ci starts bisection 2023-09-27 05:13:45.500311293 +0000 UTC m=+1188569.519435324 bisecting fixing commit since 950fe35831af0c1f9d87d4105843c3b7f1fbf09b building syzkaller on 7773e940a7feacbe318f849807fe586fee985805 ensuring issue is reproducible on original commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5597546c2e76ed24e8cf1a9ad33c7e492363049e125e5b0238b2c98063838076 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in net_tx_action run #4: crashed: INFO: rcu detected stall in clone run #5: crashed: INFO: rcu detected stall in addrconf_dad_work run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in syscall_exit_to_user_mode run #8: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #9: crashed: INFO: rcu detected stall in newfstatat run #10: crashed: INFO: rcu detected stall in tc_modify_qdisc run #11: crashed: INFO: rcu detected stall in sys_openat run #12: crashed: INFO: rcu detected stall in wg_packet_encrypt_worker run #13: crashed: INFO: rcu detected stall in net_tx_action run #14: crashed: INFO: rcu detected stall in sys_openat run #15: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #16: crashed: INFO: rcu detected stall in corrupted run #17: crashed: INFO: rcu detected stall in net_tx_action run #18: OK run #19: OK representative crash: INFO: rcu detected stall in corrupted, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d0f3cb0122d7b20983064b300e68c2c1b39006fec679fc4c49db6f1f747afacf run #0: crashed: INFO: rcu detected stall in do_vmi_munmap run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: INFO: rcu detected stall in do_vmi_munmap, types: [HANG] kconfig minimization: base=3883 full=7656 leaves diff=2001 split chunks (needed=false): <2001> split chunk #0 of len 2001 into 5 parts testing without sub-chunk 1/5 testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 97776438d7e4fe797a94440e1e04405a5c0954dbb10891c100e45f9341668941 run #0: crashed: INFO: rcu detected stall in net_tx_action run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in net_tx_action run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in corrupted run #5: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #6: crashed: INFO: rcu detected stall in tc_modify_qdisc run #7: crashed: INFO: rcu detected stall in nsim_fib_event_work run #8: crashed: INFO: rcu detected stall in process_one_work run #9: crashed: INFO: rcu detected stall in schedule_tail run #10: crashed: INFO: rcu detected stall in tcp_setsockopt run #11: crashed: INFO: rcu detected stall in corrupted run #12: crashed: INFO: rcu detected stall in schedule_timeout run #13: crashed: INFO: rcu detected stall in sys_openat run #14: crashed: INFO: rcu detected stall in __stack_depot_save run #15: OK run #16: OK run #17: OK run #18: crashed: INFO: rcu detected stall in tc_modify_qdisc run #19: OK representative crash: INFO: rcu detected stall in net_tx_action, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 66352d5da1de1eb5edf657c2e5d4c9b25c9dc66cbd920cdfeb9e601137e2f07b run #0: crashed: INFO: rcu detected stall in net_tx_action run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in corrupted run #3: crashed: INFO: rcu detected stall in net_tx_action run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in sys_exit_group run #7: crashed: INFO: rcu detected stall in sys_exit_group run #8: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #9: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #10: crashed: INFO: rcu detected stall in corrupted run #11: crashed: INFO: rcu detected stall in tc_modify_qdisc run #12: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #13: crashed: INFO: rcu detected stall in nsim_fib_event_work run #14: crashed: INFO: rcu detected stall in sys_unlink run #15: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #16: crashed: INFO: rcu detected stall in net_tx_action run #17: crashed: INFO: rcu detected stall in worker_thread run #18: crashed: INFO: rcu detected stall in sys_mprotect run #19: crashed: INFO: rcu detected stall in tc_modify_qdisc representative crash: INFO: rcu detected stall in net_tx_action, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 47b063251ec3ead63e47b354b12820917d255270e7c9699db3ee224a04779fc2 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 79156b3f5cda190d2d48d0537352f06a5b36dbe33c3f8c3c00c330fc3c95ca89 run #0: crashed: INFO: rcu detected stall in net_tx_action run #1: crashed: INFO: rcu detected stall in corrupted run #2: crashed: INFO: rcu detected stall in validate_mm run #3: crashed: INFO: rcu detected stall in tc_modify_qdisc run #4: crashed: INFO: rcu detected stall in tc_modify_qdisc run #5: crashed: INFO: rcu detected stall in net_tx_action run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in smp_call_function run #8: crashed: INFO: rcu detected stall in tc_modify_qdisc run #9: crashed: INFO: rcu detected stall in clone3 run #10: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #11: crashed: INFO: rcu detected stall in clone3 run #12: crashed: INFO: rcu detected stall in net_tx_action run #13: crashed: INFO: rcu detected stall in corrupted run #14: crashed: INFO: rcu detected stall in tc_modify_qdisc run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: INFO: rcu detected stall in net_tx_action, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 testing commit 950fe35831af0c1f9d87d4105843c3b7f1fbf09b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f3a9003257c8c79ce556d42d999571f493a76090ebebb364d32626a88dbd5f41 run #0: crashed: INFO: rcu detected stall in net_tx_action run #1: crashed: INFO: rcu detected stall in sys_exit_group run #2: crashed: INFO: rcu detected stall in do_vmi_munmap run #3: crashed: INFO: rcu detected stall in net_tx_action run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in tc_modify_qdisc run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in net_tx_action run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #10: crashed: INFO: rcu detected stall in call_usermodehelper_exec_async run #11: crashed: INFO: rcu detected stall in sys_unlinkat run #12: crashed: INFO: rcu detected stall in syscall_enter_from_user_mode run #13: crashed: INFO: rcu detected stall in process_one_work run #14: crashed: INFO: rcu detected stall in tc_modify_qdisc run #15: crashed: INFO: rcu detected stall in gc_worker run #16: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #17: crashed: INFO: rcu detected stall in net_tx_action run #18: crashed: INFO: rcu detected stall in syscall_exit_to_user_mode run #19: OK representative crash: INFO: rcu detected stall in net_tx_action, types: [HANG] the chunk can be dropped minimized to 401 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB FSCACHE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_MMIO KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOCALVERSION_AUTO LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NET_XGRESS NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] testing current HEAD 5a1b322cb0b7d0d33a2d13462294dc0f46911172 testing commit 5a1b322cb0b7d0d33a2d13462294dc0f46911172 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4755038f9de96bf9d6eca5206e1fb4271805f7955e4bff4a34f44c7ec1de2fe9 all runs: OK false negative chance: 0.000 # git bisect start 5a1b322cb0b7d0d33a2d13462294dc0f46911172 950fe35831af0c1f9d87d4105843c3b7f1fbf09b Bisecting: 6673 revisions left to test after this (roughly 13 steps) [a1c19328a160c80251868dbd80066dce23d07995] Merge tag 'soc-arm-6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision 950fe35831af0c1f9d87d4105843c3b7f1fbf09b crashed and is reachable testing commit a1c19328a160c80251868dbd80066dce23d07995 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e13b073e13595457cdad138bf018f43b22846ed2d8fc9563bececda551629b94 all runs: OK false negative chance: 0.000 # git bisect bad a1c19328a160c80251868dbd80066dce23d07995 Bisecting: 3387 revisions left to test after this (roughly 12 steps) [651a00bc56403161351090a9d7ddbd7095975324] Merge tag 'slab-for-6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab determine whether the revision contains the guilty commit revision 950fe35831af0c1f9d87d4105843c3b7f1fbf09b crashed and is reachable testing commit 651a00bc56403161351090a9d7ddbd7095975324 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 13d691627839278c0b50d2facff3b240986812c98e49e26bf711f82561971a1f all runs: OK false negative chance: 0.000 # git bisect bad 651a00bc56403161351090a9d7ddbd7095975324 Bisecting: 1664 revisions left to test after this (roughly 11 steps) [330235e87410349042468b52baff02af7cb7d331] Merge tag 'acpi-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit checking the merge base 9ebbb29db9cae23e29881b9a268767d4baa53cdb no existing result, test the revision testing commit 9ebbb29db9cae23e29881b9a268767d4baa53cdb gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 04449f84c621ff2a1ca8bc0f335a80412c0f17c0f34e596be5f801abec5c1381 run #0: crashed: INFO: rcu detected stall in sys_exit_group run #1: crashed: INFO: rcu detected stall in pipe_read run #2: crashed: INFO: rcu detected stall in net_tx_action run #3: crashed: INFO: rcu detected stall in do_vmi_munmap run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in corrupted run #6: crashed: INFO: rcu detected stall in clone run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in corrupted run #9: crashed: INFO: rcu detected stall in tc_modify_qdisc run #10: crashed: INFO: rcu detected stall in mas_store_prealloc run #11: crashed: INFO: rcu detected stall in security_file_open run #12: crashed: INFO: rcu detected stall in tc_modify_qdisc run #13: crashed: INFO: rcu detected stall in tc_modify_qdisc run #14: crashed: INFO: rcu detected stall in tc_modify_qdisc run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: INFO: rcu detected stall in sys_exit_group, types: [HANG] testing commit 330235e87410349042468b52baff02af7cb7d331 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ef63dd5a739ed84b4c265075caeebc801359a002159c371b73452c7a3a0f9c3d all runs: OK false negative chance: 0.000 # git bisect bad 330235e87410349042468b52baff02af7cb7d331 Bisecting: 803 revisions left to test after this (roughly 10 steps) [ecd7db20474c3859d4d01f34aaabf41bd28c7d84] Merge tag 'v6.6-vfs.tmpfs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit ecd7db20474c3859d4d01f34aaabf41bd28c7d84 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 21f1ed9d8f488ce9a0508ba9b0dce4fdb402bd8bc1a43a66e27ffdd4c9f8ef09 all runs: OK false negative chance: 0.000 # git bisect bad ecd7db20474c3859d4d01f34aaabf41bd28c7d84 Bisecting: 395 revisions left to test after this (roughly 9 steps) [d4ddefee5160dc477d0e30c9d7a10ce8861c3007] Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit d4ddefee5160dc477d0e30c9d7a10ce8861c3007 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ebd222852aaf0e22ee10f84ce0e068548b6bef6279f784c19119fa0f8f28148c run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in syscall_exit_to_user_mode run #2: crashed: INFO: rcu detected stall in net_tx_action run #3: crashed: INFO: rcu detected stall in gc_worker run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in net_tx_action run #6: crashed: INFO: rcu detected stall in ext4_release_dir run #7: crashed: INFO: rcu detected stall in net_tx_action run #8: crashed: INFO: rcu detected stall in sys_mprotect run #9: crashed: INFO: rcu detected stall in sys_unlinkat run #10: crashed: INFO: rcu detected stall in sys_unlinkat run #11: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #12: crashed: INFO: rcu detected stall in do_idle run #13: crashed: INFO: rcu detected stall in newfstatat run #14: crashed: INFO: rcu detected stall in sys_unlink run #15: crashed: INFO: rcu detected stall in tc_modify_qdisc run #16: crashed: INFO: rcu detected stall in gc_worker run #17: crashed: INFO: rcu detected stall in tc_modify_qdisc run #18: crashed: INFO: rcu detected stall in tc_modify_qdisc run #19: OK representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect good d4ddefee5160dc477d0e30c9d7a10ce8861c3007 Bisecting: 194 revisions left to test after this (roughly 8 steps) [ced5bf2493d42fe855c224b2ae2ac6545fd91517] Merge tag 'sound-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit ced5bf2493d42fe855c224b2ae2ac6545fd91517 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 56d3012d8a4bcee7619edd044f69d661ff1c31fa93157f22272012a2055a645c all runs: OK false negative chance: 0.000 # git bisect bad ced5bf2493d42fe855c224b2ae2ac6545fd91517 Bisecting: 105 revisions left to test after this (roughly 7 steps) [93f5de5f648d2b1ce3540a4ac71756d4a852dc23] Merge tag 'acpi-6.5-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit 93f5de5f648d2b1ce3540a4ac71756d4a852dc23 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e708aa241e14d102888f5c0b6ab1526fbb5ec06e6081fed9c86e72bd87f9f156 run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in sys_symlinkat run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in sys_mprotect run #6: crashed: INFO: rcu detected stall in percpu_counter_add_batch run #7: crashed: INFO: rcu detected stall in wait4 run #8: crashed: INFO: rcu detected stall in net_tx_action run #9: crashed: INFO: rcu detected stall in cfg80211_wiphy_work run #10: crashed: INFO: rcu detected stall in kernfs_fop_read_iter run #11: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #12: crashed: INFO: rcu detected stall in gc_worker run #13: crashed: INFO: rcu detected stall in gc_worker run #14: crashed: INFO: rcu detected stall in lock_is_held_type run #15: crashed: INFO: rcu detected stall in net_tx_action run #16: crashed: INFO: rcu detected stall in net_tx_action run #17: crashed: INFO: rcu detected stall in net_tx_action run #18: OK run #19: OK representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect good 93f5de5f648d2b1ce3540a4ac71756d4a852dc23 Bisecting: 52 revisions left to test after this (roughly 6 steps) [720344340fb9be2765bbaab7b292ece0a4570eae] netfilter: nf_tables: GC transaction race with abort path determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit 720344340fb9be2765bbaab7b292ece0a4570eae gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cd842f0abae715371b649d499b0cd5a53d0e5171f11c76e64025af8d254cfc3b all runs: OK false negative chance: 0.000 # git bisect bad 720344340fb9be2765bbaab7b292ece0a4570eae Bisecting: 26 revisions left to test after this (roughly 5 steps) [f866fbc842de5976e41ba874b76ce31710b634b5] ipv4: fix data-races around inet->inet_id determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit f866fbc842de5976e41ba874b76ce31710b634b5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5590ddb6f0eb96e3fd7d814569bd4b5c9d216036376b18819ffc2dd21cbb79f2 run #0: crashed: INFO: rcu detected stall in net_tx_action run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in tc_modify_qdisc run #3: crashed: INFO: rcu detected stall in tc_modify_qdisc run #4: crashed: INFO: rcu detected stall in tc_modify_qdisc run #5: crashed: INFO: rcu detected stall in sys_rename run #6: crashed: INFO: rcu detected stall in corrupted run #7: crashed: INFO: rcu detected stall in sys_openat run #8: crashed: INFO: rcu detected stall in sys_unlink run #9: crashed: INFO: rcu detected stall in tc_modify_qdisc run #10: crashed: INFO: rcu detected stall in net_tx_action run #11: crashed: INFO: rcu detected stall in syscall_exit_to_user_mode run #12: crashed: INFO: rcu detected stall in tc_modify_qdisc run #13: crashed: INFO: rcu detected stall in corrupted run #14: crashed: INFO: rcu detected stall in newfstatat run #15: crashed: INFO: rcu detected stall in sys_inotify_rm_watch run #16: crashed: INFO: rcu detected stall in newfstatat run #17: crashed: INFO: rcu detected stall in sys_mprotect run #18: crashed: INFO: rcu detected stall in corrupted run #19: OK representative crash: INFO: rcu detected stall in net_tx_action, types: [HANG] # git bisect good f866fbc842de5976e41ba874b76ce31710b634b5 Bisecting: 12 revisions left to test after this (roughly 4 steps) [c8777fa6f3c6e0cfa4ef7e7028df83d35a586671] Merge branch 'can-fixes-for-6-5-rc7' determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit c8777fa6f3c6e0cfa4ef7e7028df83d35a586671 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c42d3694642e659816f7f5255dcd0c211a431e3c7708f1f457cf0c96e1088cdc run #0: crashed: INFO: rcu detected stall in corrupted run #1: crashed: INFO: rcu detected stall in do_vmi_munmap run #2: crashed: INFO: rcu detected stall in tc_modify_qdisc run #3: crashed: INFO: rcu detected stall in net_tx_action run #4: crashed: INFO: rcu detected stall in net_tx_action run #5: crashed: INFO: rcu detected stall in tc_modify_qdisc run #6: crashed: INFO: rcu detected stall in nsim_dev_trap_report_work run #7: crashed: INFO: rcu detected stall in net_tx_action run #8: crashed: INFO: rcu detected stall in smp_call_function run #9: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #10: crashed: INFO: rcu detected stall in packet_release run #11: crashed: INFO: rcu detected stall in sys_openat run #12: crashed: INFO: rcu detected stall in call_usermodehelper_exec_async run #13: crashed: INFO: rcu detected stall in corrupted run #14: crashed: INFO: rcu detected stall in cfg80211_wiphy_work run #15: crashed: INFO: rcu detected stall in sys_openat run #16: crashed: INFO: rcu detected stall in net_tx_action run #17: crashed: INFO: rcu detected stall in net_tx_action run #18: crashed: INFO: rcu detected stall in netlink_release run #19: OK representative crash: INFO: rcu detected stall in corrupted, types: [HANG] # git bisect good c8777fa6f3c6e0cfa4ef7e7028df83d35a586671 Bisecting: 6 revisions left to test after this (roughly 3 steps) [987aae75fc1041072941ffb622b45ce2359a99b9] batman-adv: Hold rtnl lock during MTU update via netlink determine whether the revision contains the guilty commit revision 9ebbb29db9cae23e29881b9a268767d4baa53cdb crashed and is reachable testing commit 987aae75fc1041072941ffb622b45ce2359a99b9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 04d04cea84620d8fcb6fadec1e40a715f0cea1b6d40da8f61b42cd7de5f7c44f run #0: crashed: INFO: rcu detected stall in sys_exit_group run #1: crashed: INFO: rcu detected stall in net_tx_action run #2: crashed: INFO: rcu detected stall in sys_openat run #3: crashed: INFO: rcu detected stall in corrupted run #4: crashed: INFO: rcu detected stall in cfg80211_wiphy_work run #5: crashed: INFO: rcu detected stall in net_tx_action run #6: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #7: crashed: INFO: rcu detected stall in tc_modify_qdisc run #8: crashed: INFO: rcu detected stall in tc_modify_qdisc run #9: crashed: INFO: rcu detected stall in net_tx_action run #10: crashed: INFO: rcu detected stall in clone run #11: crashed: INFO: rcu detected stall in tc_modify_qdisc run #12: crashed: INFO: rcu detected stall in corrupted run #13: crashed: INFO: rcu detected stall in sys_openat run #14: crashed: INFO: rcu detected stall in security_file_open run #15: crashed: INFO: rcu detected stall in gc_worker run #16: crashed: INFO: rcu detected stall in net_tx_action run #17: crashed: INFO: rcu detected stall in net_tx_action run #18: OK run #19: OK representative crash: INFO: rcu detected stall in sys_exit_group, types: [HANG] # git bisect good 987aae75fc1041072941ffb622b45ce2359a99b9 Bisecting: 3 revisions left to test after this (roughly 2 steps) [9525a3c38accd2e186f52443e35e633e296cc7f5] i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() determine whether the revision contains the guilty commit revision f866fbc842de5976e41ba874b76ce31710b634b5 crashed and is reachable testing commit 9525a3c38accd2e186f52443e35e633e296cc7f5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ee2a19d39d11a6204c61fc35de6ca38d2859836748fe136f81eccba080391747 all runs: OK false negative chance: 0.000 # git bisect bad 9525a3c38accd2e186f52443e35e633e296cc7f5 Bisecting: 0 revisions left to test after this (roughly 1 step) [da71714e359b64bd7aab3bd56ec53f307f058133] net/sched: fix a qdisc modification with ambiguous command request determine whether the revision contains the guilty commit revision f866fbc842de5976e41ba874b76ce31710b634b5 crashed and is reachable testing commit da71714e359b64bd7aab3bd56ec53f307f058133 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6d79e36ac108ce8a24434b4668e26dd6f868faffb876cb94bfdf2d706462e092 all runs: OK false negative chance: 0.000 # git bisect bad da71714e359b64bd7aab3bd56ec53f307f058133 Bisecting: 0 revisions left to test after this (roughly 0 steps) [de43975721b97283d5f17eea4228faddf08f2681] igc: Fix the typo in the PTM Control macro determine whether the revision contains the guilty commit revision c8777fa6f3c6e0cfa4ef7e7028df83d35a586671 crashed and is reachable testing commit de43975721b97283d5f17eea4228faddf08f2681 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7f1f02e1b198527b712ced8d34aaaf982a359aa4f103931a52d74aa8cf64dcb2 run #0: crashed: INFO: rcu detected stall in sys_openat run #1: crashed: INFO: rcu detected stall in tc_modify_qdisc run #2: crashed: INFO: rcu detected stall in net_tx_action run #3: crashed: INFO: rcu detected stall in tc_modify_qdisc run #4: crashed: INFO: rcu detected stall in gc_worker run #5: crashed: INFO: rcu detected stall in do_vmi_munmap run #6: crashed: INFO: rcu detected stall in net_tx_action run #7: crashed: INFO: rcu detected stall in corrupted run #8: crashed: INFO: rcu detected stall in tc_modify_qdisc run #9: crashed: INFO: rcu detected stall in sys_clock_nanosleep run #10: crashed: INFO: rcu detected stall in net_tx_action run #11: crashed: INFO: rcu detected stall in schedule run #12: crashed: INFO: rcu detected stall in sys_unlink run #13: crashed: INFO: rcu detected stall in sys_openat run #14: crashed: INFO: rcu detected stall in corrupted run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: INFO: rcu detected stall in sys_openat, types: [HANG] # git bisect good de43975721b97283d5f17eea4228faddf08f2681 da71714e359b64bd7aab3bd56ec53f307f058133 is the first bad commit commit da71714e359b64bd7aab3bd56ec53f307f058133 Author: Jamal Hadi Salim Date: Tue Aug 22 06:12:31 2023 -0400 net/sched: fix a qdisc modification with ambiguous command request When replacing an existing root qdisc, with one that is of the same kind, the request boils down to essentially a parameterization change i.e not one that requires allocation and grafting of a new qdisc. syzbot was able to create a scenario which resulted in a taprio qdisc replacing an existing taprio qdisc with a combination of NLM_F_CREATE, NLM_F_REPLACE and NLM_F_EXCL leading to create and graft scenario. The fix ensures that only when the qdisc kinds are different that we should allow a create and graft, otherwise it goes into the "change" codepath. While at it, fix the code and comments to improve readability. While syzbot was able to create the issue, it did not zone on the root cause. Analysis from Vladimir Oltean helped narrow it down. v1->V2 changes: - remove "inline" function definition (Vladmir) - remove extrenous braces in branches (Vladmir) - change inline function names (Pedro) - Run tdc tests (Victor) v2->v3 changes: - dont break else/if (Simon) Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Reported-by: syzbot+a3618a167af2021433cd@syzkaller.appspotmail.com Closes: https://lore.kernel.org/netdev/20230816225759.g25x76kmgzya2gei@skbuf/T/ Tested-by: Vladimir Oltean Tested-by: Victor Nogueira Reviewed-by: Pedro Tammela Reviewed-by: Victor Nogueira Signed-off-by: Jamal Hadi Salim Signed-off-by: David S. Miller net/sched/sch_api.c | 53 ++++++++++++++++++++++++++++++++++++++++------------- 1 file changed, 40 insertions(+), 13 deletions(-) accumulated error probability: 0.00 culprit signature: 6d79e36ac108ce8a24434b4668e26dd6f868faffb876cb94bfdf2d706462e092 parent signature: 7f1f02e1b198527b712ced8d34aaaf982a359aa4f103931a52d74aa8cf64dcb2 reproducer is flaky (0.83 repro chance estimate) revisions tested: 23, total time: 8h57m32.720811363s (build: 3h48m15.602041931s, test: 4h54m55.370769002s) first good commit: da71714e359b64bd7aab3bd56ec53f307f058133 net/sched: fix a qdisc modification with ambiguous command request recipients (to): ["davem@davemloft.net" "jhs@mojatatu.com" "pctammela@mojatatu.com" "victor@mojatatu.com" "vladimir.oltean@nxp.com"] recipients (cc): []