ci starts bisection 2023-12-29 01:06:52.823447292 +0000 UTC m=+542040.420212498 bisecting cause commit starting from c2b2ee36250d967c21890cb801e24af4b6a9eaa5 building syzkaller on fb427a0782000106c62de76d251e5a02de5406a9 ensuring issue is reproducible on original commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a101a16fe33c26b3bcdb9e771cf82e3c70e53cb8b81f1804560901dd30f06f9b all runs: crashed: general protection fault in qdisc_create representative crash: general protection fault in qdisc_create, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 620c9656423343b25c58e79a7516601ba6c226a1f4a4778dc0b6b59732e9e98e all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed kconfig minimization: base=3923 full=7657 leaves diff=2005 split chunks (needed=false): <2005> split chunk #0 of len 2005 into 5 parts testing without sub-chunk 1/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cafc56fa6248060463660cf7ddcd4789e71dd8e32afe70986c1c1eb21a75da98 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 33f5451407f646aaa46e49c0067ad24804c7e14cdba5d9e72aa074169b73bb61 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d39e52207459f6c63efeaaca13883be562094cca424f297ee466311e7f2e631a all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b26669d8c2ccb5b0c6d62476c778cf491bc70b75923f6708a9f7c6513f13c1da all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit c2b2ee36250d967c21890cb801e24af4b6a9eaa5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a65a61131d1e2d6a15d3b3ac7d6307a038e154b233d7c71ba706de448b555e07 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] the chunk can be dropped minimized to 401 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB_CORE FSCACHE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_MMIO KVM_PROVE_MMU KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ae151fd2e6fb84e1d6556e9cb335a947669dd2e14f425a0690011d973579dd03 all runs: OK false negative chance: 0.000 # git bisect start c2b2ee36250d967c21890cb801e24af4b6a9eaa5 ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 9689 revisions left to test after this (roughly 13 steps) [c035f0268b87fc21f517f638b3bad26c81babc85] Merge tag 'soc-dt-6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit c035f0268b87fc21f517f638b3bad26c81babc85 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dc67a83b139811e5698eb722005881407c1a60c06caefbf16012bb8835d037c2 all runs: OK false negative chance: 0.000 # git bisect good c035f0268b87fc21f517f638b3bad26c81babc85 Bisecting: 4853 revisions left to test after this (roughly 12 steps) [3af755a46881c32fecaecfdeaf3a8f0a869deca5] nvme: move nvme_stop_keep_alive() back to original position testing commit 3af755a46881c32fecaecfdeaf3a8f0a869deca5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5f978fe549e8a0a597286e9523e48e3f7b7cebcb2500ad03a42c60b1495790cf all runs: OK false negative chance: 0.000 # git bisect good 3af755a46881c32fecaecfdeaf3a8f0a869deca5 Bisecting: 2427 revisions left to test after this (roughly 11 steps) [083772c9f972dcc248913b52a0dec1025baa1e16] net: page_pool: record pools per netdev testing commit 083772c9f972dcc248913b52a0dec1025baa1e16 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 902d84ccdc252d66b50a2b40f7bc2436015d543a75d2b9798bfc9d6e18316140 all runs: OK false negative chance: 0.000 # git bisect good 083772c9f972dcc248913b52a0dec1025baa1e16 Bisecting: 1210 revisions left to test after this (roughly 10 steps) [9c749e61a1104ba9cf00519e723a7fa8ac55db0d] Merge tag 'arc-6.7-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc testing commit 9c749e61a1104ba9cf00519e723a7fa8ac55db0d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d4a3968fff6e8b87af5b7478a4a2186d4278e5a6afd5d3d3ced0b95f9d6c0d08 all runs: OK false negative chance: 0.000 # git bisect good 9c749e61a1104ba9cf00519e723a7fa8ac55db0d Bisecting: 658 revisions left to test after this (roughly 9 steps) [6aa7ca3c7dcc5effc4963d18b300fc942e738a3b] idpf: refactor some missing field get/prep conversions testing commit 6aa7ca3c7dcc5effc4963d18b300fc942e738a3b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9c65ae07391a5bb422cb78439743c6a355e8746dafc404cdb8c7ac876fd6b18b all runs: OK false negative chance: 0.000 # git bisect good 6aa7ca3c7dcc5effc4963d18b300fc942e738a3b Bisecting: 250 revisions left to test after this (roughly 8 steps) [c49b292d031e385abf764ded32cd953c77e73f2d] Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next testing commit c49b292d031e385abf764ded32cd953c77e73f2d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a9ea820ab1a9ce0f3669abbf719ce7f1538535dae4fd4897366d0284f9c0898c all runs: OK false negative chance: 0.000 # git bisect good c49b292d031e385abf764ded32cd953c77e73f2d Bisecting: 113 revisions left to test after this (roughly 7 steps) [7c5e046bdcb2513f9decb3765d8bf92d604279cf] Merge tag 'net-6.7-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 7c5e046bdcb2513f9decb3765d8bf92d604279cf gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4c7b25787a42103b5624ad1d20bc155464eea8f3d25c10774f58a5d45d48cbec all runs: OK false negative chance: 0.000 # git bisect good 7c5e046bdcb2513f9decb3765d8bf92d604279cf Bisecting: 56 revisions left to test after this (roughly 6 steps) [826eb9bcc1844990e3c4a7c84846f1c1eaee0ed0] selftest/tcp-ao: Rectify out-of-tree build testing commit 826eb9bcc1844990e3c4a7c84846f1c1eaee0ed0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d472a6c3693103970ee6d27bbe5a1145c6610ceb6557178b8dfbfbea813f0505 all runs: OK false negative chance: 0.000 # git bisect good 826eb9bcc1844990e3c4a7c84846f1c1eaee0ed0 Bisecting: 28 revisions left to test after this (roughly 5 steps) [6d46a4f10532ce59e88a58199b666cebf6625ec7] dpaa2-switch: move a check to the prechangeupper stage testing commit 6d46a4f10532ce59e88a58199b666cebf6625ec7 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0ecc1454596fcb1e742cb95259e70dd7096a577340851731854dd4b9d00cdf3a all runs: OK false negative chance: 0.000 # git bisect good 6d46a4f10532ce59e88a58199b666cebf6625ec7 Bisecting: 14 revisions left to test after this (roughly 4 steps) [e3eb47f2347b8cfae9de4a9a6fdddec79554652c] Merge branch 'net-smcv2.1-ISM-device-support' testing commit e3eb47f2347b8cfae9de4a9a6fdddec79554652c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 309573ebf8573d392bd0d18b14fc1fd620aca91be0fdd57c8a5ba90fb58442a0 all runs: OK false negative chance: 0.000 # git bisect good e3eb47f2347b8cfae9de4a9a6fdddec79554652c Bisecting: 6 revisions left to test after this (roughly 3 steps) [44a949ad07e0d892e6477491ec9a6c3209c21aaf] Merge branch 'net-sched-tc-block-ports-tracking' testing commit 44a949ad07e0d892e6477491ec9a6c3209c21aaf gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 24ef22374762201eb2025c6043f697474801b66d2fefd39904825cac46ecf085 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] # git bisect bad 44a949ad07e0d892e6477491ec9a6c3209c21aaf Bisecting: 3 revisions left to test after this (roughly 2 steps) [a7042cf8f23191c3a460c627c0c39463afb5d335] net/sched: cls_api: Expose tc block to the datapath testing commit a7042cf8f23191c3a460c627c0c39463afb5d335 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fdd544c314648c58fc917231828529927528588255479acf2dce2d51c790a709 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] # git bisect bad a7042cf8f23191c3a460c627c0c39463afb5d335 Bisecting: 1 revision left to test after this (roughly 1 step) [b1dffcf0da221d1f9d8007dfa2a41a325921d7fa] net: remove SOCK_DEBUG macro testing commit b1dffcf0da221d1f9d8007dfa2a41a325921d7fa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 76edb9e7a45a5956c4f49ab1e7617cec27fd9701537973999a7d3674e27d6872 all runs: OK false negative chance: 0.000 # git bisect good b1dffcf0da221d1f9d8007dfa2a41a325921d7fa Bisecting: 0 revisions left to test after this (roughly 0 steps) [913b47d3424e7d99eaf34b798c47dfa840c64a08] net/sched: Introduce tc block netdev tracking infra testing commit 913b47d3424e7d99eaf34b798c47dfa840c64a08 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8fe9a372cb61f6f45abbe380b6dc9121de25366c1b1771f2c9f63928aff0efb7 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in qdisc_create representative crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create, types: [UNKNOWN] # git bisect bad 913b47d3424e7d99eaf34b798c47dfa840c64a08 913b47d3424e7d99eaf34b798c47dfa840c64a08 is the first bad commit commit 913b47d3424e7d99eaf34b798c47dfa840c64a08 Author: Victor Nogueira Date: Tue Dec 19 15:16:19 2023 -0300 net/sched: Introduce tc block netdev tracking infra This commit makes tc blocks track which ports have been added to them. And, with that, we'll be able to use this new information to send packets to the block's ports. Which will be done in the patch #3 of this series. Suggested-by: Jiri Pirko Co-developed-by: Jamal Hadi Salim Signed-off-by: Jamal Hadi Salim Co-developed-by: Pedro Tammela Signed-off-by: Pedro Tammela Signed-off-by: Victor Nogueira Signed-off-by: David S. Miller include/net/sch_generic.h | 2 ++ net/sched/cls_api.c | 2 ++ net/sched/sch_api.c | 41 +++++++++++++++++++++++++++++++++++++++++ net/sched/sch_generic.c | 18 +++++++++++++++++- 4 files changed, 62 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 8fe9a372cb61f6f45abbe380b6dc9121de25366c1b1771f2c9f63928aff0efb7 parent signature: 76edb9e7a45a5956c4f49ab1e7617cec27fd9701537973999a7d3674e27d6872 revisions tested: 22, total time: 4h28m34.508342156s (build: 1h50m3.86352074s, test: 2h24m54.396622003s) first bad commit: 913b47d3424e7d99eaf34b798c47dfa840c64a08 net/sched: Introduce tc block netdev tracking infra recipients (to): ["davem@davemloft.net" "jhs@mojatatu.com" "pctammela@mojatatu.com" "victor@mojatatu.com"] recipients (cc): [] crash: BUG: unable to handle kernel NULL pointer dereference in qdisc_create BUG: kernel NULL pointer dereference, address: 0000000000000048 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 1023bb067 P4D 1023bb067 PUD 1017b0067 PMD 0 Oops: 0000 [#1] PREEMPT SMP CPU: 0 PID: 3391 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:qdisc_block_add_dev net/sched/sch_api.c:1190 [inline] RIP: 0010:qdisc_create+0x31b/0x980 net/sched/sch_api.c:1390 Code: 92 c3 31 ff 89 de e8 b4 16 fb fe 84 db 0f 85 20 03 00 00 e8 67 1b fb fe 48 8b 45 18 31 d2 be f2 ff 00 00 48 89 ef 4c 8b 68 08 <41> ff 55 48 48 85 c0 49 89 c6 74 5c e8 44 1b fb fe 49 63 9c 24 c0 RSP: 0018:ffffc900019678f8 EFLAGS: 00010246 RAX: ffffffff83a0ec20 RBX: 0000000000000001 RCX: ffffffff8232038c RDX: 0000000000000000 RSI: 000000000000fff2 RDI: ffff888105f9e800 RBP: ffff888105f9e800 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888107746000 R13: 0000000000000000 R14: ffffc900019679a0 R15: ffffffff83a0ec20 FS: 00007fd16f5006c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000048 CR3: 00000001032c6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: tc_modify_qdisc+0x714/0xd00 net/sched/sch_api.c:1788 rtnetlink_rcv_msg+0x268/0x670 net/core/rtnetlink.c:6615 netlink_rcv_skb+0x91/0x1d0 net/netlink/af_netlink.c:2543 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x43f/0x570 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x341/0x690 net/netlink/af_netlink.c:1908 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x52/0xa0 net/socket.c:745 ____sys_sendmsg+0x337/0x3e0 net/socket.c:2584 ___sys_sendmsg+0xc9/0x130 net/socket.c:2638 __sys_sendmsg+0xa6/0x120 net/socket.c:2667 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7fd16f97dce9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd16f5000c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fd16fa9cf80 RCX: 00007fd16f97dce9 RDX: 0000000000000000 RSI: 0000000020005840 RDI: 0000000000000003 RBP: 00007fd16f9ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007fd16fa9cf80 R15: 00007fff0f15a6e8 Modules linked in: CR2: 0000000000000048 ---[ end trace 0000000000000000 ]--- RIP: 0010:qdisc_block_add_dev net/sched/sch_api.c:1190 [inline] RIP: 0010:qdisc_create+0x31b/0x980 net/sched/sch_api.c:1390 Code: 92 c3 31 ff 89 de e8 b4 16 fb fe 84 db 0f 85 20 03 00 00 e8 67 1b fb fe 48 8b 45 18 31 d2 be f2 ff 00 00 48 89 ef 4c 8b 68 08 <41> ff 55 48 48 85 c0 49 89 c6 74 5c e8 44 1b fb fe 49 63 9c 24 c0 RSP: 0018:ffffc900019678f8 EFLAGS: 00010246 RAX: ffffffff83a0ec20 RBX: 0000000000000001 RCX: ffffffff8232038c RDX: 0000000000000000 RSI: 000000000000fff2 RDI: ffff888105f9e800 RBP: ffff888105f9e800 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888107746000 R13: 0000000000000000 R14: ffffc900019679a0 R15: ffffffff83a0ec20 FS: 00007fd16f5006c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000048 CR3: 00000001032c6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 92 xchg %eax,%edx 1: c3 ret 2: 31 ff xor %edi,%edi 4: 89 de mov %ebx,%esi 6: e8 b4 16 fb fe call 0xfefb16bf b: 84 db test %bl,%bl d: 0f 85 20 03 00 00 jne 0x333 13: e8 67 1b fb fe call 0xfefb1b7f 18: 48 8b 45 18 mov 0x18(%rbp),%rax 1c: 31 d2 xor %edx,%edx 1e: be f2 ff 00 00 mov $0xfff2,%esi 23: 48 89 ef mov %rbp,%rdi 26: 4c 8b 68 08 mov 0x8(%rax),%r13 * 2a: 41 ff 55 48 call *0x48(%r13) <-- trapping instruction 2e: 48 85 c0 test %rax,%rax 31: 49 89 c6 mov %rax,%r14 34: 74 5c je 0x92 36: e8 44 1b fb fe call 0xfefb1b7f 3b: 49 rex.WB 3c: 63 .byte 0x63 3d: 9c pushf 3e: 24 c0 and $0xc0,%al