ci2 starts bisection 2024-06-02 01:40:40.416571978 +0000 UTC m=+100475.450931962
bisecting fixing commit since a507f147e6f06e86b7649b46bc1d3caa34b196d6
building syzkaller on fb427a0782000106c62de76d251e5a02de5406a9
ensuring issue is reproducible on original commit a507f147e6f06e86b7649b46bc1d3caa34b196d6
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: db223a825d94699f68c9b21f769a2ec06e6839173cc7776d262e570ddea850cd
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
check whether we can drop unnecessary instrumentation
disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2275159e798523b1a908eee78572a56a8ab222e826c71399da228a11af0605ab
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the bug reproduces without the instrumentation
disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed
kconfig minimization: base=3820 full=7526 leaves diff=1994
split chunks (needed=false): <1994>
split chunk #0 of len 1994 into 5 parts
testing without sub-chunk 1/5
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: d34ebaa2df80247774d8d5e9d5963bef8d91945cb887b36767006e3ef8a5c9b9
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: f3592654f0dd19e02f8d44bb76468019fda8bf2576d419595cd3b02f96e32762
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: b3a8148e14e73ac0c7df03629075358fe865d5eb25a482f2660f188c4a4c7950
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 190f9d50bfd1af40786a2334213be9dafe2f27e429eea99f65a007164fa1d951
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed
testing commit a507f147e6f06e86b7649b46bc1d3caa34b196d6 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 7c50410259507b3216c229ec1018a459f4eb38892c6027a9523efcdb31a81209
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
the chunk can be dropped
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD 88690811da69826fdb59d908a6e5e9d0c63b581a
testing commit 88690811da69826fdb59d908a6e5e9d0c63b581a gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 73663cebe7502986d4daf0e81f5659523abfbe2ffc92c4509044863fad9112ea
all runs: crashed: INFO: task hung in ext4_quota_write
representative crash: INFO: task hung in ext4_quota_write, types: [HANG]
crash still not fixed/happens on the oldest tested release
revisions tested: 8, total time: 1h27m16.568858941s (build: 30m4.262208703s, test: 54m33.87079932s)
crash still not fixed or there were kernel test errors
commit msg: Linux 6.1.92
crash: INFO: task hung in ext4_quota_write
INFO: task syz-executor.0:1403 blocked for more than 143 seconds.
Not tainted 6.1.92-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:11800 pid:1403 ppid:949 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5245 [inline]
__schedule+0x57f/0x850 kernel/sched/core.c:6558
schedule+0x50/0xb0 kernel/sched/core.c:6634
io_schedule+0x3a/0x50 kernel/sched/core.c:8786
bit_wait_io+0x8/0x50 kernel/sched/wait_bit.c:209
__wait_on_bit_lock+0xb6/0x1b0 kernel/sched/wait_bit.c:90
out_of_line_wait_on_bit_lock+0x95/0xb0 kernel/sched/wait_bit.c:117
lock_buffer include/linux/buffer_head.h:397 [inline]
ext4_quota_write+0x176/0x210 fs/ext4/super.c:7162
qtree_write_dquot+0x97/0x180 fs/quota/quota_tree.c:431
v2_write_dquot+0x53/0x80 fs/quota/quota_v2.c:358
dquot_commit+0xce/0x110 fs/quota/dquot.c:514
ext4_write_dquot+0x73/0xd0 fs/ext4/super.c:6753
mark_dquot_dirty fs/quota/dquot.c:372 [inline]
mark_all_dquot_dirty fs/quota/dquot.c:412 [inline]
dquot_alloc_inode+0x2db/0x320 fs/quota/dquot.c:1800
ext4_xattr_inode_alloc_quota fs/ext4/xattr.c:883 [inline]
ext4_xattr_set_entry+0x22a/0x11b0 fs/ext4/xattr.c:1665
ext4_xattr_block_set+0x204/0xd30 fs/ext4/xattr.c:1920
ext4_xattr_set_handle+0x48c/0x690 fs/ext4/xattr.c:2406
ext4_xattr_set+0xe3/0x170 fs/ext4/xattr.c:2508
__vfs_setxattr+0x105/0x130 fs/xattr.c:182
__vfs_setxattr_noperm+0x8e/0x1f0 fs/xattr.c:216
vfs_setxattr+0xde/0x170 fs/xattr.c:309
do_setxattr fs/xattr.c:594 [inline]
setxattr+0x131/0x170 fs/xattr.c:617
path_setxattr+0xab/0x120 fs/xattr.c:636
__do_sys_setxattr fs/xattr.c:652 [inline]
__se_sys_setxattr fs/xattr.c:648 [inline]
__x64_sys_setxattr+0x22/0x30 fs/xattr.c:648
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x3b/0x80 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f83490afce9
RSP: 002b:00007f8348c320c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007f83491cef80 RCX: 00007f83490afce9
RDX: 0000000020000380 RSI: 0000000020000340 RDI: 00000000200002c0
RBP: 00007f83490fc47a R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000ffed R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f83491cef80 R15: 00007ffc16676228
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff82772a88 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp kernel/rcu/tasks.h:516 [inline]
#0: ffffffff82772a88 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_kthread+0x98/0x450 kernel/rcu/tasks.h:561
1 lock held by khungtaskd/27:
#0: ffffffff82772960 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#0: ffffffff82772960 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
#0: ffffffff82772960 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2c/0x100 kernel/locking/lockdep.c:6494
2 locks held by getty/424:
#0: ffff888101eb6898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x1c/0x40 drivers/tty/tty_ldisc.c:244
#1: ffffc900003fb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x20a/0x8e0 drivers/tty/n_tty.c:2188
6 locks held by syz-executor.0/1403:
#0: ffff8881022da438 (sb_writers#4){....}-{0:0}, at: path_setxattr+0x7f/0x120 fs/xattr.c:634
#1: ffff8881150df5a0 (&type->i_mutex_dir_key#3){....}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8881150df5a0 (&type->i_mutex_dir_key#3){....}-{3:3}, at: vfs_setxattr+0xbd/0x170 fs/xattr.c:308
#2: ffff8881150df268 (&ei->xattr_sem){....}-{3:3}, at: ext4_write_lock_xattr fs/ext4/xattr.h:155 [inline]
#2: ffff8881150df268 (&ei->xattr_sem){....}-{3:3}, at: ext4_xattr_set_handle+0x118/0x690 fs/ext4/xattr.c:2321
#3: ffffffff827ac260 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
#3: ffffffff827ac260 (dquot_srcu){....}-{0:0}, at: srcu_read_lock include/linux/srcu.h:165 [inline]
#3: ffffffff827ac260 (dquot_srcu){....}-{0:0}, at: dquot_alloc_inode+0xc6/0x320 fs/quota/dquot.c:1776
#4: ffff8881150d60a8 (&dquot->dq_lock){....}-{3:3}, at: dquot_commit+0x25/0x110 fs/quota/dquot.c:507
#5: ffff8881022da1e0 (&s->s_dquot.dqio_sem){....}-{3:3}, at: v2_write_dquot+0x2a/0x80 fs/quota/quota_v2.c:356
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.92-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x7f/0xc2 lib/dump_stack.c:106
nmi_cpu_backtrace+0x13e/0x160 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x9c/0x150 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
watchdog+0x54d/0x570 kernel/hung_task.c:377
kthread+0xd1/0xe0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 9638 Comm: syz-executor.0 Not tainted 6.1.92-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0033:0x7fb67e53f80b
Code: cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 <45> 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83
RSP: 002b:00007fb67e115520 EFLAGS: 00000202
RAX: 000000000000db46 RBX: 00007fb67e1155c0 RCX: 000000000000002b
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fb67e115660
RBP: 0000000000000102 R08: 00007fb675cf6000 R09: 0000000000000000
R10: 0000000000000000 R11: 00007fb67e1155d0 R12: 0000000000000001
R13: 00007fb67e602620 R14: 0000000000000000 R15: 00007fb67e115660
FS: 00007fb67e1166c0 GS: 0000000000000000