ci starts bisection 2024-01-23 18:34:42.780809994 +0000 UTC m=+9193.952650528 bisecting cause commit starting from 7a396820222d6d4c02057f41658b162bdcdadd0e building syzkaller on 9bd8dcda8c7c494d59bd3132a668f4784ea835c6 ensuring issue is reproducible on original commit 7a396820222d6d4c02057f41658b162bdcdadd0e testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 800e507cfa62e6c1787ff9680ece74a7f4bbeae4d43841b4895fe8986997e177 run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_setup run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_setup run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_setup run #10: crashed: INFO: task hung in blk_trace_setup run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_setup run #13: crashed: INFO: task hung in blk_trace_setup run #14: crashed: INFO: task hung in blk_trace_setup run #15: crashed: INFO: task hung in blk_trace_setup run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_setup run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_setup, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4725f257aedd0bf99752251d09cf548edbd47d1e92db866124ce268706d281f4 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_setup run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed kconfig minimization: base=3923 full=7685 leaves diff=2011 split chunks (needed=false): <2011> split chunk #0 of len 2011 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 816f7e792259ff9ff5b8a91119426ddf61f0541ffb6c16d66f76a8b790808ad6 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ca9dbbe99d317d777fd8f8a9643df8cdf407301926671c6e809abdc6558e56e1 run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_setup run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_setup, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16a079fe67988ca5afbf24573ffa58d9843e7da3d6d825a3e42788d866071f54 run #0: OK run #1: OK run #2: OK run #3: OK run #4: crashed: INFO: task hung in blk_trace_setup run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: INFO: task hung in blk_trace_setup, types: [HANG] testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c566cd9154bf606e32b1f3509c090f630bf60864b462e36f412d6472ecf11091 run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_setup run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_setup run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_setup run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_setup run #15: crashed: INFO: task hung in blk_trace_remove run #16: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor3225620318" "root@10.128.10.34:./syz-executor3225620318"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.10.34, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u1, OpenSSL 3.0.11 19 Sep 2023 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.10.34 [10.128.10.34] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u1 Connection timed out during banner exchange Connection to 10.128.10.34 port 22 timed out scp: Connection closed run #17: OK run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_setup, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 7a396820222d6d4c02057f41658b162bdcdadd0e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 490b30859f24657f6bf31b449e14c947e71ab53380d707e535471b40c96cd7af run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_setup run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_setup run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_setup, types: [HANG] the chunk can be dropped minimized to 403 configs; suspects: [ARCH_HAS_HW_PTE_YOUNG AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB_CORE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMMON KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_GENERIC_MMU_NOTIFIER KVM_HYPERV KVM_MMIO KVM_PROVE_MMU KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LRU_GEN_WALKS_MMU LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_HAVE_PAE X86_X32_ABI] disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.7 v6.6 v6.5 v6.3 v6.1 v5.19 v5.17 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 30 release tags testing release v6.7 testing commit 0dd3ee31125508cd67f7e7172247f05b7fd1753a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: de977df7346c9b87c22f74b02842fb14a1a4c3381620bbd617e247f20cec68a1 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_setup run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_setup run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_setup run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_setup run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0883a8f4352c9edea4fe7d63bef2a3ae9f637e31d09aeb62fda03b4aa8080d06 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_setup run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_setup run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_remove run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f6ef07db93ff301f3457c8cc41ca8222c12443c301bced90cccd16c349e3847 all runs: OK false negative chance: 0.000 # git bisect start ffc253263a1375a65fa6c9f62a893e9767fbebfa 2dde18cd1d8fac735875f2e4987f11817cc0bc2c Bisecting: 7882 revisions left to test after this (roughly 13 steps) [a1c19328a160c80251868dbd80066dce23d07995] Merge tag 'soc-arm-6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit a1c19328a160c80251868dbd80066dce23d07995 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2089746350cde48265e6e1e54c747f5f45816e92b6cd5cd253f56fddf21bc5dd run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_setup run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_remove run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad a1c19328a160c80251868dbd80066dce23d07995 Bisecting: 3438 revisions left to test after this (roughly 12 steps) [bd6c11bc43c496cddfc6cf603b5d45365606dbd5] Merge tag 'net-next-6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit bd6c11bc43c496cddfc6cf603b5d45365606dbd5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9c105c7b59be828e2ad9465f0cf18ac2201b982037f10815ab4f078a2dd6d63b all runs: OK false negative chance: 0.000 # git bisect good bd6c11bc43c496cddfc6cf603b5d45365606dbd5 Bisecting: 2084 revisions left to test after this (roughly 11 steps) [3698a75f5a98d0a6599e2878ab25d30a82dd836a] Merge tag 'drm-intel-next-fixes-2023-08-24' of git://anongit.freedesktop.org/drm/drm-intel into drm-next testing commit 3698a75f5a98d0a6599e2878ab25d30a82dd836a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 25d035e051d90dad1b56d71c1976744a46b02b39f2840cf093f857ee28bdb172 all runs: OK false negative chance: 0.000 # git bisect good 3698a75f5a98d0a6599e2878ab25d30a82dd836a Bisecting: 1030 revisions left to test after this (roughly 10 steps) [53ea7f624fb91074c2f9458832ed74975ee5d64c] Merge tag 'xfs-6.6-merge-1' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux testing commit 53ea7f624fb91074c2f9458832ed74975ee5d64c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1b5d8f09d5a605a8544d2dcb35f68301dd8d523f30bb325105f9d729e8f5a8c0 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_setup run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_remove run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad 53ea7f624fb91074c2f9458832ed74975ee5d64c Bisecting: 510 revisions left to test after this (roughly 9 steps) [b96a3e9142fdf346b05b20e867b4f0dfca119e96] Merge tag 'mm-stable-2023-08-28-18-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit b96a3e9142fdf346b05b20e867b4f0dfca119e96 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e139e0db578fa4a2d671101551e59e056aa4baaf6f0c07cdd304f08eb2a54dff all runs: OK false negative chance: 0.000 # git bisect good b96a3e9142fdf346b05b20e867b4f0dfca119e96 Bisecting: 231 revisions left to test after this (roughly 8 steps) [3d3dfeb3aec7b612d266d500c82054f1fded4980] Merge tag 'for-6.6/block-2023-08-28' of git://git.kernel.dk/linux testing commit 3d3dfeb3aec7b612d266d500c82054f1fded4980 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7faf9eeee577cb6de785b0e97079e5d1d82ebc29d34a6c642e45e586589f780a run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_setup run #10: crashed: INFO: task hung in blk_trace_setup run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_setup run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad 3d3dfeb3aec7b612d266d500c82054f1fded4980 Bisecting: 116 revisions left to test after this (roughly 7 steps) [c1b7fcf3f6d94c2c3528bf77054bf174a5ef63d7] Merge tag 'for-6.6/io_uring-2023-08-28' of git://git.kernel.dk/linux testing commit c1b7fcf3f6d94c2c3528bf77054bf174a5ef63d7 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2bf42c9beae5be5cda269896a75fc0af6be0a9f6b93ece7ed70b56787434f67b run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_setup run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_setup run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_setup run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_remove run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad c1b7fcf3f6d94c2c3528bf77054bf174a5ef63d7 Bisecting: 80 revisions left to test after this (roughly 6 steps) [dce8f8ed1de1d9d6d27c5ccd202ce4ec163b100c] document while_each_thread(), change first_tid() to use for_each_thread() testing commit dce8f8ed1de1d9d6d27c5ccd202ce4ec163b100c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2108721f71751afaf2f909ef20f63a3fd4ef7d6c032ed55d6a8d576b957aedcd run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_setup run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_setup run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_remove representative crash: INFO: task hung in blk_trace_setup, types: [HANG] # git bisect bad dce8f8ed1de1d9d6d27c5ccd202ce4ec163b100c Bisecting: 40 revisions left to test after this (roughly 5 steps) [02d7f74a04b1299ab2a0a9095f0e2d5aa3aed553] lib/bch.c: use bitrev instead of internal logic testing commit 02d7f74a04b1299ab2a0a9095f0e2d5aa3aed553 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d4b2e2bc4c47b123c3be7b5a72908e298610fc7b8250f2f5fb6847ba77f4a05 all runs: OK false negative chance: 0.000 # git bisect good 02d7f74a04b1299ab2a0a9095f0e2d5aa3aed553 Bisecting: 20 revisions left to test after this (roughly 4 steps) [79939c4a79bc643d399bd3fdd0f87100ea6b4362] scripts/gdb/slab: add slab support testing commit 79939c4a79bc643d399bd3fdd0f87100ea6b4362 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 959cb3808846921fdf61d5a2af19344fa89a748a8e59ad54c31c558c06de2b1b run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_setup run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_remove run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_setup run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_setup run #18: crashed: INFO: task hung in blk_trace_setup run #19: OK representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad 79939c4a79bc643d399bd3fdd0f87100ea6b4362 Bisecting: 9 revisions left to test after this (roughly 3 steps) [6b72e5f9e79360fce4f2be7fe81159fbdf4256a5] fs: ocfs2: namei: check return value of ocfs2_add_entry() testing commit 6b72e5f9e79360fce4f2be7fe81159fbdf4256a5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 814ffebae566919652cd43c7883fdf1f42bed7c81cb54da9caf86927213c1df9 all runs: OK false negative chance: 0.000 # git bisect good 6b72e5f9e79360fce4f2be7fe81159fbdf4256a5 Bisecting: 4 revisions left to test after this (roughly 2 steps) [82141540c3e01d1929299c81375e97b80b8eaf52] scripts/gdb/modules: add get module text support testing commit 82141540c3e01d1929299c81375e97b80b8eaf52 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fb98a0ff6c6f122465ff213261498a05a99b6b2a39d0de75c5e40e7f9e1a81ff run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_remove run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_setup run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_setup run #12: crashed: INFO: task hung in blk_trace_setup run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_setup run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad 82141540c3e01d1929299c81375e97b80b8eaf52 Bisecting: 2 revisions left to test after this (roughly 1 step) [5b2c73341ae979fff017d8605d74601f86786eef] checkpatch: special case extern struct in .c testing commit 5b2c73341ae979fff017d8605d74601f86786eef gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a308b134b7082d9f174ae16df57fde5b4d32c0edad0cc311855d42a7d63b7e73 run #0: crashed: INFO: task hung in blk_trace_setup run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_setup run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_setup run #13: crashed: INFO: task hung in blk_trace_remove run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_remove run #16: crashed: INFO: task hung in blk_trace_remove run #17: crashed: INFO: task hung in blk_trace_setup run #18: crashed: INFO: task hung in blk_trace_remove run #19: OK representative crash: INFO: task hung in blk_trace_setup, types: [HANG] # git bisect bad 5b2c73341ae979fff017d8605d74601f86786eef Bisecting: 0 revisions left to test after this (roughly 0 steps) [0d345996e4cb573f8cc81d49b3ee9a7fd2035bef] x86/kernel: increase kcov coverage under arch/x86/kernel folder testing commit 0d345996e4cb573f8cc81d49b3ee9a7fd2035bef gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e231c03831462b3068c32b900bf68c4c842149d03409165eacd3ae21ad035053 run #0: crashed: INFO: task hung in blk_trace_remove run #1: crashed: INFO: task hung in blk_trace_remove run #2: crashed: INFO: task hung in blk_trace_setup run #3: crashed: INFO: task hung in blk_trace_remove run #4: crashed: INFO: task hung in blk_trace_remove run #5: crashed: INFO: task hung in blk_trace_remove run #6: crashed: INFO: task hung in blk_trace_remove run #7: crashed: INFO: task hung in blk_trace_remove run #8: crashed: INFO: task hung in blk_trace_remove run #9: crashed: INFO: task hung in blk_trace_remove run #10: crashed: INFO: task hung in blk_trace_remove run #11: crashed: INFO: task hung in blk_trace_remove run #12: crashed: INFO: task hung in blk_trace_setup run #13: crashed: INFO: task hung in blk_trace_setup run #14: crashed: INFO: task hung in blk_trace_remove run #15: crashed: INFO: task hung in blk_trace_setup run #16: crashed: INFO: task hung in blk_trace_setup run #17: crashed: INFO: task hung in blk_trace_remove run #18: crashed: INFO: task hung in blk_trace_setup run #19: crashed: INFO: task hung in blk_trace_setup representative crash: INFO: task hung in blk_trace_remove, types: [HANG] # git bisect bad 0d345996e4cb573f8cc81d49b3ee9a7fd2035bef 0d345996e4cb573f8cc81d49b3ee9a7fd2035bef is the first bad commit commit 0d345996e4cb573f8cc81d49b3ee9a7fd2035bef Author: Pengfei Xu Date: Mon Jul 31 11:04:18 2023 +0800 x86/kernel: increase kcov coverage under arch/x86/kernel folder Currently kcov instrument is disabled for object files under arch/x86/kernel folder. For object files under arch/x86/kernel, actually just disabling the kcov instrument of files:"head32.o or head64.o and sev.o" could achieve successful booting and provide kcov coverage for object files that do not disable kcov instrument. The additional kcov coverage collected from arch/x86/kernel folder helps kernel fuzzing efforts to find bugs. Link to related improvement discussion is below: https://groups.google.com/g/syzkaller/c/Dsl-RYGCqs8/m/x-tfpTyFBAAJ Related ticket is as follow: https://bugzilla.kernel.org/show_bug.cgi?id=198443 Link: https://lkml.kernel.org/r/06c0bb7b5f61e5884bf31180e8c122648c752010.1690771380.git.pengfei.xu@intel.com Reviewed-by: Dmitry Vyukov Tested-by: Dmitry Vyukov Signed-off-by: Pengfei Xu Cc: Aleksandr Nogikh Cc: Cc: Ingo Molnar Cc: Kees Cook , Cc: Kirill A. Shutemov Cc: Sohil Mehta Signed-off-by: Andrew Morton arch/x86/kernel/Makefile | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) accumulated error probability: 0.00 culprit signature: e231c03831462b3068c32b900bf68c4c842149d03409165eacd3ae21ad035053 parent signature: 814ffebae566919652cd43c7883fdf1f42bed7c81cb54da9caf86927213c1df9 reproducer is flaky (0.96 repro chance estimate) revisions tested: 24, total time: 9h20m51.397906105s (build: 3h45m58.636354409s, test: 5h17m22.807230471s) first bad commit: 0d345996e4cb573f8cc81d49b3ee9a7fd2035bef x86/kernel: increase kcov coverage under arch/x86/kernel folder recipients (to): ["akpm@linux-foundation.org" "dvyukov@google.com" "pengfei.xu@intel.com"] recipients (cc): [] crash: INFO: task hung in blk_trace_remove INFO: task syz-executor.0:6142 blocked for more than 143 seconds. Not tainted 6.5.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:14632 pid:6142 ppid:5030 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x3c8/0xa20 kernel/sched/core.c:6710 schedule+0x59/0xa0 kernel/sched/core.c:6786 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6845 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x53d/0x9f0 kernel/locking/mutex.c:747 blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 sg_ioctl_common drivers/scsi/sg.c:1126 [inline] sg_ioctl+0x315/0x10e0 drivers/scsi/sg.c:1160 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f8f69a2cda9 RSP: 002b:00007f8f6958e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8f69b5c050 RCX: 00007f8f69a2cda9 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 RBP: 00007f8f69a7947a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f8f69b5c050 R15: 00007fff1e1da198 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/13: #0: ffffffff837a43d0 (rcu_tasks.tasks_gp_mutex){....}-{3:3}, at: rcu_tasks_one_gp+0x26/0x3d0 kernel/rcu/tasks.h:522 1 lock held by khungtaskd/27: #0: ffffffff837a4a80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x12/0x120 kernel/locking/lockdep.c:6615 2 locks held by getty/1773: #0: ffff88810867c098 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x60 drivers/tty/tty_ldisc.c:243 #1: ffffc90003c0f2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x83d/0xa60 drivers/tty/n_tty.c:2187 3 locks held by kworker/0:4/2903: 1 lock held by syz-executor.5/6039: #0: ffffffff837a5678 (rcu_state.exp_mutex){....}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:293 [inline] #0: ffffffff837a5678 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0x325/0x450 kernel/rcu/tree_exp.h:992 2 locks held by syz-executor.0/6141: 1 lock held by syz-executor.0/6142: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.2/7160: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.2/7171: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.3/7605: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.3/7607: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.5/8520: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.5/8524: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.0/9164: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.0/9168: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.1/9554: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.1/9559: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.4/9558: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.4/9560: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.2/10092: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.2/10096: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.3/10140: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_setup+0x33/0x60 kernel/trace/blktrace.c:648 1 lock held by syz-executor.3/10141: #0: ffff888100fbcf80 (&q->debugfs_mutex){....}-{3:3}, at: blk_trace_remove+0x21/0x80 kernel/trace/blktrace.c:406 1 lock held by syz-executor.5/10143: #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:78 [inline] #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x21f/0x670 net/core/rtnetlink.c:6421 1 lock held by syz-executor.0/10233: #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:78 [inline] #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x21f/0x670 net/core/rtnetlink.c:6421 5 locks held by syz-executor.1/10332: #0: ffff88810ab810c8 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x77/0x90 fs/file.c:1046 #1: ffff888100bbb3e8 (sb_writers#8){....}-{0:0}, at: ksys_write+0xb3/0x180 fs/read_write.c:637 #2: ffff888123cbd688 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x172/0x2c0 fs/kernfs/file.c:325 #3: ffff888103af1548 (kn->active#38){....}-{0:0}, at: kernfs_fop_write_iter+0x17b/0x2c0 fs/kernfs/file.c:326 #4: ffffffff838a18c8 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x8d/0x240 drivers/net/netdevsim/bus.c:209 8 locks held by syz-executor.4/10334: #0: ffff88820b3914c8 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x77/0x90 fs/file.c:1046 #1: ffff888100bbb3e8 (sb_writers#8){....}-{0:0}, at: ksys_write+0xb3/0x180 fs/read_write.c:637 #2: ffff888123cbda88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x172/0x2c0 fs/kernfs/file.c:325 #3: ffff888103af1548 (kn->active#38){....}-{0:0}, at: kernfs_fop_write_iter+0x17b/0x2c0 fs/kernfs/file.c:326 #4: ffffffff838a18c8 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x8d/0x240 drivers/net/netdevsim/bus.c:209 #5: ffff888207e248e8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:958 [inline] #5: ffff888207e248e8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:1093 [inline] #5: ffff888207e248e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x59/0x2f0 drivers/base/dd.c:1290 #6: ffff888207e24250 (&devlink->lock_key#16){....}-{3:3}, at: nsim_drv_remove+0x28/0xb0 drivers/net/netdevsim/dev.c:1672 #7: ffffffff837a5678 (rcu_state.exp_mutex){....}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline] #7: ffffffff837a5678 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0x159/0x450 kernel/rcu/tree_exp.h:992 1 lock held by syz-executor.2/10754: #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:78 [inline] #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x21f/0x670 net/core/rtnetlink.c:6421 1 lock held by syz-executor.3/10795: #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:78 [inline] #0: ffffffff838faa48 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x21f/0x670 net/core/rtnetlink.c:6421 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8e/0xf0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x1ae/0x210 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1b1/0x1e0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0x908/0x940 kernel/hung_task.c:379 kthread+0x10f/0x150 kernel/kthread.c:388 ret_from_fork+0x45/0x50 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6141 Comm: syz-executor.0 Not tainted 6.5.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:__lock_acquire.constprop.0+0x2f7/0x570 kernel/locking/lockdep.c:5020 Code: 0f 85 11 02 00 00 0f b7 45 20 66 25 ff 1f 66 89 44 24 16 0f b6 45 22 83 e0 03 88 44 24 10 e9 6d fe ff ff 89 f0 48 8b 44 c7 08 <48> 85 c0 0f 85 68 fd ff ff e9 39 fd ff ff e8 f6 dc 7b 00 85 c0 74 RSP: 0018:ffffc900019d3a50 EFLAGS: 00000097 RAX: ffffffff843e5270 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88823fff9d38 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88813010b680 R15: 0000000000000000 FS: 00007f8f695af6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4050959440 CR3: 000000016ed5e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5761 [inline] lock_acquire+0xab/0x180 kernel/locking/lockdep.c:5726 seqcount_lockdep_reader_access include/linux/seqlock.h:102 [inline] read_seqbegin include/linux/seqlock.h:837 [inline] zone_span_seqbegin include/linux/memory_hotplug.h:132 [inline] page_outside_zone_boundaries mm/page_alloc.c:468 [inline] bad_range+0x4d/0x150 mm/page_alloc.c:488 rmqueue mm/page_alloc.c:2845 [inline] get_page_from_freelist+0x8a9/0x1220 mm/page_alloc.c:3218 __alloc_pages+0xf3/0x260 mm/page_alloc.c:4477 alloc_pages+0x124/0x290 mm/mempolicy.c:2292 relay_alloc_buf kernel/relay.c:121 [inline] relay_create_buf kernel/relay.c:162 [inline] relay_open_buf.part.0+0x17a/0x490 kernel/relay.c:384 relay_open_buf kernel/relay.c:536 [inline] relay_open+0x356/0x510 kernel/relay.c:517 do_blk_trace_setup+0x1fa/0x380 kernel/trace/blktrace.c:591 __blk_trace_setup+0x83/0x130 kernel/trace/blktrace.c:631 blk_trace_setup+0x47/0x60 kernel/trace/blktrace.c:649 sg_ioctl_common drivers/scsi/sg.c:1118 [inline] sg_ioctl+0x504/0x10e0 drivers/scsi/sg.c:1160 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f8f69a2cda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8f695af0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8f69b5bf80 RCX: 00007f8f69a2cda9 RDX: 0000000020000040 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007f8f69a7947a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f8f69b5bf80 R15: 00007fff1e1da198