ci starts bisection 2024-05-25 10:44:06.388174904 +0000 UTC m=+40599.889190529 bisecting cause commit starting from 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 building syzkaller on a10a183e260f0ea1a0c37e84ca5c60f28c13e3fd ensuring issue is reproducible on original commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 34dc3b041004cab6603ce7651d342573d5e890ed1f5e01a6c3512d422b373852 all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4cf7bb1fd42c34142bd7f413e8d897202e6690daf764bef1a8ce00bcbf9d2196 all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=3976 full=8032 leaves diff=2024 split chunks (needed=false): <2024> split chunk #0 of len 2024 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5342c247fc879e84d5fbd351d07329c76db238b73c68ed3ec58e66405ae98b15 all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 63f0fd3e392fcab545514b2a5cd4ebba7cf59557fdc42f0a1a545e90ba7fbaaf all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 30fbd2be04a89a8d1394326efde0b28fc1c7ec15ef05932b542b75d59ec18293 all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 132f84d8358d7c2dd05cd88da7988963d84552c623ede5bb157685bc0f21873f all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5ee9cb251baa052fa5517f0f912b9c53b2bab4c42cd581e932218221b876fc4f all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] the chunk can be dropped disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed picked [v6.9 v6.8 v6.7 v6.5 v6.3 v6.1 v5.19 v5.17 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 32 release tags testing release v6.9 testing commit a38297e3fb012ddfa7ce0321a7e5a8daeb1872b6 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5909eef59ce4e07161baa3d61643853841d287f7ff34ef7a772b5d184633f06e all runs: OK false negative chance: 0.000 # git bisect start 2c1713a8f1c94033a6e00aae4693ab03e8a3b9f1 a38297e3fb012ddfa7ce0321a7e5a8daeb1872b6 Bisecting: 3409 revisions left to test after this (roughly 12 steps) [1b294a1f35616977caddaddf3e9d28e576a1adbc] Merge tag 'net-next-6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 1b294a1f35616977caddaddf3e9d28e576a1adbc gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b431d20b6b17eb0dfc279ae8bed42accb2c381cee6fb34a0d865a2fafc8c1264 all runs: OK false negative chance: 0.000 # git bisect good 1b294a1f35616977caddaddf3e9d28e576a1adbc Bisecting: 1853 revisions left to test after this (roughly 11 steps) [d34672777da3ea919e8adb0670ab91ddadf7dea0] Merge tag 'fbdev-for-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev testing commit d34672777da3ea919e8adb0670ab91ddadf7dea0 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4dcf3b84cf013cd4eb2f395219b7007a4d834d749b7bcd7ffb2b518627e37689 all runs: OK false negative chance: 0.000 # git bisect good d34672777da3ea919e8adb0670ab91ddadf7dea0 Bisecting: 875 revisions left to test after this (roughly 10 steps) [f4b0c4b508364fde023e4f7b9f23f7e38c663dfe] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit f4b0c4b508364fde023e4f7b9f23f7e38c663dfe gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ff55c3cb389b6d42c5e382b88087fbc4f369a91242e91875a8658e4e95329d5e all runs: OK false negative chance: 0.000 # git bisect good f4b0c4b508364fde023e4f7b9f23f7e38c663dfe Bisecting: 420 revisions left to test after this (roughly 9 steps) [8b06f7538a1bb6ad15969114e31be7a99420125b] Merge tag 'mmc-v6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc testing commit 8b06f7538a1bb6ad15969114e31be7a99420125b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4a6aabe0a482459e14998a7236828ea385922a145c9663216cf2a576a28af582 all runs: OK false negative chance: 0.000 # git bisect good 8b06f7538a1bb6ad15969114e31be7a99420125b Bisecting: 238 revisions left to test after this (roughly 8 steps) [4853f1f6ace32c68a04287353e428c4cfc3fa8ed] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux testing commit 4853f1f6ace32c68a04287353e428c4cfc3fa8ed gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 90ba70952d4380f4c336d8262461995c447898285d5bedbde8e7ae4b3502b94a all runs: OK false negative chance: 0.000 # git bisect good 4853f1f6ace32c68a04287353e428c4cfc3fa8ed Bisecting: 120 revisions left to test after this (roughly 7 steps) [06f054b1fee83415fe35204845708988fc16ef22] Merge tag 'devicetree-for-6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux testing commit 06f054b1fee83415fe35204845708988fc16ef22 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 183c1de92f02268cc6e8f58e602526bf64642a870109d4902888c45044242452 all runs: OK false negative chance: 0.000 # git bisect good 06f054b1fee83415fe35204845708988fc16ef22 Bisecting: 63 revisions left to test after this (roughly 6 steps) [fa3889d970da8f95bdd90fb5a07d521810be5678] Merge tag 'trace-user-events-v6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace testing commit fa3889d970da8f95bdd90fb5a07d521810be5678 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a99e28bdb89b85766799e562706be9015fa7f0a7821f2bdfa45bcd85b602da2b all runs: OK false negative chance: 0.000 # git bisect good fa3889d970da8f95bdd90fb5a07d521810be5678 Bisecting: 31 revisions left to test after this (roughly 5 steps) [f0fa84116434b50a8d249d0da8852f410a21ba98] net: dsa: microchip: Correct initialization order for KSZ88x3 ports testing commit f0fa84116434b50a8d249d0da8852f410a21ba98 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bf178329296c71fd10657f4d4505c0890b739a3b47958637151a8b332ee2f69b all runs: OK false negative chance: 0.000 # git bisect good f0fa84116434b50a8d249d0da8852f410a21ba98 Bisecting: 15 revisions left to test after this (roughly 4 steps) [94133cf24bb33889aac267a7f0e3e6a08b8a8e5a] bpftool: Introduce btf c dump sorting testing commit 94133cf24bb33889aac267a7f0e3e6a08b8a8e5a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0029e0ca6883eaddd507559fb401f3ce107ad8ecf3024855e7cef82433455e08 all runs: OK false negative chance: 0.000 # git bisect good 94133cf24bb33889aac267a7f0e3e6a08b8a8e5a Bisecting: 7 revisions left to test after this (roughly 3 steps) [a87f34e742d279d54d529e4bc4763fdaab32a466] selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs testing commit a87f34e742d279d54d529e4bc4763fdaab32a466 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 504533a6ebea22a6f6e8a6c37603877981ec84cf1e4f935712c568ba9e198c19 all runs: OK false negative chance: 0.000 # git bisect good a87f34e742d279d54d529e4bc4763fdaab32a466 Bisecting: 3 revisions left to test after this (roughly 2 steps) [ecec1887e24f11a3fcc391aa0f33fe0802be0804] Merge branch 'Replace mono_delivery_time with tstamp_type' testing commit ecec1887e24f11a3fcc391aa0f33fe0802be0804 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b70f321869a3cdc2a33714a2cc5524a2d59121081c54a371647b7e2decf49c3d all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] # git bisect bad ecec1887e24f11a3fcc391aa0f33fe0802be0804 Bisecting: 1 revision left to test after this (roughly 1 step) [1693c5db6ab8262e6f5263f9d211855959aa5acd] net: Add additional bit to support clockid_t timestamp type testing commit 1693c5db6ab8262e6f5263f9d211855959aa5acd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5c508bfdc0804df293a62f22b638d15a533f94aaedf7dfd57ed7f8b3e9d390ce all runs: crashed: WARNING in __ip6_make_skb representative crash: WARNING in __ip6_make_skb, types: [WARNING] # git bisect bad 1693c5db6ab8262e6f5263f9d211855959aa5acd Bisecting: 0 revisions left to test after this (roughly 0 steps) [4d25ca2d6801cfcf26f7f39c561611ba5be99bf8] net: Rename mono_delivery_time to tstamp_type for scalabilty testing commit 4d25ca2d6801cfcf26f7f39c561611ba5be99bf8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 93439ec814cfc3d138513744b77d9e42465274b4c3826cefa819b72c4ed3c8e1 all runs: OK false negative chance: 0.000 # git bisect good 4d25ca2d6801cfcf26f7f39c561611ba5be99bf8 1693c5db6ab8262e6f5263f9d211855959aa5acd is the first bad commit commit 1693c5db6ab8262e6f5263f9d211855959aa5acd Author: Abhishek Chauhan Date: Thu May 9 14:18:33 2024 -0700 net: Add additional bit to support clockid_t timestamp type tstamp_type is now set based on actual clockid_t compressed into 2 bits. To make the design scalable for future needs this commit bring in the change to extend the tstamp_type:1 to tstamp_type:2 to support other clockid_t timestamp. We now support CLOCK_TAI as part of tstamp_type as part of this commit with existing support CLOCK_MONOTONIC and CLOCK_REALTIME. Signed-off-by: Abhishek Chauhan Reviewed-by: Willem de Bruijn Reviewed-by: Martin KaFai Lau Link: https://lore.kernel.org/r/20240509211834.3235191-3-quic_abchauha@quicinc.com Signed-off-by: Martin KaFai Lau include/linux/skbuff.h | 18 +++++++++++------ include/uapi/linux/bpf.h | 15 +++++++++----- net/core/filter.c | 46 ++++++++++++++++++++++++------------------ net/ipv4/ip_output.c | 5 ++++- net/ipv4/raw.c | 2 +- net/ipv4/tcp_ipv4.c | 2 ++ net/ipv6/ip6_output.c | 5 ++++- net/ipv6/raw.c | 2 +- net/ipv6/tcp_ipv6.c | 10 +++++++-- net/packet/af_packet.c | 7 +++---- tools/include/uapi/linux/bpf.h | 15 +++++++++----- 11 files changed, 81 insertions(+), 46 deletions(-) accumulated error probability: 0.00 culprit signature: 5c508bfdc0804df293a62f22b638d15a533f94aaedf7dfd57ed7f8b3e9d390ce parent signature: 93439ec814cfc3d138513744b77d9e42465274b4c3826cefa819b72c4ed3c8e1 revisions tested: 21, total time: 7h3m19.824833471s (build: 3h42m34.57270197s, test: 3h6m4.722418522s) first bad commit: 1693c5db6ab8262e6f5263f9d211855959aa5acd net: Add additional bit to support clockid_t timestamp type recipients (to): ["martin.lau@kernel.org" "quic_abchauha@quicinc.com" "willemb@google.com"] recipients (cc): [] crash: WARNING in __ip6_make_skb ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1838 at include/linux/skbuff.h:4226 skb_set_delivery_type_by_clockid include/linux/skbuff.h:4226 [inline] WARNING: CPU: 0 PID: 1838 at include/linux/skbuff.h:4226 __ip6_make_skb+0x4dc/0x720 net/ipv6/ip6_output.c:1930 Modules linked in: CPU: 0 PID: 1838 Comm: syz-executor Not tainted 6.9.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:skb_set_delivery_type_by_clockid include/linux/skbuff.h:4226 [inline] RIP: 0010:__ip6_make_skb+0x4dc/0x720 net/ipv6/ip6_output.c:1930 Code: 02 00 eb 02 31 f6 48 89 4b 20 48 8d 83 81 00 00 00 0f b7 93 81 00 00 00 48 85 c9 74 26 83 e2 fc 0f b7 ce 09 d1 89 ca eb 20 90 <0f> 0b 90 48 c7 43 20 00 00 00 00 48 8d 83 81 00 00 00 0f b7 93 81 RSP: 0018:ffffc900022139b8 EFLAGS: 00010202 RAX: 00000000000000ff RBX: ffff88810f6cc400 RCX: 0000000000000000 RDX: 0000000000000600 RSI: 4800000000000000 RDI: ffff888104b40000 RBP: ffff8881012b3c00 R08: 495487cf0694cd1a R09: c117ad6b807b9fbb R10: ffffc90002213a28 R11: 0000000000000048 R12: ffff88810ceb0780 R13: ffff88810be90d98 R14: ffffc90002213a78 R15: ffffc90002213bd8 FS: 00007f65560df6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200002c0 CR3: 000000010e6e6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip6_make_skb+0x22d/0x240 net/ipv6/ip6_output.c:2046 udpv6_sendmsg+0xada/0xbb0 net/ipv6/udp.c:1584 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x3b/0xb0 net/socket.c:745 ____sys_sendmsg+0x1a7/0x200 net/socket.c:2584 ___sys_sendmsg net/socket.c:2638 [inline] __sys_sendmsg+0x2c7/0x310 net/socket.c:2667 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xe2/0x200 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f655655cee9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f65560df0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f655668bf80 RCX: 00007f655655cee9 RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 RBP: 00007f65565a949e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f655668bf80 R15: 00007fff2a4c5438