ci starts bisection 2023-06-19 14:05:09.658386004 +0000 UTC m=+2609.507895364 bisecting cause commit starting from 9a94d764e9bc6ee4b9424acde77c959270e2ac7a building syzkaller on f3921d4d63f97d1f1fb49a69ea85744bb7ef184b ensuring issue is reproducible on original commit 9a94d764e9bc6ee4b9424acde77c959270e2ac7a testing commit 9a94d764e9bc6ee4b9424acde77c959270e2ac7a gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3baec134cbf958be4139f7000e1e49bb19b9566709012ae3d1136fbb4ca564cd all runs: crashed: general protection fault in shash_ahash_update testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: db00922a9539090afff6eab00790532a34afa4a80c27ac5ff7061f29c1f1c9a1 all runs: OK too many neither good nor bad results, skipping this commit # git bisect start 9a94d764e9bc6ee4b9424acde77c959270e2ac7a 457391b0380335d5e9a5babdec90ac53928b23b4 Bisecting: 8718 revisions left to test after this (roughly 13 steps) [34b62f186db9614e55d021f8c58d22fc44c57911] Merge tag 'pci-v6.4-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci testing commit 34b62f186db9614e55d021f8c58d22fc44c57911 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 733210b6774fb4663b790fd5a98e59892d9fba3c6c18f9d85cdf9e08dd6ef16c all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 34b62f186db9614e55d021f8c58d22fc44c57911 Bisecting: 4372 revisions left to test after this (roughly 12 steps) [c5eb8bf76718cf2e2f36aac216a99014f00927de] Merge tag 'leds-next-6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/leds testing commit c5eb8bf76718cf2e2f36aac216a99014f00927de gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ba77e03f449e21548a1c7b39e312c141268f8b3c1ce7cf4dd50d24c616ae800f all runs: OK too many neither good nor bad results, skipping this commit # git bisect good c5eb8bf76718cf2e2f36aac216a99014f00927de Bisecting: 2190 revisions left to test after this (roughly 11 steps) [657d42cf5df64d9f32caab73ba2d2284879a37b0] s390/ism: Set DMA coherent mask testing commit 657d42cf5df64d9f32caab73ba2d2284879a37b0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c4a2705c4294c576b2e9bd477100f63ccc412ebf254bb78302af0b28db12ef09 all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 657d42cf5df64d9f32caab73ba2d2284879a37b0 Bisecting: 1095 revisions left to test after this (roughly 10 steps) [06b03083158e90d57866fa220de92c8dd8b9598b] selftests: mptcp: connect: skip TFO tests if not supported testing commit 06b03083158e90d57866fa220de92c8dd8b9598b gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8532144950f38bf1cc6ecf5c2f68536f4bce339b5bee7c7e96cf9cf60a2cc467 all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 06b03083158e90d57866fa220de92c8dd8b9598b Bisecting: 539 revisions left to test after this (roughly 9 steps) [cde11936cffb7280eb48b5e118ea8f5a03aad0ae] Merge tag 'wireless-next-2023-06-09' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit cde11936cffb7280eb48b5e118ea8f5a03aad0ae gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1eab17aa82b479d40c0cbcb7cad3c38cfbe613a2fb40e69e98c9d9d92b5f1367 all runs: crashed: general protection fault in shash_ahash_update # git bisect bad cde11936cffb7280eb48b5e118ea8f5a03aad0ae Bisecting: 277 revisions left to test after this (roughly 8 steps) [58da455b31baf87dd74b71fc54d0356e05c0bf49] tools: ynl-gen: improve unwind on parsing errors testing commit 58da455b31baf87dd74b71fc54d0356e05c0bf49 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 74a8b684dfb711678fd2eeffd6fe8dfa497c6f0e5976036136d6dbaf367aad4a all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 58da455b31baf87dd74b71fc54d0356e05c0bf49 Bisecting: 138 revisions left to test after this (roughly 7 steps) [16114496d684a3df4ce09f7c6b7557a8b2922795] wifi: mac80211: use wiphy work for sdata->work testing commit 16114496d684a3df4ce09f7c6b7557a8b2922795 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 63e7c82b8b6c086d51856d3c8691203ff7f85ab693745fe4fc5ee1107ad5e2e1 all runs: basic kernel testing failed: WARNING in register_net_sysctl # git bisect skip 16114496d684a3df4ce09f7c6b7557a8b2922795 Bisecting: 138 revisions left to test after this (roughly 7 steps) [6f96ec73cb5a87f438fa20c585e72b2918885df3] tools: ynl-gen: don't pass op_name to RenderInfo testing commit 6f96ec73cb5a87f438fa20c585e72b2918885df3 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 69e676fdd6061a85f02e1da56cfbb69c070e1faa1242788b92a1f567c984f11e all runs: crashed: general protection fault in shash_ahash_update # git bisect bad 6f96ec73cb5a87f438fa20c585e72b2918885df3 Bisecting: 55 revisions left to test after this (roughly 6 steps) [32fc30353f7c4d5370acf6ef8fb3be9363dce3c2] net: fman_memac: use pcs-lynx's check for fwnode availability testing commit 32fc30353f7c4d5370acf6ef8fb3be9363dce3c2 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 16d4b9d832849ce22fffe61efba7fb0f43716b3be3c4935cac5cec74da446550 all runs: crashed: general protection fault in shash_ahash_update # git bisect bad 32fc30353f7c4d5370acf6ef8fb3be9363dce3c2 Bisecting: 26 revisions left to test after this (roughly 5 steps) [c662b043cdca89bf0f03fc37251000ac69a3a548] crypto: af_alg/hash: Support MSG_SPLICE_PAGES testing commit c662b043cdca89bf0f03fc37251000ac69a3a548 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: eea4f351b5453e847a34ddb9e678634fbdf27ea084345c69898cd417a27d71c1 all runs: crashed: general protection fault in shash_ahash_update # git bisect bad c662b043cdca89bf0f03fc37251000ac69a3a548 Bisecting: 13 revisions left to test after this (roughly 4 steps) [b83c37315a620fc8dcb5f3cffe4753765228d1f4] net: txgbe: Support GPIO to SFP socket testing commit b83c37315a620fc8dcb5f3cffe4753765228d1f4 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: a63dffa1b203c6419f3fd55fb4868fa3a8d17ed6c500ea1c31ca923d80ac51c0 all runs: OK too many neither good nor bad results, skipping this commit # git bisect good b83c37315a620fc8dcb5f3cffe4753765228d1f4 Bisecting: 6 revisions left to test after this (roughly 3 steps) [936dc763c52e05cb2e7302af30a69c826916d89e] Wrap lines at 80 testing commit 936dc763c52e05cb2e7302af30a69c826916d89e gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: c35e840b72a8fe81a61d72a122a8ccac1ba22af189750fb64214cc9999bf981f all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 936dc763c52e05cb2e7302af30a69c826916d89e Bisecting: 2 revisions left to test after this (roughly 2 steps) [73d7409cfdad7fd08a9203eb2912c1c77e527776] crypto: af_alg: Indent the loop in af_alg_sendmsg() testing commit 73d7409cfdad7fd08a9203eb2912c1c77e527776 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5b93222be191db8c81f660ea001d4176e6d986cf68a4a113af9eb52b443d54ca all runs: OK too many neither good nor bad results, skipping this commit # git bisect good 73d7409cfdad7fd08a9203eb2912c1c77e527776 Bisecting: 1 revision left to test after this (roughly 1 step) [bf63e250c4b1f21696599e0ab7117f4429dcbdc0] crypto: af_alg: Support MSG_SPLICE_PAGES testing commit bf63e250c4b1f21696599e0ab7117f4429dcbdc0 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 05e5b7c4d776815564d1235a8e33aa242a6e32461901c37c18dabf06ffa20a99 all runs: OK too many neither good nor bad results, skipping this commit # git bisect good bf63e250c4b1f21696599e0ab7117f4429dcbdc0 Bisecting: 0 revisions left to test after this (roughly 0 steps) [fb800fa4c1f5aee1238267252e88a7837e645c02] crypto: af_alg: Convert af_alg_sendpage() to use MSG_SPLICE_PAGES testing commit fb800fa4c1f5aee1238267252e88a7837e645c02 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 042f2568b846de8590229af52ed56f8d65d76a3106aab89104f74f0f251daf80 all runs: OK too many neither good nor bad results, skipping this commit # git bisect good fb800fa4c1f5aee1238267252e88a7837e645c02 c662b043cdca89bf0f03fc37251000ac69a3a548 is the first bad commit commit c662b043cdca89bf0f03fc37251000ac69a3a548 Author: David Howells Date: Tue Jun 6 14:08:56 2023 +0100 crypto: af_alg/hash: Support MSG_SPLICE_PAGES Make AF_ALG sendmsg() support MSG_SPLICE_PAGES in the hashing code. This causes pages to be spliced from the source iterator if possible. This allows ->sendpage() to be replaced by something that can handle multiple multipage folios in a single transaction. Signed-off-by: David Howells cc: Herbert Xu cc: "David S. Miller" cc: Eric Dumazet cc: Jakub Kicinski cc: Paolo Abeni cc: Jens Axboe cc: Matthew Wilcox cc: linux-crypto@vger.kernel.org cc: netdev@vger.kernel.org Acked-by: Herbert Xu Signed-off-by: Paolo Abeni crypto/af_alg.c | 11 ++++-- crypto/algif_hash.c | 100 ++++++++++++++++++++++++++++++++-------------------- 2 files changed, 70 insertions(+), 41 deletions(-) culprit signature: eea4f351b5453e847a34ddb9e678634fbdf27ea084345c69898cd417a27d71c1 parent signature: 042f2568b846de8590229af52ed56f8d65d76a3106aab89104f74f0f251daf80 revisions tested: 17, total time: 4h33m39.158347072s (build: 2h31m0.497825938s, test: 1h58m19.015921626s) first bad commit: c662b043cdca89bf0f03fc37251000ac69a3a548 crypto: af_alg/hash: Support MSG_SPLICE_PAGES recipients (to): ["dhowells@redhat.com" "herbert@gondor.apana.org.au" "pabeni@redhat.com"] recipients (cc): [] crash: general protection fault in shash_ahash_update general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 0 PID: 5431 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 RIP: 0010:crypto_shash_alg include/crypto/hash.h:827 [inline] RIP: 0010:crypto_shash_update crypto/shash.c:124 [inline] RIP: 0010:shash_ahash_update+0xdb/0x1e0 crypto/shash.c:306 Code: e8 6a d7 ff ff 85 c0 89 c2 7e 6c 41 80 7d 00 00 48 8b 74 24 40 0f 85 9d 00 00 00 49 8b 1c 24 48 8d 7b 20 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 bb 00 00 00 48 8b 5b 20 48 8d 7b 2c 48 89 f8 48 RSP: 0018:ffffc900048af978 EFLAGS: 00010202 RAX: 0000000000000004 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 0000000000000f00 RSI: ffff888066e5b100 RDI: 0000000000000020 RBP: dffffc0000000000 R08: ffff88807d8e6aa8 R09: 000000000000ff00 R10: 7fffffffffff00ff R11: ffffed100fb1cd01 R12: ffff88807d8e6b58 R13: ffffed100fb1cd6b R14: 1ffff92000915f31 R15: ffff88807d8e6a40 FS: 00007fd220e53700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 0000000028c90000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: crypto_ahash_update include/crypto/hash.h:608 [inline] hash_sendmsg+0x314/0xc60 crypto/algif_hash.c:139 sock_sendmsg_nosec net/socket.c:724 [inline] sock_sendmsg+0xc0/0x150 net/socket.c:747 ____sys_sendmsg+0x5e5/0x880 net/socket.c:2505 ___sys_sendmsg+0xdb/0x160 net/socket.c:2559 __sys_sendmsg+0xc7/0x160 net/socket.c:2588 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd22008c389 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd220e53168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fd2201abf80 RCX: 00007fd22008c389 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 00007fd2200d7493 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc247e1d5f R14: 00007fd220e53300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:crypto_shash_alg include/crypto/hash.h:827 [inline] RIP: 0010:crypto_shash_update crypto/shash.c:124 [inline] RIP: 0010:shash_ahash_update+0xdb/0x1e0 crypto/shash.c:306 Code: e8 6a d7 ff ff 85 c0 89 c2 7e 6c 41 80 7d 00 00 48 8b 74 24 40 0f 85 9d 00 00 00 49 8b 1c 24 48 8d 7b 20 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 bb 00 00 00 48 8b 5b 20 48 8d 7b 2c 48 89 f8 48 RSP: 0018:ffffc900048af978 EFLAGS: 00010202 RAX: 0000000000000004 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 0000000000000f00 RSI: ffff888066e5b100 RDI: 0000000000000020 RBP: dffffc0000000000 R08: ffff88807d8e6aa8 R09: 000000000000ff00 R10: 7fffffffffff00ff R11: ffffed100fb1cd01 R12: ffff88807d8e6b58 R13: ffffed100fb1cd6b R14: 1ffff92000915f31 R15: ffff88807d8e6a40 FS: 00007fd220e53700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 0000000028c90000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: e8 6a d7 ff ff callq 0xffffd76f 5: 85 c0 test %eax,%eax 7: 89 c2 mov %eax,%edx 9: 7e 6c jle 0x77 b: 41 80 7d 00 00 cmpb $0x0,0x0(%r13) 10: 48 8b 74 24 40 mov 0x40(%rsp),%rsi 15: 0f 85 9d 00 00 00 jne 0xb8 1b: 49 8b 1c 24 mov (%r12),%rbx 1f: 48 8d 7b 20 lea 0x20(%rbx),%rdi 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 80 3c 28 00 cmpb $0x0,(%rax,%rbp,1) <-- trapping instruction 2e: 0f 85 bb 00 00 00 jne 0xef 34: 48 8b 5b 20 mov 0x20(%rbx),%rbx 38: 48 8d 7b 2c lea 0x2c(%rbx),%rdi 3c: 48 89 f8 mov %rdi,%rax 3f: 48 rex.W