ci starts bisection 2024-05-01 01:39:57.64327771 +0000 UTC m=+37910.061222824 bisecting cause commit starting from 98369dccd2f8e16bf4c6621053af7aa4821dcf8e building syzkaller on 9e0e6af1043935504b1e1e8f286c7e731b588730 ensuring issue is reproducible on original commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b7f493848628984bec596da1b1ede712bf09d35276d557f98463c7f07f86af7c all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 543ca0902e291f00562a4e7ba136b420885dda6b7a5e7a5a468011618d0adc5c all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed kconfig minimization: base=3976 full=8007 leaves diff=2013 split chunks (needed=false): <2013> split chunk #0 of len 2013 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7d5cc2c553400e7c8c55f34ac1005e5fc9c2af35ecb3370203d06be9bce22dc2 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 295918307885b2f9a5bab73bf3613212abe190022f172e41c275997c0c6ad20b all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3924151e82672e194e5ebe3455365608fe358831988abeecb6e2fa7a1a813f18 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2c9c5740466e5580daadd3da1dccae5d6947e96e6691e97461cd38436a99645b all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 98369dccd2f8e16bf4c6621053af7aa4821dcf8e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1500fab3c5f22679535c0743e19dda445c0e7448fa6f6d5889deae7fab0e7233 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] the chunk can be dropped minimized to 403 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE CPU_MITIGATIONS DVB_CORE FB_CORE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMMON KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_GENERIC_MEMORY_ATTRIBUTES KVM_GENERIC_MMU_NOTIFIER KVM_GENERIC_PRIVATE_MEM KVM_HYPERV KVM_MMIO KVM_PRIVATE_MEM KVM_PROVE_MMU KVM_SW_PROTECTED_VM KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LRU_GEN_WALKS_MMU LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MITIGATION_SPECTRE_BHI MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed picked [v6.8 v6.7 v6.6 v6.4 v6.2 v6.0 v5.18 v5.16 v5.13 v5.10 v5.7 v5.4 v5.1 v4.19] out of 31 release tags testing release v6.8 testing commit e8f897f4afef0031fe618a8e94127a0934896aba gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b6c92894e61b084a87f2871492e5f666886ff6a9398e2167e8a79d6bb05801b9 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v6.7 testing commit 0dd3ee31125508cd67f7e7172247f05b7fd1753a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b0b9bf0d83c963028edd2eb90477c52139580c429b2edd939d10ab34258e1e3e all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d47dfb496149058a9bbefb7385c9a280650f27a363c305c3b0d0148915b339a1 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f37912b66c5049be639bece38224d70acf52beda10772c50543a60b8a4ffbcc1 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 70dee9ded0e4557767c2ad7343c60462c8975791da20f5e3ccea6e20cd952e47 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: daf62798f254c5e6fcd54a559859801b6f923c26fe0e7bb6d279c6f9081105e0 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: db9ac5d1b343d6333bfda4e134cc89bb87413df735fb8c10538478326f56d9f1 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d7ad02eda4d15b5bbbf9acf3412a9d529c2ef7e0bcc1c01aa9f8c076bd387cd8 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.13 testing commit 62fb9874f5da54fdb243003b386128037319b219 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0e5f0970575aa32e539e99153d8df43c938e9eb0132be1091d8a1b6b9813c59a all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a6fd3aa4aa20a00a540317d7af5fbd65b37d333755f3c2126c3c09fe2097518e all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 gcc compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 71e0fd32f1d8d8faa34dfbf5645739d03f2386fa72a332d68ce72da38f71e65c all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 5f4c7d4142f45fd47a1dd64feadfc2b5cb4017fdabc20e599715503b7237484e all runs: OK false negative chance: 0.000 # git bisect start 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 219d54332a09e8d8741c1e1982f5eae56099de85 Bisecting: 21138 revisions left to test after this (roughly 15 steps) [9f68e3655aae6d49d6ba05dd263f99f33c2567af] Merge tag 'drm-next-2020-01-30' of git://anongit.freedesktop.org/drm/drm testing commit 9f68e3655aae6d49d6ba05dd263f99f33c2567af gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: c56f76d49ed260a77fc37fa33fe460b2dca9ac887b55261c4685d844eef5ab5a all runs: OK false negative chance: 0.000 # git bisect good 9f68e3655aae6d49d6ba05dd263f99f33c2567af Bisecting: 9415 revisions left to test after this (roughly 13 steps) [29d9f30d4ce6c7a38745a54a8cddface10013490] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 29d9f30d4ce6c7a38745a54a8cddface10013490 gcc compiler: gcc version 8.4.1 20210217 (GCC) failed building 29d9f30d4ce6c7a38745a54a8cddface10013490: scripts/extract-cert.c:46:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/extract-cert.c:59:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/sign-file.c:89:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] scripts/sign-file.c:102:9: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] # git bisect skip 29d9f30d4ce6c7a38745a54a8cddface10013490 Bisecting: 9415 revisions left to test after this (roughly 13 steps) [c2d639d118d27d6419f5848675ed5c112a86910f] net: dsa: bcm_sf2: Move writing of CFP_DATA(5) into slicing functions testing commit c2d639d118d27d6419f5848675ed5c112a86910f gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 4a0df72bb2437262518ce2c254fe449c9ce58ef0fd177aed84acc2590e36714b all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad c2d639d118d27d6419f5848675ed5c112a86910f Bisecting: 4209 revisions left to test after this (roughly 12 steps) [0a56be3c8805b5d2cefe93ef12949050e454918b] net/mlx5e: Gather reporters APIs together testing commit 0a56be3c8805b5d2cefe93ef12949050e454918b gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: cc51c8f550736e267b8ded1e0b9502464c2797fd499fa16ade9dfd60e61bdd0f all runs: OK false negative chance: 0.000 # git bisect good 0a56be3c8805b5d2cefe93ef12949050e454918b Bisecting: 2158 revisions left to test after this (roughly 11 steps) [7111951b8d4973bda27ff663f2cf18b663d15b48] Linux 5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2a9478c2bb6678130303ec9f6ecae87dd65047776d99a9eb3ed7f65d1afa7cfa all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad 7111951b8d4973bda27ff663f2cf18b663d15b48 Bisecting: 1023 revisions left to test after this (roughly 10 steps) [c20c4a084a878df35a7e394a7e646f303b505eaf] Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux testing commit c20c4a084a878df35a7e394a7e646f303b505eaf gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: db5eecde848dffaaddb699a36a90de6388018926d8b8f58b950ca3f63c04637e all runs: OK false negative chance: 0.000 # git bisect good c20c4a084a878df35a7e394a7e646f303b505eaf Bisecting: 511 revisions left to test after this (roughly 9 steps) [3ac9eb4210a95cf9b374f1d48ce99d87d79d2510] Merge tag 'rxrpc-fixes-20200319' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs testing commit 3ac9eb4210a95cf9b374f1d48ce99d87d79d2510 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 3db7d13fb0cda0f36a35ea88ff292e05d442aad73c19c51a428be7423dd8fe3a all runs: OK false negative chance: 0.000 # git bisect good 3ac9eb4210a95cf9b374f1d48ce99d87d79d2510 Bisecting: 260 revisions left to test after this (roughly 8 steps) [b74b991fb8b9d642b8fea20d6245c6e19125a305] Merge tag 'block-5.6-20200320' of git://git.kernel.dk/linux-block testing commit b74b991fb8b9d642b8fea20d6245c6e19125a305 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: e37b24b44bf5e24dd92adf1faf9e0656ad9f4c9c3f1efb7fe97c420cd9101623 all runs: OK false negative chance: 0.000 # git bisect good b74b991fb8b9d642b8fea20d6245c6e19125a305 Bisecting: 131 revisions left to test after this (roughly 7 steps) [23cb8490c0d34b74b7548b60541758efe9754948] MAINTAINERS: fix bad file pattern testing commit 23cb8490c0d34b74b7548b60541758efe9754948 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ccdbc63791533bb7b42a547e9b4964599b85ab118b21b011386f36a2bc3d101f all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad 23cb8490c0d34b74b7548b60541758efe9754948 Bisecting: 64 revisions left to test after this (roughly 6 steps) [919a23e9d6ccf8b30e6b4c7aa36f8904c99d2dd7] selftests/net: add missing tests to Makefile testing commit 919a23e9d6ccf8b30e6b4c7aa36f8904c99d2dd7 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: c0456eee17620ffda6aef6933c75b7326305470276f291a28173e4a46cdf9035 all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad 919a23e9d6ccf8b30e6b4c7aa36f8904c99d2dd7 Bisecting: 31 revisions left to test after this (roughly 5 steps) [0dcdf9f64028ec3b75db6b691560f8286f3898bf] NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() testing commit 0dcdf9f64028ec3b75db6b691560f8286f3898bf gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fd94075799ca5b65c42af92816e12a017742e871746242d4b1607f5595f2d9e6 all runs: OK false negative chance: 0.000 # git bisect good 0dcdf9f64028ec3b75db6b691560f8286f3898bf Bisecting: 15 revisions left to test after this (roughly 4 steps) [c312c7818b86b663d32ec5d4b512abf06b23899a] net: phy: mdio-bcm-unimac: Fix clock handling testing commit c312c7818b86b663d32ec5d4b512abf06b23899a gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fae651edf41b87754880b1753e4cb2b73fdf3152925632e1bdbc72359b93034d all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad c312c7818b86b663d32ec5d4b512abf06b23899a Bisecting: 7 revisions left to test after this (roughly 3 steps) [5d765a5e4bd7c368e564e11402bba74cf7f03ac1] bnxt_en: Reset rings if ring reservation fails during open() testing commit 5d765a5e4bd7c368e564e11402bba74cf7f03ac1 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a9ff94d734dcd46253eabd6ea3c14523c3fd2263773d36fc65ffd2c5489012cf all runs: OK false negative chance: 0.000 # git bisect good 5d765a5e4bd7c368e564e11402bba74cf7f03ac1 Bisecting: 3 revisions left to test after this (roughly 2 steps) [81573b18f26defe672a7d960f9af9ac2c97f324d] selftests/net/forwarding: add Makefile to install tests testing commit 81573b18f26defe672a7d960f9af9ac2c97f324d gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2813bd0b96bf5589e6d2163da7d41aeb2400e885d7f3168c02e6e180770d2d9a all runs: OK false negative chance: 0.000 # git bisect good 81573b18f26defe672a7d960f9af9ac2c97f324d Bisecting: 1 revision left to test after this (roughly 1 step) [e80f40cbe4dd51371818e967d40da8fe305db5e4] net: dsa: tag_8021q: replace dsa_8021q_remove_header with __skb_vlan_pop testing commit e80f40cbe4dd51371818e967d40da8fe305db5e4 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fae651edf41b87754880b1753e4cb2b73fdf3152925632e1bdbc72359b93034d all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad e80f40cbe4dd51371818e967d40da8fe305db5e4 Bisecting: 0 revisions left to test after this (roughly 0 steps) [961d0e5b32946703125964f9f5b6321d60f4d706] net: cbs: Fix software cbs to consider packet sending time testing commit 961d0e5b32946703125964f9f5b6321d60f4d706 gcc compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fae651edf41b87754880b1753e4cb2b73fdf3152925632e1bdbc72359b93034d all runs: crashed: divide error in tcp_rcv_space_adjust representative crash: divide error in tcp_rcv_space_adjust, types: [UNKNOWN] # git bisect bad 961d0e5b32946703125964f9f5b6321d60f4d706 961d0e5b32946703125964f9f5b6321d60f4d706 is the first bad commit commit 961d0e5b32946703125964f9f5b6321d60f4d706 Author: Zh-yuan Ye Date: Tue Mar 24 17:28:25 2020 +0900 net: cbs: Fix software cbs to consider packet sending time Currently the software CBS does not consider the packet sending time when depleting the credits. It caused the throughput to be Idleslope[kbps] * (Port transmit rate[kbps] / |Sendslope[kbps]|) where Idleslope * (Port transmit rate / (Idleslope + |Sendslope|)) = Idleslope is expected. In order to fix the issue above, this patch takes the time when the packet sending completes into account by moving the anchor time variable "last" ahead to the send completion time upon transmission and adding wait when the next dequeue request comes before the send completion time of the previous packet. changelog: V2->V3: - remove unnecessary whitespace cleanup - add the checks if port_rate is 0 before division V1->V2: - combine variable "send_completed" into "last" - add the comment for estimate of the packet sending Fixes: 585d763af09c ("net/sched: Introduce Credit Based Shaper (CBS) qdisc") Signed-off-by: Zh-yuan Ye Reviewed-by: Vinicius Costa Gomes Signed-off-by: David S. Miller net/sched/sch_cbs.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: fae651edf41b87754880b1753e4cb2b73fdf3152925632e1bdbc72359b93034d parent signature: 2813bd0b96bf5589e6d2163da7d41aeb2400e885d7f3168c02e6e180770d2d9a revisions tested: 34, total time: 8h14m7.913201684s (build: 4h45m30.620229376s, test: 3h11m12.930178403s) first bad commit: 961d0e5b32946703125964f9f5b6321d60f4d706 net: cbs: Fix software cbs to consider packet sending time recipients (to): ["davem@davemloft.net" "vinicius.gomes@intel.com" "ye.zh-yuan@socionext.com"] recipients (cc): [] crash: divide error in tcp_rcv_space_adjust divide error: 0000 [#1] SMP NOPTI CPU: 0 PID: 3762 Comm: syz-executor.0 Not tainted 5.6.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:tcp_rcv_space_adjust+0x166/0x340 net/ipv4/tcp_input.c:643 Code: 00 44 89 fa 45 8b b6 e4 05 00 00 89 f0 66 89 74 24 16 c1 e0 04 89 34 24 48 98 48 8d 0c 50 44 89 f8 31 d2 44 29 e0 48 0f af c1 <49> f7 f4 48 8d 04 41 48 89 44 24 18 44 8d a6 70 03 00 00 44 89 f0 RSP: 0018:ffffc90000163a50 EFLAGS: 00010a83 RAX: da8789ad1bbfe000 RBX: ffff88822c3e0b80 RCX: 000000014e86c740 RDX: 0000000000000000 RSI: 000000000000ffc4 RDI: 0000000000000001 RBP: 0000000002c726f6 R08: ffff88822c3e9780 R09: ffff88822c3e9fd0 R10: 0000000000000001 R11: ffff88822c3e9780 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 00000000a73b6580 FS: 00007f320c3076c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc92f74c58 CR3: 000000022e118000 CR4: 0000000000340ef0 Call Trace: tcp_recvmsg+0x982/0x1230 net/ipv4/tcp.c:2150 inet6_recvmsg+0xaf/0x240 net/ipv6/af_inet6.c:592 sock_recvmsg_nosec net/socket.c:886 [inline] sock_recvmsg+0x7a/0xe0 net/socket.c:904 ____sys_recvmsg+0xd5/0x300 net/socket.c:2566 ___sys_recvmsg+0x92/0xd0 net/socket.c:2608 do_recvmmsg+0x137/0x420 net/socket.c:2706 __sys_recvmmsg+0x1e2/0x1f0 net/socket.c:2785 __do_sys_recvmmsg net/socket.c:2808 [inline] __se_sys_recvmmsg net/socket.c:2801 [inline] __x64_sys_recvmmsg+0x4b/0x70 net/socket.c:2801 do_syscall_64+0x92/0x2a0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f320c785ea9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f320c3070c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007f320c8b3f80 RCX: 00007f320c785ea9 RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000005 RBP: 00007f320c7d24a4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000122 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f320c8b3f80 R15: 00007ffe2395ef38 Modules linked in: ---[ end trace d725cbbd82f54316 ]--- RIP: 0010:tcp_rcv_space_adjust+0x166/0x340 net/ipv4/tcp_input.c:643 Code: 00 44 89 fa 45 8b b6 e4 05 00 00 89 f0 66 89 74 24 16 c1 e0 04 89 34 24 48 98 48 8d 0c 50 44 89 f8 31 d2 44 29 e0 48 0f af c1 <49> f7 f4 48 8d 04 41 48 89 44 24 18 44 8d a6 70 03 00 00 44 89 f0 RSP: 0018:ffffc90000163a50 EFLAGS: 00010a83 RAX: da8789ad1bbfe000 RBX: ffff88822c3e0b80 RCX: 000000014e86c740 RDX: 0000000000000000 RSI: 000000000000ffc4 RDI: 0000000000000001 RBP: 0000000002c726f6 R08: ffff88822c3e9780 R09: ffff88822c3e9fd0 R10: 0000000000000001 R11: ffff88822c3e9780 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 00000000a73b6580 FS: 00007f320c3076c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc92f74c58 CR3: 000000022e118000 CR4: 0000000000340ef0 ---------------- Code disassembly (best guess): 0: 00 44 89 fa add %al,-0x6(%rcx,%rcx,4) 4: 45 8b b6 e4 05 00 00 mov 0x5e4(%r14),%r14d b: 89 f0 mov %esi,%eax d: 66 89 74 24 16 mov %si,0x16(%rsp) 12: c1 e0 04 shl $0x4,%eax 15: 89 34 24 mov %esi,(%rsp) 18: 48 98 cltq 1a: 48 8d 0c 50 lea (%rax,%rdx,2),%rcx 1e: 44 89 f8 mov %r15d,%eax 21: 31 d2 xor %edx,%edx 23: 44 29 e0 sub %r12d,%eax 26: 48 0f af c1 imul %rcx,%rax * 2a: 49 f7 f4 div %r12 <-- trapping instruction 2d: 48 8d 04 41 lea (%rcx,%rax,2),%rax 31: 48 89 44 24 18 mov %rax,0x18(%rsp) 36: 44 8d a6 70 03 00 00 lea 0x370(%rsi),%r12d 3d: 44 89 f0 mov %r14d,%eax