ci2 starts bisection 2026-09-23 03:15:35.554261327 +0000 UTC m=+27511.429135226 bisecting fixing commit since 8b73de7da85fde281a385e0b26eda9bffd3ca477 building syzkaller on 1e72964b0111319984575e60f266d1fa0a98abb5 ensuring issue is reproducible on original commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 0434b14cfea7a9c3f7ab277f27bb32b96923641646f626a5bb30e95b8fc4c57b all runs: crashed: general protection fault in acpi_fan_probe representative crash: general protection fault in acpi_fan_probe, types: [DoS] check whether we can drop unnecessary instrumentation disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep hang], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: a329a13e64b31b6d662defee12f9c85ee082d350535101c29150ec50ace9e909 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the bug reproduces without the instrumentation disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep hang], they are not needed kconfig minimization: base=3913 full=7804 leaves diff=2163 split chunks (needed=false): <2163> split chunk #0 of len 2163 into 5 parts testing without sub-chunk 1/5 disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: bf40287b7c6c643bd0bfbcb82dc83ca9d36339267f50ea5165aa33f3db3e2175 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 3eb3ddba94dd9ecaaf8e0ddfa4cd088cfd011d6720878d331648615f1eaa269c all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep hang memleak], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 8536d713d467034c4412b35ac0948d33abb65a41097ad6834ea1e7fe73ea4de3 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 89acdc577bfbbc653f5e0f58715f819d19c24aa4d44d5e1e82e08c017f71a50e all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 17d5e8897131f18d8d77a217b568ebeaeee4272de1ba490f5996d3efbba8495c all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] the chunk can be dropped disabling configs for [hang memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed determining the merge base between 8b73de7da85fde281a385e0b26eda9bffd3ca477 and fe2ec83746e501645709761605c2464a44fd2929 ffc253263a1375a65fa6c9f62a893e9767fbebfa/Linux 6.6 is a merge base, check if it has the bug testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 398e4e66bedc2783b842bdeb36d0e4d96080b0d631e981048dcd7ee44e753489 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] testing current HEAD fe2ec83746e501645709761605c2464a44fd2929 testing commit fe2ec83746e501645709761605c2464a44fd2929 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d686eca9f7aacdf1ffb5a4cb295080d946d2a02ad5abd22222440021f4320a71 all runs: OK false negative chance: 0.000 # git bisect start fe2ec83746e501645709761605c2464a44fd2929 ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 133181 revisions left to test after this (roughly 17 steps) [ddd0172f182e3e869a3a960e433578aeedcb37c9] Merge tag 'tty-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit ddd0172f182e3e869a3a960e433578aeedcb37c9 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: cc0d2236f1efc9e308775340de9ebb153ec2a4f5d5fd1a065b08eb06224d998a all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good ddd0172f182e3e869a3a960e433578aeedcb37c9 Bisecting: 66624 revisions left to test after this (roughly 16 steps) [dcb49710189d104d4edc07709615748dab61341b] Merge tag 'x86_cache_for_v7.0_rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit dcb49710189d104d4edc07709615748dab61341b gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 619b03b6264e3fc0e48acdc7562bed915e1095de5bc2243abb6c10764d0a0316 all runs: OK false negative chance: 0.000 # git bisect bad dcb49710189d104d4edc07709615748dab61341b Bisecting: 33309 revisions left to test after this (roughly 15 steps) [5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7] Merge branch 'ipv4-icmp-fix-source-ip-derivation-in-presence-of-vrfs' determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 168f490f05164f0f4cc6cc787634f227355c07158cedc46b6fa8e697d8517adc all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good 5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7 Bisecting: 16649 revisions left to test after this (roughly 14 steps) [5abe8d8efc022cc78b6273d01e4a453242b9f4d8] Merge tag 'libcrypto-updates-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux determine whether the revision contains the guilty commit revision 5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7 crashed and is reachable testing commit 5abe8d8efc022cc78b6273d01e4a453242b9f4d8 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 014d5380f0e11953d72b01c06f8a6afc775974bf2d01f335504379fc307cef11 all runs: OK false negative chance: 0.000 # git bisect bad 5abe8d8efc022cc78b6273d01e4a453242b9f4d8 Bisecting: 7889 revisions left to test after this (roughly 13 steps) [07fdad3a93756b872da7b53647715c48d0f4a2d0] Merge tag 'net-next-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 07fdad3a93756b872da7b53647715c48d0f4a2d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 07327625f6c7c3be2b4dcb7f1498ad60d7f9215c60e41ce14e5f128b941d1782 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good 07fdad3a93756b872da7b53647715c48d0f4a2d0 Bisecting: 3946 revisions left to test after this (roughly 12 steps) [9361cace0d07954ad8f2345c057976ab1bf44488] Merge tag 's390-6.18-2' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux determine whether the revision contains the guilty commit revision 07fdad3a93756b872da7b53647715c48d0f4a2d0 crashed and is reachable testing commit 9361cace0d07954ad8f2345c057976ab1bf44488 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 9a889ba30f08a0670c64d29bbb6c6d8cb2e6c0f6053486d8d2b68d28270ff666 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good 9361cace0d07954ad8f2345c057976ab1bf44488 Bisecting: 1973 revisions left to test after this (roughly 11 steps) [a44592339397bc6715917997c6869bdedd1a7256] drm/amdgpu/vm: Check PRT uAPI flag instead of PTE flag determine whether the revision contains the guilty commit revision ddd0172f182e3e869a3a960e433578aeedcb37c9 crashed and is reachable testing commit a44592339397bc6715917997c6869bdedd1a7256 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: fbf57e6147a285cdca2a0313047b6ab9fdabb21621f71066baa763824c6c40d5 all runs: OK false negative chance: 0.000 # git bisect bad a44592339397bc6715917997c6869bdedd1a7256 Bisecting: 987 revisions left to test after this (roughly 10 steps) [818444a61bd87d8b72c93448a62be2406b92ec33] Merge tag 'firewire-fixes-6.18-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394 determine whether the revision contains the guilty commit revision 5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7 crashed and is reachable testing commit 818444a61bd87d8b72c93448a62be2406b92ec33 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e76b78a4c9620e39c17c518bf41b425c482ab84b368f55eb057e720ae2df99d9 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good 818444a61bd87d8b72c93448a62be2406b92ec33 Bisecting: 493 revisions left to test after this (roughly 9 steps) [3ad1b71fdc5707d14332d9ae710a237de936be9b] riscv: Build loader.bin exclusively for Canaan K210 determine whether the revision contains the guilty commit revision ddd0172f182e3e869a3a960e433578aeedcb37c9 crashed and is reachable testing commit 3ad1b71fdc5707d14332d9ae710a237de936be9b gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 9ddf417a76611ce850db8df62ae6df2df2b1e1436b4e32f805eb92f96d41c1f2 all runs: OK false negative chance: 0.000 # git bisect bad 3ad1b71fdc5707d14332d9ae710a237de936be9b Bisecting: 246 revisions left to test after this (roughly 8 steps) [13fef4fb0536c80e8c4a77e69fe0b5deeb7c331b] Merge branch 'net-bridge-fix-two-mst-bugs' determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 13fef4fb0536c80e8c4a77e69fe0b5deeb7c331b gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 3546780bac412c797c74ab146821ccb41bb0cfc152d182ad23fb51f03f1417bc all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good 13fef4fb0536c80e8c4a77e69fe0b5deeb7c331b Bisecting: 102 revisions left to test after this (roughly 7 steps) [ec0b62ccc986c06552c57f54116171cfd186ef92] Merge tag 'drm-fixes-2025-10-31' of https://gitlab.freedesktop.org/drm/kernel determine whether the revision contains the guilty commit revision 5adf6f2b9972dbb69f4dd11bae52ba251c64ecb7 crashed and is reachable testing commit ec0b62ccc986c06552c57f54116171cfd186ef92 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ff7cf6d0a8d003597f83e9bbd38f0bfe5135f4e62c1f30d88078a8d32eb753f2 all runs: OK false negative chance: 0.000 # git bisect bad ec0b62ccc986c06552c57f54116171cfd186ef92 Bisecting: 73 revisions left to test after this (roughly 6 steps) [b909d77359b82821e1c6b6a3a8a51b355b06fdb5] Merge tag '6.18-rc3-smb-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 determine whether the revision contains the guilty commit revision ddd0172f182e3e869a3a960e433578aeedcb37c9 crashed and is reachable testing commit b909d77359b82821e1c6b6a3a8a51b355b06fdb5 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: c036912f42b2b8a236590942bbc23f784ca93c3d3c08e15cc17a9cb224a72008 all runs: OK false negative chance: 0.000 # git bisect bad b909d77359b82821e1c6b6a3a8a51b355b06fdb5 Bisecting: 33 revisions left to test after this (roughly 5 steps) [3ad81aa52085a7e67edfa4bc8f518e5962196bb3] Merge tag 'v6.18-p4' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 determine whether the revision contains the guilty commit revision 07fdad3a93756b872da7b53647715c48d0f4a2d0 crashed and is reachable testing commit 3ad81aa52085a7e67edfa4bc8f518e5962196bb3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 40a1986ab4ff71bbed63741a913dacd47938b2ec357e975525db946a446b040f all runs: OK false negative chance: 0.000 # git bisect bad 3ad81aa52085a7e67edfa4bc8f518e5962196bb3 Bisecting: 15 revisions left to test after this (roughly 4 steps) [a5355e98accb20d8ea06008fd8fb5755cc52e8c0] Merge tag 'acpi-6.18-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit revision 07fdad3a93756b872da7b53647715c48d0f4a2d0 crashed and is reachable testing commit a5355e98accb20d8ea06008fd8fb5755cc52e8c0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 0364f32678cc45c41e0a0e350acbd01745f0c6c469776725ec5dd9885bb5d794 all runs: OK false negative chance: 0.000 # git bisect bad a5355e98accb20d8ea06008fd8fb5755cc52e8c0 Bisecting: 7 revisions left to test after this (roughly 3 steps) [a5dbbb39e11d50a8c426b8d88f5b12031fee49f3] Merge tag 'pm-6.18-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm determine whether the revision contains the guilty commit revision 07fdad3a93756b872da7b53647715c48d0f4a2d0 crashed and is reachable testing commit a5dbbb39e11d50a8c426b8d88f5b12031fee49f3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ce3de3a8365eacf609fdecd27bd0c1d705ab9175f0e90b51da1d5a4d167a4aaf all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe representative crash: BUG: unable to handle kernel NULL pointer dereference in acpi_fan_probe, types: [NULL-POINTER-DEREFERENCE] # git bisect good a5dbbb39e11d50a8c426b8d88f5b12031fee49f3 Bisecting: 5 revisions left to test after this (roughly 2 steps) [d91a1d129b63614fa4c2e45e60918409ce36db7e] ACPI: fan: Use platform device for devres-related actions determine whether the revision contains the guilty commit revision 9361cace0d07954ad8f2345c057976ab1bf44488 crashed and is reachable testing commit d91a1d129b63614fa4c2e45e60918409ce36db7e gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: b8d55672b4b7a44986b2dd3084d0c83e665405efa169abe5ecdc958a308399ef all runs: OK false negative chance: 0.000 # git bisect bad d91a1d129b63614fa4c2e45e60918409ce36db7e Bisecting: 0 revisions left to test after this (roughly 0 steps) [58764259ebe0c9efd569194444629f6b26f86583] ACPI: fan: Use ACPI handle when retrieving _FST determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 58764259ebe0c9efd569194444629f6b26f86583 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: db591ddd826d555e3c9034cae821879f72aae8f24131c3850e77be36c2b621a3 all runs: OK false negative chance: 0.000 # git bisect bad 58764259ebe0c9efd569194444629f6b26f86583 58764259ebe0c9efd569194444629f6b26f86583 is the first bad commit commit 58764259ebe0c9efd569194444629f6b26f86583 Author: Armin Wolf Date: Wed Oct 8 01:41:44 2025 +0200 ACPI: fan: Use ACPI handle when retrieving _FST Usage of the ACPI device should be phased out in the future, as the driver itself is now using the platform bus. Replace any usage of struct acpi_device in acpi_fan_get_fst() to allow users to drop usage of struct acpi_device. Also extend the integer check to all three package elements. Signed-off-by: Armin Wolf Link: https://patch.msgid.link/20251007234149.2769-2-W_Armin@gmx.de Signed-off-by: Rafael J. Wysocki drivers/acpi/fan.h | 3 ++- drivers/acpi/fan_attr.c | 2 +- drivers/acpi/fan_core.c | 34 ++++++++++++++++++++++------------ drivers/acpi/fan_hwmon.c | 3 +-- 4 files changed, 26 insertions(+), 16 deletions(-) accumulated error probability: 0.00 parent commit 211ddde0823f1442e4ad052a2f30f050145ccada wasn't tested testing commit 211ddde0823f1442e4ad052a2f30f050145ccada gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 739e1ffa97dc09f3cc37013177a659616e683f7a9f8c8d6c762948b6f43cd9ca culprit signature: db591ddd826d555e3c9034cae821879f72aae8f24131c3850e77be36c2b621a3 parent signature: 739e1ffa97dc09f3cc37013177a659616e683f7a9f8c8d6c762948b6f43cd9ca revisions tested: 26, total time: 7h15m34.91614574s (build: 2h13m20.529146587s, test: 4h9m55.728499732s) first good commit: 58764259ebe0c9efd569194444629f6b26f86583 ACPI: fan: Use ACPI handle when retrieving _FST recipients (to): ["rafael.j.wysocki@intel.com" "w_armin@gmx.de"] recipients (cc): []