ci2 starts bisection 2024-03-12 19:17:27.116854409 +0000 UTC m=+28011.129019285 bisecting fixing commit since 6139f2a02fe0ac7a08389b4eb786e0c659039ddd building syzkaller on cc4a4020ecb6d62110981f597feea0c04a643efa ensuring issue is reproducible on original commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6ca0e001af326810c31c2f537dc514235b104dd89856eb42fe925fcf700c2857 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [KASAN ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 326f35a806345155c7dec0cb528f7fa2f6a4cd78442b491d8992d9531b402900 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed kconfig minimization: base=3703 full=7266 leaves diff=1983 split chunks (needed=false): <1983> split chunk #0 of len 1983 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 735845e6423724b524599fe8d8318893412f157de92aad95fd28563b1b2f060d all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 005399354432d4991d8ab81d1eb81b54bf79e6691a9e30806f9a51eb04bd223d all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a9e08613d486f48799b295efc99ab836aeadee2a856cda365b2a01a4a9703e6a all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9e13849fd7d3f912b0b3f3ec6bce2e0173390bab2aefe4ae64b081669d2407b2 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 6139f2a02fe0ac7a08389b4eb786e0c659039ddd gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 084125b5f4f3bfaee86cedc4cefc3f24f85666051dbb4fd261bac5c26075eac2 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] the chunk can be dropped minimized to 397 configs; suspects: [ATM AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB FSCACHE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_INTEL KVM_MMIO KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEDIA_TUNER_XC2028 MEDIA_TUNER_XC5000 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BLK ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETFS_SUPPORT NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_CGROUP NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EGRESS NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_ATM NET_SCH_CAKE NET_SCH_CBQ NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_DSMARK NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V2_ACL NFSD_V3 NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_COUNTER NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OBJREF NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_FLOW_TABLE_IPV4 NF_FLOW_TABLE_IPV6 NF_NAT_AMANDA NF_NAT_H323 NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 PARTITION_ADVANCED PSAMPLE RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV VIDEO_V4L2 WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32] disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed determining the merge base between 6139f2a02fe0ac7a08389b4eb786e0c659039ddd and 65d287c7eb1d14e0f4d56f19cec30d97fc7e8f66 8bb7eca972ad531c9b149c0a51ab43a417385813/Linux 5.15 is a merge base, check if it has the bug testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 41d5157523cdd4c140a3eef2d5d66d117f004814286dd6139e6c47e0b3a30b26 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] testing current HEAD 65d287c7eb1d14e0f4d56f19cec30d97fc7e8f66 testing commit 65d287c7eb1d14e0f4d56f19cec30d97fc7e8f66 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0786f96eb544642e427a85cb9d43dfebab1fbf3861a96d0780b0717ab5b090fc all runs: OK false negative chance: 0.000 # git bisect start 65d287c7eb1d14e0f4d56f19cec30d97fc7e8f66 8bb7eca972ad531c9b149c0a51ab43a417385813 Bisecting: 104426 revisions left to test after this (roughly 17 steps) [87be949912eedb73690d8eaeb086f24bfe17438d] Merge tag 'xfs-6.2-merge-8' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux determine whether the revision contains the guilty commit revision 8bb7eca972ad531c9b149c0a51ab43a417385813 crashed and is reachable testing commit 87be949912eedb73690d8eaeb086f24bfe17438d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b103eb5d8629c6a13ab3c5c19a69a361940b4f91021a3d6c205e669ee498d979 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 87be949912eedb73690d8eaeb086f24bfe17438d Bisecting: 52259 revisions left to test after this (roughly 16 steps) [43972cf2deb2f54a97530c82b88c555fd682428e] Merge tag 'x86_urgent_for_v6.5_rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit 43972cf2deb2f54a97530c82b88c555fd682428e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 581977b22df5d0db19c62ec5a23470cc03f887645837498aebe11a24c387eaf5 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 43972cf2deb2f54a97530c82b88c555fd682428e Bisecting: 26142 revisions left to test after this (roughly 15 steps) [426ee5196d1821d70192923e70c0f8347faade47] Merge tag 'sysctl-6.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/linux determine whether the revision contains the guilty commit revision 8bb7eca972ad531c9b149c0a51ab43a417385813 crashed and is reachable testing commit 426ee5196d1821d70192923e70c0f8347faade47 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 58001c0ec563e03f8805ea2707fc4a9dd8e244e5b1a44e24c7f332fb638c684d all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 426ee5196d1821d70192923e70c0f8347faade47 Bisecting: 13299 revisions left to test after this (roughly 14 steps) [925781a471d8156011e8f8c1baf61bbe020dac55] Merge tag 'nf-24-01-18' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf determine whether the revision contains the guilty commit revision 8bb7eca972ad531c9b149c0a51ab43a417385813 crashed and is reachable testing commit 925781a471d8156011e8f8c1baf61bbe020dac55 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0a5b6428af494761023728da88855b4919957ca908ce75bb235cafcb96aff898 all runs: OK false negative chance: 0.000 # git bisect bad 925781a471d8156011e8f8c1baf61bbe020dac55 Bisecting: 6416 revisions left to test after this (roughly 13 steps) [bc893f744ef04e118f7bcf848fd33f8016b63f7d] Merge tag 'block-6.7-2023-11-23' of git://git.kernel.dk/linux determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit bc893f744ef04e118f7bcf848fd33f8016b63f7d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 438c67b7e16deee29d59ff86e2a9fb374d356fb6516faa3e99a5e8bfdc19b56a all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good bc893f744ef04e118f7bcf848fd33f8016b63f7d Bisecting: 3227 revisions left to test after this (roughly 12 steps) [7f73ba68cf67ef533783013f863d750c5736f957] Merge tag 'thermal-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit 7f73ba68cf67ef533783013f863d750c5736f957 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 01a1336f7b4c2ff40b1fae9785e66e29e757f57e09aee9944e46cfff62b87f36 all runs: OK false negative chance: 0.000 # git bisect bad 7f73ba68cf67ef533783013f863d750c5736f957 Bisecting: 1620 revisions left to test after this (roughly 11 steps) [a476aae3f1dc78a162a0d2e7945feea7d2b29401] x86/csum: clean up `csum_partial' further determine whether the revision contains the guilty commit revision bc893f744ef04e118f7bcf848fd33f8016b63f7d crashed and is reachable testing commit a476aae3f1dc78a162a0d2e7945feea7d2b29401 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 09735023153d43b9fb3dd3c1a7383c4a93156919236fb7a797f93a5b7ecbd1a4 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good a476aae3f1dc78a162a0d2e7945feea7d2b29401 Bisecting: 901 revisions left to test after this (roughly 10 steps) [d30e51aa7b1f6fa7dd78d4598d1e4c047fcc3fb9] Merge tag 'slab-for-6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab determine whether the revision contains the guilty commit revision bc893f744ef04e118f7bcf848fd33f8016b63f7d crashed and is reachable testing commit d30e51aa7b1f6fa7dd78d4598d1e4c047fcc3fb9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 73b4d13e3e501fbe26df11d16d2d7cd282c079a7601e120ae5c5e0ac2270b0e5 all runs: OK false negative chance: 0.000 # git bisect bad d30e51aa7b1f6fa7dd78d4598d1e4c047fcc3fb9 Bisecting: 391 revisions left to test after this (roughly 9 steps) [3edbe8afb617a736ae0dcc877311bdb112a00123] Merge tag 'ras_core_for_v6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit 3edbe8afb617a736ae0dcc877311bdb112a00123 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ee5f1a679eb1a847af8aab6c724703d929171a61cc7027562b518926419ea1e4 all runs: OK false negative chance: 0.000 # git bisect bad 3edbe8afb617a736ae0dcc877311bdb112a00123 Bisecting: 166 revisions left to test after this (roughly 7 steps) [c604110e662a54568073a03176402b624e740310] Merge tag 'vfs-6.8.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs determine whether the revision contains the guilty commit revision bc893f744ef04e118f7bcf848fd33f8016b63f7d crashed and is reachable testing commit c604110e662a54568073a03176402b624e740310 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ca12ac8ffdafffbc72ec2e0342be85cc6f6f7977a908ca75707b3b2d7a4ce74d all runs: OK false negative chance: 0.000 # git bisect bad c604110e662a54568073a03176402b624e740310 Bisecting: 86 revisions left to test after this (roughly 6 steps) [6d0dc8559c847e2dcd66c5dd93dbab3d3d887ff5] Merge tag 'soc-fixes-6.7-3a' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision 8bb7eca972ad531c9b149c0a51ab43a417385813 crashed and is reachable testing commit 6d0dc8559c847e2dcd66c5dd93dbab3d3d887ff5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85104f9048fa815d2f35a3edfaff49393ccfeec8b5d3046144b2f198db3c6f37 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 6d0dc8559c847e2dcd66c5dd93dbab3d3d887ff5 Bisecting: 42 revisions left to test after this (roughly 6 steps) [95c8a35f1c017327eab3b6a2ff5c04255737c856] Merge tag 'mm-hotfixes-stable-2024-01-05-11-35' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm determine whether the revision contains the guilty commit revision a476aae3f1dc78a162a0d2e7945feea7d2b29401 crashed and is reachable testing commit 95c8a35f1c017327eab3b6a2ff5c04255737c856 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3322f5e428c6195c53bde9515af52eb8f98acafaa64dc8cc131268601164d176 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 95c8a35f1c017327eab3b6a2ff5c04255737c856 Bisecting: 21 revisions left to test after this (roughly 5 steps) [02105f18a26c985a47b40b7401541535ab78a1dd] fs/hfsplus: wrapper.c: fix kernel-doc warnings determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit 02105f18a26c985a47b40b7401541535ab78a1dd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d3d280168e7c0f77edc01307131a5a3f8df9b89e3b4cb277d512f60b0f4397a8 all runs: OK false negative chance: 0.000 # git bisect bad 02105f18a26c985a47b40b7401541535ab78a1dd Bisecting: 10 revisions left to test after this (roughly 3 steps) [120ae58593630819209a011a3f9c89f73bcc9894] eventfd: simplify eventfd_signal_mask() determine whether the revision contains the guilty commit revision 426ee5196d1821d70192923e70c0f8347faade47 crashed and is reachable testing commit 120ae58593630819209a011a3f9c89f73bcc9894 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a797aae2e885a97fa1aa652e1df4bc26e0f4cc3c24e8ffd761f7fb4fd64ae864 all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 120ae58593630819209a011a3f9c89f73bcc9894 Bisecting: 5 revisions left to test after this (roughly 3 steps) [783822e44594639848b78d4bb61dde26fba04e05] mnt_idmapping: decouple from namespaces determine whether the revision contains the guilty commit revision 426ee5196d1821d70192923e70c0f8347faade47 crashed and is reachable testing commit 783822e44594639848b78d4bb61dde26fba04e05 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6cc6bc2e337b0562740faf4bd226df8d53e765d9c40f45475729822635dced4b all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 783822e44594639848b78d4bb61dde26fba04e05 Bisecting: 2 revisions left to test after this (roughly 2 steps) [e95aada4cb93d42e25c30a0ef9eb2923d9711d4a] pipe: wakeup wr_wait after setting max_usage determine whether the revision contains the guilty commit revision 87be949912eedb73690d8eaeb086f24bfe17438d crashed and is reachable testing commit e95aada4cb93d42e25c30a0ef9eb2923d9711d4a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 63a161f066eaf148581f0e21ef5ac96bb2a8abce9390f9721f64f6b1616787a0 all runs: OK false negative chance: 0.000 # git bisect bad e95aada4cb93d42e25c30a0ef9eb2923d9711d4a Bisecting: 0 revisions left to test after this (roughly 1 step) [055ca83559912f2cfd91c9441427bac4caf3c74e] fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() determine whether the revision contains the guilty commit revision 120ae58593630819209a011a3f9c89f73bcc9894 crashed and is reachable testing commit 055ca83559912f2cfd91c9441427bac4caf3c74e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c24b476df18a95dcb1bb7086c355acbfdfaa13afdb215250e746123bd920a727 all runs: OK false negative chance: 0.000 # git bisect bad 055ca83559912f2cfd91c9441427bac4caf3c74e Bisecting: 0 revisions left to test after this (roughly 0 steps) [12c1b632d970c0138b4c5c65a1065e7d0604d272] fs: reformat idmapped mounts entry determine whether the revision contains the guilty commit revision 783822e44594639848b78d4bb61dde26fba04e05 crashed and is reachable testing commit 12c1b632d970c0138b4c5c65a1065e7d0604d272 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 075973028b2b2bc1c5f77b43984ad7d15a04f3d5d43eedcb29ba670e937ebb1e all runs: crashed: possible deadlock in pipe_write representative crash: possible deadlock in pipe_write, types: [LOCKDEP] # git bisect good 12c1b632d970c0138b4c5c65a1065e7d0604d272 055ca83559912f2cfd91c9441427bac4caf3c74e is the first bad commit commit 055ca83559912f2cfd91c9441427bac4caf3c74e Author: Jann Horn Date: Fri Nov 24 16:08:22 2023 +0100 fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() When you try to splice between a normal pipe and a notification pipe, get_pipe_info(..., true) fails, so splice() falls back to treating the notification pipe like a normal pipe - so we end up in iter_file_splice_write(), which first locks the input pipe, then calls vfs_iter_write(), which locks the output pipe. Lockdep complains about that, because we're taking a pipe lock while already holding another pipe lock. I think this probably (?) can't actually lead to deadlocks, since you'd need another way to nest locking a normal pipe into locking a watch_queue pipe, but the lockdep annotations don't make that clear. Bail out earlier in pipe_write() for notification pipes, before taking the pipe lock. Reported-and-tested-by: Closes: https://syzkaller.appspot.com/bug?extid=011e4ea1da6692cf881c Fixes: c73be61cede5 ("pipe: Add general notification queue support") Signed-off-by: Jann Horn Link: https://lore.kernel.org/r/20231124150822.2121798-1-jannh@google.com Signed-off-by: Christian Brauner fs/pipe.c | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) accumulated error probability: 0.00 culprit signature: c24b476df18a95dcb1bb7086c355acbfdfaa13afdb215250e746123bd920a727 parent signature: 075973028b2b2bc1c5f77b43984ad7d15a04f3d5d43eedcb29ba670e937ebb1e revisions tested: 27, total time: 3h43m56.353353895s (build: 1h13m25.590078611s, test: 2h20m52.088852355s) first good commit: 055ca83559912f2cfd91c9441427bac4caf3c74e fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() recipients (to): ["brauner@kernel.org" "jannh@google.com" "syzbot+011e4ea1da6692cf881c@syzkaller.appspotmail.com"] recipients (cc): []