ci starts bisection 2023-07-12 13:25:50.393337143 +0000 UTC m=+97.125772220 bisecting cause commit starting from 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c building syzkaller on 2f19aa4f873578acf44b3bf4d4ae98e52c2817ca ensuring issue is reproducible on original commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 181f9b3e9896e27e3ed77b5bc42d08c49fe2a3824241b46142f126dfb84c67be all runs: crashed: INFO: task hung in pipe_release representative crash: INFO: task hung in pipe_release, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 679ac670d38ce484ed990f47b8596cf98064b58cd03416367e68cc3608ca0aaf all runs: crashed: INFO: task hung in pipe_release representative crash: INFO: task hung in pipe_release, types: [HANG] the bug reproduces without the instrumentation disabling configs for [ATOMIC_SLEEP LEAK UBSAN BUG KASAN LOCKDEP], they are not needed kconfig minimization: base=3869 full=7637 leaves diff=1996 split chunks (needed=false): <1996> split chunk #0 of len 1996 into 5 parts testing without sub-chunk 1/5 testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dd356062fb46d31162f092aec511a77fe6c3f560b9eca48b23d92cb3c440e2b8 all runs: crashed: INFO: task hung in pipe_release representative crash: INFO: task hung in pipe_release, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cc9af35ff1ec36a8c6ed87a4ed54435efe63fbbb9ed600473fba53557f3ef268 all runs: OK testing without sub-chunk 3/5 testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b1731dcc2a32cf776be1b0bee790560e61bf76d10ac34311c079327a0620342a all runs: crashed: INFO: task hung in pipe_release representative crash: INFO: task hung in pipe_release, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 18f856db38830ed358548185876b322a606b16e23fbcbadfc5be3a22112d0046 run #0: crashed: BUG: soft lockup in udp_sendmsg run #1: crashed: BUG: soft lockup in udp_sendmsg run #2: crashed: BUG: soft lockup in udp_sendmsg run #3: crashed: BUG: soft lockup in udp_sendmsg run #4: crashed: BUG: soft lockup in corrupted run #5: crashed: BUG: soft lockup in corrupted run #6: crashed: BUG: soft lockup in udp_sendmsg run #7: crashed: BUG: soft lockup in udp_sendmsg run #8: crashed: BUG: soft lockup in udp_sendmsg run #9: crashed: BUG: soft lockup in udp_sendmsg run #10: crashed: BUG: soft lockup in udp_sendmsg run #11: crashed: BUG: soft lockup in udp_sendmsg run #12: crashed: BUG: soft lockup in udp_sendmsg run #13: crashed: BUG: soft lockup in udp_sendmsg run #14: crashed: BUG: soft lockup in udp_sendmsg run #15: crashed: BUG: soft lockup in udp_sendmsg run #16: crashed: BUG: soft lockup in udp_sendmsg run #17: crashed: BUG: soft lockup in udp_sendmsg run #18: crashed: BUG: soft lockup in udp_sendmsg run #19: crashed: BUG: soft lockup in udp_sendmsg representative crash: BUG: soft lockup in udp_sendmsg, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 testing commit 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ce5576a9c9a86b6372ffe0276355123c4e8df9a41af6e10354ea3b43eb978bba all runs: crashed: BUG: soft lockup in udp_sendmsg representative crash: BUG: soft lockup in udp_sendmsg, types: [HANG] the chunk can be dropped minimized to 400 configs; suspects: [6LOWPAN ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI CMA COMMON_CLK DAX DLM DRM DRM_BRIDGE DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DP_AUX_CHARDEV DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXTCON EXTCON_INTEL_CHT_WC F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_DEFERRED_IO FB_IO_HELPERS FB_NOTIFY FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_HELPERS FB_SYS_HELPERS_DEFERRED FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FRONTSWAP FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GUEST_PERF_EVENTS GVE HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_EVENTFD HAVE_KVM_IRQCHIP HAVE_KVM_IRQFD HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_TIVO HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_TEST IOMMU_SVA IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_ROUTE_CLASSID IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PROTO_TCP IRQ_TIME_ACCOUNTING LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MPTCP MTD NETFILTER_ADVANCED NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_TABLES NF_TABLES_NETDEV RADIO_ADAPTERS RADIO_SI4713 RAS RC_CORE RFKILL SND SOUND STAGING TRANSPARENT_HUGEPAGE VIDEO_DEV VIRTIO_FS WAN ZONE_DEVICE] disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4010f46dc5c843f60bbab2fb9577f4430f35d027fda9199d371ce5b1dc42f570 all runs: OK # git bisect start 3f01e9fed8454dcd89727016c3e5b2fbb8f8e50c 6995e2de6891c724bfeb2db33d7b87775f913ad1 Bisecting: 5431 revisions left to test after this (roughly 13 steps) [1b722407a13b7f8658d2e26917791f32805980a2] Merge tag 'drm-next-2023-06-29' of git://anongit.freedesktop.org/drm/drm testing commit 1b722407a13b7f8658d2e26917791f32805980a2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d853a8ef66fd0afe954c427994432ca6a2e64e5ab876daee64afc0bb6983139e all runs: crashed: BUG: soft lockup in udp_sendmsg representative crash: BUG: soft lockup in udp_sendmsg, types: [HANG] # git bisect bad 1b722407a13b7f8658d2e26917791f32805980a2 Bisecting: 2818 revisions left to test after this (roughly 12 steps) [3a8a670eeeaa40d87bd38a587438952741980c18] Merge tag 'net-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 3a8a670eeeaa40d87bd38a587438952741980c18 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a75ebe305442ce93989d1be72cd6fc9e1962374b9e26a6ab60e1e900edba118a all runs: crashed: BUG: soft lockup in udp_sendmsg representative crash: BUG: soft lockup in udp_sendmsg, types: [HANG] # git bisect bad 3a8a670eeeaa40d87bd38a587438952741980c18 Bisecting: 2103 revisions left to test after this (roughly 11 steps) [6e17c6de3ddf3073741d9c91a796ee696914d8a0] Merge tag 'mm-stable-2023-06-24-19-15' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit 6e17c6de3ddf3073741d9c91a796ee696914d8a0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a15b0e113d51961a090643093ca827d6413da21129de770ca8cd699ff02861c2 all runs: OK # git bisect good 6e17c6de3ddf3073741d9c91a796ee696914d8a0 Bisecting: 1051 revisions left to test after this (roughly 10 steps) [1668a55a73f5a3ddde1019695223eed8e23b9436] selftests: net: add tc flower cfm test testing commit 1668a55a73f5a3ddde1019695223eed8e23b9436 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f5e51628580a58f5cb690f990c79a514431bad7911c1eef88ab88c2f360566cf all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad 1668a55a73f5a3ddde1019695223eed8e23b9436 Bisecting: 525 revisions left to test after this (roughly 9 steps) [216aa67f3e981a0cfb0a7c3b0d4c107823ef6c56] devlink: move port_fn_state_get/set() to devlink_port_ops testing commit 216aa67f3e981a0cfb0a7c3b0d4c107823ef6c56 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ae40fb17a290faa82cdeeab9926075c59021274545f0287d32e31f10e6de1673 all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad 216aa67f3e981a0cfb0a7c3b0d4c107823ef6c56 Bisecting: 262 revisions left to test after this (roughly 8 steps) [a7533584728d366f11b210d0e8a2fad03109c669] net/tcp: optimise io_uring zc ubuf refcounting testing commit a7533584728d366f11b210d0e8a2fad03109c669 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 839e2559e4f810478ab7d037326144c04763a735b78b8e0d4026097a2741d9c1 all runs: OK # git bisect good a7533584728d366f11b210d0e8a2fad03109c669 Bisecting: 131 revisions left to test after this (roughly 7 steps) [1f94ba198bda5738bd26cb7633dca4b33a43dff2] net: pcs: xpcs: correct lp_advertising contents testing commit 1f94ba198bda5738bd26cb7633dca4b33a43dff2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fe7316d229e14a82880fa7a3c427f1e853ebceb08529c63828b13fb1638c7c16 all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad 1f94ba198bda5738bd26cb7633dca4b33a43dff2 Bisecting: 65 revisions left to test after this (roughly 6 steps) [6cb9318a2534b7081eb9f375a720972f811665f6] net/mlx5: Remove redundant vport_group_manager cap check testing commit 6cb9318a2534b7081eb9f375a720972f811665f6 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f398414847c606d961be9f94d36f55d7f247b3d559266dd8064b10dc360f476e all runs: OK # git bisect good 6cb9318a2534b7081eb9f375a720972f811665f6 Bisecting: 32 revisions left to test after this (roughly 5 steps) [2e910b95329c2dc7feffbec00907f9e02d1a850a] net: Add a function to splice pages into an skbuff for MSG_SPLICE_PAGES testing commit 2e910b95329c2dc7feffbec00907f9e02d1a850a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b3c7de02a11fd4eb1c82e9c2be8829263e54fb727a79ec5571d195d0718e6013 all runs: OK # git bisect good 2e910b95329c2dc7feffbec00907f9e02d1a850a Bisecting: 16 revisions left to test after this (roughly 4 steps) [726de790f66029a7654b3e748f8d3e7888a30ae5] ping: Stop using RTO_ONLINK. testing commit 726de790f66029a7654b3e748f8d3e7888a30ae5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 75b84bb0b96058dc85c94be1b8b87447dc5ee9051cfa1aa3e50579ac32e44cad all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad 726de790f66029a7654b3e748f8d3e7888a30ae5 Bisecting: 7 revisions left to test after this (roughly 3 steps) [7da0dde68486b2d5bd7c689a9b327b77efecdfd0] ip, udp: Support MSG_SPLICE_PAGES testing commit 7da0dde68486b2d5bd7c689a9b327b77efecdfd0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a9a098d9b91a7935a8288757db15bd1e950ef81696010b2a9611078d0579c67e all runs: OK # git bisect good 7da0dde68486b2d5bd7c689a9b327b77efecdfd0 Bisecting: 3 revisions left to test after this (roughly 2 steps) [a0dbf5f818f9082d2262c1f8a8c0aab68364341f] af_unix: Support MSG_SPLICE_PAGES testing commit a0dbf5f818f9082d2262c1f8a8c0aab68364341f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4229b81f317d994a09c019afd41068fca5171dd45ea8731742df42b8b226c85a all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad a0dbf5f818f9082d2262c1f8a8c0aab68364341f Bisecting: 1 revision left to test after this (roughly 1 step) [7ac7c987850c3ec617c778f7bd871804dc1c648d] udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES testing commit 7ac7c987850c3ec617c778f7bd871804dc1c648d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 151730aa882e62ba0017ca88ac11862828e0b9f55e7e007744ab589119a9a5fd all runs: crashed: INFO: rcu detected stall in corrupted representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect bad 7ac7c987850c3ec617c778f7bd871804dc1c648d Bisecting: 0 revisions left to test after this (roughly 0 steps) [6d8192bd69bb431ef6b2558be3b5746b706cd252] ip6, udp6: Support MSG_SPLICE_PAGES testing commit 6d8192bd69bb431ef6b2558be3b5746b706cd252 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a816bef50bfb7cb444dd38b284eece44a1a57b70296df15f5e33cf131f9a0ada all runs: OK # git bisect good 6d8192bd69bb431ef6b2558be3b5746b706cd252 7ac7c987850c3ec617c778f7bd871804dc1c648d is the first bad commit commit 7ac7c987850c3ec617c778f7bd871804dc1c648d Author: David Howells Date: Mon May 22 13:11:22 2023 +0100 udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES Convert udp_sendpage() to use sendmsg() with MSG_SPLICE_PAGES rather than directly splicing in the pages itself. This allows ->sendpage() to be replaced by something that can handle multiple multipage folios in a single transaction. Signed-off-by: David Howells cc: Willem de Bruijn cc: David Ahern cc: Jens Axboe cc: Matthew Wilcox Signed-off-by: Jakub Kicinski net/ipv4/udp.c | 51 ++++++--------------------------------------------- 1 file changed, 6 insertions(+), 45 deletions(-) culprit signature: 151730aa882e62ba0017ca88ac11862828e0b9f55e7e007744ab589119a9a5fd parent signature: a816bef50bfb7cb444dd38b284eece44a1a57b70296df15f5e33cf131f9a0ada revisions tested: 22, total time: 5h27m21.568452946s (build: 1h51m8.106869372s, test: 2h37m44.302686211s) first bad commit: 7ac7c987850c3ec617c778f7bd871804dc1c648d udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES recipients (to): ["dhowells@redhat.com" "kuba@kernel.org"] recipients (cc): [] crash: INFO: rcu detected stall in corrupted rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 1-....: (10000 ticks this GP) idle=62ec/1/0x4000000000000000 softirq=6055/6064 fqs=5000 rcu: hardirqs softirqs csw/system rcu: number: 0 0 0 rcu: cputime: 46 0 49943 ==> 50000(ms) rcu: (t=10002 jiffies g=445 q=1093 ncpus=2) CPU: 1 PID: 2514 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 RIP: 0010:skb_splice_from_iter+0x158/0x3a0 net/core/skbuff.c:6981 Code: 45 01 7e 74 45 01 be d0 00 00 00 4d 85 ff 4c 0f 44 f9 48 8b 54 24 70 65 48 2b 14 25 28 00 00 00 0f 85 45 02 00 00 48 83 c4 78 <4c> 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 f7 c3 ff 0f 00 00 48 89 RSP: 0018:ffffc900020539d0 EFLAGS: 00000292 RAX: ffffc90002053988 RBX: 0000000000000006 RCX: 0000000000000cc0 RDX: 0000000000000000 RSI: ffffc90002053d10 RDI: ffff88810c2f8100 RBP: 0000000000000006 R08: ffff88810e2c5008 R09: 0000000000000000 R10: 000000000000000e R11: ffff888103768d80 R12: ffff88810c2f8100 R13: 000000000000001c R14: 0000000000000002 R15: 0000000000000000 FS: 00007f62ade2c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556a1bda8 CR3: 000000010c6e8000 CR4: 0000000000350ee0 Call Trace: __ip_append_data+0x682/0x1140 net/ipv4/ip_output.c:1221 ip_append_data net/ipv4/ip_output.c:1361 [inline] ip_append_data+0x6b/0xd0 net/ipv4/ip_output.c:1340 udp_sendmsg+0x4a4/0xd30 net/ipv4/udp.c:1291 udp_sendpage+0x8b/0xb0 net/ipv4/udp.c:1343 inet_sendpage+0x4b/0x80 net/ipv4/af_inet.c:844 kernel_sendpage net/socket.c:3584 [inline] kernel_sendpage+0xee/0x170 net/socket.c:3578 sock_sendpage+0x24/0x40 net/socket.c:1082 pipe_to_sendpage+0x5d/0xa0 fs/splice.c:471 splice_from_pipe_feed fs/splice.c:525 [inline] __splice_from_pipe+0x97/0x1d0 fs/splice.c:669 splice_from_pipe fs/splice.c:704 [inline] generic_splice_sendpage+0x5d/0x90 fs/splice.c:852 do_splice_from fs/splice.c:873 [inline] do_splice+0x36d/0x8b0 fs/splice.c:1182 __do_sys_splice fs/splice.c:1471 [inline] __se_sys_splice fs/splice.c:1453 [inline] __x64_sys_splice+0xa6/0x110 fs/splice.c:1453 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f62ad07cb29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f62ade2c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 00007f62ad19bf80 RCX: 00007f62ad07cb29 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f62ad0c847a R08: 000000000004ffe0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f62ad19bf80 R15: 00007ffe3a7c6e98