ci starts bisection 2024-02-27 06:55:31.74702901 +0000 UTC m=+105.518946117 bisecting cause commit starting from d206a76d7d2726f3b096037f2079ce0bd3ba329b building syzkaller on edd6a5e964598ffc78ee22374d8e0dd3326fb6a2 ensuring issue is reproducible on original commit d206a76d7d2726f3b096037f2079ce0bd3ba329b testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f9ca96b8c1aff1579eb67416df3997747f62c7a73d52dd35d7ee45e47032cdb all runs: crashed: inconsistent lock state in valid_state representative crash: inconsistent lock state in valid_state, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d5487477be0167dfe020526f5d1019b514e676937b4809b17f76bdb76445ec3b all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed kconfig minimization: base=3937 full=7963 leaves diff=2020 split chunks (needed=false): <2020> split chunk #0 of len 2020 into 5 parts testing without sub-chunk 1/5 disabling configs for [BUG KASAN ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 01d33974a991e0a47b50754fc1085f681b9da8548409f5ddfedcd2d869f5c594 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b33e4ea75bfa12ccfb076b8d7892bc0803c74d298eecd41b4e4ce6e93eb55598 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 780692540a67dd35602502e5aa9ed03f86de1b29ba26a5c40368d8ffd8b5252e all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3a1c3c2ad74fb511c9043c1af75e7439b35f99d7f687da45c131710ecfa52313 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit d206a76d7d2726f3b096037f2079ce0bd3ba329b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9378da7e9df54bc6e127573c67179048e53ee8beb1485dba57cba379a1ed5182 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] the chunk can be dropped minimized to 404 configs; suspects: [AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ATM AX25 CFG80211 CMA DAX DLM DVB_CORE ENCRYPTED_KEYS EXTCON GENEVE GPIOLIB HAMRADIO HAVE_CLK HID_SENSOR_HUB HID_SMARTJOYPLUS HID_THRUSTMASTER IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_IPOIB INFINIBAND_USER_ACCESS INFINIBAND_VIRT_DMA INPUT_TABLET INPUT_TOUCHSCREEN IP_SCTP L2TP LIBNVDIMM MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_RETU MMC MTD MTD_UBI NETFILTER_ADVANCED NETFILTER_CONNCOUNT NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NF_CONNTRACK_SNMP NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NLS_UCS2_UTILS NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_DEBUG OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PAGE_IDLE_FLAG PAGE_POOL PAGE_REPORTING PAGE_TABLE_ISOLATION PAHOLE_HAS_BTF_TAG PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOE_HASH_BITS_4 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PRISM2_USB PROC_CHILDREN PSI PSTORE PSTORE_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_TEA575X RAID6_PQ RAID_ATTRS RC_ATI_REMOTE RC_CORE RC_DEVICES RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGMAP_SPI REGULATOR REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SOC SND_SOC_I2C_AND_SPI SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUNDWIRE SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_SINGLE SQUASHFS_DECOMP_SINGLE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TASKS_TRACE_RCU TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TMPFS_QUOTA TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_FUSB302 TYPEC_TCPCI TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_HOST USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_DWC2 USB_GADGET USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VXLAN WIRELESS WLAN ZONE_DEVICE] disabling configs for [KASAN ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed picked [v6.7 v6.6 v6.5 v6.3 v6.1 v5.19 v5.17 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 30 release tags testing release v6.7 testing commit 0dd3ee31125508cd67f7e7172247f05b7fd1753a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 404d42ceb2c821d023f7891576f80387baab47c292ed69bf10c21585cb43b594 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 246ea8e5b59b62a5674795597be060a1b6d225cdc1e58560d294f2bafef59ee3 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 246f0005e65b1a0891140d64bbafea0a4a956154012d3724bf9ee7dfc0f3c1d5 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a130ea0bedab66c76f23ca371f834cabe72668db24a2ff0147c4e42874f27d44 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 45723734371014e0489a7f8697876b61266a3633df53f5e867cb82c687583242 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.19 testing commit 3d7cb6b04c3f3115719235cc6866b10326de34cd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9d1c96970cb840259789d5fd34b7055be139225d8213c5e33acf1f14b8633818 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bd4ec30aaa7229bfbe0221e3edf2a6f2dc19a9984073bc05cb9169fe60dc90d7 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.15 testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3b889acf7d867d55f5174a3d9668cf16c785feb76492a07ee1b08113e71d2480 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bccc48350952cdeb76e6cfc76e7622756875df0769c6387ab0a50d4720bac79b all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 83422773577a6208b799b970df88959121c8e2b18826e8afadea5cc2b699103f all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2c430337ac759dd230ee90665533e7be172df2af9299f89dbefc3cc9f44fb681 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 8dab79b721ce286f8f425f7a9cba9d656593bc87a0fdc812d916baf20b21f503 all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 3f6e9317a06ce324dfefa186c9c6799357b2c325b1953360d4a891bf4d301fc9 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 8be5251ea0bdf82f68bb223d9ee0e974f6b1185d99eada27184087b637532fa7 all runs: crashed: inconsistent lock state in sync_timeline_debug_remove representative crash: inconsistent lock state in sync_timeline_debug_remove, types: [LOCKDEP] crash still not fixed/happens on the oldest tested release revisions tested: 21, total time: 3h50m2.901818959s (build: 1h46m46.623750625s, test: 1h16m29.929489744s) oldest tested release already had the bug or it had kernel test errors commit msg: Linux 4.19 crash: inconsistent lock state in sync_timeline_debug_remove Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k ================================ WARNING: inconsistent lock state 4.19.0-syzkaller #0 Not tainted -------------------------------- inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. syz-executor.0/2615 [HC1[1]:SC0[0]:HE0:SE1] takes: 0000000026910edf (sync_timeline_list_lock){?.+.}, at: sync_timeline_debug_remove+0x16/0x70 drivers/dma-buf/sync_debug.c:40 {HARDIRQ-ON-W} state was registered at: __trace_hardirqs_on_caller kernel/locking/lockdep.c:2826 [inline] lockdep_hardirqs_on+0xb3/0x120 kernel/locking/lockdep.c:2879 trace_hardirqs_on+0x22/0xf0 kernel/trace/trace_preemptirq.c:30 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] _raw_spin_unlock_irq+0x27/0x60 kernel/locking/spinlock.c:192 spin_unlock_irq include/linux/spinlock.h:379 [inline] sync_print_obj drivers/dma-buf/sync_debug.c:127 [inline] sync_debugfs_show+0x8e/0x120 drivers/dma-buf/sync_debug.c:162 seq_read+0x15d/0x420 fs/seq_file.c:229 __vfs_read+0x35/0x160 fs/read_write.c:416 vfs_read fs/read_write.c:452 [inline] vfs_read+0x93/0x140 fs/read_write.c:437 ksys_read+0x53/0xc0 fs/read_write.c:578 __do_sys_read fs/read_write.c:588 [inline] __se_sys_read fs/read_write.c:586 [inline] __x64_sys_read+0x15/0x20 fs/read_write.c:586 do_syscall_64+0x6e/0x1c0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe irq event stamp: 2230 hardirqs last enabled at (2229): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (2229): [] _raw_spin_unlock_irq+0x27/0x60 kernel/locking/spinlock.c:192 hardirqs last disabled at (2230): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (0): [] copy_process.part.3+0x832/0x2060 kernel/fork.c:1793 softirqs last disabled at (0): [<0000000000000000>] (null) other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sync_timeline_list_lock); lock(sync_timeline_list_lock); *** DEADLOCK *** no locks held by syz-executor.0/2615. stack backtrace: CPU: 1 PID: 2615 Comm: syz-executor.0 Not tainted 4.19.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xc4/0x11a lib/dump_stack.c:113 print_usage_bug.cold.38+0x1c5/0x20e kernel/locking/lockdep.c:2540 valid_state kernel/locking/lockdep.c:2553 [inline] mark_lock_irq kernel/locking/lockdep.c:2747 [inline] mark_lock+0x408/0x4e0 kernel/locking/lockdep.c:3127 mark_irqflags kernel/locking/lockdep.c:3002 [inline] __lock_acquire+0x68f/0x12f0 kernel/locking/lockdep.c:3368 lock_acquire+0xc0/0x1c0 kernel/locking/lockdep.c:3900 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x59/0x80 kernel/locking/spinlock.c:152 sync_timeline_debug_remove+0x16/0x70 drivers/dma-buf/sync_debug.c:40 sync_timeline_free drivers/dma-buf/sw_sync.c:113 [inline] kref_put include/linux/kref.h:70 [inline] sync_timeline_put+0x18/0x30 drivers/dma-buf/sw_sync.c:125 timeline_fence_release+0x9c/0xb0 drivers/dma-buf/sw_sync.c:156 dma_fence_release+0x41/0x120 drivers/dma-buf/dma-fence.c:228 kref_put include/linux/kref.h:70 [inline] dma_fence_put include/linux/dma-fence.h:259 [inline] dma_fence_array_release+0x4f/0x80 drivers/dma-buf/dma-fence-array.c:96 dma_fence_release+0x41/0x120 drivers/dma-buf/dma-fence.c:228 kref_put include/linux/kref.h:70 [inline] dma_fence_put include/linux/dma-fence.h:259 [inline] irq_dma_fence_array_work+0x3a/0x40 drivers/dma-buf/dma-fence-array.c:39 irq_work_run_list+0x5f/0x90 kernel/irq_work.c:155 irq_work_run+0x2a/0x60 kernel/irq_work.c:170 smp_irq_work_interrupt+0x48/0x1e0 arch/x86/kernel/irq_work.c:21 irq_work_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:895 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x38/0x60 kernel/locking/spinlock.c:192 Code: 83 c7 18 48 8b 55 08 e8 b6 84 07 ff 48 89 df e8 6e d1 07 ff e8 89 e6 10 ff 48 83 3d 49 5f df 00 00 74 26 fb 66 0f 1f 44 00 00 01 00 00 00 e8 5e af 04 ff 65 8b 05 07 8d fc 7d 85 c0 74 03 5b RSP: 0018:ffffc9000177fc08 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff09 RAX: ffff88012cc08000 RBX: ffff880136a76350 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88012cc08000 RBP: ffffc9000177fc10 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff880136a76340 R13: ffff880136a76300 R14: ffff880136a76350 R15: ffff880138f27a20 spin_unlock_irq include/linux/spinlock.h:379 [inline] sw_sync_debugfs_release+0x62/0x80 drivers/dma-buf/sw_sync.c:332 __fput+0xa9/0x1e0 fs/file_table.c:278 ____fput+0x9/0x10 fs/file_table.c:309 task_work_run+0x8f/0xb0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x3bf/0xc20 kernel/exit.c:867 do_group_exit+0x40/0xc0 kernel/exit.c:970 get_signal+0x287/0x820 kernel/signal.c:2513 do_signal+0x32/0x6b0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0xdb/0x100 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x1a8/0x1c0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f2bea731da9 Code: Bad RIP value. RSP: 002b:00007f2bea2b3178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f2bea85ff88 RCX: 00007f2bea731da9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2bea85ff88 RBP: 00007f2bea85ff80 R08: 00007f2bea2b36c0 R09: 00007f2bea2b36c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2bea85ff8c R13: 0000000000000006 R14: 00007fffce6e7180 R15: 00007fffce6e7268 ---------------- Code disassembly (best guess): 0: 83 c7 18 add $0x18,%edi 3: 48 8b 55 08 mov 0x8(%rbp),%rdx 7: e8 b6 84 07 ff call 0xff0784c2 c: 48 89 df mov %rbx,%rdi f: e8 6e d1 07 ff call 0xff07d182 14: e8 89 e6 10 ff call 0xff10e6a2 19: 48 83 3d 49 5f df 00 cmpq $0x0,0xdf5f49(%rip) # 0xdf5f6a 20: 00 21: 74 26 je 0x49 23: fb sti 24: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) * 2a: bf 01 00 00 00 mov $0x1,%edi <-- trapping instruction 2f: e8 5e af 04 ff call 0xff04af92 34: 65 8b 05 07 8d fc 7d mov %gs:0x7dfc8d07(%rip),%eax # 0x7dfc8d42 3b: 85 c0 test %eax,%eax 3d: 74 03 je 0x42 3f: 5b pop %rbx