ci starts bisection 2023-11-23 14:39:27.113692147 +0000 UTC m=+2387.485784262 bisecting cause commit starting from feb9c5e19e913b53cb536a7aa7c9f20107bb51ec building syzkaller on beb0b407180f93f1c6acb56cbcf4a30c0ef50f25 ensuring issue is reproducible on original commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4f589b0004e1ddd0dc7214e5d6945c8c19c9bf4bc1f3b5760cb9108716761991 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b7458ad6b205acade5f571dac0f53206afbafd3d19eb7474183d5a67ed9c31aa all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [BUG KASAN ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=3915 full=7286 leaves diff=2004 split chunks (needed=false): <2004> split chunk #0 of len 2004 into 5 parts testing without sub-chunk 1/5 disabling configs for [LEAK UBSAN BUG KASAN ATOMIC_SLEEP HANG], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 084b63529d3e26944c6716b0cedbff3343decb3df6a2ae1ecf906fbd50b08220 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 39a494918d464c9cb511a6a927cde34eb75b1786edfbaeee983c44bca738965a all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7c14c206eacd7ac6028c535eb677cd6bfce56c847d43062dc9038c6d213525db all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN ATOMIC_SLEEP], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0651a47d6852594787b3235e9ce17b3d0fd6bd8556a47e11904dd3e28eb1603a all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [KASAN ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit feb9c5e19e913b53cb536a7aa7c9f20107bb51ec gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8857a2f83931187d36dbb41e65523202253757aa768759bcb97676ffe9e9c692 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] the chunk can be dropped minimized to 401 configs; suspects: [ATM AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB FSCACHE HAMRADIO HSR IMA IMA_APPRAISE IMA_APPRAISE_MODSIG INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_SIGNATURE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_INTEL KVM_MMIO KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LEGACY_VSYSCALL_EMULATE LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEDIA_TUNER_XC2028 MEDIA_TUNER_XC5000 MEMCG_SWAP MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MICROCODE_AMD MICROCODE_INTEL MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SIG_SHA1 MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_CLS_RSVP NET_CLS_RSVP6 NET_CLS_TCINDEX NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_ATM NET_SCH_CAKE NET_SCH_CBQ NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_DSMARK NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V2_ACL NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OBJREF NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_PPTP NF_CONNTRACK_PROCFS NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI STACK_VALIDATION USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [UBSAN BUG KASAN ATOMIC_SLEEP HANG LEAK], they are not needed picked [v5.17 v5.16 v5.15 v5.13 v5.11 v5.9 v5.7 v5.5 v5.2 v4.20 v4.19] out of 20 release tags testing release v5.17 testing commit f443e374ae131c168a065ea1748feac6b2e76613 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3cf69ac0c3451c4dfe24d8a788b5aecec5774c75accd0c7dac9648015ad6cefb all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5ff98c928c81e170a45135f2522ad85ee97b3b81be3fa4cf4bf9fa9bc8a8074a all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.15 testing commit 8bb7eca972ad531c9b149c0a51ab43a417385813 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 10a945339c3e7c94b77f9e4fdd3b3a6ff14941a967048eb90e8f400b02b7d361 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fbc50a7903de75f7985b10da30f9b4aef00b4c0b80cf582b3c971367817a4d58 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8fcc8606bd737ace8b19cf83b419c320b5087ca8e5503ab9f3ac4748aef7e88d all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ae0ab0da70e9ae1fdabbb7b216b08af14bf66d319148c365e46a656533d23791 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1ff77acb0bc9032a43440da24e78dfeec6402b8941bbb4e7d3d73abacb3d4129 all runs: OK false negative chance: 0.000 # git bisect start bbf5c979011a099af5dc76498918ed7df445635b 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 Bisecting: 16837 revisions left to test after this (roughly 14 steps) [3e543a4d30014d45b6bb5d2095554be02153cefc] Merge tag 'char-misc-5.8-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc into master testing commit 3e543a4d30014d45b6bb5d2095554be02153cefc gcc compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e85542dffa021642500b809dd4c60ff3b3a0fc25f1ace2507ab83ae0f1348b24 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 3e543a4d30014d45b6bb5d2095554be02153cefc Bisecting: 8323 revisions left to test after this (roughly 13 steps) [631d6914085b4eea8d68a84f800974a6ad8fb5c0] Merge tag 'sound-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound testing commit 631d6914085b4eea8d68a84f800974a6ad8fb5c0 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1c6653f19fedf7f96b9ff8d7b5f3220661731e7d5e0118567cbbe1e24482e0b3 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 631d6914085b4eea8d68a84f800974a6ad8fb5c0 Bisecting: 4352 revisions left to test after this (roughly 12 steps) [6b2591c21273ebf65c13dae5d260ce88f0f197dd] Merge tag 'hyperv-next-signed' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux testing commit 6b2591c21273ebf65c13dae5d260ce88f0f197dd gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b9704488fdcbd9f722ef6a071f4394d85e14c1fc1872c02bb3002b1d0adf38e0 all runs: OK false negative chance: 0.000 # git bisect good 6b2591c21273ebf65c13dae5d260ce88f0f197dd Bisecting: 2177 revisions left to test after this (roughly 11 steps) [943bbe1de5fcdec06765de182f30b1b2d05f9c43] Merge branch 'Raw-PHY-TDR-data' testing commit 943bbe1de5fcdec06765de182f30b1b2d05f9c43 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f5be5abaff85f62cb74d85a66d5a53f6aabd824222f6acf011650a0377819803 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 943bbe1de5fcdec06765de182f30b1b2d05f9c43 Bisecting: 1061 revisions left to test after this (roughly 10 steps) [5d9e4722c74e8868d5fe2f8749de80928eb4a1d1] Merge tag 'wireless-drivers-next-2020-05-07' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next testing commit 5d9e4722c74e8868d5fe2f8749de80928eb4a1d1 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5682417321feed7aefc521c8fa9aa7f7a1d3ead9b61c0adb26db3baa1aaea72a all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 5d9e4722c74e8868d5fe2f8749de80928eb4a1d1 Bisecting: 556 revisions left to test after this (roughly 9 steps) [da4063bdfcfa70ec57a6c25f772ac6378b1584ad] netlink: allow NLA_MSECS to have range validation testing commit da4063bdfcfa70ec57a6c25f772ac6378b1584ad gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e939f584963373fcb100ff21994323292f17f7f4e2972ee95714a0fc6083c5a5 all runs: OK false negative chance: 0.000 # git bisect good da4063bdfcfa70ec57a6c25f772ac6378b1584ad Bisecting: 278 revisions left to test after this (roughly 8 steps) [58618ef85546726cf27c38ddc1b022c703b7a6ad] net: nxp: Fix use correct return type for ndo_start_xmit() testing commit 58618ef85546726cf27c38ddc1b022c703b7a6ad gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e563adf2a640058d34a5b3cc061182f40030f380a3258bbc106775039416858d all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 58618ef85546726cf27c38ddc1b022c703b7a6ad Bisecting: 163 revisions left to test after this (roughly 7 steps) [5b95dea31636ce93660930d16172fe75589b2e70] Merge branch 'net-smc-extent-buffer-mapping-and-port-handling' testing commit 5b95dea31636ce93660930d16172fe75589b2e70 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c74dbd2239f5290f58dc10b5a6c48089af5b23210c5475fe7abc7ae5f5ac5dec all runs: OK false negative chance: 0.000 # git bisect good 5b95dea31636ce93660930d16172fe75589b2e70 Bisecting: 81 revisions left to test after this (roughly 6 steps) [80f8443fcdaa27871a233d08e9142612e6ade77c] net: ena: avoid unnecessary admin command when RSS function set fails testing commit 80f8443fcdaa27871a233d08e9142612e6ade77c gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6e879daecf4745729f9e79750b03fff45556d2f446c72a6f3e0ef14cb4c0e1d5 all runs: OK false negative chance: 0.000 # git bisect good 80f8443fcdaa27871a233d08e9142612e6ade77c Bisecting: 40 revisions left to test after this (roughly 5 steps) [f0ec4f1d32ad49a23b93156949208dd9348e3590] net/smc: save state of last sent CDC message testing commit f0ec4f1d32ad49a23b93156949208dd9348e3590 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6e879daecf4745729f9e79750b03fff45556d2f446c72a6f3e0ef14cb4c0e1d5 all runs: OK false negative chance: 0.000 # git bisect good f0ec4f1d32ad49a23b93156949208dd9348e3590 Bisecting: 19 revisions left to test after this (roughly 4 steps) [09be4c47abe384fe8bd6a6f25012013acacc7729] Merge branch 'net-ipa-I-O-map-SMEM-and-IMEM' testing commit 09be4c47abe384fe8bd6a6f25012013acacc7729 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 454f1917304dd2c6e424e036877e21adcebfe44845ae41bee84936296e8bd71f all runs: OK false negative chance: 0.000 # git bisect good 09be4c47abe384fe8bd6a6f25012013acacc7729 Bisecting: 9 revisions left to test after this (roughly 3 steps) [885a26bae0223cac7f939a4a549f2df6c7f89bbd] arm64: dts: ti: k3-am65-mcu: add cpsw cpts node testing commit 885a26bae0223cac7f939a4a549f2df6c7f89bbd gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ac3f410721bd6d0f5f2ff3e53b14173fb5262544397c86888e6fd11144148d5d all runs: OK false negative chance: 0.000 # git bisect good 885a26bae0223cac7f939a4a549f2df6c7f89bbd Bisecting: 4 revisions left to test after this (roughly 2 steps) [1a33e10e4a95cb109ff1145098175df3113313ef] net: partially revert dynamic lockdep key changes testing commit 1a33e10e4a95cb109ff1145098175df3113313ef gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16d1c75f25212f0c2b78b473bf56f5e449cc6f80134f38dce6d4a6b8bdf64584 all runs: crashed: possible deadlock in sch_direct_xmit representative crash: possible deadlock in sch_direct_xmit, types: [LOCKDEP] # git bisect bad 1a33e10e4a95cb109ff1145098175df3113313ef Bisecting: 2 revisions left to test after this (roughly 1 step) [29390928fe9a7cac7f8b1479f0f285034f16eb6f] arm64: dts: ti: k3-j721e-mcu: add mcu cpsw cpts node testing commit 29390928fe9a7cac7f8b1479f0f285034f16eb6f gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ac3f410721bd6d0f5f2ff3e53b14173fb5262544397c86888e6fd11144148d5d all runs: OK false negative chance: 0.000 # git bisect good 29390928fe9a7cac7f8b1479f0f285034f16eb6f Bisecting: 0 revisions left to test after this (roughly 1 step) [ea84c842900872f5b8d6d4754cf0fa37d6672011] Merge branch 'net-ethernet-ti-k3-introduce-common-platform-time-sync-driver-cpts' testing commit ea84c842900872f5b8d6d4754cf0fa37d6672011 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ac3f410721bd6d0f5f2ff3e53b14173fb5262544397c86888e6fd11144148d5d all runs: OK false negative chance: 0.000 # git bisect good ea84c842900872f5b8d6d4754cf0fa37d6672011 1a33e10e4a95cb109ff1145098175df3113313ef is the first bad commit commit 1a33e10e4a95cb109ff1145098175df3113313ef Author: Cong Wang Date: Sat May 2 22:22:19 2020 -0700 net: partially revert dynamic lockdep key changes This patch reverts the folowing commits: commit 064ff66e2bef84f1153087612032b5b9eab005bd "bonding: add missing netdev_update_lockdep_key()" commit 53d374979ef147ab51f5d632dfe20b14aebeccd0 "net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()" commit 1f26c0d3d24125992ab0026b0dab16c08df947c7 "net: fix kernel-doc warning in " commit ab92d68fc22f9afab480153bd82a20f6e2533769 "net: core: add generic lockdep keys" but keeps the addr_list_lock_key because we still lock addr_list_lock nestedly on stack devices, unlikely xmit_lock this is safe because we don't take addr_list_lock on any fast path. Reported-and-tested-by: syzbot+aaa6fa4949cc5d9b7b25@syzkaller.appspotmail.com Cc: Dmitry Vyukov Cc: Taehee Yoo Signed-off-by: Cong Wang Acked-by: Taehee Yoo Signed-off-by: David S. Miller drivers/net/bonding/bond_main.c | 1 + drivers/net/ethernet/netronome/nfp/nfp_net_repr.c | 16 ++++ drivers/net/hamradio/bpqether.c | 20 +++++ drivers/net/hyperv/netvsc_drv.c | 2 + drivers/net/ipvlan/ipvlan_main.c | 2 + drivers/net/macsec.c | 2 + drivers/net/macvlan.c | 2 + drivers/net/ppp/ppp_generic.c | 2 + drivers/net/team/team.c | 1 + drivers/net/vrf.c | 1 + drivers/net/wireless/intersil/hostap/hostap_hw.c | 22 ++++++ include/linux/netdevice.h | 27 +++++-- net/8021q/vlan_dev.c | 21 ++++++ net/batman-adv/soft-interface.c | 30 ++++++++ net/bluetooth/6lowpan.c | 8 ++ net/core/dev.c | 90 ++++++++++++++++++----- net/dsa/slave.c | 12 +++ net/ieee802154/6lowpan/core.c | 8 ++ net/l2tp/l2tp_eth.c | 1 + net/netrom/af_netrom.c | 21 ++++++ net/rose/af_rose.c | 21 ++++++ net/sched/sch_generic.c | 17 +++-- 22 files changed, 294 insertions(+), 33 deletions(-) accumulated error probability: 0.00 culprit signature: 16d1c75f25212f0c2b78b473bf56f5e449cc6f80134f38dce6d4a6b8bdf64584 parent signature: ac3f410721bd6d0f5f2ff3e53b14173fb5262544397c86888e6fd11144148d5d revisions tested: 29, total time: 9h57m26.727970426s (build: 5h49m30.082927226s, test: 3h55m17.084553414s) first bad commit: 1a33e10e4a95cb109ff1145098175df3113313ef net: partially revert dynamic lockdep key changes recipients (to): ["ap420073@gmail.com" "davem@davemloft.net" "syzbot+aaa6fa4949cc5d9b7b25@syzkaller.appspotmail.com" "xiyou.wangcong@gmail.com"] recipients (cc): [] crash: possible deadlock in sch_direct_xmit ============================================ WARNING: possible recursive locking detected 5.7.0-rc2-syzkaller #0 Not tainted -------------------------------------------- syz-executor.0/3442 is trying to acquire lock: ffff888226e35398 (_xmit_ETHER){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:353 [inline] ffff888226e35398 (_xmit_ETHER){+.-.}-{2:2}, at: __netif_tx_lock include/linux/netdevice.h:4068 [inline] ffff888226e35398 (_xmit_ETHER){+.-.}-{2:2}, at: sch_direct_xmit+0x143/0x380 net/sched/sch_generic.c:311 but task is already holding lock: ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:353 [inline] ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: __netif_tx_lock include/linux/netdevice.h:4068 [inline] ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: sch_direct_xmit+0x143/0x380 net/sched/sch_generic.c:311 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(_xmit_ETHER); lock(_xmit_ETHER); *** DEADLOCK *** May be due to missing lock nesting notation 9 locks held by syz-executor.0/3442: #0: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: lwtunnel_xmit_redirect include/net/lwtunnel.h:92 [inline] #0: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: ip_finish_output2+0x114/0x1030 net/ipv4/ip_output.c:214 #1: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x81/0x1580 net/core/dev.c:4055 #2: ffff888226e33258 (&sch->seqlock){+...}-{2:2}, at: spin_trylock include/linux/spinlock.h:363 [inline] #2: ffff888226e33258 (&sch->seqlock){+...}-{2:2}, at: qdisc_run_begin include/net/sch_generic.h:159 [inline] #2: ffff888226e33258 (&sch->seqlock){+...}-{2:2}, at: qdisc_run include/net/pkt_sched.h:128 [inline] #2: ffff888226e33258 (&sch->seqlock){+...}-{2:2}, at: __dev_xmit_skb net/core/dev.c:3736 [inline] #2: ffff888226e33258 (&sch->seqlock){+...}-{2:2}, at: __dev_queue_xmit+0x8b4/0x1580 net/core/dev.c:4089 #3: ffff888226e33148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: neigh_resolve_output net/core/neighbour.c:1489 [inline] #3: ffff888226e33148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: neigh_resolve_output+0x2ed/0x310 net/core/neighbour.c:1469 #4: ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:353 [inline] #4: ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: __netif_tx_lock include/linux/netdevice.h:4068 [inline] #4: ffff88822e21d898 (_xmit_ETHER){+.-.}-{2:2}, at: sch_direct_xmit+0x143/0x380 net/sched/sch_generic.c:311 #5: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: lwtunnel_xmit_redirect include/net/lwtunnel.h:92 [inline] #5: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: ip_finish_output2+0x114/0x1030 net/ipv4/ip_output.c:214 #6: ffffffff836813a0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x81/0x1580 net/core/dev.c:4055 #7: ffff888226e68258 (&sch->seqlock){+...}-{2:2}, at: spin_trylock include/linux/spinlock.h:363 [inline] #7: ffff888226e68258 (&sch->seqlock){+...}-{2:2}, at: qdisc_run_begin include/net/sch_generic.h:159 [inline] #7: ffff888226e68258 (&sch->seqlock){+...}-{2:2}, at: qdisc_run include/net/pkt_sched.h:128 [inline] #7: ffff888226e68258 (&sch->seqlock){+...}-{2:2}, at: __dev_xmit_skb net/core/dev.c:3736 [inline] #7: ffff888226e68258 (&sch->seqlock){+...}-{2:2}, at: __dev_queue_xmit+0x8b4/0x1580 net/core/dev.c:4089 #8: ffff888226e68148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: neigh_resolve_output net/core/neighbour.c:1489 [inline] #8: ffff888226e68148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: neigh_resolve_output+0x2ed/0x310 net/core/neighbour.c:1469 stack backtrace: CPU: 1 PID: 3442 Comm: syz-executor.0 Not tainted 5.7.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xcd/0x12e lib/dump_stack.c:118 print_deadlock_bug kernel/locking/lockdep.c:2410 [inline] check_deadlock kernel/locking/lockdep.c:2451 [inline] validate_chain kernel/locking/lockdep.c:3221 [inline] __lock_acquire.cold.68+0x12d/0x2cc kernel/locking/lockdep.c:4355 lock_acquire+0x9e/0x300 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x20/0x30 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] __netif_tx_lock include/linux/netdevice.h:4068 [inline] sch_direct_xmit+0x143/0x380 net/sched/sch_generic.c:311 qdisc_restart net/sched/sch_generic.c:376 [inline] __qdisc_run+0x215/0x890 net/sched/sch_generic.c:384 qdisc_run include/net/pkt_sched.h:134 [inline] qdisc_run include/net/pkt_sched.h:126 [inline] __dev_xmit_skb net/core/dev.c:3736 [inline] __dev_queue_xmit+0x951/0x1580 net/core/dev.c:4089 neigh_resolve_output net/core/neighbour.c:1489 [inline] neigh_resolve_output+0x2ed/0x310 net/core/neighbour.c:1469 neigh_output include/net/neighbour.h:510 [inline] ip_finish_output2+0x3e9/0x1030 net/ipv4/ip_output.c:228 __ip_finish_output net/ipv4/ip_output.c:306 [inline] __ip_finish_output+0x345/0x500 net/ipv4/ip_output.c:288 ip_finish_output net/ipv4/ip_output.c:316 [inline] NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip_output+0xb3/0x390 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:435 [inline] ip_local_out+0x6b/0xc0 net/ipv4/ip_output.c:125 iptunnel_xmit+0x1ee/0x2b0 net/ipv4/ip_tunnel_core.c:81 ip_tunnel_xmit+0x982/0x1610 net/ipv4/ip_tunnel.c:814 erspan_xmit+0x40e/0xee0 net/ipv4/ip_gre.c:683 __netdev_start_xmit include/linux/netdevice.h:4587 [inline] netdev_start_xmit include/linux/netdevice.h:4601 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0xd6/0x440 net/core/dev.c:3561 sch_direct_xmit+0x17c/0x380 net/sched/sch_generic.c:313 qdisc_restart net/sched/sch_generic.c:376 [inline] __qdisc_run+0x215/0x890 net/sched/sch_generic.c:384 qdisc_run include/net/pkt_sched.h:134 [inline] qdisc_run include/net/pkt_sched.h:126 [inline] __dev_xmit_skb net/core/dev.c:3736 [inline] __dev_queue_xmit+0x951/0x1580 net/core/dev.c:4089 neigh_resolve_output net/core/neighbour.c:1489 [inline] neigh_resolve_output+0x2ed/0x310 net/core/neighbour.c:1469 neigh_output include/net/neighbour.h:510 [inline] ip_finish_output2+0x3e9/0x1030 net/ipv4/ip_output.c:228 __ip_finish_output net/ipv4/ip_output.c:306 [inline] __ip_finish_output+0x345/0x500 net/ipv4/ip_output.c:288 ip_finish_output net/ipv4/ip_output.c:316 [inline] NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip_output+0xb3/0x390 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:435 [inline] ip_local_out+0x6b/0xc0 net/ipv4/ip_output.c:125 ip_send_skb+0x1c/0x80 net/ipv4/ip_output.c:1560 udp_send_skb.isra.51+0x226/0x5e0 net/ipv4/udp.c:891 udp_sendmsg+0x1082/0x1700 net/ipv4/udp.c:1178 udpv6_sendmsg+0xb17/0x1730 net/ipv6/udp.c:1286 inet6_sendmsg+0x4c/0x60 net/ipv6/af_inet6.c:577 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0x52/0x70 net/socket.c:672 ____sys_sendmsg+0x1a6/0x390 net/socket.c:2362 ___sys_sendmsg+0x95/0xd0 net/socket.c:2416 __sys_sendmmsg+0x104/0x330 net/socket.c:2506 __do_sys_sendmmsg net/socket.c:2535 [inline] __se_sys_sendmmsg net/socket.c:2532 [inline] __x64_sys_sendmmsg+0x24/0x30 net/socket.c:2532 do_syscall_64+0x91/0x300 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x7f6d1a2d78a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6d1a25d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f6d1a3e9f60 RCX: 00007f6d1a2d78a9 RDX: 0000000000000001 RSI: 0000000020004d80 RDI: 0000000000000004 RBP: 00007f6d1a333074 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f6d1a3e9f60 R15: 00007ffc410940d8 syz-executor.0 (3442) used greatest stack depth: 10208 bytes left