ci starts bisection 2023-12-14 19:17:34.713234359 +0000 UTC m=+83384.062920933 bisecting cause commit starting from 2513974cc3e120bd26ecf43bcc1c40ac32669226 building syzkaller on ebcad15ccd9a570d2e16081b7b07b288462b7b91 ensuring issue is reproducible on original commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 31f975c79d34b413c81b09de3ea82125d8f407c8e9408207af97f4d6460ee1d8 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6336ff466768b0a4d0b022b7cd43799da93d30d2e9ca9d51619be7ce0ad4d9fa all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3923 full=7659 leaves diff=2005 split chunks (needed=false): <2005> split chunk #0 of len 2005 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 44a9c07b70c43cae9a00879fc3579a4dabe8cf7cd81c04d13132ea443997ba07 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 082bb9bc0adfb2c3ce66bd7d5d0fb3c312e5d21c63965d0cc4b9ce532aff8c97 all runs: OK false negative chance: 0.000 testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e787213f7c47f7be2e7e3e021f1282e9c3d4218ad1cb6e1acfb92d199b767420 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0e96e7ed9e82d1bd0efe4277b80f656705988ac7c131f59e15f7b95d597fc84d all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 2513974cc3e120bd26ecf43bcc1c40ac32669226 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 65543c54376685344a9dd13e7b6bf277503c2f17963eb8680a42020374f2cf71 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] the chunk can be dropped minimized to 401 configs; suspects: [6LOWPAN ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI CMA COMMON_CLK DAX DLM DRM DRM_BRIDGE DRM_DEBUG_MM DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DP_AUX_CHARDEV DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXTCON EXTCON_INTEL_CHT_WC F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_CORE FB_DEFERRED_IO FB_IOMEM_FOPS FB_IOMEM_HELPERS FB_NOTIFY FB_SYSMEM_HELPERS FB_SYSMEM_HELPERS_DEFERRED FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GUEST_PERF_EVENTS GVE HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_EVENTFD HAVE_KVM_IRQCHIP HAVE_KVM_IRQFD HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_TIVO HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_DRIVER IOMMUFD_TEST IOMMU_SVA IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_ROUTE_CLASSID IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_PROTO_TCP IRQ_TIME_ACCOUNTING LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MPTCP MTD NETFILTER_ADVANCED NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_TABLES NF_TABLES_NETDEV RADIO_ADAPTERS RADIO_SI4713 RAS RC_CORE RFKILL SND SOUND STAGING TRANSPARENT_HUGEPAGE VIDEO_DEV VIRTIO_FS WAN ZONE_DEVICE] disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f486dd7c27c43395162d928e7be79e087bd191f82bd66a13a75a8cdedc2844d1 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3bc23711f5af4832be65d5f1101334d3643d467a67c74deac2497e77a76a52b0 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d147ac242712b4a8c49957936f96f1d6215021ac5d69244a602ecac01d90ba78 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c317adaf9ca5c0b1e0a2919f2b4f34ab190b546e42acb5491a9d36f9ba510666 all runs: OK false negative chance: 0.000 # git bisect start 6995e2de6891c724bfeb2db33d7b87775f913ad1 c9c3395d5e3dcc6daee66c6908354d47bf98cb0c Bisecting: 15817 revisions left to test after this (roughly 14 steps) [ce7928f7cf988e3f20ec3cca050838b266e9ef14] Merge tag 'wireless-next-2023-03-30' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit ce7928f7cf988e3f20ec3cca050838b266e9ef14 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 58c84780e8a511b48f0d497558213d01dc41731edd8b07e6ba4c3693625edba3 all runs: OK false negative chance: 0.000 # git bisect good ce7928f7cf988e3f20ec3cca050838b266e9ef14 Bisecting: 7904 revisions left to test after this (roughly 13 steps) [34b62f186db9614e55d021f8c58d22fc44c57911] Merge tag 'pci-v6.4-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci testing commit 34b62f186db9614e55d021f8c58d22fc44c57911 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 282a331692d70a11b61a8720aec388e991156b1b951284b15d62eb38eb8e90c9 all runs: OK false negative chance: 0.000 # git bisect good 34b62f186db9614e55d021f8c58d22fc44c57911 Bisecting: 3949 revisions left to test after this (roughly 12 steps) [26c009dffca89b0f8fe7facc41d1ccf88a66825a] Merge tag '6.4-rc-smb3-client-fixes-part1' of git://git.samba.org/sfrench/cifs-2.6 testing commit 26c009dffca89b0f8fe7facc41d1ccf88a66825a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c19fa35c137e447008fa4ba166aee60ad07a8f98862180c4fc03fb3264f6956d all runs: OK false negative chance: 0.000 # git bisect good 26c009dffca89b0f8fe7facc41d1ccf88a66825a Bisecting: 1979 revisions left to test after this (roughly 11 steps) [adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3] Merge tag 'fbdev-for-6.4-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev testing commit adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d63198df064f6eda3e2b80116ae73df266c9b9d91172ef1b9f447a4b54c5745d all runs: OK false negative chance: 0.000 # git bisect good adfbf653a3ba6bb8bbb84ed90bf4f1533db545d3 Bisecting: 989 revisions left to test after this (roughly 10 steps) [6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4] Bluetooth: ISO: don't try to remove CIG if there are bound CIS left testing commit 6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 26a6d703319deb0922b30327e4ca955e5af41bb73a8344f3e8533cbf006bc26e all runs: OK false negative chance: 0.000 # git bisect good 6c242c64a09e78349fb0a5f0a6f8076a3d7c0bb4 Bisecting: 495 revisions left to test after this (roughly 9 steps) [9930f518b6a82ff10a3d13e0cbde05cce04f5930] Merge tag 'drm-misc-fixes-2023-06-16' of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes testing commit 9930f518b6a82ff10a3d13e0cbde05cce04f5930 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 69326c0cc0d9721496be64af4b7c9be5ec19938ed44d4d9322ba37b5c5da2b7a all runs: OK false negative chance: 0.000 # git bisect good 9930f518b6a82ff10a3d13e0cbde05cce04f5930 Bisecting: 248 revisions left to test after this (roughly 8 steps) [606c812eb1d5b5fb0dd9e330ca94b52d7c227830] mm/mmap: Fix error path in do_vmi_align_munmap() testing commit 606c812eb1d5b5fb0dd9e330ca94b52d7c227830 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ae697142bca4dd6edfed8cb130363b653eaebbd3ca46505ddef6cac13d9b1290 all runs: OK false negative chance: 0.000 # git bisect good 606c812eb1d5b5fb0dd9e330ca94b52d7c227830 Bisecting: 128 revisions left to test after this (roughly 7 steps) [412d070b31c3e4018afc6bb1712709df0464da48] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit 412d070b31c3e4018afc6bb1712709df0464da48 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a396939686e4dce748a3234cbf25c76d5fb1f1e8c581c8e1813e1875416c4067 all runs: OK false negative chance: 0.000 # git bisect good 412d070b31c3e4018afc6bb1712709df0464da48 Bisecting: 64 revisions left to test after this (roughly 6 steps) [7f4e09700bdc13ce9aafa279bc999051e9bcda35] wifi: mac80211: report all unusable beacon frames testing commit 7f4e09700bdc13ce9aafa279bc999051e9bcda35 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3b1eb6b3403609ac6a9ea8832aa9ac2266c9d2eb5dd1d7259e0e295c1cd6283d all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] # git bisect bad 7f4e09700bdc13ce9aafa279bc999051e9bcda35 Bisecting: 31 revisions left to test after this (roughly 5 steps) [d7c66073559386b836bded7cdc8b66ee5c049129] net: dsa: mt7530: fix handling of BPDUs on MT7530 switch testing commit d7c66073559386b836bded7cdc8b66ee5c049129 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 60c9875739a2d7ddce0a5bdf275f7ff93861460c42fdf3befc9f807560789a33 all runs: OK false negative chance: 0.000 # git bisect good d7c66073559386b836bded7cdc8b66ee5c049129 Bisecting: 16 revisions left to test after this (roughly 4 steps) [a129b41fe0a8b4da828c46b10f5244ca07a3fec3] Revert "net: phy: dp83867: perform soft reset and retain established link" testing commit a129b41fe0a8b4da828c46b10f5244ca07a3fec3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dbb0584fd25f793d4ec866eba77641fa3c991c5a96dfe0cb712db35501d04fa2 all runs: OK false negative chance: 0.000 # git bisect good a129b41fe0a8b4da828c46b10f5244ca07a3fec3 Bisecting: 8 revisions left to test after this (roughly 3 steps) [db8eae6bc5c702d8e3ab2d0c6bb5976c131576eb] bpf: Force kprobe multi expected_attach_type for kprobe_multi link testing commit db8eae6bc5c702d8e3ab2d0c6bb5976c131576eb gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 315394f0c5a235926503a1142062b783c672230a0c522240acf71df8ef7f9ee9 all runs: OK false negative chance: 0.000 # git bisect good db8eae6bc5c702d8e3ab2d0c6bb5976c131576eb Bisecting: 4 revisions left to test after this (roughly 2 steps) [56a666c48b038e91b76471289e2cf60c79d326b9] mptcp: fix possible list corruption on passive MPJ testing commit 56a666c48b038e91b76471289e2cf60c79d326b9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7b194549e9c07f14d571f3eb16d64c202b38b27d1f6fb0b532254835de4e8fb6 all runs: OK false negative chance: 0.000 # git bisect good 56a666c48b038e91b76471289e2cf60c79d326b9 Bisecting: 2 revisions left to test after this (roughly 1 step) [b7535cfed223a9f02f9530853616f197b386d775] mptcp: drop legacy code around RX EOF testing commit b7535cfed223a9f02f9530853616f197b386d775 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1172edd351f351be5f45e7f7dc7c0559023630c7f22c09db7fb4fde10404672f all runs: OK false negative chance: 0.000 # git bisect good b7535cfed223a9f02f9530853616f197b386d775 Bisecting: 0 revisions left to test after this (roughly 1 step) [533aa0baaa1fe1f9f7f3ae0a368c22df8f3cf127] Merge branch 'mptcp-fixes-for-6-4' testing commit 533aa0baaa1fe1f9f7f3ae0a368c22df8f3cf127 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4f1645554e824d913fca77aa98e711cba9e4261a6bbc33e352f3bd5164e3236e all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] # git bisect bad 533aa0baaa1fe1f9f7f3ae0a368c22df8f3cf127 Bisecting: 0 revisions left to test after this (roughly 0 steps) [57fc0f1ceaa4016354cf6f88533e20b56190e41a] mptcp: ensure listener is unhashed before updating the sk status testing commit 57fc0f1ceaa4016354cf6f88533e20b56190e41a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4469815c067f0b5b97dc61f1eba7ae95a2ac19df84397441a670d0a43790b8c8 all runs: crashed: WARNING in mptcp_check_listen_stop representative crash: WARNING in mptcp_check_listen_stop, types: [WARNING] # git bisect bad 57fc0f1ceaa4016354cf6f88533e20b56190e41a 57fc0f1ceaa4016354cf6f88533e20b56190e41a is the first bad commit commit 57fc0f1ceaa4016354cf6f88533e20b56190e41a Author: Paolo Abeni Date: Tue Jun 20 18:24:23 2023 +0200 mptcp: ensure listener is unhashed before updating the sk status The MPTCP protocol access the listener subflow in a lockless manner in a couple of places (poll, diag). That works only if the msk itself leaves the listener status only after that the subflow itself has been closed/disconnected. Otherwise we risk deadlock in diag, as reported by Christoph. Address the issue ensuring that the first subflow (the listener one) is always disconnected before updating the msk socket status. Reported-by: Christoph Paasch Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/407 Fixes: b29fcfb54cd7 ("mptcp: full disconnect implementation") Cc: stable@vger.kernel.org Signed-off-by: Paolo Abeni Reviewed-by: Matthieu Baerts Signed-off-by: Matthieu Baerts Signed-off-by: Jakub Kicinski net/mptcp/pm_netlink.c | 1 + net/mptcp/protocol.c | 31 +++++++++++++++++++------------ 2 files changed, 20 insertions(+), 12 deletions(-) accumulated error probability: 0.00 culprit signature: 4469815c067f0b5b97dc61f1eba7ae95a2ac19df84397441a670d0a43790b8c8 parent signature: 1172edd351f351be5f45e7f7dc7c0559023630c7f22c09db7fb4fde10404672f revisions tested: 27, total time: 8h1m23.600112978s (build: 4h38m2.86255536s, test: 3h3m14.1289856s) first bad commit: 57fc0f1ceaa4016354cf6f88533e20b56190e41a mptcp: ensure listener is unhashed before updating the sk status recipients (to): ["kuba@kernel.org" "matthieu.baerts@tessares.net" "pabeni@redhat.com"] recipients (cc): [] crash: WARNING in mptcp_check_listen_stop ------------[ cut here ]------------ WARNING: CPU: 0 PID: 2517 at net/mptcp/protocol.c:2907 mptcp_check_listen_stop.part.0+0x3e/0xa0 net/mptcp/protocol.c:2907 Modules linked in: CPU: 0 PID: 2517 Comm: syz-executor.0 Not tainted 6.4.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:mptcp_check_listen_stop.part.0+0x3e/0xa0 net/mptcp/protocol.c:2907 Code: 00 8b 92 d0 00 00 00 65 ff 4c 90 04 48 8b 9f c0 09 00 00 48 85 db 74 11 0f b6 43 12 88 44 24 07 0f b6 44 24 07 3c 0a 74 0b 90 <0f> 0b 90 48 83 c4 08 5b 5d c3 48 89 fd be 01 00 00 00 48 89 df e8 RSP: 0018:ffffc900020a3df8 EFLAGS: 00010293 RAX: 0000000000000007 RBX: ffff888101758c40 RCX: 0000000000000000 RDX: 000000000000000e RSI: 0000000000000000 RDI: ffff888103750000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffff88810beda500 R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 R13: ffff888102e69520 R14: ffff888103750980 R15: 0000000000000000 FS: 000055555610a480(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555610ada8 CR3: 0000000107b2f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: mptcp_check_listen_stop net/mptcp/protocol.c:2930 [inline] __mptcp_close+0x334/0x370 net/mptcp/protocol.c:2928 mptcp_close+0x1e/0x70 net/mptcp/protocol.c:2997 inet_release+0x2d/0x60 net/ipv4/af_inet.c:426 __sock_release+0x32/0xa0 net/socket.c:653 sock_close+0x13/0x20 net/socket.c:1397 __fput+0x89/0x250 fs/file_table.c:321 task_work_run+0x55/0x80 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0x16c/0x180 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x17/0x40 kernel/entry/common.c:297 do_syscall_64+0x46/0x80 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7efed727ba9a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007ffd465750a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007efed727ba9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000032 R08: 0000001b2f260000 R09: 00007efed739bf8c R10: 00007ffd465751f0 R11: 0000000000000293 R12: 00007efed6e00450 R13: ffffffffffffffff R14: 00007efed6e00000 R15: 000000000000b0e9