ci2 starts bisection 2024-06-23 05:58:06.635871328 +0000 UTC m=+138028.548434992 bisecting fixing commit since 993bed180178156a70afdafe8aaf23a117107352 building syzkaller on 345111b5c0a164190c90a1134a8c8b801792759d ensuring issue is reproducible on original commit 993bed180178156a70afdafe8aaf23a117107352 testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fd2fd7f5ebacfd8fa56957a30e435501f04bbdccf37e6accf2e65c7b2df2c58a run #0: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #1: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #2: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #3: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #4: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #5: crashed: BUG: scheduling while atomic in do_epoll_wait run #6: crashed: BUG: using smp_processor_id() in preemptible code in sock_alloc_inode run #7: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #8: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #9: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #10: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #11: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #12: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #13: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #14: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #15: crashed: BUG: scheduling while atomic in do_epoll_wait run #16: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #17: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #18: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #19: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a2be83753ecac35a361b14c99c3c30c11a8ecaf72dd0e24d287cbaec64deaad5 run #0: crashed: invalid opcode in vfree run #1: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #2: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #3: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #4: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #5: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #6: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #7: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #8: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #9: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare representative crash: invalid opcode in vfree, types: [UNKNOWN ATOMIC_SLEEP] the bug reproduces without the instrumentation disabling configs for [BUG KASAN LOCKDEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=4920 full=6159 leaves diff=242 split chunks (needed=false): <242> split chunk #0 of len 242 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 516b0c37ede47766df10e2bb7ee558bccb7142f68dd51a81e30cddb3d107469d run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #2: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #3: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #4: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #5: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #6: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #7: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #8: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #9: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 73a715fa4b2133ad14ab3214549d0effaf15ec643cad73f6601e04ebd2dd697a run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #2: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #3: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #4: crashed: lost connection to test machine run #5: crashed: BUG: workqueue leaked lock or atomic in fsnotify_mark_destroy_workfn run #6: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #7: OK run #8: OK run #9: OK representative crash: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP HANG], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 817c2d83f365e81703d61bf2479c9a0ff0fd3b33d22373b32f5926d5fc8917ec run #0: crashed: lost connection to test machine run #1: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #2: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #3: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #4: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #5: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #6: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #7: OK run #8: OK run #9: OK representative crash: lost connection to test machine, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LOCKDEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4755ddbdf4a4dcf703c965474b4ab1dc7487405f3480491dd7e34f739032fb46 run #0: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #1: crashed: BUG: workqueue leaked lock or atomic in fsnotify_mark_destroy_workfn run #2: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #3: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #4: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #5: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #6: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #7: crashed: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred run #8: OK run #9: OK representative crash: BUG: workqueue leaked lock or atomic in bpf_prog_free_deferred, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [BUG KASAN LOCKDEP HANG LEAK UBSAN], they are not needed testing commit 993bed180178156a70afdafe8aaf23a117107352 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 failed building 993bed180178156a70afdafe8aaf23a117107352: net/socket.c:1191: undefined reference to `wext_handle_ioctl' net/socket.c:3385: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:343: undefined reference to `wext_proc_exit' net/core/net-procfs.c:327: undefined reference to `wext_proc_init' minimized to 46 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF] disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP HANG], they are not needed testing current HEAD 85445b5a21071481c8caf4a0e443d28cee1c8388 testing commit 85445b5a21071481c8caf4a0e443d28cee1c8388 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a0bf4662fe5bba7fdef43ced1efa7b7d7dcc066fe578e97f14626666b3d96d0b all runs: OK false negative chance: 0.000 # git bisect start 85445b5a21071481c8caf4a0e443d28cee1c8388 993bed180178156a70afdafe8aaf23a117107352 Bisecting: 347 revisions left to test after this (roughly 9 steps) [d14b8e2005f36319df9412d42037416d64827f6b] ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() determine whether the revision contains the guilty commit checking the merge base 6139f2a02fe0ac7a08389b4eb786e0c659039ddd no existing result, test the revision testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0e5faacb7e8bf57e9972031ca8bd4de6825e8de1c7adc3f0a553084a3b9d02d9 run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #2: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP] testing commit d14b8e2005f36319df9412d42037416d64827f6b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 40a930f3b54bdf550bff1c9652f27f18b2d1ee7fcf8290ca8ccfa1f840eb9ada run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP] # git bisect good d14b8e2005f36319df9412d42037416d64827f6b Bisecting: 173 revisions left to test after this (roughly 8 steps) [cd465584d501c7969d5686664edd8ed5ad3e4a9f] fs/ntfs3: Improve ntfs_dir_count determine whether the revision contains the guilty commit revision 6139f2a02fe0ac7a08389b4eb786e0c659039ddd crashed and is reachable testing commit cd465584d501c7969d5686664edd8ed5ad3e4a9f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8fb8f8026f26faf77a2ac3e64887c6e698d2e9d6ff7f3cb9ff317db9182a95c0 all runs: OK false negative chance: 0.000 # git bisect bad cd465584d501c7969d5686664edd8ed5ad3e4a9f Bisecting: 86 revisions left to test after this (roughly 7 steps) [aded03eda2ba7a40c517dc4a4f1769ce6c00d818] usb: dwc3: gadget: Queue PM runtime idle on disconnect event determine whether the revision contains the guilty commit revision 6139f2a02fe0ac7a08389b4eb786e0c659039ddd crashed and is reachable testing commit aded03eda2ba7a40c517dc4a4f1769ce6c00d818 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5681ed62e65d6c1392c82e0e929fa476425f452fb68b41bf68f4b55001c1599d run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP] # git bisect good aded03eda2ba7a40c517dc4a4f1769ce6c00d818 Bisecting: 43 revisions left to test after this (roughly 6 steps) [8495c34dff0dfbbab18b1c2eb54673372fb366b0] bpf: Merge printk and seq_printf VARARG max macros determine whether the revision contains the guilty commit revision aded03eda2ba7a40c517dc4a4f1769ce6c00d818 crashed and is reachable testing commit 8495c34dff0dfbbab18b1c2eb54673372fb366b0 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0afe6adc36aba600fcf53170217d73c47c88fbe1f0eadad8fe0012fdcec1f437 run #0: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #1: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #2: crashed: BUG: scheduling while atomic in exit_to_user_mode_prepare run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: scheduling while atomic in exit_to_user_mode_prepare, types: [ATOMIC_SLEEP] # git bisect good 8495c34dff0dfbbab18b1c2eb54673372fb366b0 Bisecting: 21 revisions left to test after this (roughly 5 steps) [4c21fa60a6f4606f6214a38f50612b17b2f738f5] ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() determine whether the revision contains the guilty commit revision aded03eda2ba7a40c517dc4a4f1769ce6c00d818 crashed and is reachable testing commit 4c21fa60a6f4606f6214a38f50612b17b2f738f5 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d69442c9df665b8f59f76df8087f5e866ff83f8af952c61f2d82ff6bcd958b4d run #0: crashed: lost connection to test machine run #1: crashed: lost connection to test machine run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: lost connection to test machine, types: [UNKNOWN] # git bisect good 4c21fa60a6f4606f6214a38f50612b17b2f738f5 Bisecting: 10 revisions left to test after this (roughly 4 steps) [0bf567d6d9ffe09e059bbdfb4d07143cef42c75c] nvme-fc: do not wait in vain when unloading module determine whether the revision contains the guilty commit revision 6139f2a02fe0ac7a08389b4eb786e0c659039ddd crashed and is reachable testing commit 0bf567d6d9ffe09e059bbdfb4d07143cef42c75c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 90a114526ab74907f692408d176418048fb1c86a2e4f8c8a9922331545b9bf7c all runs: OK false negative chance: 0.039 # git bisect bad 0bf567d6d9ffe09e059bbdfb4d07143cef42c75c Bisecting: 5 revisions left to test after this (roughly 3 steps) [e59905cfb1954a9fdc06295be287c0f5c9c787ac] ALSA: usb-audio: Check presence of valid altsetting control determine whether the revision contains the guilty commit revision 4c21fa60a6f4606f6214a38f50612b17b2f738f5 crashed and is reachable testing commit e59905cfb1954a9fdc06295be287c0f5c9c787ac gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d47cff489824dfc3ac2f4c5cf94370689535f9720b2e030fbe51515cb5413030 all runs: OK false negative chance: 0.039 # git bisect bad e59905cfb1954a9fdc06295be287c0f5c9c787ac Bisecting: 2 revisions left to test after this (roughly 1 step) [4fe4e5adc7d29d214c59b59f61db73dec505ca3d] dmaengine: ti: edma: Add some null pointer checks to the edma_probe determine whether the revision contains the guilty commit revision 8495c34dff0dfbbab18b1c2eb54673372fb366b0 crashed and is reachable testing commit 4fe4e5adc7d29d214c59b59f61db73dec505ca3d gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c95bd0890a8b27c77f4051cf456408b11fb418591360c82248a451c738ec3aa8 run #0: crashed: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: lost connection to test machine, types: [UNKNOWN] # git bisect good 4fe4e5adc7d29d214c59b59f61db73dec505ca3d Bisecting: 0 revisions left to test after this (roughly 1 step) [065da538e6a69446742512a45f4c9ce2065db47a] nvmet-tcp: fix nvme tcp ida memory leak determine whether the revision contains the guilty commit revision 4fe4e5adc7d29d214c59b59f61db73dec505ca3d crashed and is reachable testing commit 065da538e6a69446742512a45f4c9ce2065db47a gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 724e0da1938c875fc01dfec75e6dee6e5dd701abca0f56dd5d54ca502a11590b all runs: OK false negative chance: 0.122 # git bisect bad 065da538e6a69446742512a45f4c9ce2065db47a Bisecting: 0 revisions left to test after this (roughly 0 steps) [f8dee8e4893c132019a0b5e804e081712dfa91e5] regulator: pwm-regulator: Add validity checks in continuous .get_voltage determine whether the revision contains the guilty commit revision d14b8e2005f36319df9412d42037416d64827f6b crashed and is reachable testing commit f8dee8e4893c132019a0b5e804e081712dfa91e5 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6b1a72261c54b5df25574f154be72ea15f89fd3d5b5eaebfdd45e0ea215fc62e all runs: OK false negative chance: 0.122 # git bisect bad f8dee8e4893c132019a0b5e804e081712dfa91e5 f8dee8e4893c132019a0b5e804e081712dfa91e5 is the first bad commit commit f8dee8e4893c132019a0b5e804e081712dfa91e5 Author: Martin Blumenstingl Date: Sat Jan 13 23:46:26 2024 +0100 regulator: pwm-regulator: Add validity checks in continuous .get_voltage [ Upstream commit c92688cac239794e4a1d976afa5203a4d3a2ac0e ] Continuous regulators can be configured to operate only in a certain duty cycle range (for example from 0..91%). Add a check to error out if the duty cycle translates to an unsupported (or out of range) voltage. Suggested-by: Uwe Kleine-König Signed-off-by: Martin Blumenstingl Link: https://msgid.link/r/20240113224628.377993-2-martin.blumenstingl@googlemail.com Signed-off-by: Mark Brown Signed-off-by: Sasha Levin drivers/regulator/pwm-regulator.c | 3 +++ 1 file changed, 3 insertions(+) accumulated error probability: 0.29 culprit signature: 6b1a72261c54b5df25574f154be72ea15f89fd3d5b5eaebfdd45e0ea215fc62e parent signature: c95bd0890a8b27c77f4051cf456408b11fb418591360c82248a451c738ec3aa8 reproducer is flaky (0.10 repro chance estimate) revisions tested: 18, total time: 5h12m9.926032355s (build: 1h4m58.135394334s, test: 4h3m26.207714128s) first good commit: f8dee8e4893c132019a0b5e804e081712dfa91e5 regulator: pwm-regulator: Add validity checks in continuous .get_voltage recipients (to): ["broonie@kernel.org" "martin.blumenstingl@googlemail.com" "sashal@kernel.org"] recipients (cc): []