ci2 starts bisection 2024-08-05 16:48:54.425381469 +0000 UTC m=+27518.613142669 bisecting fixing commit since cd5d98c0556cd790f78a3ba26afc9d2f896163e4 building syzkaller on c8349e48534ea6d8f01515335d95de8ebf5da8df ensuring issue is reproducible on original commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4468bc84e02e69339e80d49c2e70bf8fdbf1655319ea29ae57a9d55fde8fe93b run #0: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0016901e0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0016903c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0049123c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #3: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0068b2550] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #4: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc004912640] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #5: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0016916d0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #6: crashed: WARNING in skb_ensure_writable run #7: crashed: WARNING in skb_ensure_writable run #8: crashed: WARNING in skb_ensure_writable run #9: crashed: WARNING in skb_ensure_writable run #10: crashed: WARNING in skb_ensure_writable run #11: crashed: WARNING in skb_ensure_writable run #12: crashed: WARNING in skb_ensure_writable run #13: crashed: WARNING in skb_ensure_writable run #14: crashed: WARNING in skb_ensure_writable run #15: crashed: WARNING in skb_ensure_writable run #16: crashed: WARNING in skb_ensure_writable run #17: crashed: WARNING in skb_ensure_writable run #18: crashed: WARNING in skb_ensure_writable run #19: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2f56deee81c8287d3f3875346d4388c5fce4d7f5dfc5baf2152822ea95a81856 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=7495 full=9693 leaves diff=1929 split chunks (needed=false): <1929> split chunk #0 of len 1929 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 52b405c5567df6ffc64f16d788a1ac2e29e9cead8b7a4145a5c991734ba6c50d all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7d856e81a69f568b621912b3e64104f591ca35182faf948787a83c6a7512d0d8 all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing without sub-chunk 3/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 047a5eb1add647b32a710b46487b74dc50b5ed9d1d140d8d655ef6b0c032683f all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9a26a7bd69dda1bc6d350a142669d91c04d32b54325cabf3c6d20c714f0165e5 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit cd5d98c0556cd790f78a3ba26afc9d2f896163e4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 815bdff180981f3a5be8f1bf9c4b8a3841d5dc6805188dcec3db21ce9e906ba7 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] the chunk can be dropped minimized to 386 configs; suspects: [6LOWPAN ACPI_VIDEO DLM DRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 E100 ECRYPT_FS ECRYPT_FS_MESSAGING EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXT4_FS_SECURITY F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FB_DEFERRED_IO FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VIRTUAL FDDI FIB_RULES FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FRAMEBUFFER_CONSOLE_ROTATION FRONTSWAP FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FW_LOADER_COMPRESS FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GCC10_NO_ARRAY_BOUNDS GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GVE HAVE_ARCH_USERFAULTFD_MINOR HAVE_IMA_KEXEC HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HIDRAW HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_GYRATION HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_NTI HID_NTRIG HID_ORTEK HID_PENMOUNT HID_PETALYNX HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PID HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SAMSUNG HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SPEEDLINK HID_STEELSERIES HID_SUNPLUS HID_THINGM HID_TIVO HID_TOPSEED HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPFS_FS I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_AH INET6_ESP INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_JOYSTICK INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_IPV6HEADER IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_ADVANCED_ROUTER IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE IP_MROUTE_COMMON IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_CLUSTERIP IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_PIMSM_V1 IP_PIMSM_V2 IP_PNP_RARP IP_ROUTE_CLASSID IP_ROUTE_MULTIPATH IP_ROUTE_VERBOSE IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_TCP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE ISO9660_FS JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOLIET JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_DLN2 MFD_VIPERBOARD MPTCP NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_CONNTRACK_FTP NF_CONNTRACK_SIP NF_TABLES NF_TABLES_NETDEV PARTITION_ADVANCED RADIO_ADAPTERS RADIO_SI4713 RFKILL SND SND_SOC SOUND WAN XFRM ZONE_DEVICE] disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing current HEAD 48d525b0e4634c487cf46a41c1e2824e9ee258ce testing commit 48d525b0e4634c487cf46a41c1e2824e9ee258ce gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 75963e29e57b2148f17d9aed0541e8cde35668406835a74d1fc8ac575625fb8e all runs: OK false negative chance: 0.000 # git bisect start 48d525b0e4634c487cf46a41c1e2824e9ee258ce cd5d98c0556cd790f78a3ba26afc9d2f896163e4 Bisecting: 1205 revisions left to test after this (roughly 10 steps) [ca32605565f28fd095bb12c2f62708cbbdf49ce3] af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. determine whether the revision contains the guilty commit revision cd5d98c0556cd790f78a3ba26afc9d2f896163e4 crashed and is reachable testing commit ca32605565f28fd095bb12c2f62708cbbdf49ce3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ceb9731413599a4e153eb8a12b0cd28ec522de96a23cdde6bd38115c3faccda7 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] # git bisect good ca32605565f28fd095bb12c2f62708cbbdf49ce3 Bisecting: 602 revisions left to test after this (roughly 9 steps) [366340a2c8fffdfd4cbb5eb8a03ef38cf8074575] USB: serial: option: add Rolling RW350-GL variants determine whether the revision contains the guilty commit revision cd5d98c0556cd790f78a3ba26afc9d2f896163e4 crashed and is reachable testing commit 366340a2c8fffdfd4cbb5eb8a03ef38cf8074575 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b200b5fbf5843e5ba3e48df46648d1f9da3f88497cc9663db4c51392cedba8bd all runs: OK false negative chance: 0.000 # git bisect bad 366340a2c8fffdfd4cbb5eb8a03ef38cf8074575 Bisecting: 301 revisions left to test after this (roughly 8 steps) [8154edd62a18913e40a98080d48a09d6494b6834] perf script: Show also errors for --insn-trace option determine whether the revision contains the guilty commit revision cd5d98c0556cd790f78a3ba26afc9d2f896163e4 crashed and is reachable testing commit 8154edd62a18913e40a98080d48a09d6494b6834 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 13e4f4419b0185a0936fcac0d83460acb1466f728a10bb1071ef9f9856878ea1 all runs: OK false negative chance: 0.000 # git bisect bad 8154edd62a18913e40a98080d48a09d6494b6834 Bisecting: 150 revisions left to test after this (roughly 7 steps) [dd5042eed53db5e54ac1e05f734904d6f0f51f84] remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs determine whether the revision contains the guilty commit revision ca32605565f28fd095bb12c2f62708cbbdf49ce3 crashed and is reachable testing commit dd5042eed53db5e54ac1e05f734904d6f0f51f84 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 83ccf561e9a6bf61a7fc40c500f709be91b0252715aa9c5b403735ef7c1f0094 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] # git bisect good dd5042eed53db5e54ac1e05f734904d6f0f51f84 Bisecting: 75 revisions left to test after this (roughly 6 steps) [3b3655a1d3a4ed621ee5c4fe1d9b833b74d92f59] serial: exar: adding missing CTI and Exar PCI ids determine whether the revision contains the guilty commit revision ca32605565f28fd095bb12c2f62708cbbdf49ce3 crashed and is reachable testing commit 3b3655a1d3a4ed621ee5c4fe1d9b833b74d92f59 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f43d72e614d77c75d1f0914c0cff7e71a2356476b34b6332b77febc2e3dd40a0 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] # git bisect good 3b3655a1d3a4ed621ee5c4fe1d9b833b74d92f59 Bisecting: 37 revisions left to test after this (roughly 5 steps) [95dc59ba941eac1e70bb06878ac7ea9f445a4aff] dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() determine whether the revision contains the guilty commit revision dd5042eed53db5e54ac1e05f734904d6f0f51f84 crashed and is reachable testing commit 95dc59ba941eac1e70bb06878ac7ea9f445a4aff gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4218920a6c8fd190104138b13662fbfa162779885072d6311b953769d1226e2c all runs: OK false negative chance: 0.000 # git bisect bad 95dc59ba941eac1e70bb06878ac7ea9f445a4aff Bisecting: 18 revisions left to test after this (roughly 4 steps) [2af9aa9ac65762f5c25a12b862b34ceea2a18bbc] net: lan743x: disable WOL upon resume to restore full data path operation determine whether the revision contains the guilty commit revision ca32605565f28fd095bb12c2f62708cbbdf49ce3 crashed and is reachable testing commit 2af9aa9ac65762f5c25a12b862b34ceea2a18bbc gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e0901abb3d3e53693bf1fe46b13643ec285628f75a37ab384710c42d2cd3d8a all runs: OK false negative chance: 0.000 # git bisect bad 2af9aa9ac65762f5c25a12b862b34ceea2a18bbc Bisecting: 9 revisions left to test after this (roughly 3 steps) [224b69e8751ccc7ece6142bb9267d67166276a2d] ice: avoid IRQ collision to fix init failure on ACPI S3 resume determine whether the revision contains the guilty commit revision 3b3655a1d3a4ed621ee5c4fe1d9b833b74d92f59 crashed and is reachable testing commit 224b69e8751ccc7ece6142bb9267d67166276a2d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f732bdc8c1b01896d9649217ff1577cc109abdbf76e6e1bfb7235bb6c18a0294 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] # git bisect good 224b69e8751ccc7ece6142bb9267d67166276a2d Bisecting: 4 revisions left to test after this (roughly 2 steps) [88b9a55e2e35ea846d41f4efdc29d23345bd1aa4] ipv6: prevent possible NULL deref in fib6_nh_init() determine whether the revision contains the guilty commit revision 3b3655a1d3a4ed621ee5c4fe1d9b833b74d92f59 crashed and is reachable testing commit 88b9a55e2e35ea846d41f4efdc29d23345bd1aa4 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 709e741024bb169cad24772078cfd78cd157261ca43f64aaf6670fc11820edaa all runs: OK false negative chance: 0.000 # git bisect bad 88b9a55e2e35ea846d41f4efdc29d23345bd1aa4 Bisecting: 2 revisions left to test after this (roughly 1 step) [dacc15e9cb248d19e5fc63c54bef0b9b55007761] bpf: Avoid splat in pskb_pull_reason determine whether the revision contains the guilty commit revision cd5d98c0556cd790f78a3ba26afc9d2f896163e4 crashed and is reachable testing commit dacc15e9cb248d19e5fc63c54bef0b9b55007761 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: afece411d51c94138a5ad10c949bf8355c76d22fa17796b228aab9d98b7ba637 all runs: OK false negative chance: 0.000 # git bisect bad dacc15e9cb248d19e5fc63c54bef0b9b55007761 Bisecting: 0 revisions left to test after this (roughly 0 steps) [7dabc4b45b6d884f0cc623110451730a61648d8c] cipso: fix total option length computation determine whether the revision contains the guilty commit revision ca32605565f28fd095bb12c2f62708cbbdf49ce3 crashed and is reachable testing commit 7dabc4b45b6d884f0cc623110451730a61648d8c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e828d3b9cb5c174b2b57d876cbf146a6e25600560df8009e23d4034a8b4ebcd3 all runs: crashed: WARNING in skb_ensure_writable representative crash: WARNING in skb_ensure_writable, types: [WARNING] # git bisect good 7dabc4b45b6d884f0cc623110451730a61648d8c dacc15e9cb248d19e5fc63c54bef0b9b55007761 is the first bad commit commit dacc15e9cb248d19e5fc63c54bef0b9b55007761 Author: Florian Westphal Date: Fri Jun 14 12:17:33 2024 +0200 bpf: Avoid splat in pskb_pull_reason [ Upstream commit 2bbe3e5a2f4ef69d13be54f1cf895b4658287080 ] syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull. We'd like to retain this debug check because it might hint at integer overflows and other issues (kernel code should pull headers, not huge value). In bpf case, this splat isn't interesting at all: such (nonsensical) bpf programs are typically generated by a fuzzer anyway. Do what Eric suggested and suppress such warning. For CONFIG_DEBUG_NET=n we don't need the extra check because pskb_may_pull will do the right thing: return an error without the WARN() backtrace. Fixes: 219eee9c0d16 ("net: skbuff: add overflow debug check to pull/push helpers") Reported-by: syzbot+0c4150bff9fff3bf023c@syzkaller.appspotmail.com Suggested-by: Eric Dumazet Signed-off-by: Florian Westphal Signed-off-by: Daniel Borkmann Reviewed-by: Eric Dumazet Acked-by: Daniel Borkmann Closes: https://syzkaller.appspot.com/bug?extid=0c4150bff9fff3bf023c Link: https://lore.kernel.org/netdev/9f254c96-54f2-4457-b7ab-1d9f6187939c@gmail.com/ Link: https://lore.kernel.org/bpf/20240614101801.9496-1-fw@strlen.de Signed-off-by: Sasha Levin net/core/filter.c | 5 +++++ 1 file changed, 5 insertions(+) accumulated error probability: 0.00 culprit signature: afece411d51c94138a5ad10c949bf8355c76d22fa17796b228aab9d98b7ba637 parent signature: e828d3b9cb5c174b2b57d876cbf146a6e25600560df8009e23d4034a8b4ebcd3 revisions tested: 19, total time: 3h53m23.461415844s (build: 1h42m16.904424071s, test: 2h4m42.144389022s) first good commit: dacc15e9cb248d19e5fc63c54bef0b9b55007761 bpf: Avoid splat in pskb_pull_reason recipients (to): ["daniel@iogearbox.net" "edumazet@google.com" "fw@strlen.de" "sashal@kernel.org"] recipients (cc): []