ci2 starts bisection 2025-01-24 15:27:51.443293543 +0000 UTC m=+4621.023130919 bisecting fixing commit since e4d90d63d385228b1e0bcf31cc15539bbbc28f7f building syzkaller on 9ac0fdc66500475f1914254ef369b32d51adbff9 ensuring issue is reproducible on original commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 782cc1bb933e2051cdce582d9516e49654685dfa6ab57bb2a5a848838397c8e6 run #0: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0037e03c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc008d62280] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc008d62550] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #3: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc008d62cd0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #4: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0029c6820] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #5: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0037e1090] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #6: crashed: WARNING in netdev_queue_update_kobjects run #7: crashed: WARNING in netdev_queue_update_kobjects run #8: crashed: WARNING in netdev_queue_update_kobjects run #9: crashed: WARNING in netdev_queue_update_kobjects run #10: crashed: WARNING in netdev_queue_update_kobjects run #11: crashed: WARNING in netdev_queue_update_kobjects run #12: crashed: WARNING in netdev_queue_update_kobjects run #13: crashed: WARNING in netdev_queue_update_kobjects run #14: crashed: WARNING in netdev_queue_update_kobjects run #15: crashed: WARNING in netdev_queue_update_kobjects run #16: crashed: WARNING in netdev_queue_update_kobjects run #17: crashed: WARNING in netdev_queue_update_kobjects run #18: crashed: WARNING in netdev_queue_update_kobjects run #19: crashed: WARNING in netdev_queue_update_kobjects representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5bdd5206bd861b759d30aaea87b77cb14fbebd457559ed1ae768e2e095aff70f all runs: crashed: WARNING in netdev_queue_update_kobjects representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=7496 full=9711 leaves diff=1997 split chunks (needed=false): <1997> split chunk #0 of len 1997 into 5 parts testing without sub-chunk 1/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 563540ba50d5c24a9910af88b58ef41b66212855c10be5aab0b26e80d37dfc7f run #0: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor1285929073" "root@10.128.10.49:./syz-executor1285929073"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.10.49, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.10.49 [10.128.10.49] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 Connection timed out during banner exchange Connection to 10.128.10.49 port 22 timed out scp: Connection closed run #1: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor1417213716" "root@10.128.0.134:./syz-executor1417213716"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.0.134, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.134 [10.128.0.134] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 Connection timed out during banner exchange Connection to 10.128.0.134 port 22 timed out scp: Connection closed run #2: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor901148719" "root@10.128.10.47:./syz-executor901148719"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.10.47, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u3, OpenSSL 3.0.15 3 Sep 2024 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.10.47 [10.128.10.47] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3 Connection timed out during banner exchange Connection to 10.128.10.47 port 22 timed out scp: Connection closed run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bfd8e3fe9fa6ca4afa4a3af1201064b6a0d8a05b5d9fd951822c44f40f903394 all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f86d8f03e0d6a62e251a2fb439976a3dad9af3eb9164cbb84f210a64d04c9f9c run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: crashed: WARNING in netdev_queue_update_kobjects run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: crashed: WARNING in netdev_queue_update_kobjects run #5: crashed: WARNING in netdev_queue_update_kobjects run #6: crashed: WARNING in netdev_queue_update_kobjects run #7: crashed: WARNING in netdev_queue_update_kobjects run #8: crashed: WARNING in netdev_queue_update_kobjects run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ebc56b7ed498ecd37792d04e3c1fcab58c4cbcbcbffca3a95d498f91c889403d run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: crashed: WARNING in netdev_queue_update_kobjects run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: crashed: WARNING in netdev_queue_update_kobjects run #5: crashed: WARNING in netdev_queue_update_kobjects run #6: OK run #7: OK run #8: OK run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit e4d90d63d385228b1e0bcf31cc15539bbbc28f7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cd5226241d1fd52371065b8257bcbd4ee6c874d00161f43f28e1acfd7bbe3192 run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: crashed: WARNING in netdev_queue_update_kobjects run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: crashed: WARNING in netdev_queue_update_kobjects run #5: crashed: WARNING in netdev_queue_update_kobjects run #6: ignore: lost connection to test machine run #7: OK run #8: OK run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] the chunk can be dropped minimized to 800 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_DOCK ACPI_VIDEO ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APPLE_MFI_FASTCHARGE AR5523 ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATA_PIIX ATH10K ATH10K_CE ATH10K_PCI ATH10K_SNOC ATH10K_USB ATH11K ATH11K_AHB ATH11K_PCI ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BINFMT_MISC BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_SR BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_JIT_ALWAYS_ON BPF_STREAM_PARSER BPQETHER BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_MRP BRIDGE_NF_EBTABLES BSD_DISKLABEL BTRFS_ASSERT BTRFS_FS_REF_VERIFY BT_6LOWPAN BT_ATH3K BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_MTK BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIVHCI BT_HS BT_LE BT_MSFTEXT BT_MTK BT_RFCOMM BT_RFCOMM_TTY CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN_8DEV_USB CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_GS_USB CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CDROM CEC_CORE CEC_NOTIFIER CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_RDMA CHARGER_BQ24190 CHARGER_ISP1704 CHECKPOINT_RESTORE CHECK_SIGNATURE CHR_DEV_SG CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONNECTOR COUNTER CPU_FREQ_DEFAULT_GOV_USERSPACE CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AES_ARM64 CRYPTO_AES_TI CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_CAMELLIA CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CRC32 CRYPTO_CTS CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_VIRTIO CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECRDSA CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_NHPOLY1305 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_NEON CRYPTO_POLYVAL CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SEQIV CRYPTO_SM2 CRYPTO_SM4_ARM64_CE CRYPTO_SM4_ARM64_CE_BLK CRYPTO_SM4_ARM64_NEON_BLK CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_COMMON CRYPTO_USER CRYPTO_USER_API_AEAD CRYPTO_USER_API_HASH CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCB DEFAULT_CUBIC DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DLM DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_ANALOGIX_DP DRM_BOCHS DRM_BRIDGE DRM_CDNS_MHDP8546 DRM_CDNS_MHDP8546_J721E DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_CONNECTOR DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DW_HDMI DRM_DW_HDMI_AHB_AUDIO DRM_DW_HDMI_CEC DRM_DW_HDMI_I2S_AUDIO DRM_DW_MIPI_DSI DRM_ETNAVIV DRM_ETNAVIV_THERMAL DRM_EXYNOS DRM_EXYNOS5433_DECON DRM_EXYNOS7_DECON DRM_EXYNOS_DSI DRM_EXYNOS_HDMI DRM_EXYNOS_MIC DRM_FBDEV_EMULATION DRM_GEM_DMA_HELPER DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_HDLCD DRM_HISI_HIBMC DRM_HISI_KIRIN DRM_I2C_ADV7511 DRM_I2C_ADV7511_AUDIO DRM_I2C_ADV7511_CEC DRM_I2C_CH7006 DRM_I2C_NXP_TDA998X DRM_I2C_SIL164 DRM_IMX_DCSS DRM_KMS_HELPER DRM_KOMEDA DRM_LEGACY DRM_LIMA DRM_LONTIUM_LT8912B DRM_LONTIUM_LT9611 DRM_LONTIUM_LT9611UXC DRM_MALI_DISPLAY DRM_MEDIATEK DRM_MEDIATEK_HDMI DRM_MESON DRM_MESON_DW_HDMI DRM_MIPI_DSI DRM_MSM DRM_MSM_DP DRM_MSM_DPU DRM_MSM_DSI DRM_MSM_DSI_10NM_PHY DRM_MSM_DSI_14NM_PHY DRM_MSM_DSI_20NM_PHY DRM_MSM_DSI_28NM_8960_PHY DRM_MSM_DSI_28NM_PHY DRM_MSM_DSI_7NM_PHY DRM_MSM_GPU_STATE DRM_MSM_HDMI DRM_MSM_HDMI_HDCP DRM_MSM_MDP4 DRM_MSM_MDP5 DRM_MSM_MDSS DRM_MXS DRM_MXSFB DRM_NOMODESET DRM_NOUVEAU DRM_NOUVEAU_BACKLIGHT DRM_NWL_MIPI_DSI DRM_PANEL DRM_PANEL_BOE_TV101WUM_NL6 DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_LVDS DRM_PANEL_MANTIX_MLAF057WE51 DRM_PANEL_RAYDIUM_RM67191 DRM_PANEL_SIMPLE DRM_PANEL_SITRONIX_ST7703 DRM_PANEL_TRULY_NT35597_WQXGA DRM_PANFROST DRM_PARADE_PS8640 DRM_PL111 DRM_RCAR_CMM DRM_RCAR_DU DRM_RCAR_DW_HDMI DRM_RCAR_LVDS DRM_RCAR_MIPI_DSI DRM_RCAR_USE_CMM DRM_RCAR_USE_LVDS DRM_RCAR_USE_MIPI_DSI DRM_RCAR_VSP DRM_RCAR_WRITEBACK DRM_SCHED DRM_SII902X DRM_SIMPLEDRM DRM_SIMPLE_BRIDGE DRM_SUN4I DRM_SUN6I_DSI DRM_SUN8I_DW_HDMI DRM_SUN8I_MIXER DRM_SUN8I_TCON_TOP DRM_TEGRA DRM_THINE_THC63LVD1024 DRM_TIDSS DRM_TI_SN65DSI86 DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_CXUSB_ANALOG DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 E100 ECRYPT_FS ECRYPT_FS_MESSAGING EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXT4_FS_SECURITY EXTCON_USBC_TUSB320 F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FB_DEFERRED_IO FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VIRTUAL FDDI FIB_RULES FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FRAMEBUFFER_CONSOLE_ROTATION FRONTSWAP FSCACHE FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FW_LOADER_COMPRESS FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GNSS_USB GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GVE HAMRADIO HAVE_ARCH_USERFAULTFD_MINOR HAVE_IMA_KEXEC HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HIDRAW HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_BIGBEN_FF HID_CMEDIA HID_CORSAIR HID_COUGAR HID_CP2112 HID_CREATIVE_SB0540 HID_DRAGONRISE HID_ELAN HID_ELECOM HID_ELO HID_EMS_FF HID_FT260 HID_GEMBIRD HID_GFRM HID_GLORIOUS HID_GREENASIA HID_GT683R HID_GYRATION HID_HOLTEK HID_ICADE HID_JABRA HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LETSKETCH HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MACALLY HID_MAGICMOUSE HID_MALTRON HID_MAYFLASH HID_MCP2221 HID_MEGAWORLD_FF HID_NTI HID_NTRIG HID_ORTEK HID_PENMOUNT HID_PETALYNX HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PID HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_PXRC HID_RAZER HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SAMSUNG HID_SEMITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_INTEL_HINGE HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SIGMAMICRO HID_SPEEDLINK HID_STEAM HID_STEELSERIES HID_SUNPLUS HID_THINGM HID_TIVO HID_TOPRE HID_TOPSEED HID_TWINHAN HID_U2FZERO HID_UCLOGIC HID_UDRAW_PS3 HID_VIEWSONIC HID_VIVALDI HID_VIVALDI_COMMON HID_VRC2 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XIAOMI HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPFS_FS I2C_CP2615 I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_AH INET6_ESP INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_RTRS_CLIENT INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING IOSCHED_BFQ IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_IPV6HEADER IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_ADVANCED_ROUTER IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE IP_MROUTE_COMMON IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_CLUSTERIP IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_PIMSM_V1 IP_PIMSM_V2 IP_PNP_RARP IP_ROUTE_CLASSID IP_ROUTE_MULTIPATH IP_ROUTE_VERBOSE IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_TCP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_IMON_RAW IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TOY IR_TTUSBIR ISDN ISDN_CAPI ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY LAPB LCD_CLASS_DEVICE MAC80211 MAC80211_LEDS MAC802154 MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_DLN2 MFD_VIPERBOARD MPTCP NET_CLS_U32 NET_IPGRE_DEMUX NET_SCH_DEFAULT NFT_FWD_NETDEV NF_CONNTRACK_FTP NF_CONNTRACK_SIP NF_TABLES NF_TABLES_NETDEV PARTITION_ADVANCED RADIO_ADAPTERS RADIO_SI4713 RFKILL SND SND_SOC SOUND TCP_CONG_ADVANCED TLS TLS_DEVICE TRUSTED_KEYS WAN WEXT_CORE WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ATH XFRM ZONE_DEVICE] disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing current HEAD 75cefdf153f582f9d55ff4f9b55778dc95d55f60 testing commit 75cefdf153f582f9d55ff4f9b55778dc95d55f60 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b8c3f6919259ab2734a8a3a28675be814f234d0771884bcc749d56d5750fa31e run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect start 75cefdf153f582f9d55ff4f9b55778dc95d55f60 e4d90d63d385228b1e0bcf31cc15539bbbc28f7f Bisecting: 619 revisions left to test after this (roughly 9 steps) [b3e6f25176f248762a24d25ab8cf8c5e90874f80] scsi: qla2xxx: Fix use after free on unload determine whether the revision contains the guilty commit revision e4d90d63d385228b1e0bcf31cc15539bbbc28f7f crashed and is reachable testing commit b3e6f25176f248762a24d25ab8cf8c5e90874f80 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d94881480f1fd2f52de451f0ec76d3f08e683ae5372141eaa731309e967dc743 run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad b3e6f25176f248762a24d25ab8cf8c5e90874f80 Bisecting: 309 revisions left to test after this (roughly 8 steps) [ca97dd10424860a3806ad3a9e26b9dce2901ee0c] net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged determine whether the revision contains the guilty commit revision e4d90d63d385228b1e0bcf31cc15539bbbc28f7f crashed and is reachable testing commit ca97dd10424860a3806ad3a9e26b9dce2901ee0c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f6a5f7bfc3dd46819088189519f03f0b2bb0b7bc773b3f787cab66e60b3f8e81 run #0: ignore: lost connection to test machine run #1: ignore: lost connection to test machine run #2: ignore: lost connection to test machine run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad ca97dd10424860a3806ad3a9e26b9dce2901ee0c Bisecting: 154 revisions left to test after this (roughly 7 steps) [861cebee260a6e4efcb4ca9be14af350b9c37c81] selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap determine whether the revision contains the guilty commit revision e4d90d63d385228b1e0bcf31cc15539bbbc28f7f crashed and is reachable testing commit 861cebee260a6e4efcb4ca9be14af350b9c37c81 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6b84616574acc1c8171818c71721b6bed19ef2457e66878a15c4db2008cab653 run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: ignore: lost connection to test machine run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: crashed: WARNING in netdev_unregister_kobject run #5: crashed: WARNING in netdev_queue_update_kobjects run #6: OK run #7: OK run #8: OK run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] # git bisect good 861cebee260a6e4efcb4ca9be14af350b9c37c81 Bisecting: 77 revisions left to test after this (roughly 6 steps) [f7aee64ed7ca994df8558a45f52532868092827c] clk: imx: fracn-gppll: correct PLL initialization flow determine whether the revision contains the guilty commit revision 861cebee260a6e4efcb4ca9be14af350b9c37c81 crashed and is reachable testing commit f7aee64ed7ca994df8558a45f52532868092827c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bc90a1f8718f42ae6fdf5d5c284d0d050d81e2cada8fba202166a72d02f5a8eb run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad f7aee64ed7ca994df8558a45f52532868092827c Bisecting: 38 revisions left to test after this (roughly 5 steps) [7bd8838c0ea886679a32834fdcacab296d072fbe] ALSA: usx2y: Use snd_card_free_when_closed() at disconnection determine whether the revision contains the guilty commit revision e4d90d63d385228b1e0bcf31cc15539bbbc28f7f crashed and is reachable testing commit 7bd8838c0ea886679a32834fdcacab296d072fbe gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7fa24014ab677fc9827cba89a925feaabc600ed5531a50040cc3e0c0230c7595 run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: crashed: WARNING in netdev_queue_update_kobjects run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: crashed: WARNING in netdev_queue_update_kobjects run #5: crashed: WARNING in netdev_queue_update_kobjects run #6: OK run #7: OK run #8: OK run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] # git bisect good 7bd8838c0ea886679a32834fdcacab296d072fbe Bisecting: 19 revisions left to test after this (roughly 4 steps) [aabef6301dcf410dfd2b8759cd413b2a003c7e3f] powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() determine whether the revision contains the guilty commit revision 861cebee260a6e4efcb4ca9be14af350b9c37c81 crashed and is reachable testing commit aabef6301dcf410dfd2b8759cd413b2a003c7e3f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d65ac452ed089087d5ddeed2c3c2631301bf47ad688d6e6d7b6ce4da35b6e8b all runs: OK false negative chance: 0.000 # git bisect bad aabef6301dcf410dfd2b8759cd413b2a003c7e3f Bisecting: 9 revisions left to test after this (roughly 3 steps) [cc344fdd0e6803e4b5bebe474bc78abab478693d] trace/trace_event_perf: remove duplicate samples on the first tracepoint event determine whether the revision contains the guilty commit revision 861cebee260a6e4efcb4ca9be14af350b9c37c81 crashed and is reachable testing commit cc344fdd0e6803e4b5bebe474bc78abab478693d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 61e6466d749b498ce1dd0c4849522982ef8619fbc759c8217b8f0c98f4cab58a all runs: OK false negative chance: 0.000 # git bisect bad cc344fdd0e6803e4b5bebe474bc78abab478693d Bisecting: 4 revisions left to test after this (roughly 2 steps) [0f67ca2a80acf8b207240405b7f72d660665d3df] Bluetooth: fix use-after-free in device_for_each_child() determine whether the revision contains the guilty commit revision 861cebee260a6e4efcb4ca9be14af350b9c37c81 crashed and is reachable testing commit 0f67ca2a80acf8b207240405b7f72d660665d3df gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 42b3b603494765fe90d9d0ca615d6b7b0b5578ea877b7b7204374b478653521b all runs: OK false negative chance: 0.000 # git bisect bad 0f67ca2a80acf8b207240405b7f72d660665d3df Bisecting: 1 revision left to test after this (roughly 1 step) [237f3faf0177bdde728fa3106d730d806436aa4d] ALSA: caiaq: Use snd_card_free_when_closed() at disconnection determine whether the revision contains the guilty commit revision e4d90d63d385228b1e0bcf31cc15539bbbc28f7f crashed and is reachable testing commit 237f3faf0177bdde728fa3106d730d806436aa4d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8b7c0f36cac9149253dd258bb023b9291c4f9464a98871302154871814338bbc run #0: crashed: WARNING in netdev_queue_update_kobjects run #1: crashed: WARNING in netdev_queue_update_kobjects run #2: crashed: WARNING in netdev_queue_update_kobjects run #3: crashed: WARNING in netdev_queue_update_kobjects run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] # git bisect good 237f3faf0177bdde728fa3106d730d806436aa4d Bisecting: 0 revisions left to test after this (roughly 0 steps) [ea8cc56db659cf0ae57073e32a4735ead7bd7ee3] ALSA: 6fire: Release resources at card release determine whether the revision contains the guilty commit revision 861cebee260a6e4efcb4ca9be14af350b9c37c81 crashed and is reachable testing commit ea8cc56db659cf0ae57073e32a4735ead7bd7ee3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: aa79edc5e58786a33b27fb5db5e07347b7aac1f16a492b51c9daab19bd75b5aa run #0: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0037e0190] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #1: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0037e0320] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #2: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0023ab450] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #3: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0023ab630] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #4: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc004212460] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #5: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc00261e3c0] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #6: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc00261f270] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #7: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc0037e0c30] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #8: infra problem: create instance operation failed: &{Code:QUOTA_EXCEEDED ErrorDetails:[0xc00261f400] Location: Message:Quota 'T2A_CPUS' exceeded. Limit: 125.0 in region us-central1. ForceSendFields:[] NullFields:[]}. run #9: crashed: WARNING in netdev_queue_update_kobjects run #10: crashed: WARNING in netdev_queue_update_kobjects run #11: crashed: WARNING in netdev_queue_update_kobjects run #12: crashed: WARNING in netdev_queue_update_kobjects run #13: crashed: WARNING in netdev_queue_update_kobjects run #14: crashed: WARNING in netdev_queue_update_kobjects run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: WARNING in netdev_queue_update_kobjects, types: [WARNING] # git bisect good ea8cc56db659cf0ae57073e32a4735ead7bd7ee3 0f67ca2a80acf8b207240405b7f72d660665d3df is the first bad commit commit 0f67ca2a80acf8b207240405b7f72d660665d3df Author: Dmitry Antipov Date: Fri Nov 1 14:44:10 2024 +0300 Bluetooth: fix use-after-free in device_for_each_child() [ Upstream commit 27aabf27fd014ae037cc179c61b0bee7cff55b3d ] Syzbot has reported the following KASAN splat: BUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0 Read of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980 CPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 Call Trace: dump_stack_lvl+0x100/0x190 ? device_for_each_child+0x18f/0x1a0 print_report+0x13a/0x4cb ? __virt_addr_valid+0x5e/0x590 ? __phys_addr+0xc6/0x150 ? device_for_each_child+0x18f/0x1a0 kasan_report+0xda/0x110 ? device_for_each_child+0x18f/0x1a0 ? __pfx_dev_memalloc_noio+0x10/0x10 device_for_each_child+0x18f/0x1a0 ? __pfx_device_for_each_child+0x10/0x10 pm_runtime_set_memalloc_noio+0xf2/0x180 netdev_unregister_kobject+0x1ed/0x270 unregister_netdevice_many_notify+0x123c/0x1d80 ? __mutex_trylock_common+0xde/0x250 ? __pfx_unregister_netdevice_many_notify+0x10/0x10 ? trace_contention_end+0xe6/0x140 ? __mutex_lock+0x4e7/0x8f0 ? __pfx_lock_acquire.part.0+0x10/0x10 ? rcu_is_watching+0x12/0xc0 ? unregister_netdev+0x12/0x30 unregister_netdevice_queue+0x30d/0x3f0 ? __pfx_unregister_netdevice_queue+0x10/0x10 ? __pfx_down_write+0x10/0x10 unregister_netdev+0x1c/0x30 bnep_session+0x1fb3/0x2ab0 ? __pfx_bnep_session+0x10/0x10 ? __pfx_lock_release+0x10/0x10 ? __pfx_woken_wake_function+0x10/0x10 ? __kthread_parkme+0x132/0x200 ? __pfx_bnep_session+0x10/0x10 ? kthread+0x13a/0x370 ? __pfx_bnep_session+0x10/0x10 kthread+0x2b7/0x370 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x48/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 Allocated by task 4974: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0xaa/0xb0 __kmalloc_noprof+0x1d1/0x440 hci_alloc_dev_priv+0x1d/0x2820 __vhci_create_device+0xef/0x7d0 vhci_write+0x2c7/0x480 vfs_write+0x6a0/0xfc0 ksys_write+0x12f/0x260 do_syscall_64+0xc7/0x250 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 4979: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x4f/0x70 kfree+0x141/0x490 hci_release_dev+0x4d9/0x600 bt_host_release+0x6a/0xb0 device_release+0xa4/0x240 kobject_put+0x1ec/0x5a0 put_device+0x1f/0x30 vhci_release+0x81/0xf0 __fput+0x3f6/0xb30 task_work_run+0x151/0x250 do_exit+0xa79/0x2c30 do_group_exit+0xd5/0x2a0 get_signal+0x1fcd/0x2210 arch_do_signal_or_restart+0x93/0x780 syscall_exit_to_user_mode+0x140/0x290 do_syscall_64+0xd4/0x250 entry_SYSCALL_64_after_hwframe+0x77/0x7f In 'hci_conn_del_sysfs()', 'device_unregister()' may be called when an underlying (kobject) reference counter is greater than 1. This means that reparenting (happened when the device is actually freed) is delayed and, during that delay, parent controller device (hciX) may be deleted. Since the latter may create a dangling pointer to freed parent, avoid that scenario by reparenting to NULL explicitly. Reported-by: syzbot+6cf5652d3df49fae2e3f@syzkaller.appspotmail.com Tested-by: syzbot+6cf5652d3df49fae2e3f@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=6cf5652d3df49fae2e3f Fixes: a85fb91e3d72 ("Bluetooth: Fix double free in hci_conn_cleanup") Signed-off-by: Dmitry Antipov Signed-off-by: Luiz Augusto von Dentz Signed-off-by: Sasha Levin net/bluetooth/hci_sysfs.c | 15 ++++----------- 1 file changed, 4 insertions(+), 11 deletions(-) accumulated error probability: 0.00 culprit signature: 42b3b603494765fe90d9d0ca615d6b7b0b5578ea877b7b7204374b478653521b parent signature: aa79edc5e58786a33b27fb5db5e07347b7aac1f16a492b51c9daab19bd75b5aa reproducer is flaky (0.50 repro chance estimate) revisions tested: 18, total time: 6h48m5.248490971s (build: 3h5m17.33226666s, test: 3h34m6.368140118s) first good commit: 0f67ca2a80acf8b207240405b7f72d660665d3df Bluetooth: fix use-after-free in device_for_each_child() recipients (to): ["dmantipov@yandex.ru" "luiz.von.dentz@intel.com" "sashal@kernel.org" "syzbot+6cf5652d3df49fae2e3f@syzkaller.appspotmail.com"] recipients (cc): []