742b63aa6cfafef3d3529874cbc9871f4fd760800e80612481874c all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2a5fb7296f0e25f54789e0da7571282a94d3719d375c1948bfd25f84caf59763 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6f4d9798740461ca5faaa04d91895b31b364a18ac83112f54cea6c982cc15ab3 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 01b8fd6fba74a4fce4478a6682cd624013e20a792010d402858e82f68cbc51b0 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 testing commit a901a3568fd26ca9c4a82d8bc5ed5b3ed844d451 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3af1f4258b2514802ce273a1e3873464d4ee1b662a3a18aae8a1f12f1fbf638e all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] the chunk can be dropped testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4d212bb7c361296bd55f973f3e98af37c677bdea26474861e2b5ecbbde09b9c6 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bc3e0538eebc73bddf42b516785c832891b71ca94af1aba6913ae9bc46b04a58 all runs: OK # git bisect start 6995e2de6891c724bfeb2db33d7b87775f913ad1 457391b0380335d5e9a5babdec90ac53928b23b4 Bisecting: 8012 revisions left to test after this (roughly 13 steps) [d42b1c47570eb2ed818dc3fe94b2678124af109d] Merge tag 'devicetree-for-6.4-1' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux testing commit d42b1c47570eb2ed818dc3fe94b2678124af109d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e619764212d86fbb10379f1840eb9b16af3c0e4ac773b57401035b9b93676d7 all runs: OK # git bisect good d42b1c47570eb2ed818dc3fe94b2678124af109d Bisecting: 3963 revisions left to test after this (roughly 12 steps) [58390c8ce1bddb6c623f62e7ed36383e7fa5c02f] Merge tag 'iommu-updates-v6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu testing commit 58390c8ce1bddb6c623f62e7ed36383e7fa5c02f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3ab40ef77049215751f991f7857be20479613922e35886587a99d2653102cd1e all runs: OK # git bisect good 58390c8ce1bddb6c623f62e7ed36383e7fa5c02f Bisecting: 1979 revisions left to test after this (roughly 11 steps) [adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3] Merge tag 'fbdev-for-6.4-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev testing commit adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3f878535b778b31f81fc68f9e9a4bb1e5a02666cfc5b7994bcd2c34a58dc9308 all runs: OK # git bisect good adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3 Bisecting: 989 revisions left to test after this (roughly 10 steps) [6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4] Bluetooth: ISO: don't try to remove CIG if there are bound CIS left testing commit 6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 88b7b084c1a1311a526c8046e2a2d2ad33d81c73edd3f752a5e1b4219e1c2d5b all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] # git bisect bad 6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4 Bisecting: 492 revisions left to test after this (roughly 9 steps) [ecea3ba2fba2124c8bdc87b27b3829a6015ff854] Merge tag 'platform-drivers-x86-v6.4-3' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86 testing commit ecea3ba2fba2124c8bdc87b27b3829a6015ff854 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0e078f15787ac92a7a6e18830192294b4c7f2f4e3686112519bcc335c7b64885 all runs: OK # git bisect good ecea3ba2fba2124c8bdc87b27b3829a6015ff854 Bisecting: 245 revisions left to test after this (roughly 8 steps) [957f3f8e5343041ddb9a1265ab661db259cc712e] Merge tag 'char-misc-6.4-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit 957f3f8e5343041ddb9a1265ab661db259cc712e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f6f5cb425b364028abbe871a5b880d923277b48806a8e559e458d21da3a2165e all runs: OK # git bisect good 957f3f8e5343041ddb9a1265ab661db259cc712e Bisecting: 125 revisions left to test after this (roughly 7 steps) [ba059590ec97ddf137ac7f200bfc5c8ce90c0237] Merge tag 'ata-6.4-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/libata testing commit ba059590ec97ddf137ac7f200bfc5c8ce90c0237 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bad482aebdb819f4703ee087f15f392f5a6b092a8d4037a0ab890175c27eadc5 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] # git bisect bad ba059590ec97ddf137ac7f200bfc5c8ce90c0237 Bisecting: 57 revisions left to test after this (roughly 6 steps) [8b817fded42d8fe3a0eb47b1149d907851a3c942] Merge tag 'trace-v6.4-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace testing commit 8b817fded42d8fe3a0eb47b1149d907851a3c942 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16c0b8ca7b4d9c478f97e3c2f4b24aee55bcc69995254e5177dab9aab3f112e2 all runs: OK # git bisect good 8b817fded42d8fe3a0eb47b1149d907851a3c942 Bisecting: 30 revisions left to test after this (roughly 5 steps) [fd2186d1c708fa0ec64291da5aa6b26fb44197c3] Merge tag 'ext4_for_linus_stable' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4 testing commit fd2186d1c708fa0ec64291da5aa6b26fb44197c3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 347992e3a8ecb3832faeb43d65e53338f03aec83e2ebd5dda43c20dfd68c2955 all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] # git bisect bad fd2186d1c708fa0ec64291da5aa6b26fb44197c3 Bisecting: 10 revisions left to test after this (roughly 4 steps) [afead42fdfcae714fb6ac41a5c323629cdb6f9ee] Merge tag 'perf-tools-fixes-for-v6.4-2-2023-05-30' of git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux testing commit afead42fdfcae714fb6ac41a5c323629cdb6f9ee gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3cf6d7c86b0b9b70fb2a566d1574f43cec479cf3f456afc48f94b8d1cfbd8782 all runs: OK # git bisect good afead42fdfcae714fb6ac41a5c323629cdb6f9ee Bisecting: 5 revisions left to test after this (roughly 3 steps) [1077b2d53ef53629c14106aecf633bebd286c04c] ext4: fix fsync for non-directories testing commit 1077b2d53ef53629c14106aecf633bebd286c04c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 47ebcbdea40864fc129d87ad8e0d39316c4ecfb78e92c30b240c1effa2fe010c all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] # git bisect bad 1077b2d53ef53629c14106aecf633bebd286c04c Bisecting: 2 revisions left to test after this (roughly 1 step) [b928dfdcb27d8fa59917b794cfba53052a2f050f] ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() testing commit b928dfdcb27d8fa59917b794cfba53052a2f050f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9adb941a7ae677a815b21d273a29784a15df405d00b823b70c6ef050cd2f1ac0 all runs: OK # git bisect good b928dfdcb27d8fa59917b794cfba53052a2f050f Bisecting: 0 revisions left to test after this (roughly 1 step) [aff3bea95388299eec63440389b4545c8041b357] ext4: add lockdep annotations for i_data_sem for ea_inode's testing commit aff3bea95388299eec63440389b4545c8041b357 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 21b79dbeade516522b3f8b5d16802519ee28819f379741a5868c32310242967f all runs: crashed: WARNING: locking bug in __ext4_ioctl representative crash: WARNING: locking bug in __ext4_ioctl, types: [LOCKDEP] # git bisect bad aff3bea95388299eec63440389b4545c8041b357 Bisecting: 0 revisions left to test after this (roughly 0 steps) [2bc7e7c1a3bc9bd0cbf0f71006f6fe7ef24a00c2] ext4: disallow ea_inodes with extended attributes testing commit 2bc7e7c1a3bc9bd0cbf0f71006f6fe7ef24a00c2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1956957eb665bb7b02a9363a88c61244f47ae8e8587e44b5293f67b682a478cf all runs: OK # git bisect good 2bc7e7c1a3bc9bd0cbf0f71006f6fe7ef24a00c2 aff3bea95388299eec63440389b4545c8041b357 is the first bad commit commit aff3bea95388299eec63440389b4545c8041b357 Author: Theodore Ts'o Date: Tue May 23 23:49:51 2023 -0400 ext4: add lockdep annotations for i_data_sem for ea_inode's Treat i_data_sem for ea_inodes as being in their own lockdep class to avoid lockdep complaints about ext4_setattr's use of inode_lock() on normal inodes potentially causing lock ordering with i_data_sem on ea_inodes in ext4_xattr_inode_write(). However, ea_inodes will be operated on by ext4_setattr(), so this isn't a problem. Cc: stable@kernel.org Link: https://syzkaller.appspot.com/bug?extid=298c5d8fb4a128bc27b0 Reported-by: syzbot+298c5d8fb4a128bc27b0@syzkaller.appspotmail.com Signed-off-by: Theodore Ts'o Link: https://lore.kernel.org/r/20230524034951.779531-5-tytso@mit.edu Signed-off-by: Theodore Ts'o fs/ext4/ext4.h | 2 ++ fs/ext4/xattr.c | 4 ++++ 2 files changed, 6 insertions(+) culprit signature: 21b79dbeade516522b3f8b5d16802519ee28819f379741a5868c32310242967f parent signature: 1956957eb665bb7b02a9363a88c61244f47ae8e8587e44b5293f67b682a478cf revisions tested: 23, total time: 4h21m27.610812887s (build: 1h35m58.692306487s, test: 2h40m5.49600455s) first bad commit: aff3bea95388299eec63440389b4545c8041b357 ext4: add lockdep annotations for i_data_sem for ea_inode's recipients (to): ["tytso@mit.edu"] recipients (cc): [] crash: WARNING: locking bug in __ext4_ioctl ------------[ cut here ]------------ Looking for class "&ei->i_data_sem" with key __key.0, but found a different class "&ei->i_data_sem" with the same key WARNING: CPU: 0 PID: 2069 at kernel/locking/lockdep.c:938 look_up_lock_class+0xad/0x120 kernel/locking/lockdep.c:938 Modules linked in: CPU: 0 PID: 2069 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 RIP: 0010:look_up_lock_class+0xad/0x120 kernel/locking/lockdep.c:938 Code: 59 49 8b 14 24 48 81 fa 60 03 1c 85 74 4c 80 3d 00 68 57 01 00 75 43 48 c7 c7 60 43 67 83 c6 05 f0 67 57 01 01 e8 03 5a ea fd <0f> 0b eb 2c 89 74 24 04 e8 36 09 cf fe 8b 74 24 04 48 c7 c7 a0 42 RSP: 0018:ffffc90001dff850 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffffffff865beea0 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffffffff86ecd421 R08: 0000000000000001 R09: ffff8881f702878b R10: ffffed103ee050f1 R11: 0000000000000001 R12: ffff88812036ef80 R13: ffff88812036ef80 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f3d959d56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3d95f6e0c0 CR3: 000000012270a000 CR4: 0000000000350ef0 Call Trace: register_lock_class+0xbd/0x1320 kernel/locking/lockdep.c:1290 __lock_acquire+0x12e/0x5da0 kernel/locking/lockdep.c:4965 lock_acquire kernel/locking/lockdep.c:5705 [inline] lock_acquire+0x1ae/0x510 kernel/locking/lockdep.c:5670 down_write_nested+0x97/0x200 kernel/locking/rwsem.c:1689 swap_inode_boot_loader fs/ext4/ioctl.c:423 [inline] __ext4_ioctl+0x1854/0x40c0 fs/ext4/ioctl.c:1418 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x125/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3d95e52b29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3d959d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3d95f71f80 RCX: 00007f3d95e52b29 RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 RBP: 00007f3d95e9e47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f3d95f71f80 R15: 00007ffeff5658a8