ci2 starts bisection 2024-02-11 18:38:30.484781971 +0000 UTC m=+178185.564504942
bisecting fixing commit since a507f147e6f06e86b7649b46bc1d3caa34b196d6
building syzkaller on fb427a0782000106c62de76d251e5a02de5406a9
ensuring issue is reproducible on original commit a507f147e6f06e86b7649b46bc1d3caa34b196d6
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: d655c6b282e9eab49b185e8c6ae9e37a4a0202e3b74b5b41609f09a9964b079f
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
check whether we can drop unnecessary instrumentation
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 6acab6b25da972b565bce19c3292fb31dd73e1e308754ecf04ae1c5424073cdb
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the bug reproduces without the instrumentation
disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed
kconfig minimization: base=3820 full=7526 leaves diff=1994
split chunks (needed=false): <1994>
split chunk #0 of len 1994 into 5 parts
testing without sub-chunk 1/5
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c8e08b19d434905f428f097420866767837187ee5fad9d41ba6d3578b80825bf
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: ad93c8e07892ad241793b6d781d0fc1e3d9e6f687543bb7106f53ee229ac18bc
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 6d6ff415ac11c6dcffbf1804146fa4d4922dcbfebb3636c75c121ad819e357e1
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2f2142a7d379572f9147b657e14c00b088cb3d669154baf17714069691526e5e
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: dbbb2fc54862ac19d6dd7aecbaf921bc9718d32d5bbd6bba302237e41887f572
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD f1bb70486c9c11d7e2d55240d4557f9fc575fbac
testing commit f1bb70486c9c11d7e2d55240d4557f9fc575fbac gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: a7fafb27137b7aa7f9895370c2faf32faa8d107116ebf3b05fa0cf99f5286c04
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
crash still not fixed/happens on the oldest tested release
revisions tested: 8, total time: 1h39m36.048521194s (build: 46m14.76152685s, test: 50m24.021354353s)
crash still not fixed or there were kernel test errors
commit msg: Linux 6.1.77
crash: INFO: task hung in ext4_quota_write
INFO: task syz-executor.0:1508 blocked for more than 143 seconds.
Not tainted 6.1.77-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:11816 pid:1508 ppid:1054 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x57f/0x850 kernel/sched/core.c:6558
schedule+0x50/0xb0 kernel/sched/core.c:6634
io_schedule+0x3a/0x50 kernel/sched/core.c:8786
bit_wait_io+0x8/0x50 kernel/sched/wait_bit.c:209
__wait_on_bit_lock+0xb6/0x1b0 kernel/sched/wait_bit.c:90
out_of_line_wait_on_bit_lock+0x95/0xb0 kernel/sched/wait_bit.c:117
lock_buffer include/linux/buffer_head.h:397 [inline]
ext4_quota_write+0x176/0x210 fs/ext4/super.c:7150
qtree_write_dquot+0x97/0x180 fs/quota/quota_tree.c:431
v2_write_dquot+0x53/0x80 fs/quota/quota_v2.c:358
dquot_commit+0xce/0x110 fs/quota/dquot.c:512
ext4_write_dquot fs/ext4/super.c:6753 [inline]
ext4_mark_dquot_dirty+0xac/0xe0 fs/ext4/super.c:6801
mark_dquot_dirty fs/quota/dquot.c:372 [inline]
mark_all_dquot_dirty fs/quota/dquot.c:410 [inline]
dquot_alloc_inode+0x2d9/0x320 fs/quota/dquot.c:1838
ext4_xattr_inode_alloc_quota fs/ext4/xattr.c:883 [inline]
ext4_xattr_set_entry+0x22a/0x11b0 fs/ext4/xattr.c:1665
ext4_xattr_block_set+0x204/0xd30 fs/ext4/xattr.c:1920
ext4_xattr_set_handle+0x48c/0x690 fs/ext4/xattr.c:2406
ext4_xattr_set+0xe3/0x170 fs/ext4/xattr.c:2508
__vfs_setxattr+0x105/0x130 fs/xattr.c:182
__vfs_setxattr_noperm+0x8e/0x1f0 fs/xattr.c:216
vfs_setxattr+0xde/0x170 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x131/0x170 fs/xattr.c:617
path_setxattr+0xab/0x120 fs/xattr.c:636
__do_sys_setxattr fs/xattr.c:652 [inline]
__se_sys_setxattr fs/xattr.c:648 [inline]
__x64_sys_setxattr+0x22/0x30 fs/xattr.c:648
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3d/0x80 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f05de103ce9
RSP: 002b:00007f05ddc860c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007f05de222f80 RCX: 00007f05de103ce9
RDX: 0000000020000380 RSI: 0000000020000340 RDI: 00000000200002c0
RBP: 00007f05de15047a R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000ffed R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f05de222f80 R15: 00007ffc81eb6bf8
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff82772a08 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:516 [inline]
#0: ffffffff82772a08 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x98/0x450 kernel/rcu/tasks.h:561
1 lock held by khungtaskd/27:
#0: ffffffff827728e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:318 [inline]
#0: ffffffff827728e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:759 [inline]
#0: ffffffff827728e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2c/0x100 kernel/locking/lockdep.c:6494
2 locks held by getty/426:
#0: ffff88810016c098 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x1c/0x40 drivers/tty/tty_ldisc.c:244
#1: ffffc900003fb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x20a/0x8e0 drivers/tty/n_tty.c:2188
6 locks held by syz-executor.0/1508:
#0: ffff88810665f438 (sb_writers#4){....}-{0:0}, at: path_setxattr+0x7f/0x120 fs/xattr.c:634
#1: ffff888111f9c648 (&type->i_mutex_dir_key#3){....}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
#1: ffff888111f9c648 (&type->i_mutex_dir_key#3){....}-{3:3}, at: vfs_setxattr+0xbd/0x170 fs/xattr.c:308
#2: ffff888111f9c310 (&ei->xattr_sem){....}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline]
#2: ffff888111f9c310 (&ei->xattr_sem){....}-{3:3}, at: ext4_xattr_set_handle+0x118/0x690 fs/ext4/xattr.c:2321
#3: ffffffff827ac1c0 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:318 [inline]
#3: ffffffff827ac1c0 (dquot_srcu){....}-{0:0}, at: srcu_read_lock include/linux/srcu.h:165 [inline]
#3: ffffffff827ac1c0 (dquot_srcu){....}-{0:0}, at: dquot_alloc_inode+0xc6/0x320 fs/quota/dquot.c:1816
#4: ffff888111f760a8 (&dquot->dq_lock){....}-{3:3}, at: dquot_commit+0x25/0x110 fs/quota/dquot.c:505
#5: ffff88810665f1e0 (&s->s_dquot.dqio_sem){....}-{3:3}, at: v2_write_dquot+0x2a/0x80 fs/quota/quota_v2.c:356
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.77-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x7f/0xc2 lib/dump_stack.c:106
nmi_cpu_backtrace+0x13e/0x160 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x9c/0x150 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0x54d/0x570 kernel/hung_task.c:377
kthread+0xd1/0xe0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 205 Comm: kworker/u4:4 Not tainted 6.1.77-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:__preempt_count_add arch/x86/include/asm/preempt.h:80 [inline]
RIP: 0010:kvm_clock_read arch/x86/kernel/kvmclock.c:78 [inline]
RIP: 0010:kvm_sched_clock_read+0x0/0x40 arch/x86/kernel/kvmclock.c:91
Code: c7 d0 9a 89 82 48 c7 c6 8e ff 2e 82 89 c2 48 89 d9 49 c7 c0 f1 ff 2e 82 5b e9 bc 59 4e 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 <65> ff 05 51 d6 fb 7e 65 48 8b 3d d1 da fb 7e e8 ac 02 00 00 65 ff
RSP: 0018:ffffc90001053cc8 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000000000001
RDX: 000000009b5a421d RSI: ffff888237c2b218 RDI: ffff888106e75c10
RBP: ffff888106e75c10 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000646e756f626e R12: ffff888237c2b218
R13: ffff888106e751c0 R14: 0000000000000000 R15: 0000000000000046
FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555555d2f7f8 CR3: 0000000002621000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__lock_pin_lock kernel/locking/lockdep.c:5432 [inline]
lock_pin_lock+0xc6/0x160 kernel/locking/lockdep.c:5726
rq_pin_lock kernel/sched/sched.h:1567 [inline]
rq_lock kernel/sched/sched.h:1645 [inline]
__schedule+0xf0/0x850 kernel/sched/core.c:6475
schedule+0x50/0xb0 kernel/sched/core.c:6634
schedule_timeout+0x113/0x190 kernel/time/timer.c:1935
toggle_allocation_gate+0xfd/0x230 mm/kfence/core.c:811
process_one_work+0x235/0x470 kernel/workqueue.c:2292
worker_thread+0x214/0x370 kernel/workqueue.c:2439
kthread+0xd1/0xe0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306