ci starts bisection 2023-06-09 17:04:52.151870199 +0000 UTC m=+200404.440297081 bisecting cause commit starting from 67faabbde36b7dc006cb0a71811098e7277976d0 building syzkaller on 7086cdb95114c57c35cee9db87b80d4225d8795d ensuring issue is reproducible on original commit 67faabbde36b7dc006cb0a71811098e7277976d0 testing commit 67faabbde36b7dc006cb0a71811098e7277976d0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 818fd3039e0a8f62cbb3bac28d17e039b8dfdec24f9ced6f1cf4ab945eef2a4f run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: crashed: unregister_netdevice: waiting for DEV to become free run #10: crashed: unregister_netdevice: waiting for DEV to become free run #11: crashed: unregister_netdevice: waiting for DEV to become free run #12: crashed: unregister_netdevice: waiting for DEV to become free run #13: crashed: unregister_netdevice: waiting for DEV to become free run #14: crashed: unregister_netdevice: waiting for DEV to become free run #15: crashed: unregister_netdevice: waiting for DEV to become free run #16: crashed: unregister_netdevice: waiting for DEV to become free run #17: crashed: unregister_netdevice: waiting for DEV to become free run #18: crashed: unregister_netdevice: waiting for DEV to become free run #19: OK testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0f85d5ff6fba5c9e14d526cefcf8791fe900a438d65eefac9812b07d1a26ccc8 run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: OK testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 77e2ad2a9cc83250d9848d02c528f2a15be33e05af682eac19793964dd58dbc0 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: task hung in br_ioctl_call run #8: crashed: INFO: task hung in br_ioctl_call run #9: crashed: INFO: task hung in br_ioctl_call testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: eb8e0c4ab65cfe1e6c63a21766e5ef9abce900d6fbcacd1bae640dbf331c0471 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: task hung in br_ioctl_call run #9: crashed: INFO: rcu detected stall in corrupted testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c95020bf116ee3c7e8b48b874d8bc19fac76699e6211b80354ebc7de9a8bcec8 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: unregister_netdevice: waiting for DEV to become free testing release v5.19 testing commit 3d7cb6b04c3f3115719235cc6866b10326de34cd gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0b0b8f3002243523a72aec39b29ea41e216a7f5d6503dee4961822f9b2aae680 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 34b090699e52e28414e345fc54a685e1f26da8950210865bcc854049773cb9a7 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 658f8b58661a2a10ff31cfa62579178f36c758557e929f3459180601466941a7 all runs: crashed: unregister_netdevice: waiting for DEV to become free testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a2778a2b2bbc1ecddd02e594f15d8c0858f8650c731f996eab515e920e0aea4e run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: OK testing release v5.15 testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9fe65d9b1fe69b6fb6d0d1d5f703898e920a1964caa356b3705d7b5b44178c20 run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: unregister_netdevice: waiting for DEV to become free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: OK testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 811ffe2e3d43dd288f8ea75154433d11035f9e8ff7a574fc92f6d1ea8de56568 all runs: OK # git bisect start 8bb7eca972ad531c9b149c0a51ab43a417385813 7d2a07b769330c34b4deabeed939325c77a7ec2f Bisecting: 6693 revisions left to test after this (roughly 13 steps) [477f70cd2a67904e04c2c2b9bd0fa2e95222f2f6] Merge tag 'drm-next-2021-08-31-1' of git://anongit.freedesktop.org/drm/drm testing commit 477f70cd2a67904e04c2c2b9bd0fa2e95222f2f6 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: eb55a48d461f0cbd1a7727c0e45698113769a38eeecd5d35abb185fcf77340f3 all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 477f70cd2a67904e04c2c2b9bd0fa2e95222f2f6 Bisecting: 3024 revisions left to test after this (roughly 12 steps) [9e9fb7655ed585da8f468e29221f0ba194a5f613] Merge tag 'net-next-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 9e9fb7655ed585da8f468e29221f0ba194a5f613 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 failed building 9e9fb7655ed585da8f468e29221f0ba194a5f613: arch/x86/kernel/setup.c:916:6: error: implicit declaration of function 'acpi_mps_check' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1110:2: error: implicit declaration of function 'acpi_table_upgrade' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1112:2: error: implicit declaration of function 'acpi_boot_table_init' [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1120:2: error: implicit declaration of function 'early_acpi_boot_init'; did you mean 'early_cpu_init'? [-Werror=implicit-function-declaration] arch/x86/kernel/setup.c:1162:2: error: implicit declaration of function 'acpi_boot_init' [-Werror=implicit-function-declaration] # git bisect skip 9e9fb7655ed585da8f468e29221f0ba194a5f613 Bisecting: 3024 revisions left to test after this (roughly 12 steps) [7a47c52142c18a9239c5afea2c9656c68d3f22e7] s390/ccwgroup: Drop if with an always false condition testing commit 7a47c52142c18a9239c5afea2c9656c68d3f22e7 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: dadbc5f9a23b460f85674c0147e476611ece6584540b9e9f271d6491c123479c run #0: failed: failed to run command in VM: broken console: Permission denied (publickey) run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 7a47c52142c18a9239c5afea2c9656c68d3f22e7 Bisecting: 3021 revisions left to test after this (roughly 12 steps) [05e45887382c4c0f9522515759b34991aa17e69d] rtw88: wow: build wow function only if CONFIG_PM is on testing commit 05e45887382c4c0f9522515759b34991aa17e69d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0c3593d634a828fbeb0a2c48ec8efc6d05e32186f9626b28e1dd1dde4e751dd0 all runs: OK # git bisect good 05e45887382c4c0f9522515759b34991aa17e69d Bisecting: 3021 revisions left to test after this (roughly 12 steps) [f462a446384d0c00c6e457f7e8eb2053b095a2f1] mptcp: build ADD_ADDR/echo-ADD_ADDR option according pm.add_signal testing commit f462a446384d0c00c6e457f7e8eb2053b095a2f1 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9793cf21d389f7aaac55e75d97f37b75970c11544a6fec06011d8a62c0c4466b all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad f462a446384d0c00c6e457f7e8eb2053b095a2f1 Bisecting: 541 revisions left to test after this (roughly 9 steps) [67161779a9ea926fccee8de047ae66cbd3482b91] net/smc: Allow SMC-D 1MB DMB allocations testing commit 67161779a9ea926fccee8de047ae66cbd3482b91 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ddd2e0a972f9b9d58aeb7b73b92a532d47beb9a829a9561b285e2134cf299f0c all runs: crashed: unregister_netdevice: waiting for DEV to become free # git bisect bad 67161779a9ea926fccee8de047ae66cbd3482b91 Bisecting: 286 revisions left to test after this (roughly 8 steps) [d2e11fd2b7fcd10b7bcef418c55490c934aa94e8] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit d2e11fd2b7fcd10b7bcef418c55490c934aa94e8 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 79123ef27ce763af77c04355fd8a410ac488b66fba5b33a1d14af6f598bce2ad all runs: boot failed: WARNING: refcount bug in fib_create_info # git bisect skip d2e11fd2b7fcd10b7bcef418c55490c934aa94e8 Bisecting: 286 revisions left to test after this (roughly 8 steps) [375df5f8c1812c59930cfed14ff4cc15929c8f2f] ax88796: export ax_NS8390_init() hook testing commit 375df5f8c1812c59930cfed14ff4cc15929c8f2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f3e50a16c5327909f9c6f72c6b41e8027ff9448d71ea804fab49c6f50b79392c run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_del_bridge run #2: crashed: possible deadlock in br_ioctl_call run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_del_bridge run #6: crashed: possible deadlock in br_del_bridge run #7: crashed: possible deadlock in br_del_bridge run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_del_bridge # git bisect bad 375df5f8c1812c59930cfed14ff4cc15929c8f2f Bisecting: 197 revisions left to test after this (roughly 8 steps) [c3e26b6dc1b4e3e8f57be4f004b1f2a410c5c468] nfc: fdp: use unsigned int as loop iterator testing commit c3e26b6dc1b4e3e8f57be4f004b1f2a410c5c468 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d00704417c4d03b652d62cb02fdf46db0d14efc5db67c392127e6562183203cc run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_del_bridge run #2: crashed: possible deadlock in br_ioctl_call run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_ioctl_call run #5: crashed: possible deadlock in br_del_bridge run #6: crashed: possible deadlock in br_ioctl_call run #7: crashed: possible deadlock in br_ioctl_call run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_ioctl_call # git bisect bad c3e26b6dc1b4e3e8f57be4f004b1f2a410c5c468 Bisecting: 98 revisions left to test after this (roughly 7 steps) [63f367d9de77b30f58722c1be9e334fb0f5f342d] tcp: more accurately detect spurious TLP probes testing commit 63f367d9de77b30f58722c1be9e334fb0f5f342d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 93c2334b57779e454dfb79c74e60b9f5a12769dea8b472f9e0b81f1abdac71eb run #0: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor512112640" "root@10.128.0.155:./syz-executor512112640"]: exit status 1 Executing: program /usr/bin/ssh host 10.128.0.155, user root, command scp -v -t ./syz-executor512112640 OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n 15 Mar 2022 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.155 [10.128.0.155] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1 Connection timed out during banner exchange Connection to 10.128.0.155 port 22 timed out lost connection run #1: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor175279351" "root@10.128.1.165:./syz-executor175279351"]: exit status 1 Executing: program /usr/bin/ssh host 10.128.1.165, user root, command scp -v -t ./syz-executor175279351 OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n 15 Mar 2022 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.1.165 [10.128.1.165] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1 Connection timed out during banner exchange Connection to 10.128.1.165 port 22 timed out lost connection run #2: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor2023626706" "root@10.128.0.207:./syz-executor2023626706"]: exit status 1 Executing: program /usr/bin/ssh host 10.128.0.207, user root, command scp -v -t ./syz-executor2023626706 OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n 15 Mar 2022 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.207 [10.128.0.207] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1 Connection timed out during banner exchange Connection to 10.128.0.207 port 22 timed out lost connection run #3: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor2421323227" "root@10.128.0.168:./syz-executor2421323227"]: exit status 1 Executing: program /usr/bin/ssh host 10.128.0.168, user root, command scp -v -t ./syz-executor2421323227 OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n 15 Mar 2022 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.168 [10.128.0.168] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1 Connection timed out during banner exchange Connection to 10.128.0.168 port 22 timed out lost connection run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect good 63f367d9de77b30f58722c1be9e334fb0f5f342d Bisecting: 48 revisions left to test after this (roughly 6 steps) [176086d870359fa5e4fe226fdcf43340187134c2] net: ipa: kill ipa_interrupt_process_all() testing commit 176086d870359fa5e4fe226fdcf43340187134c2 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e717e53971e9a353d95391486f9ed8aa0cb5725cb3c30c87cd7ef5f32182c54b run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_del_bridge run #2: crashed: possible deadlock in br_ioctl_call run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_ioctl_call run #6: crashed: possible deadlock in br_ioctl_call run #7: crashed: possible deadlock in br_ioctl_call run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_ioctl_call # git bisect bad 176086d870359fa5e4fe226fdcf43340187134c2 Bisecting: 24 revisions left to test after this (roughly 5 steps) [34f7cac07c4e1a8fe64bd09334ecb49f21e98bf8] ppp: use ndo_siocdevprivate testing commit 34f7cac07c4e1a8fe64bd09334ecb49f21e98bf8 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 528219b763f676c611306f369c96d5681d3cf0297ca3d3a0d042f8d986c83abd all runs: OK # git bisect good 34f7cac07c4e1a8fe64bd09334ecb49f21e98bf8 Bisecting: 12 revisions left to test after this (roughly 4 steps) [73d618bb7e1998f10735e216578d8f439a60d50c] ionic: print firmware version on identify testing commit 73d618bb7e1998f10735e216578d8f439a60d50c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a5ff3161209a2781709882668fc47e4c6d0048c26b3ec1c5d82198813e34af4e run #0: crashed: possible deadlock in br_del_bridge run #1: crashed: possible deadlock in br_ioctl_call run #2: crashed: possible deadlock in br_del_bridge run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_ioctl_call run #6: crashed: possible deadlock in br_ioctl_call run #7: crashed: possible deadlock in br_del_bridge run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_del_bridge # git bisect bad 73d618bb7e1998f10735e216578d8f439a60d50c Bisecting: 5 revisions left to test after this (roughly 3 steps) [88fc023f7de22922c6c61e2f3d4c54befb8b3549] net: socket: return changed ifreq from SIOCDEVPRIVATE testing commit 88fc023f7de22922c6c61e2f3d4c54befb8b3549 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4292de86a41800e4b1fc8e0ff0f7fdcc3d6a6e79a588bed5f1028bee420177a9 all runs: OK # git bisect good 88fc023f7de22922c6c61e2f3d4c54befb8b3549 Bisecting: 2 revisions left to test after this (roughly 2 steps) [7c57706b4be5cf85ded0721c0619a2122b846c18] Merge branch 'ndo_ioctl-rework' testing commit 7c57706b4be5cf85ded0721c0619a2122b846c18 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a5ff3161209a2781709882668fc47e4c6d0048c26b3ec1c5d82198813e34af4e run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_ioctl_call run #2: crashed: possible deadlock in br_ioctl_call run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_del_bridge run #6: crashed: possible deadlock in br_del_bridge run #7: crashed: possible deadlock in br_ioctl_call run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_ioctl_call # git bisect bad 7c57706b4be5cf85ded0721c0619a2122b846c18 Bisecting: 0 revisions left to test after this (roughly 1 step) [3d9d00bd1885afa6b2c766cf9bab7b54b1a951ed] net: bonding: move ioctl handling to private ndo operation testing commit 3d9d00bd1885afa6b2c766cf9bab7b54b1a951ed gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a5ff3161209a2781709882668fc47e4c6d0048c26b3ec1c5d82198813e34af4e run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_ioctl_call run #2: crashed: possible deadlock in br_ioctl_call run #3: crashed: possible deadlock in br_del_bridge run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_del_bridge run #6: crashed: possible deadlock in br_ioctl_call run #7: crashed: possible deadlock in br_del_bridge run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_del_bridge # git bisect bad 3d9d00bd1885afa6b2c766cf9bab7b54b1a951ed Bisecting: 0 revisions left to test after this (roughly 0 steps) [ad2f99aedf8fa77f3ae647153284fa63c43d3055] net: bridge: move bridge ioctls out of .ndo_do_ioctl testing commit ad2f99aedf8fa77f3ae647153284fa63c43d3055 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3b8db91422ca278c05ad6c3b7ea30fcdb836a31e14ed5a0eb310473e78a3dbd5 run #0: crashed: possible deadlock in br_ioctl_call run #1: crashed: possible deadlock in br_del_bridge run #2: crashed: possible deadlock in br_del_bridge run #3: crashed: possible deadlock in br_ioctl_call run #4: crashed: possible deadlock in br_del_bridge run #5: crashed: possible deadlock in br_del_bridge run #6: crashed: possible deadlock in br_ioctl_call run #7: crashed: possible deadlock in br_del_bridge run #8: crashed: possible deadlock in br_ioctl_call run #9: crashed: possible deadlock in br_del_bridge # git bisect bad ad2f99aedf8fa77f3ae647153284fa63c43d3055 ad2f99aedf8fa77f3ae647153284fa63c43d3055 is the first bad commit commit ad2f99aedf8fa77f3ae647153284fa63c43d3055 Author: Arnd Bergmann Date: Tue Jul 27 15:45:16 2021 +0200 net: bridge: move bridge ioctls out of .ndo_do_ioctl Working towards obsoleting the .ndo_do_ioctl operation entirely, stop passing the SIOCBRADDIF/SIOCBRDELIF device ioctl commands into this callback. My first attempt was to add another ndo_siocbr() callback, but as there is only a single driver that takes these commands and there is already a hook mechanism to call directly into this driver, extend this hook instead, and use it for both the deviceless and the device specific ioctl commands. Cc: Roopa Prabhu Cc: Nikolay Aleksandrov Cc: bridge@lists.linux-foundation.org Signed-off-by: Arnd Bergmann Signed-off-by: David S. Miller include/linux/if_bridge.h | 7 ++++++- net/bridge/br.c | 2 +- net/bridge/br_device.c | 1 - net/bridge/br_ioctl.c | 15 +++------------ net/bridge/br_private.h | 5 ++--- net/core/dev_ioctl.c | 11 ++++++++--- net/socket.c | 33 +++++++++++++++++++++++---------- 7 files changed, 43 insertions(+), 31 deletions(-) culprit signature: 3b8db91422ca278c05ad6c3b7ea30fcdb836a31e14ed5a0eb310473e78a3dbd5 parent signature: 4292de86a41800e4b1fc8e0ff0f7fdcc3d6a6e79a588bed5f1028bee420177a9 revisions tested: 27, total time: 8h18m10.968150203s (build: 4h29m25.887054773s, test: 3h43m8.507223358s) first bad commit: ad2f99aedf8fa77f3ae647153284fa63c43d3055 net: bridge: move bridge ioctls out of .ndo_do_ioctl recipients (to): ["arnd@arndb.de" "davem@davemloft.net"] recipients (cc): [] crash: possible deadlock in br_del_bridge ====================================================== WARNING: possible circular locking dependency detected 5.14.0-rc2-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.3/6008 is trying to acquire lock: ffffffff8c4a8d88 (rtnl_mutex){+.+.}-{3:3}, at: br_del_bridge+0xe/0xd0 net/bridge/br_if.c:470 but task is already holding lock: ffffffff8c4885a8 (br_ioctl_mutex){+.+.}-{3:3}, at: br_ioctl_call+0x2f/0x90 net/socket.c:1089 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (br_ioctl_mutex){+.+.}-{3:3}: __mutex_lock_common kernel/locking/mutex.c:959 [inline] __mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104 br_ioctl_call+0x2f/0x90 net/socket.c:1089 dev_ifsioc+0x8d6/0xc80 net/core/dev_ioctl.c:382 dev_ioctl+0x14c/0xc70 net/core/dev_ioctl.c:580 sock_do_ioctl+0x150/0x1a0 net/socket.c:1128 sock_ioctl+0x278/0x510 net/socket.c:1231 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:1069 [inline] __se_sys_ioctl fs/ioctl.c:1055 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:1055 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae -> #0 (rtnl_mutex){+.+.}-{3:3}: check_prev_add kernel/locking/lockdep.c:3051 [inline] check_prevs_add kernel/locking/lockdep.c:3174 [inline] validate_chain kernel/locking/lockdep.c:3789 [inline] __lock_acquire+0x2985/0x5410 kernel/locking/lockdep.c:5015 lock_acquire kernel/locking/lockdep.c:5625 [inline] lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590 __mutex_lock_common kernel/locking/mutex.c:959 [inline] __mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104 br_del_bridge+0xe/0xd0 net/bridge/br_if.c:470 br_ioctl_stub+0x288/0x630 net/bridge/br_ioctl.c:392 br_ioctl_call+0x4c/0x90 net/socket.c:1091 sock_ioctl+0x28e/0x510 net/socket.c:1185 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:1069 [inline] __se_sys_ioctl fs/ioctl.c:1055 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:1055 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(br_ioctl_mutex); lock(rtnl_mutex); lock(br_ioctl_mutex); lock(rtnl_mutex); *** DEADLOCK *** 1 lock held by syz-executor.3/6008: #0: ffffffff8c4885a8 (br_ioctl_mutex){+.+.}-{3:3}, at: br_ioctl_call+0x2f/0x90 net/socket.c:1089 stack backtrace: CPU: 1 PID: 6008 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:105 check_noncircular+0x25f/0x2e0 kernel/locking/lockdep.c:2131 check_prev_add kernel/locking/lockdep.c:3051 [inline] check_prevs_add kernel/locking/lockdep.c:3174 [inline] validate_chain kernel/locking/lockdep.c:3789 [inline] __lock_acquire+0x2985/0x5410 kernel/locking/lockdep.c:5015 lock_acquire kernel/locking/lockdep.c:5625 [inline] lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590 __mutex_lock_common kernel/locking/mutex.c:959 [inline] __mutex_lock+0x12a/0x10a0 kernel/locking/mutex.c:1104 br_del_bridge+0xe/0xd0 net/bridge/br_if.c:470 br_ioctl_stub+0x288/0x630 net/bridge/br_ioctl.c:392 br_ioctl_call+0x4c/0x90 net/socket.c:1091 sock_ioctl+0x28e/0x510 net/socket.c:1185 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:1069 [inline] __se_sys_ioctl fs/ioctl.c:1055 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:1055 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd6af5bd169 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd6ae92f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fd6af6dcf80 RCX: 00007fd6af5bd169 RDX: 0000000020000080 RSI: 00000000000089a1 RDI: 0000000000000004 RBP: 00007fd6af618ca1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd633722f R14: 00007fd6ae92f300 R15: 0000000000022000 device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state