ci starts bisection 2025-10-21 15:11:35.132140321 +0000 UTC m=+71067.801971200 bisecting cause commit starting from 52ba76324a9d7c39830c850999210a36ef023cde building syzkaller on b6605ba8b96835063c5eb766c38d27fac98b84d4 fetch other tags and check if the commit is present ensuring issue is reproducible on original commit 52ba76324a9d7c39830c850999210a36ef023cde testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 415d8ab1f231b24d2de8630a3f62823c02f76c52033f88111fd4d5490b2e9fe2 all runs: crashed: kernel BUG in do_xmote representative crash: kernel BUG in do_xmote, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0241123b0cb317c4c4890eb53a9d409f51f350d92b90eee396e77959abaee3a0 run #0: crashed: kernel BUG in gfs2_jindex_free run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in gfs2_log_is_empty run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in gfs2_jindex_free, types: [BUG NULL-POINTER-DEREFERENCE] kconfig minimization: base=4116 full=8561 leaves diff=2154 split chunks (needed=false): <2154> split chunk #0 of len 2154 into 5 parts testing without sub-chunk 1/5 testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d271176c631c39562bf7806b3f9f75cf1c80d6d01c5193171b070fe630ea97ea all runs: crashed: kernel BUG in do_xmote representative crash: kernel BUG in do_xmote, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 584d001f0f1cfe907066e578dd5e253c7a38018c6606ab49ff7db039cbb39f4b all runs: OK false negative chance: 0.000 testing without sub-chunk 3/5 testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2934f99dac678c838274f702806a7ad731f48012f7a21f324009a878e5efc7e8 all runs: crashed: kernel BUG in do_xmote representative crash: kernel BUG in do_xmote, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d3648faafb0ec64ef6088a2c8996e6e2074c869c881fbae9af4a62e4241743ec run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: crashed: kernel BUG in do_xmote run #8: crashed: kernel BUG in do_xmote run #9: crashed: invalid opcode in corrupted run #10: OK run #11: crashed: kernel BUG in do_xmote run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 testing commit 52ba76324a9d7c39830c850999210a36ef023cde gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a86a1b2688e8bf74195ce19b2a54ac772eb5779ba64419d185ddb3dbec85fee8 run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: crashed: kernel BUG in do_xmote run #8: crashed: kernel BUG in do_xmote run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] the chunk can be dropped minimized to 431 configs; suspects: [6LOWPAN ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI BLK_DEV_ZONED CHARGER_BQ24190 CMA COMMON_CLK DAX DLM DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_DEFAULT_FBDEV DRM_CLIENT_LIB DRM_CLIENT_SELECTION DRM_CLIENT_SETUP DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_DSC_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_SYSFB_HELPER DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_CXUSB_ANALOG DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXTCON EXTCON_INTEL_CHT_WC EXTCON_PTN5150 EXTCON_USBC_TUSB320 EXTENDED_MODVERSIONS F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_CORE FB_DEFERRED_IO FB_DEVICE FB_IOMEM_FOPS FB_IOMEM_HELPERS FB_NOTIFY FB_SYSMEM_FOPS FB_SYSMEM_HELPERS FB_SYSMEM_HELPERS_DEFERRED FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_STACK FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GNSS GNSS_USB GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_LJCA GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GROUP_SCHED_BANDWIDTH GTP GUEST_PERF_EVENTS HAS_LTO_CLANG HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_IRQCHIP HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_KVM_READONLY_MEM HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_BIGBEN_FF HID_CMEDIA HID_CORSAIR HID_COUGAR HID_CP2112 HID_CREATIVE_SB0540 HID_DRAGONRISE HID_ELAN HID_ELECOM HID_ELO HID_EMS_FF HID_EVISION HID_FT260 HID_GEMBIRD HID_GFRM HID_GLORIOUS HID_GOOGLE_STADIA_FF HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_JABRA HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LETSKETCH HID_LOGITECH HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MACALLY HID_MAGICMOUSE HID_MALTRON HID_MAYFLASH HID_MCP2200 HID_MCP2221 HID_MEGAWORLD_FF HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_PXRC HID_RAZER HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SEMITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_INTEL_HINGE HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SIGMAMICRO HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_TIVO HID_TOPRE HID_TWINHAN HID_U2FZERO HID_UCLOGIC HID_UDRAW_PS3 HID_VIEWSONIC HID_VIVALDI HID_VIVALDI_COMMON HID_VRC2 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XIAOMI HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_CP2615 I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_HID_ACPI I2C_HID_CORE I2C_HID_OF I2C_LJCA I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_CHTWC_INT33FE INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISHTP_ECLITE INTEL_ISH_FIRMWARE_DOWNLOADER INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_DRIVER IOMMUFD_DRIVER_CORE IOMMUFD_TEST IO_URING_MOCK_FILE IP6_NF_FILTER IP6_NF_IPTABLES_LEGACY IP6_NF_MANGLE IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_REJECT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_IPTABLES_LEGACY IP_NF_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_SCTP IRQ_TIME_ACCOUNTING LAPB LCD_CLASS_DEVICE LEDS_CLASS_MULTICOLOR MAC802154 MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MODVERSIONS MPTCP MTD NETFILTER_ADVANCED NETFILTER_XTABLES_LEGACY NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE_DEMUX NFT_COMPAT NFT_COMPAT_ARP NFT_FWD_NETDEV NF_TABLES NF_TABLES_ARP NF_TABLES_NETDEV RADIO_ADAPTERS RADIO_SI4713 RAS RC_CORE REGULATOR RFKILL SND SOUND STAGING TRANSPARENT_HUGEPAGE TRUSTED_KEYS TYPEC TYPEC_MUX_PI3USB30532 USB_LJCA USB_ROLES_INTEL_XHCI USB_ROLE_SWITCH VIDEO_DEV VIRTIO_FS WAN ZONE_DEVICE] picked [v6.17 v6.16 v6.15 v6.13 v6.11 v6.9 v6.7 v6.5 v6.2 v5.19 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 40 release tags testing release v6.17 testing commit e5f0a698b34ed76002dc5cff3804a61c80233a7a gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 6bf46d25a6aee065d0182fcbc9bbd812c6d680313544a1d937cb76ef52605136 all runs: OK false negative chance: 0.000 # git bisect start 52ba76324a9d7c39830c850999210a36ef023cde e5f0a698b34ed76002dc5cff3804a61c80233a7a Bisecting: 7063 revisions left to test after this (roughly 13 steps) [f79e772258df311c2cb21594ca0996318e720d28] Merge tag 'media/v6.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit f79e772258df311c2cb21594ca0996318e720d28 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7266094ed394eaeef6cb8e266cfd325345bac589696d1a5d8ed92c6ef3a54a6e all runs: OK false negative chance: 0.000 # git bisect good f79e772258df311c2cb21594ca0996318e720d28 Bisecting: 3501 revisions left to test after this (roughly 12 steps) [908057d185a41560a55890afa69c9676fc63e55c] Merge tag 'v6.18-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 testing commit 908057d185a41560a55890afa69c9676fc63e55c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a5ff9983958e3abb702ac41137f40b926dd81871f957af89d7ca025f4f9866ea all runs: OK false negative chance: 0.000 # git bisect good 908057d185a41560a55890afa69c9676fc63e55c Bisecting: 1731 revisions left to test after this (roughly 11 steps) [522ba450b56fff29f868b1552bdc2965f55de7ed] Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux testing commit 522ba450b56fff29f868b1552bdc2965f55de7ed gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 9d6e6dcc3b41998dae9a21dd15a0e30fa8f2ce3f5a890d93bad782d6a839028d all runs: OK false negative chance: 0.000 # git bisect good 522ba450b56fff29f868b1552bdc2965f55de7ed Bisecting: 869 revisions left to test after this (roughly 10 steps) [ac70d4bb24d1497665a8708d04dc2b2fd729f2fe] Merge branch 'at91-next' of https://git.kernel.org/pub/scm/linux/kernel/git/at91/linux.git testing commit ac70d4bb24d1497665a8708d04dc2b2fd729f2fe gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1e68810ddf426a9a3bb8abf6dcb0f735396eb03a41d53e21788f3196cb8ca981 all runs: OK false negative chance: 0.000 # git bisect good ac70d4bb24d1497665a8708d04dc2b2fd729f2fe Bisecting: 362 revisions left to test after this (roughly 9 steps) [e907e5a555a008bc636c0508ea4aa586c96ec4bf] Merge branch 'for-linux-next' of https://gitlab.freedesktop.org/drm/i915/kernel.git testing commit e907e5a555a008bc636c0508ea4aa586c96ec4bf gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b1b4aeb79ca4e47fb60a940ac607c97d9edd97378df76e53c0a2e3c4d1cc9400 run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: crashed: kernel BUG in do_xmote run #8: crashed: kernel BUG in do_xmote run #9: crashed: kernel panic: Fatal exception run #10: crashed: kernel BUG in do_xmote run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] # git bisect bad e907e5a555a008bc636c0508ea4aa586c96ec4bf Bisecting: 246 revisions left to test after this (roughly 8 steps) [e4b895b8982f1b3f89c4822dc8f58158fde4cb25] Merge branch 'hwmon-next' of https://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging.git testing commit e4b895b8982f1b3f89c4822dc8f58158fde4cb25 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7f1f9311e16294ce03cbcf59f2e550d8a308ffb16602cc0882c90df4562cbf94 run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: crashed: kernel BUG in do_xmote run #8: crashed: kernel BUG in do_xmote run #9: crashed: kernel BUG in do_xmote run #10: crashed: kernel BUG in do_xmote run #11: crashed: kernel BUG in do_xmote run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] # git bisect bad e4b895b8982f1b3f89c4822dc8f58158fde4cb25 Bisecting: 130 revisions left to test after this (roughly 7 steps) [1b44a245a293c088e591cd4a0e60527b0d2fc1a4] Merge branch 'ti-next' of https://git.kernel.org/pub/scm/linux/kernel/git/ti/linux.git testing commit 1b44a245a293c088e591cd4a0e60527b0d2fc1a4 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: e14e2791c4d2a1588d37d1f2122b2f28fc13483a73aa9d71e261db4d7ad0327c all runs: OK false negative chance: 0.000 # git bisect good 1b44a245a293c088e591cd4a0e60527b0d2fc1a4 Bisecting: 66 revisions left to test after this (roughly 6 steps) [dfe7ada7e98f4099c76b5b8f06faefd8c082a853] Merge branch 'ksmbd-for-next' of https://github.com/smfrench/smb3-kernel.git testing commit dfe7ada7e98f4099c76b5b8f06faefd8c082a853 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d0c05b230ee806980c7ca7b8eada1119cb888483849915dddc76cf55afc0e94b run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: crashed: kernel BUG in do_xmote run #8: crashed: kernel BUG in do_xmote run #9: OK run #10: crashed: kernel BUG in do_xmote run #11: crashed: kernel BUG in do_xmote run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] # git bisect bad dfe7ada7e98f4099c76b5b8f06faefd8c082a853 Bisecting: 29 revisions left to test after this (roughly 5 steps) [d8e511bfb06acdcbf10caeac25f20b51911e5405] Merge branch 'dev' of https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git testing commit d8e511bfb06acdcbf10caeac25f20b51911e5405 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f4d68399c6b8b8fd2647a5fdd0c425f47e2a9f5634ab562b0a45ff8c90b923ad all runs: OK false negative chance: 0.000 # git bisect good d8e511bfb06acdcbf10caeac25f20b51911e5405 Bisecting: 14 revisions left to test after this (roughly 4 steps) [1f78b29f577b58119e5ab7e7fbe0e6add5a8c66e] Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) testing commit 1f78b29f577b58119e5ab7e7fbe0e6add5a8c66e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a241ec2fa848ce2328bd4cbf01babcbd9503f2aace191237517571b1dcfce4ef all runs: OK false negative chance: 0.000 # git bisect good 1f78b29f577b58119e5ab7e7fbe0e6add5a8c66e Bisecting: 7 revisions left to test after this (roughly 3 steps) [669d4eb0b91817f2451a0210c79ef4c21af66f49] gfs2: Clean up properly during a withdraw testing commit 669d4eb0b91817f2451a0210c79ef4c21af66f49 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d29ecb34463add4d592a0362e2ab02b2cfd54b1e226da16628a64102978dc206 run #0: crashed: kernel BUG in do_xmote run #1: crashed: kernel BUG in do_xmote run #2: crashed: kernel BUG in do_xmote run #3: crashed: kernel BUG in do_xmote run #4: crashed: kernel BUG in do_xmote run #5: crashed: kernel BUG in do_xmote run #6: crashed: kernel BUG in do_xmote run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in do_xmote, types: [BUG] # git bisect bad 669d4eb0b91817f2451a0210c79ef4c21af66f49 Bisecting: 3 revisions left to test after this (roughly 2 steps) [3e31273cd1c62574da963ff359d8ca51eef5cffd] Revert "gfs2: Check for log write errors before telling dlm to unlock" testing commit 3e31273cd1c62574da963ff359d8ca51eef5cffd gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5a2c4eca5a42da8429659b9685947ba6f16ae9d7a97a72211661094b130dc34d all runs: OK false negative chance: 0.000 # git bisect good 3e31273cd1c62574da963ff359d8ca51eef5cffd Bisecting: 1 revision left to test after this (roughly 1 step) [34c19e5c864a25d20acba8f044ddb87f1c464161] Revert "gfs2: fix infinite loop when checking ail item count before go_inval" testing commit 34c19e5c864a25d20acba8f044ddb87f1c464161 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 709e6faf1ffe0d1a0b59354c2946176ebf602d10918d7ebf5fec93b5a606ea8c all runs: OK false negative chance: 0.000 # git bisect good 34c19e5c864a25d20acba8f044ddb87f1c464161 Bisecting: 0 revisions left to test after this (roughly 0 steps) [ad01422c669106165cc8188f2455f07020b9e048] gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} testing commit ad01422c669106165cc8188f2455f07020b9e048 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 051accad000ffa6987fecf0c01fed9007db448d47eedc342e3435bdfe0d7fb09 all runs: OK false negative chance: 0.000 # git bisect good ad01422c669106165cc8188f2455f07020b9e048 669d4eb0b91817f2451a0210c79ef4c21af66f49 is the first bad commit commit 669d4eb0b91817f2451a0210c79ef4c21af66f49 Author: Andreas Gruenbacher Date: Tue Aug 5 00:07:02 2025 +0200 gfs2: Clean up properly during a withdraw During a withdraw, we don't want to write out any more data than we have to, so in do_xmote(), skip the ->go_sync() glock operation. We still want to keep calling ->go_inval() to discard any cached data or metadata, whether clean or dirty. We do still allow glocks to transition into state LM_ST_UNLOCKED. This has the desired side effect of calling ->go_inval() and invalidating the glock caches. Function gfs2_withdraw_glocks() is already used for dequeuing any left-over waiters. We still want that to happen, but additionally, we want all glocks to be unlocked. Finally, we change function do_promote() to refuse any further promotions. This commit cleans up the leftovers of commit 86934198eefa ("gfs2: Clear flags when withdraw prevents xmote"). Signed-off-by: Andreas Gruenbacher fs/gfs2/glock.c | 83 ++++++++++++++++++++++++++++++++------------------------- 1 file changed, 46 insertions(+), 37 deletions(-) accumulated error probability: 0.00 culprit signature: d29ecb34463add4d592a0362e2ab02b2cfd54b1e226da16628a64102978dc206 parent signature: 051accad000ffa6987fecf0c01fed9007db448d47eedc342e3435bdfe0d7fb09 reproducer is flaky (0.40 repro chance estimate) revisions tested: 22, total time: 10h59m17.370960279s (build: 6h18m18.802890677s, test: 4h11m13.778468425s) first bad commit: 669d4eb0b91817f2451a0210c79ef4c21af66f49 gfs2: Clean up properly during a withdraw recipients (to): ["agruenba@redhat.com" "agruenba@redhat.com" "gfs2@lists.linux.dev"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: kernel BUG in do_xmote gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:3655 [syz.3.17] gfs2_iomap_begin_write fs/gfs2/bmap.c:1040 [inline] gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:3655 [syz.3.17] gfs2_iomap_begin+0x4f8/0xf70 fs/gfs2/bmap.c:1133 gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:3662 [syz.3.17] alloc_dinode+0x143/0x490 fs/gfs2/inode.c:414 gfs2: fsid=syz:syz.0: R: n:8336 f:80000000 b:448/448 i:7 q:432 r:0 e:7001 gfs2: fsid=syz:syz.0: B: n:9394 s:15947 f:432 ------------[ cut here ]------------ kernel BUG at fs/gfs2/glock.c:674! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 53 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: gfs2-glock/syz:syz glock_work_func RIP: 0010:do_xmote+0x5d7/0x600 fs/gfs2/glock.c:674 Code: e1 07 80 c1 03 38 c1 0f 8c b2 fe ff ff 48 89 df e8 ee 9c 7c ff e9 a5 fe ff ff 31 ff 48 89 de ba 01 00 00 00 e8 ea 16 ff ff 90 <0f> 0b 31 ff 48 89 de ba 01 00 00 00 e8 d8 16 ff ff 90 0f 0b 31 ff RSP: 0018:ffffc900003879a8 EFLAGS: 00010246 RAX: 9f4316dc666d4800 RBX: ffff888166831f40 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff RBP: ffffffff859f4680 R08: ffff88816ddb421b R09: 1ffff1102dbb6843 R10: dffffc0000000000 R11: ffffed102dbb6844 R12: dffffc0000000000 R13: 1ffff1102cd063ea R14: ffff888166831f50 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88826d305000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91817ddf98 CR3: 000000015b96e000 CR4: 00000000003506f0 Call Trace: glock_work_func+0x216/0x4b0 fs/gfs2/glock.c:1002 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0x9f8/0x13f0 kernel/workqueue.c:3346 worker_thread+0x772/0xba0 kernel/workqueue.c:3427 kthread+0x600/0x770 kernel/kthread.c:463 ret_from_fork+0x2e2/0x590 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:do_xmote+0x5d7/0x600 fs/gfs2/glock.c:674 Code: e1 07 80 c1 03 38 c1 0f 8c b2 fe ff ff 48 89 df e8 ee 9c 7c ff e9 a5 fe ff ff 31 ff 48 89 de ba 01 00 00 00 e8 ea 16 ff ff 90 <0f> 0b 31 ff 48 89 de ba 01 00 00 00 e8 d8 16 ff ff 90 0f 0b 31 ff RSP: 0018:ffffc900003879a8 EFLAGS: 00010246 RAX: 9f4316dc666d4800 RBX: ffff888166831f40 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff RBP: ffffffff859f4680 R08: ffff88816ddb421b R09: 1ffff1102dbb6843 R10: dffffc0000000000 R11: ffffed102dbb6844 R12: dffffc0000000000 R13: 1ffff1102cd063ea R14: ffff888166831f50 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88826d305000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91817ddf98 CR3: 000000015b96e000 CR4: 00000000003506f0