ci2 starts bisection 2025-05-12 21:01:00.892840348 +0000 UTC m=+16988.641059498 bisecting fixing commit since aa4cd140bba57b7064b4c7a7141bebd336d32087 building syzkaller on d7906effc263366a8b067258cec67072b29aa5e0 ensuring issue is reproducible on original commit aa4cd140bba57b7064b4c7a7141bebd336d32087 testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 29030392a2c1f474e2af822d0bbb7923bd2d267e2423cde3f6b1e207cf64400f run #0: crashed: KASAN: use-after-free Read in __ocfs2_find_path run #1: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #2: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #3: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted run #10: crashed: INFO: rcu detected stall in corrupted run #11: crashed: INFO: rcu detected stall in corrupted run #12: crashed: INFO: rcu detected stall in corrupted run #13: crashed: INFO: rcu detected stall in corrupted run #14: crashed: INFO: rcu detected stall in corrupted run #15: crashed: INFO: rcu detected stall in corrupted run #16: crashed: INFO: rcu detected stall in corrupted run #17: crashed: INFO: rcu detected stall in corrupted run #18: crashed: INFO: rcu detected stall in corrupted run #19: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 31a223eb10e87fbb11d9b17c73cf82e3562fe5501cf148804d969fc69c4a133f run #0: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #1: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #2: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #3: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #4: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP HANG] the bug reproduces without the instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3827 full=7495 leaves diff=2069 split chunks (needed=false): <2069> split chunk #0 of len 2069 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: a4ccf98d038db7550698bfe4c764f869ee87efaa4057163a0ea6f23bfa541297 run #0: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #1: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #2: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #3: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 38b7f472783d48c0c7fa7da40d96ab102f76ceb6c784aaa0456991e882a7c980 run #0: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #1: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #2: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #3: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #4: crashed: WARNING: bad unlock balance in ocfs2_read_blocks run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in corrupted representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 6eb07a552ffeb56ae1606964450093a64c576d7176c98fdc59371676ee49cfde all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: d1c26c00361b6365e5f1f55996b19c7d072ceaa636f695f2974753b39b3d5b90 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed testing commit aa4cd140bba57b7064b4c7a7141bebd336d32087 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 894b1edc4ddb00d2217e86ecd25cf6e8fa972dd71100363c7edbe07a2cc34ab3 all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] the chunk can be dropped minimized to 414 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 BXT_WC_PMIC_OPREGION CFG80211 CMA DAX DLM DRM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_PLAYSTATION HID_SENSOR_HUB HID_SMARTJOYPLUS HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN INTEL_SCU_IPC INTEL_SOC_PMIC_BXTWC IP_SCTP L2TP LEDS_CLASS_MULTICOLOR LIBNVDIMM MAC80211 MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_PLATFORM_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_INTEL_PMC_BXT MFD_MT6360 MFD_MT6370 MFD_RETU MMC MTD MTD_UBI NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NTFS_FS NTFS_RW NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAGE_POOL PAGE_REPORTING PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PLAYSTATION_FF PLFXLC PMIC_OPREGION PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PRISM2_USB PROC_CHILDREN PSI PSTORE PSTORE_842_COMPRESS PSTORE_COMPRESS PSTORE_DEFLATE_COMPRESS PSTORE_DEFLATE_COMPRESS_DEFAULT PSTORE_LZ4HC_COMPRESS PSTORE_LZ4_COMPRESS PSTORE_LZO_COMPRESS PSTORE_ZSTD_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RC_XBOX_DVD RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGULATOR REGULATOR_FIXED_VOLTAGE REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SENSORS_AQUACOMPUTER_D5NEXT SENSORS_CORSAIR_CPRO SENSORS_CORSAIR_PSU SENSORS_NZXT_KRAKEN2 SENSORS_NZXT_SMART2 SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SDIO_DRV SMS_SIANO_DEBUGFS SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_DECOMP_SINGLE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STAGING_MEDIA STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TASKS_TRACE_RCU TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_FUSB302 TYPEC_HD3SS3220 TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_INTEL_PMC TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI TYPEC_WCOVE TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNS3 USB_CDNS3_GADGET USB_CDNS3_HOST USB_CDNS3_PCI_WRAP USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CDNS_HOST USB_CDNS_SUPPORT USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_GENERIC USB_CHIPIDEA_HOST USB_CHIPIDEA_MSM USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_DWC2 USB_GADGET USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN WLAN_VENDOR_PURELIFI ZONE_DEVICE] disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing current HEAD 02b72ccb5f9df707a763d9f7163d7918d3aff0b7 testing commit 02b72ccb5f9df707a763d9f7163d7918d3aff0b7 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 39f22c8bafcaff90e8db9450b3f4abd66a56482675d1be229c37337c2fbd6b3f all runs: OK false negative chance: 0.000 # git bisect start 02b72ccb5f9df707a763d9f7163d7918d3aff0b7 aa4cd140bba57b7064b4c7a7141bebd336d32087 Bisecting: 2235 revisions left to test after this (roughly 11 steps) [62056d1592e63d85e82357ee2ae6a6a294f440b0] net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg determine whether the revision contains the guilty commit revision aa4cd140bba57b7064b4c7a7141bebd336d32087 crashed and is reachable testing commit 62056d1592e63d85e82357ee2ae6a6a294f440b0 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: b5b273ff169c9628675bd8c56a8c485f5e0bb5231907b39b5cd22f3568d65cf1 all runs: OK false negative chance: 0.000 # git bisect bad 62056d1592e63d85e82357ee2ae6a6a294f440b0 Bisecting: 1116 revisions left to test after this (roughly 10 steps) [bb414b7f4194bd3deac120693a7f4ab74cef9bc0] mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves determine whether the revision contains the guilty commit revision aa4cd140bba57b7064b4c7a7141bebd336d32087 crashed and is reachable testing commit bb414b7f4194bd3deac120693a7f4ab74cef9bc0 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 665e184ff3b2c50d9dafd03c4213297f2a9d2388220248974bf4bcf166d41e4d all runs: OK false negative chance: 0.000 # git bisect bad bb414b7f4194bd3deac120693a7f4ab74cef9bc0 Bisecting: 558 revisions left to test after this (roughly 9 steps) [b1a661d9cc4886d6fe70454dc9eeac95963a7a0e] parisc: Fix stack start for ADDR_NO_RANDOMIZE personality determine whether the revision contains the guilty commit revision aa4cd140bba57b7064b4c7a7141bebd336d32087 crashed and is reachable testing commit b1a661d9cc4886d6fe70454dc9eeac95963a7a0e gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 9d25d464bb064dbab0c04eadd432538e5be853ea5309e84952fe4e8be3fd7740 all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] # git bisect good b1a661d9cc4886d6fe70454dc9eeac95963a7a0e Bisecting: 279 revisions left to test after this (roughly 8 steps) [e6f0abe6f19bf53fd933691a4dc895f8a08fa4f4] x86/entry: Have entry_ibpb() invalidate return predictions determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit e6f0abe6f19bf53fd933691a4dc895f8a08fa4f4 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 552d9181ee1e1578895a7a0b5aff29afc41578191072d6059e00b604e9e7d5af all runs: OK false negative chance: 0.000 # git bisect bad e6f0abe6f19bf53fd933691a4dc895f8a08fa4f4 Bisecting: 139 revisions left to test after this (roughly 7 steps) [a2493904e95ce94bbec819d8f7f03b99976eb25c] io_uring: check if we need to reschedule during overflow flush determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit a2493904e95ce94bbec819d8f7f03b99976eb25c gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 569fc7d19aa3a732bc1c52f25404e3a20e4bf5fe9b0bc778e78cb2958bf85b2f all runs: OK false negative chance: 0.000 # git bisect bad a2493904e95ce94bbec819d8f7f03b99976eb25c Bisecting: 69 revisions left to test after this (roughly 6 steps) [5a306c8641f47303ab320f58c9486b49ff9ffc3d] io_uring/net: harden multishot termination case for recv determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit 5a306c8641f47303ab320f58c9486b49ff9ffc3d gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: f5f2d3c91c83a604a82d066e85de95f80131b3fb8a07f29646ccfa191f720913 all runs: OK false negative chance: 0.000 # git bisect bad 5a306c8641f47303ab320f58c9486b49ff9ffc3d Bisecting: 34 revisions left to test after this (roughly 5 steps) [28936dec349860e6125576e623497a05bc444fe7] clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL determine whether the revision contains the guilty commit revision aa4cd140bba57b7064b4c7a7141bebd336d32087 crashed and is reachable testing commit 28936dec349860e6125576e623497a05bc444fe7 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 6b0516dad3d9c07f958e9398f74e6c09a9ea52830740e280a06cf07dc47a83f2 all runs: OK false negative chance: 0.000 # git bisect bad 28936dec349860e6125576e623497a05bc444fe7 Bisecting: 16 revisions left to test after this (roughly 4 steps) [8bcec93396e529a0fc5052532405556b49308fc5] perf hist: Update hist symbol when updating maps determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit 8bcec93396e529a0fc5052532405556b49308fc5 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: a66c4851d33859832afb8d23bd5d5afe6d98813c9d972fcb413b5b0e77a25914 all runs: OK false negative chance: 0.000 # git bisect bad 8bcec93396e529a0fc5052532405556b49308fc5 Bisecting: 8 revisions left to test after this (roughly 3 steps) [24cf79398f928757abf224500b36aa2458d0497a] ocfs2: fix the la space leak when unmounting an ocfs2 volume determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit 24cf79398f928757abf224500b36aa2458d0497a gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 75a439fa70f4944527e2125a9d345e1971334ba68752942430305ffbf5514c4e all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] # git bisect good 24cf79398f928757abf224500b36aa2458d0497a Bisecting: 4 revisions left to test after this (roughly 2 steps) [81aba693b129e82e11bb54f569504d943d018de9] ocfs2: remove unreasonable unlock in ocfs2_read_blocks determine whether the revision contains the guilty commit revision 24cf79398f928757abf224500b36aa2458d0497a crashed and is reachable testing commit 81aba693b129e82e11bb54f569504d943d018de9 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: f9835df27e1f3b1ae66f7833ba05f5c30008b947b3a8398887b869bbd77e3954 all runs: OK false negative chance: 0.000 # git bisect bad 81aba693b129e82e11bb54f569504d943d018de9 Bisecting: 1 revision left to test after this (roughly 1 step) [5c2072f02c0d75802ec28ec703b7d43a0dd008b5] ocfs2: reserve space for inline xattr before attaching reflink tree determine whether the revision contains the guilty commit revision b1a661d9cc4886d6fe70454dc9eeac95963a7a0e crashed and is reachable testing commit 5c2072f02c0d75802ec28ec703b7d43a0dd008b5 gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 7b88379e53db52a8bdb4e2bbd2af1b82a50a7b4c2b8d63ea016802c49c69dfc1 all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] # git bisect good 5c2072f02c0d75802ec28ec703b7d43a0dd008b5 Bisecting: 0 revisions left to test after this (roughly 0 steps) [bbf41277df8b33fbedf4750a9300c147e8f104eb] ocfs2: cancel dqi_sync_work before freeing oinfo determine whether the revision contains the guilty commit revision 24cf79398f928757abf224500b36aa2458d0497a crashed and is reachable testing commit bbf41277df8b33fbedf4750a9300c147e8f104eb gcc compiler: Debian clang version 20.1.2 (++20250402124445+58df0ef89dd6-1~exp1~20250402004600.97), Debian LLD 20.1.2 kernel signature: 7ed85d846f3d96c6d1f9ef7e0980ef01d05a4c74d3ea4071af51e0e376d9e5b2 all runs: crashed: WARNING: bad unlock balance in ocfs2_read_blocks representative crash: WARNING: bad unlock balance in ocfs2_read_blocks, types: [LOCKDEP] # git bisect good bbf41277df8b33fbedf4750a9300c147e8f104eb 81aba693b129e82e11bb54f569504d943d018de9 is the first bad commit commit 81aba693b129e82e11bb54f569504d943d018de9 Author: Lizhi Xu Date: Mon Sep 2 10:36:35 2024 +0800 ocfs2: remove unreasonable unlock in ocfs2_read_blocks commit c03a82b4a0c935774afa01fd6d128b444fd930a1 upstream. Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock. Link: https://lkml.kernel.org/r/20240902023636.1843422-1-joseph.qi@linux.alibaba.com Link: https://lkml.kernel.org/r/20240902023636.1843422-2-joseph.qi@linux.alibaba.com Fixes: cf76c78595ca ("ocfs2: don't put and assigning null to bh allocated outside") Signed-off-by: Lizhi Xu Signed-off-by: Joseph Qi Reviewed-by: Heming Zhao Reviewed-by: Joseph Qi Reported-by: syzbot+ab134185af9ef88dfed5@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=ab134185af9ef88dfed5 Tested-by: syzbot+ab134185af9ef88dfed5@syzkaller.appspotmail.com Cc: Mark Fasheh Cc: Joel Becker Cc: Junxiao Bi Cc: Changwei Ge Cc: Gang He Cc: Jun Piao Cc: [4.20+] Signed-off-by: Andrew Morton Signed-off-by: Greg Kroah-Hartman fs/ocfs2/buffer_head_io.c | 1 - 1 file changed, 1 deletion(-) accumulated error probability: 0.00 culprit signature: f9835df27e1f3b1ae66f7833ba05f5c30008b947b3a8398887b869bbd77e3954 parent signature: 7ed85d846f3d96c6d1f9ef7e0980ef01d05a4c74d3ea4071af51e0e376d9e5b2 revisions tested: 20, total time: 4h28m23.895028534s (build: 1h59m9.957370074s, test: 2h19m20.374709311s) first good commit: 81aba693b129e82e11bb54f569504d943d018de9 ocfs2: remove unreasonable unlock in ocfs2_read_blocks recipients (to): ["akpm@linux-foundation.org" "gregkh@linuxfoundation.org" "heming.zhao@suse.com" "joseph.qi@linux.alibaba.com" "lizhi.xu@windriver.com" "syzbot+ab134185af9ef88dfed5@syzkaller.appspotmail.com"] recipients (cc): []