ci starts bisection 2023-06-11 01:03:05.233922344 +0000 UTC m=+315497.522349226 bisecting cause commit starting from e431e712c83676a8a9cd3988b323e3ef994a8ff3 building syzkaller on 7086cdb95114c57c35cee9db87b80d4225d8795d ensuring issue is reproducible on original commit e431e712c83676a8a9cd3988b323e3ef994a8ff3 testing commit e431e712c83676a8a9cd3988b323e3ef994a8ff3 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 578d8d52bcea0d578b8de472d66078bec01e721bef7be2fb5e111723d09e021f all runs: crashed: general protection fault in crypto_shash_finup testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 82dbe2f89be2dad6520a45c54ca4dbf252ce4da3f1069b4569b805180db69e75 all runs: OK # git bisect start e431e712c83676a8a9cd3988b323e3ef994a8ff3 457391b0380335d5e9a5babdec90ac53928b23b4 Bisecting: 8178 revisions left to test after this (roughly 13 steps) [34b62f186db9614e55d021f8c58d22fc44c57911] Merge tag 'pci-v6.4-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci testing commit 34b62f186db9614e55d021f8c58d22fc44c57911 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f7eb0484ab0601f5632cbd8f6e1630685f26af168ece5cb84b2f3daacd4f1cb3 all runs: OK # git bisect good 34b62f186db9614e55d021f8c58d22fc44c57911 Bisecting: 4135 revisions left to test after this (roughly 12 steps) [d75439d64a1e2b35e0f08906205b00279753cbed] Merge tag 'for-linus' of https://github.com/openrisc/linux testing commit d75439d64a1e2b35e0f08906205b00279753cbed gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 11b92cced2067dd83f20443ee0365472e64a1cb8c7e83fe83c064ccc43561131 all runs: OK # git bisect good d75439d64a1e2b35e0f08906205b00279753cbed Bisecting: 2066 revisions left to test after this (roughly 11 steps) [18f558876ff0361e8ceb537cdf6fec8936ff6f72] Merge branch 'bpf: Add socket destroy capability' testing commit 18f558876ff0361e8ceb537cdf6fec8936ff6f72 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e6e5f3b892269fd126d0b4c26581172801018015b8e96b5863a7536a5e2c8221 all runs: OK # git bisect good 18f558876ff0361e8ceb537cdf6fec8936ff6f72 Bisecting: 1039 revisions left to test after this (roughly 10 steps) [4ff3dfc91c8458f65366f283167d1cd6f16be06f] Merge branch 'splice-net-handle-msg_splice_pages-in-chelsio-tls' testing commit 4ff3dfc91c8458f65366f283167d1cd6f16be06f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: de4259b2854190a42ad040b543d1eba2715dfc988237cdb7461c0f583cdd008d all runs: OK # git bisect good 4ff3dfc91c8458f65366f283167d1cd6f16be06f Bisecting: 520 revisions left to test after this (roughly 9 steps) [5e89d62ec1014800e411868b8d750f9d631bdd01] Merge tag 'media/v6.4-4' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 5e89d62ec1014800e411868b8d750f9d631bdd01 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1ad2ed3d6d5b1420ac5a3de3e4782053ff97b8dce7c704945d85eec7d24443cc all runs: OK # git bisect good 5e89d62ec1014800e411868b8d750f9d631bdd01 Bisecting: 260 revisions left to test after this (roughly 8 steps) [449f6bc17a51e68b06cfd742898e5ff3fe6e04d7] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 449f6bc17a51e68b06cfd742898e5ff3fe6e04d7 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 46a516c96fc71d1fd6793dae57a230d948ac740c3e002f1092c94047ee36a106 all runs: crashed: general protection fault in crypto_shash_finup # git bisect bad 449f6bc17a51e68b06cfd742898e5ff3fe6e04d7 Bisecting: 122 revisions left to test after this (roughly 7 steps) [25041a4c02c7cf774d8b6ed60586fd64f1cdaa81] Merge tag 'net-6.4-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 25041a4c02c7cf774d8b6ed60586fd64f1cdaa81 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3d4b200882771d00008db09e27fdf3810fd6bc7af9e541d5630eb1fa75aa09c3 all runs: OK # git bisect good 25041a4c02c7cf774d8b6ed60586fd64f1cdaa81 Bisecting: 59 revisions left to test after this (roughly 6 steps) [28cfea989d6f55c3d10608eba2a2bae609c5bf3e] Merge tag 'mlx5-updates-2023-05-31' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux testing commit 28cfea989d6f55c3d10608eba2a2bae609c5bf3e gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b4a5bbe44d7c130eb79cf5adad64369d4db29ed76be8596660c6ba8e6e11d699 all runs: OK # git bisect good 28cfea989d6f55c3d10608eba2a2bae609c5bf3e Bisecting: 29 revisions left to test after this (roughly 5 steps) [58da455b31baf87dd74b71fc54d0356e05c0bf49] tools: ynl-gen: improve unwind on parsing errors testing commit 58da455b31baf87dd74b71fc54d0356e05c0bf49 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: feb42159888c23782bab1d6b9ddac7f34c61c558c8301dcc0703ffb59287fd63 all runs: OK # git bisect good 58da455b31baf87dd74b71fc54d0356e05c0bf49 Bisecting: 14 revisions left to test after this (roughly 4 steps) [af8de1e307bf1ecbd17d220122832cd093f7a3f8] net: pcs: Add 10GBASE-R mode for Synopsys Designware XPCS testing commit af8de1e307bf1ecbd17d220122832cd093f7a3f8 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 7d07799ae89e7e3a47a0bd3637b526a49f5528e98def5a31e1596d1e38fb7752 all runs: OK # git bisect good af8de1e307bf1ecbd17d220122832cd093f7a3f8 Bisecting: 7 revisions left to test after this (roughly 3 steps) [f5f82cd18732d828bcd1ec308c4e8c55012e84b0] Move netfs_extract_iter_to_sg() to lib/scatterlist.c testing commit f5f82cd18732d828bcd1ec308c4e8c55012e84b0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: dca935e5f67e9ae4769a59896ff08e0ff00bfc88691b796566bbe43b476b1917 all runs: OK # git bisect good f5f82cd18732d828bcd1ec308c4e8c55012e84b0 Bisecting: 3 revisions left to test after this (roughly 2 steps) [bf63e250c4b1f21696599e0ab7117f4429dcbdc0] crypto: af_alg: Support MSG_SPLICE_PAGES testing commit bf63e250c4b1f21696599e0ab7117f4429dcbdc0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 77c5d6e8ed9f944e86e1672d07a15005cd7668b5721b68cae1a7d5e17eafccef all runs: OK # git bisect good bf63e250c4b1f21696599e0ab7117f4429dcbdc0 Bisecting: 1 revision left to test after this (roughly 1 step) [c662b043cdca89bf0f03fc37251000ac69a3a548] crypto: af_alg/hash: Support MSG_SPLICE_PAGES testing commit c662b043cdca89bf0f03fc37251000ac69a3a548 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5482edb47d3cf6a1ed3bf997b33902825e854863362d481281aae138b2c713e3 all runs: crashed: general protection fault in crypto_shash_finup # git bisect bad c662b043cdca89bf0f03fc37251000ac69a3a548 Bisecting: 0 revisions left to test after this (roughly 0 steps) [fb800fa4c1f5aee1238267252e88a7837e645c02] crypto: af_alg: Convert af_alg_sendpage() to use MSG_SPLICE_PAGES testing commit fb800fa4c1f5aee1238267252e88a7837e645c02 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c381ceb3e4c0362e477f8f031b5bb153f8ef227aacf2cf6ca821bdd5cf25aa1e all runs: OK # git bisect good fb800fa4c1f5aee1238267252e88a7837e645c02 c662b043cdca89bf0f03fc37251000ac69a3a548 is the first bad commit commit c662b043cdca89bf0f03fc37251000ac69a3a548 Author: David Howells Date: Tue Jun 6 14:08:56 2023 +0100 crypto: af_alg/hash: Support MSG_SPLICE_PAGES Make AF_ALG sendmsg() support MSG_SPLICE_PAGES in the hashing code. This causes pages to be spliced from the source iterator if possible. This allows ->sendpage() to be replaced by something that can handle multiple multipage folios in a single transaction. Signed-off-by: David Howells cc: Herbert Xu cc: "David S. Miller" cc: Eric Dumazet cc: Jakub Kicinski cc: Paolo Abeni cc: Jens Axboe cc: Matthew Wilcox cc: linux-crypto@vger.kernel.org cc: netdev@vger.kernel.org Acked-by: Herbert Xu Signed-off-by: Paolo Abeni crypto/af_alg.c | 11 ++++-- crypto/algif_hash.c | 100 ++++++++++++++++++++++++++++++++-------------------- 2 files changed, 70 insertions(+), 41 deletions(-) culprit signature: 5482edb47d3cf6a1ed3bf997b33902825e854863362d481281aae138b2c713e3 parent signature: c381ceb3e4c0362e477f8f031b5bb153f8ef227aacf2cf6ca821bdd5cf25aa1e revisions tested: 16, total time: 5h2m39.369597003s (build: 2h36m27.297360287s, test: 2h22m58.534886172s) first bad commit: c662b043cdca89bf0f03fc37251000ac69a3a548 crypto: af_alg/hash: Support MSG_SPLICE_PAGES recipients (to): ["dhowells@redhat.com" "herbert@gondor.apana.org.au" "pabeni@redhat.com"] recipients (cc): [] crash: general protection fault in crypto_shash_finup general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 1 PID: 903 Comm: kworker/1:2 Not tainted 6.4.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 Workqueue: cryptd cryptd_queue_worker RIP: 0010:crypto_shash_alg include/crypto/hash.h:827 [inline] RIP: 0010:crypto_shash_finup+0x46/0x150 crypto/shash.c:198 Code: 89 fd 53 48 83 ec 10 80 3c 01 00 0f 85 ce 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 c5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffffc9000496fbc8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000004 RDX: 0000000000000014 RSI: ffff888072bf31c0 RDI: 0000000000000020 RBP: ffff88807efb7308 R08: ffff88807efb7308 R09: ffffffff903f1e27 R10: 0000000000000001 R11: 1ffffffff1f5cd1f R12: ffff88802143d028 R13: 1ffff9200092df82 R14: ffffed100fdf6e5d R15: ffff88807efb72e8 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 0000000074ae5000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: shash_ahash_finup+0xb1/0x390 crypto/shash.c:333 cryptd_hash_finup+0xaa/0x110 crypto/cryptd.c:597 crypto_request_complete include/crypto/algapi.h:272 [inline] cryptd_queue_worker+0x10f/0x1a0 crypto/cryptd.c:181 process_one_work+0x86e/0x1410 kernel/workqueue.c:2405 worker_thread+0x5af/0xf00 kernel/workqueue.c:2552 kthread+0x2f0/0x3d0 kernel/kthread.c:379 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:crypto_shash_alg include/crypto/hash.h:827 [inline] RIP: 0010:crypto_shash_finup+0x46/0x150 crypto/shash.c:198 Code: 89 fd 53 48 83 ec 10 80 3c 01 00 0f 85 ce 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 c5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffffc9000496fbc8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000004 RDX: 0000000000000014 RSI: ffff888072bf31c0 RDI: 0000000000000020 RBP: ffff88807efb7308 R08: ffff88807efb7308 R09: ffffffff903f1e27 R10: 0000000000000001 R11: 1ffffffff1f5cd1f R12: ffff88802143d028 R13: 1ffff9200092df82 R14: ffffed100fdf6e5d R15: ffff88807efb72e8 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000002a061000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 89 fd mov %edi,%ebp 2: 53 push %rbx 3: 48 83 ec 10 sub $0x10,%rsp 7: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) b: 0f 85 ce 00 00 00 jne 0xdf 11: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 18: fc ff df 1b: 48 8b 5d 00 mov 0x0(%rbp),%rbx 1f: 48 8d 7b 20 lea 0x20(%rbx),%rdi 23: 48 89 f9 mov %rdi,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) <-- trapping instruction 2e: 0f 85 c5 00 00 00 jne 0xf9 34: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 3b: fc ff df 3e: 48 rex.W 3f: 8b .byte 0x8b