ci starts bisection 2023-07-30 14:36:47.109021115 +0000 UTC m=+97.276138437 bisecting cause commit starting from d7b3af5a77e8d8da28f435f313e069aea5bcf172 building syzkaller on 924768299f97ac88b84f09eb979919305c8af5bb ensuring issue is reproducible on original commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5c0a9a2b680242ba176bc309ea2989faa3b18acea6798f44b410865ea32e2178 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6aeab8b49202c334a52bc90b442e19a0a4f1c13f9a8f8ead7dbce86d939c5e04 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3883 full=7666 leaves diff=2009 split chunks (needed=false): <2009> split chunk #0 of len 2009 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 28d9b0ddff45edb46bf95a47ea839b2c12ae83baf38410ea49fd2fe4432392ed all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b631ddb924ab001fdf3252a65a1b40845de90ca7ce69b9d79ff8e7ef6ba0873a run #0: crashed: WARNING: refcount bug in xp_put_pool run #1: crashed: WARNING: refcount bug in xp_put_pool run #2: crashed: WARNING: refcount bug in xp_put_pool run #3: crashed: WARNING: refcount bug in xp_put_pool run #4: crashed: WARNING: refcount bug in xp_put_pool run #5: crashed: WARNING: refcount bug in xp_put_pool run #6: crashed: WARNING: refcount bug in xp_put_pool run #7: crashed: WARNING: refcount bug in xp_put_pool run #8: crashed: WARNING: refcount bug in xp_put_pool run #9: crashed: WARNING: refcount bug in xp_put_pool run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8eebb4d74a434f1f60278d7a7aebd525546eec00247f1653f4c014735f8e60ee all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 07fb48e0469cf2a11e80debe740403ff18293fac9efc6e14d9759f031d36f5d7 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d7b3af5a77e8d8da28f435f313e069aea5bcf172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f410fc9978a348e06518f0aecb2bdc96d25b375c56ea075150abd5548204b25 all runs: OK false negative chance: 0.000 minimized to 803 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_PLATFORM_PROFILE ADDRESS_MASKING ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_SUPPORTS_CRASH_DUMP ARCH_SUPPORTS_KEXEC ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG ARCH_SUPPORTS_KEXEC_FILE ARCH_SUPPORTS_KEXEC_JUMP ARCH_SUPPORTS_KEXEC_SIG ARCH_SUPPORTS_KEXEC_SIG_FORCE ARCH_WANT_OPTIMIZE_DAX_VMEMMAP ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_BSGLIB BLK_DEV_FD BLK_DEV_INTEGRITY BLK_DEV_INTEGRITY_T10 BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_HIDP BT_HS BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MSFTEXT BT_MTK BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_SLCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARDBUS CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_BQ24190 CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MBYTES CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMMON_CLK COMPAT_NETLINK_MESSAGES CONTIG_ALLOC COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CFB CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECB CRYPTO_ECC CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_OFB CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM2 CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DIMLIB DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DVB_CORE ENCRYPTED_KEYS EXTCON FB FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_ZEROPLUS I2C_MUX IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOMMUFD IOSCHED_BFQ IRQ_REMAP ISDN ISDN_CAPI KVM KVM_INTEL LIBNVDIMM MAC80211 MAC80211_LEDS MEDIA_ANALOG_TV_SUPPORT MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_CONTROLLER MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MTD NET_CLS_U32 NET_SCH_DEFAULT PARPORT PARTITION_ADVANCED PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RC_CORE RFKILL SERIAL_DEV_BUS SND SOUND SPI SSB TAP TARGET_CORE TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS TUN USB_AMD5536UDC USB_ATM USB_CONFIGFS USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PHY USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USERFAULTFD USERIO USERMODE_DRIVER USER_RETURN_NOTIFIER UVC_COMMON U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VETH VFIO VFIO_GROUP VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_PCI_MMAP VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_TASK VHOST_VDPA VHOST_VSOCK VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CMDLINE VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_NOMODESET VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMAP_PFN VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS WANT_COMPAT_NETLINK_MESSAGES WANT_DEV_COREDUMP WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS X86_SGX X86_SGX_KVM X86_X2APIC X86_X32_ABI XARRAY_MULTI XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA ZBUD ZEROPLUS_FF ZLIB_DEFLATE ZONEFS_FS ZONE_DEVICE ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 877408bb5d1ed83ecc0d238ef2adc19c24da1434bd0854bbca4c62237a8541db all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4adc0afc1776c9858bb2d9c4821b5c8fad5c2061db374e8561cbb5f8aa80590f run #0: crashed: WARNING: refcount bug in __sk_destruct run #1: crashed: WARNING: refcount bug in __sk_destruct run #2: crashed: WARNING: refcount bug in xp_put_pool run #3: crashed: WARNING: refcount bug in xp_put_pool run #4: crashed: WARNING: refcount bug in xp_put_pool run #5: crashed: WARNING: refcount bug in xp_put_pool run #6: crashed: WARNING: refcount bug in xp_put_pool run #7: crashed: WARNING: refcount bug in xp_put_pool run #8: crashed: WARNING: refcount bug in xp_put_pool run #9: crashed: WARNING: refcount bug in xp_put_pool run #10: crashed: WARNING: refcount bug in xp_put_pool run #11: crashed: WARNING: refcount bug in xp_put_pool run #12: crashed: WARNING: refcount bug in xp_put_pool run #13: crashed: WARNING: refcount bug in xp_put_pool run #14: crashed: WARNING: refcount bug in xp_put_pool run #15: crashed: WARNING: refcount bug in xp_put_pool run #16: crashed: WARNING: refcount bug in xp_put_pool run #17: crashed: WARNING: refcount bug in xp_put_pool run #18: crashed: WARNING: refcount bug in xp_put_pool run #19: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in __sk_destruct, types: [WARNING] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2c835ba5f3196ce4bc97b5fdf712ab96ccffb1f3d324e27a260f9a9cb61e13bd all runs: OK false negative chance: 0.000 # git bisect start 457391b0380335d5e9a5babdec90ac53928b23b4 c9c3395d5e3dcc6daee66c6908354d47bf98cb0c Bisecting: 7399 revisions left to test after this (roughly 13 steps) [a5c95ca18a98d742d0a4a04063c32556b5b66378] Merge tag 'drm-next-2023-02-23' of git://anongit.freedesktop.org/drm/drm testing commit a5c95ca18a98d742d0a4a04063c32556b5b66378 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 50e6eedb3b29a3e647067d6f8763099da5e18ed7561d33a4b7fad88456858fd4 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] # git bisect bad a5c95ca18a98d742d0a4a04063c32556b5b66378 Bisecting: 5053 revisions left to test after this (roughly 12 steps) [36289a03bcd3aabdf66de75cb6d1b4ee15726438] Merge tag 'v6.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 testing commit 36289a03bcd3aabdf66de75cb6d1b4ee15726438 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 01cbf41ddbc662f351354c974abcd85f85db3bdded953f832f157f2268c70c5c all runs: OK false negative chance: 0.000 # git bisect good 36289a03bcd3aabdf66de75cb6d1b4ee15726438 Bisecting: 2521 revisions left to test after this (roughly 11 steps) [0175ec3a28c695562a08fdccf73f2ec5ed744e2f] Merge tag 'regulator-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator testing commit 0175ec3a28c695562a08fdccf73f2ec5ed744e2f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1507f98d511c7f62ec30996b5aab4a322a3e57cdd926c828a52a5f60f8dc52a6 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] # git bisect bad 0175ec3a28c695562a08fdccf73f2ec5ed744e2f Bisecting: 1267 revisions left to test after this (roughly 10 steps) [cb6b2e11a42decea2afc77df73ec7326db1ac25f] devlink: Fix memleak in health diagnose callback testing commit cb6b2e11a42decea2afc77df73ec7326db1ac25f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 87f81d70613a7f2f7bf544c61f013c3a4b9dc0fb1f723b7726f789fa69946727 all runs: boot failed: BUG: bad usercopy in netlink_sendmsg unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip cb6b2e11a42decea2afc77df73ec7326db1ac25f Bisecting: 1267 revisions left to test after this (roughly 10 steps) [ec993edf05ca4eee5878edf51fdb5ffa2b1decc3] ipv6: icmp6: add drop reason support to ndisc_redirect_rcv() testing commit ec993edf05ca4eee5878edf51fdb5ffa2b1decc3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7bc88245fc5608b995a3af639954feec8bda20b36e8d96ea55517b892e6b0a72 run #0: crashed: WARNING: refcount bug in xp_put_pool run #1: crashed: WARNING: refcount bug in xp_put_pool run #2: crashed: WARNING: refcount bug in xp_put_pool run #3: crashed: WARNING: refcount bug in xp_put_pool run #4: crashed: WARNING: refcount bug in xp_put_pool run #5: crashed: WARNING: refcount bug in xp_put_pool run #6: crashed: WARNING: refcount bug in xp_put_pool run #7: crashed: WARNING: refcount bug in xp_put_pool run #8: crashed: WARNING: refcount bug in xp_put_pool run #9: crashed: WARNING: refcount bug in xp_put_pool run #10: crashed: WARNING: refcount bug in xp_put_pool run #11: crashed: WARNING: refcount bug in xp_put_pool run #12: crashed: WARNING: refcount bug in xp_put_pool run #13: crashed: WARNING: refcount bug in xp_put_pool run #14: crashed: WARNING: refcount bug in xp_put_pool run #15: crashed: WARNING: refcount bug in xp_put_pool run #16: crashed: WARNING: refcount bug in xp_put_pool run #17: crashed: WARNING: refcount bug in xp_put_pool run #18: OK representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] # git bisect bad ec993edf05ca4eee5878edf51fdb5ffa2b1decc3 Bisecting: 946 revisions left to test after this (roughly 10 steps) [36b0fb13b5474b2f5412435e3c62c639dc626689] Merge branch 'kfunc-annotation' testing commit 36b0fb13b5474b2f5412435e3c62c639dc626689 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e8fa16551bccc60ef51a8922c48c8db25643d64a577f0c0a1646fce42c19ccbc all runs: OK false negative chance: 0.000 # git bisect good 36b0fb13b5474b2f5412435e3c62c639dc626689 Bisecting: 476 revisions left to test after this (roughly 9 steps) [d12f9ad028062ff3ee2bfca3247f8812269d1f06] Documentation: isdn: correct spelling testing commit d12f9ad028062ff3ee2bfca3247f8812269d1f06 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e83a467bddbe09f3bafac8ea9a9d5d7ef30a2ac7e31c7633af6eb2ed0e715b7 all runs: OK false negative chance: 0.000 # git bisect good d12f9ad028062ff3ee2bfca3247f8812269d1f06 Bisecting: 237 revisions left to test after this (roughly 8 steps) [40967f77dfa9fa728b7f36a5d2eb432f39de185c] Merge branch 'seg6-add-psp-flavor-support-for-srv6-end-behavior' testing commit 40967f77dfa9fa728b7f36a5d2eb432f39de185c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 219ab86e5ba9f862d70cac57948f89a78306ce3fe0513e0ee04eb1d7c8ee3383 all runs: OK false negative chance: 0.000 # git bisect good 40967f77dfa9fa728b7f36a5d2eb432f39de185c Bisecting: 118 revisions left to test after this (roughly 7 steps) [5da5ba7e6ec4f13c2abba8de3578a3c197925243] wifi: rtw89: add use of pkt_list offload to debug entry testing commit 5da5ba7e6ec4f13c2abba8de3578a3c197925243 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b23953a172b71430641271d95e7bc8f5d2cdec33f5986c2397ab7dbb21191e83 all runs: OK false negative chance: 0.000 # git bisect good 5da5ba7e6ec4f13c2abba8de3578a3c197925243 Bisecting: 59 revisions left to test after this (roughly 6 steps) [90b2c3cc4b718d7e5591e812313dd72677d9fad0] wifi: nl80211: return error message for malformed chandef testing commit 90b2c3cc4b718d7e5591e812313dd72677d9fad0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7b9284cabd6d498d48bc0fe4b1ff1b90f91dbe015734bdba543f363582f3e61e all runs: OK false negative chance: 0.000 # git bisect good 90b2c3cc4b718d7e5591e812313dd72677d9fad0 Bisecting: 29 revisions left to test after this (roughly 5 steps) [4048a6a7380c8be2f06c1c386dd63d1bd3cdb0a0] wifi: cfg80211: remove gfp parameter from cfg80211_obss_color_collision_notify description testing commit 4048a6a7380c8be2f06c1c386dd63d1bd3cdb0a0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 660d155017c979e5f2c77c2c2131bd9643ecdfef4a6d12e9d29dd17aadb2c10a all runs: OK false negative chance: 0.000 # git bisect good 4048a6a7380c8be2f06c1c386dd63d1bd3cdb0a0 Bisecting: 14 revisions left to test after this (roughly 4 steps) [62747512ebe6cd292e280aa7dc1dd37d36dcb637] net: ipa: avoid setting an undefined field testing commit 62747512ebe6cd292e280aa7dc1dd37d36dcb637 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 38e771b8f73fa446c26c2feb3d5eb251f660ed1c2a6e64388ef6949fb9c67e7e all runs: OK false negative chance: 0.000 # git bisect good 62747512ebe6cd292e280aa7dc1dd37d36dcb637 Bisecting: 7 revisions left to test after this (roughly 3 steps) [64cb6aad12328015202af5b2a9623c6bcc021855] net/sched: taprio: dynamic max_sdu larger than the max_mtu is unlimited testing commit 64cb6aad12328015202af5b2a9623c6bcc021855 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5a8f3c58482461042ad62dfc7005e0b2fe5091e507152233866da904c8a44f34 all runs: OK false negative chance: 0.000 # git bisect good 64cb6aad12328015202af5b2a9623c6bcc021855 Bisecting: 3 revisions left to test after this (roughly 2 steps) [7c9c8913f4523cda30a710736844d74bfee060a4] ipv6: icmp6: add drop reason support to ndisc_recv_ns() testing commit 7c9c8913f4523cda30a710736844d74bfee060a4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e033fd127cb597a8ee5f6f1897b576a51b58d457f43dab50839863564ec889c2 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] # git bisect bad 7c9c8913f4523cda30a710736844d74bfee060a4 Bisecting: 1 revision left to test after this (roughly 1 step) [9f78bf330a66cd400b3e00f370f597e9fa939207] xsk: support use vaddr as ring testing commit 9f78bf330a66cd400b3e00f370f597e9fa939207 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e70027686f284e2bdbc182d12df7f231ce59e9b305bd5a9a85fff4ed5874ebf6 all runs: crashed: WARNING: refcount bug in xp_put_pool representative crash: WARNING: refcount bug in xp_put_pool, types: [WARNING] # git bisect bad 9f78bf330a66cd400b3e00f370f597e9fa939207 Bisecting: 0 revisions left to test after this (roughly 0 steps) [b148d400f820637bcc95f6aca64c8763a2db858f] Merge branch 'taprio-queuemaxsdu-fixes' testing commit b148d400f820637bcc95f6aca64c8763a2db858f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: decf6424cb97ac2fb28b9c21f2f6ad35296c6a27493c15dbc951742270e38a98 all runs: OK false negative chance: 0.000 # git bisect good b148d400f820637bcc95f6aca64c8763a2db858f 9f78bf330a66cd400b3e00f370f597e9fa939207 is the first bad commit commit 9f78bf330a66cd400b3e00f370f597e9fa939207 Author: Xuan Zhuo Date: Thu Feb 16 16:30:47 2023 +0800 xsk: support use vaddr as ring When we try to start AF_XDP on some machines with long running time, due to the machine's memory fragmentation problem, there is no sufficient contiguous physical memory that will cause the start failure. If the size of the queue is 8 * 1024, then the size of the desc[] is 8 * 1024 * 8 = 16 * PAGE, but we also add struct xdp_ring size, so it is 16page+. This is necessary to apply for a 4-order memory. If there are a lot of queues, it is difficult to these machine with long running time. Here, that we actually waste 15 pages. 4-Order memory is 32 pages, but we only use 17 pages. This patch replaces __get_free_pages() by vmalloc() to allocate memory to solve these problems. Signed-off-by: Xuan Zhuo Acked-by: Magnus Karlsson Reviewed-by: Alexander Lobakin Signed-off-by: David S. Miller net/xdp/xsk.c | 9 ++------- net/xdp/xsk_queue.c | 11 +++++------ net/xdp/xsk_queue.h | 1 + 3 files changed, 8 insertions(+), 13 deletions(-) accumulated error probability: 0.00 culprit signature: e70027686f284e2bdbc182d12df7f231ce59e9b305bd5a9a85fff4ed5874ebf6 parent signature: decf6424cb97ac2fb28b9c21f2f6ad35296c6a27493c15dbc951742270e38a98 revisions tested: 26, total time: 6h1m4.957383012s (build: 2h8m9.173010457s, test: 3h41m54.189478095s) first bad commit: 9f78bf330a66cd400b3e00f370f597e9fa939207 xsk: support use vaddr as ring recipients (to): ["aleksander.lobakin@intel.com" "davem@davemloft.net" "magnus.karlsson@intel.com" "xuanzhuo@linux.alibaba.com"] recipients (cc): [] crash: WARNING: refcount bug in xp_put_pool ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 0 PID: 4085 at lib/refcount.c:28 refcount_warn_saturate+0xaa/0xf0 lib/refcount.c:28 Modules linked in: CPU: 0 PID: 4085 Comm: syz-executor.4 Not tainted 6.2.0-rc8-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 RIP: 0010:refcount_warn_saturate+0xaa/0xf0 lib/refcount.c:28 Code: 05 06 de 3e 02 01 e8 07 e7 f7 00 0f 0b c3 80 3d f6 dd 3e 02 00 75 95 48 c7 c7 48 c0 68 83 c6 05 e6 dd 3e 02 01 e8 e8 e6 f7 00 <0f> 0b c3 80 3d d5 dd 3e 02 00 0f 85 72 ff ff ff 48 c7 c7 a0 c0 68 RSP: 0018:ffffc90000003eb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff88811420bc00 RCX: 0000000000000000 RDX: 0000000000000101 RSI: ffffc90000003d68 RDI: 00000000ffffffff RBP: ffff888175120800 R08: 0000000000000000 R09: ffffffff83ab1b40 R10: ffffc90000003d60 R11: ffffffff83b91b88 R12: ffff888109af5040 R13: 0000000000000000 R14: ffffffff81267f73 R15: 0000000000000000 FS: 00007fc9e089f6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200000c0 CR3: 0000000148d08000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:283 [inline] __refcount_dec_and_test include/linux/refcount.h:315 [inline] refcount_dec_and_test include/linux/refcount.h:333 [inline] xp_put_pool+0x38/0xc0 net/xdp/xsk_buff_pool.c:279 xsk_destruct+0x1d/0x40 net/xdp/xsk.c:1391 __sk_destruct+0x22/0x270 net/core/sock.c:2135 rcu_do_batch kernel/rcu/tree.c:2246 [inline] rcu_core+0x31d/0x900 kernel/rcu/tree.c:2506 __do_softirq+0x122/0x3a4 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0xa2/0x100 kernel/softirq.c:650 sysvec_apic_timer_interrupt+0xa2/0xd0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_release+0x17e/0x300 kernel/locking/lockdep.c:5692 Code: 0f c1 05 5d f3 dd 7e 83 f8 01 0f 85 29 01 00 00 9c 58 f6 c4 02 0f 85 14 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 04 25 28 00 00 00 0f 85 67 01 00 00 48 83 c4 18 5d 41 5c RSP: 0018:ffffc90000f17d58 EFLAGS: 00000206 RAX: c02fa5f8e5470000 RBX: ffff888113d55000 RCX: ffffc90000f17d64 RDX: 0000000000000001 RSI: ffffffff8353c925 RDI: ffffffff83573b59 RBP: ffffffff83b947a0 R08: 0000000000000000 R09: 0000000000000001 R10: ffff888109af59c8 R11: 0000000000000000 R12: ffffffff81452711 R13: 0000000000000246 R14: ffff888109af5040 R15: 0000000000000002 rcu_lock_release include/linux/rcupdate.h:330 [inline] rcu_read_unlock include/linux/rcupdate.h:797 [inline] percpu_ref_tryget_many include/linux/percpu-refcount.h:250 [inline] percpu_ref_tryget include/linux/percpu-refcount.h:266 [inline] obj_cgroup_tryget include/linux/memcontrol.h:778 [inline] __get_obj_cgroup_from_memcg+0x6e/0xe0 mm/memcontrol.c:3004 get_obj_cgroup_from_current+0xb2/0x130 mm/memcontrol.c:3024 memcg_slab_pre_alloc_hook mm/slab.h:495 [inline] slab_pre_alloc_hook mm/slab.h:725 [inline] slab_alloc_node mm/slub.c:3434 [inline] slab_alloc mm/slub.c:3460 [inline] __kmem_cache_alloc_lru mm/slub.c:3467 [inline] kmem_cache_alloc_lru+0x8e/0x570 mm/slub.c:3483 __d_alloc+0x24/0x220 fs/dcache.c:1769 d_alloc_pseudo+0x9/0x20 fs/dcache.c:1899 alloc_file_pseudo+0x68/0x110 fs/file_table.c:265 sock_alloc_file+0x38/0xa0 net/socket.c:464 __sys_socketpair+0x14b/0x260 net/socket.c:1750 __do_sys_socketpair net/socket.c:1779 [inline] __se_sys_socketpair net/socket.c:1776 [inline] __x64_sys_socketpair+0x16/0x20 net/socket.c:1776 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fc9dfa7cb29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc9e089f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007fc9dfb9bf80 RCX: 00007fc9dfa7cb29 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007fc9dfac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fc9dfb9bf80 R15: 00007ffeac2db8d8 ---------------- Code disassembly (best guess): 0: 0f c1 05 5d f3 dd 7e xadd %eax,0x7eddf35d(%rip) # 0x7eddf364 7: 83 f8 01 cmp $0x1,%eax a: 0f 85 29 01 00 00 jne 0x139 10: 9c pushf 11: 58 pop %rax 12: f6 c4 02 test $0x2,%ah 15: 0f 85 14 01 00 00 jne 0x12f 1b: 41 f7 c5 00 02 00 00 test $0x200,%r13d 22: 74 01 je 0x25 24: fb sti 25: 48 8b 44 24 10 mov 0x10(%rsp),%rax * 2a: 65 48 2b 04 25 28 00 sub %gs:0x28,%rax <-- trapping instruction 31: 00 00 33: 0f 85 67 01 00 00 jne 0x1a0 39: 48 83 c4 18 add $0x18,%rsp 3d: 5d pop %rbp 3e: 41 5c pop %r12