ci starts bisection 2023-11-07 14:07:29.445730858 +0000 UTC m=+20502.202605720 bisecting cause commit starting from d84b139f53e8fa8048f16814c6b2a53d7bc15c3d building syzkaller on 8321139737ed27c82617231b782e88dd1e818227 ensuring issue is reproducible on original commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 45c9d4ca0c2cd907540c43e83761eb682f78c22ff5eb79fbaf1831204880761e run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bf49abf2e4e1bf61f7214e9bc4cc734e4a6ca51492e54c75bbeaf232cb457f8c run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed kconfig minimization: base=3938 full=7645 leaves diff=1993 split chunks (needed=false): <1993> split chunk #0 of len 1993 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d6e062121892cda2ad421af9eedb583079b5cf7d24eb33346247098654e7dace all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 07f0462aee6453fba921bcc234537c5758032bac7bc95dd1222695327800d794 run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: OK run #9: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 453c9e55dc3f7627d8c016aa511601349fc58168c7b5d37db7d1a31c4390d818 all runs: crashed: kernel BUG in prog_array_map_poke_run representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN KASAN LOCKDEP], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 69561bf053d638c9c2209baef9e9e588081c48d133ef815bcfc9d5d703820e73 run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: OK run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit d84b139f53e8fa8048f16814c6b2a53d7bc15c3d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85d8cf7d54f34bdde06cddd9a87c0e4fa239a2732602efdd5432ca6805135ccc run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] the chunk can be dropped minimized to 399 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_PLATFORM_PROFILE ADDRESS_MASKING ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_INTEGRITY_T10 BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_HIDP BT_HS BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MSFTEXT BT_MTK BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_BQ24190 CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MBYTES CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CFB CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRC64_ROCKSOFT CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECC CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LRW CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_OFB CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM2 CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CUSE CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DIMLIB DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_BOCHS DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER ENCRYPTED_KEYS EXTCON FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ ISDN ISDN_CAPI LIBNVDIMM MAC80211 MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 29a5dbc3018a82d7a6511c0d4968e8de204c92d0813dd71eaa2a85cacc688f62 run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v6.5 testing commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 758940cd0ead75065a41d40ca7b7c0229035ca1250a5cceb9a80c2de0e279968 run #0: OK run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 018685870e1b926616940591bbbce6f72b571d7f37d3b3680e34f7ff3746c14c run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 11b4a171c3132ef5a536bcedebc217fdccbeaa8891c849c100f2b199601578bb run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 67f15f86abc5a9f1b5d9056223a464abf1fc42f2a86d3f72a88f6e147b2469ce run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0cbd382325d088bf2f31982410570c35bbe10e2aa6418055a5871ef313db490e run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: de3e52badb5cea59a5b23d7390934af4215dd22367034ed5a07877d8350b0c8c run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: crashed: kernel BUG in prog_array_map_poke_run run #18: crashed: kernel BUG in prog_array_map_poke_run run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 24cbcdd90f8ef20951054dbacb0f66b5caec28593ce2800d8b4681d792cefc03 all runs: crashed: kernel BUG in prog_array_map_poke_run representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 81812afb1709398df7512121b267acb4015203cd7f3e7fdff2e3af54a9f88b03 all runs: OK false negative chance: 0.000 # git bisect start 7d2a07b769330c34b4deabeed939325c77a7ec2f f40ddce88593482919761f74910f42f4b84c004b Bisecting: 24610 revisions left to test after this (roughly 15 steps) [85f3f17b5db2dd9f8a094a0ddc665555135afd22] Merge branch 'md-fixes' of https://git.kernel.org/pub/scm/linux/kernel/git/song/md into block-5.13 testing commit 85f3f17b5db2dd9f8a094a0ddc665555135afd22 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f2ca4cef362100edb976ca757ef0306eb855792baecd3ab4a2a4ed62ffcf2aa8 all runs: OK false negative chance: 0.000 # git bisect good 85f3f17b5db2dd9f8a094a0ddc665555135afd22 Bisecting: 12854 revisions left to test after this (roughly 14 steps) [222013f9ac30b9cec44301daa8dbd0aae38abffb] cryptoloop: add a deprecation warning testing commit 222013f9ac30b9cec44301daa8dbd0aae38abffb gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ec37f1115f16c3fd68502f4da2218024c5cd57771ca0957c0fbd62dda13162ee run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: OK run #15: OK run #16: OK run #17: boot failed: WARNING in get_page_from_freelist run #18: boot failed: WARNING in get_page_from_freelist run #19: boot failed: WARNING in get_page_from_freelist representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad 222013f9ac30b9cec44301daa8dbd0aae38abffb Bisecting: 5901 revisions left to test after this (roughly 13 steps) [a79cdfba68a13b731004f0aafe1155a83830d472] Merge tag 'nfsd-5.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux testing commit a79cdfba68a13b731004f0aafe1155a83830d472 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c27fadb3645b6b4b65f86396d79650084e79b28770ca17a98f048fc0007055b run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad a79cdfba68a13b731004f0aafe1155a83830d472 Bisecting: 2928 revisions left to test after this (roughly 12 steps) [5f076944f06988391a6dbd458fc6485a71088e57] mm/mempolicy: fix mpol_misplaced kernel-doc testing commit 5f076944f06988391a6dbd458fc6485a71088e57 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 70251dda654ceb0b93d4d056e6011ca24887d138672937363fc5c6409c9c96be run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: OK run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: crashed: kernel BUG in prog_array_map_poke_run run #18: crashed: kernel BUG in prog_array_map_poke_run run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad 5f076944f06988391a6dbd458fc6485a71088e57 Bisecting: 1458 revisions left to test after this (roughly 11 steps) [f86c70ed0476eaaa0215a97005af336f687baa77] Merge tag 'mlx5-updates-2021-04-06' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux testing commit f86c70ed0476eaaa0215a97005af336f687baa77 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 31c9b8993a6fec3b1cb242c6e01a01c494b9012b082fe16808650e3efe889c03 all runs: OK false negative chance: 0.000 # git bisect good f86c70ed0476eaaa0215a97005af336f687baa77 Bisecting: 729 revisions left to test after this (roughly 10 steps) [002181735184a2660fd081abea2ac560896f874b] net: phy: marvell: use assignment by bitwise AND operator testing commit 002181735184a2660fd081abea2ac560896f874b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 75ad555c8f25b2106def6a9e5feacd8efe8ae3fdf7dbd526b16e1fc9b807596d all runs: OK false negative chance: 0.000 # git bisect good 002181735184a2660fd081abea2ac560896f874b Bisecting: 364 revisions left to test after this (roughly 9 steps) [927315041828fcbead6d2ace38c6dee5af95e40f] Merge branch 'CO-RE relocation selftests fixes' testing commit 927315041828fcbead6d2ace38c6dee5af95e40f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 53c9302bfeb37674fb4b94fe8535f295d145dd46b2ab70d611a075dc862884ca run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: OK run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: crashed: kernel BUG in prog_array_map_poke_run run #18: crashed: kernel BUG in prog_array_map_poke_run run #19: crashed: kernel BUG in prog_array_map_poke_run representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad 927315041828fcbead6d2ace38c6dee5af95e40f Bisecting: 209 revisions left to test after this (roughly 8 steps) [9382531ec63fc123d1d6ff07b0558b6af4ea724b] Merge tag 'mt76-for-kvalo-2021-04-21' of https://github.com/nbd168/wireless testing commit 9382531ec63fc123d1d6ff07b0558b6af4ea724b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 76b3770b2dabfe4187868b84bfdc3b9a119ce87834b592b8b27224265de38bef all runs: OK false negative chance: 0.000 # git bisect good 9382531ec63fc123d1d6ff07b0558b6af4ea724b Bisecting: 107 revisions left to test after this (roughly 7 steps) [f1b9acd3a5e800bb68e7b8abc5b56d01faf68bbc] net/mlx5: SF, Extend SF table for additional SF id range testing commit f1b9acd3a5e800bb68e7b8abc5b56d01faf68bbc gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4eca4fd8b9093dd7b9128547b0a5d1cedb365f1bb02670695348d94371db7c19 all runs: OK false negative chance: 0.000 # git bisect good f1b9acd3a5e800bb68e7b8abc5b56d01faf68bbc Bisecting: 53 revisions left to test after this (roughly 6 steps) [a8fad73e3334151196acb28c4dcde37732c82542] bpf: Remove unnecessary map checks for ARG_PTR_TO_CONST_STR testing commit a8fad73e3334151196acb28c4dcde37732c82542 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 81320176d7de126f8eacfc8cc64810a5cb88f9ceb864d2b5cf217f0271bfdb3e run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: crashed: kernel BUG in prog_array_map_poke_run run #18: crashed: kernel BUG in prog_array_map_poke_run run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad a8fad73e3334151196acb28c4dcde37732c82542 Bisecting: 26 revisions left to test after this (roughly 5 steps) [463c2149ede72b696c42b0d6c5a03c061600d04c] selftests/bpf: Add tests for target information in bpf_link info queries testing commit 463c2149ede72b696c42b0d6c5a03c061600d04c gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f085f3119cb176d04cfabaa44d26bd378039c78d757d5249c4aaf90d854d88b0 all runs: OK false negative chance: 0.000 # git bisect good 463c2149ede72b696c42b0d6c5a03c061600d04c Bisecting: 13 revisions left to test after this (roughly 4 steps) [83cd92b46484aa8f64cdc0bff8ac6940d1f78519] libbpf: Initialize the bpf_seq_printf parameters array field by field testing commit 83cd92b46484aa8f64cdc0bff8ac6940d1f78519 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: db83a7fad107152a5a564d674703974b61bde63db03fa829a0fff951cd25f96b run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: boot failed: can't ssh into the instance run #18: OK run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad 83cd92b46484aa8f64cdc0bff8ac6940d1f78519 Bisecting: 6 revisions left to test after this (roughly 3 steps) [a22c0c81da644223d911466746ef414a786cb1c8] selftests/bpf: Fix test_cpp compilation failure with clang testing commit a22c0c81da644223d911466746ef414a786cb1c8 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5bd86a262bbf48519a97b9268cf05daf798f8d1bd7dea8d752a7286a072aaf07 all runs: OK false negative chance: 0.000 # git bisect good a22c0c81da644223d911466746ef414a786cb1c8 Bisecting: 3 revisions left to test after this (roughly 2 steps) [cdf0e80e9fbe7b8d6d465b5fe6666f8ea8b86b61] Merge branch 'bpf: tools: support build selftests/bpf with clang' testing commit cdf0e80e9fbe7b8d6d465b5fe6666f8ea8b86b61 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5bd86a262bbf48519a97b9268cf05daf798f8d1bd7dea8d752a7286a072aaf07 all runs: OK false negative chance: 0.000 # git bisect good cdf0e80e9fbe7b8d6d465b5fe6666f8ea8b86b61 Bisecting: 1 revision left to test after this (roughly 1 step) [fff13c4bb646ef849fd74ced87eef54340d28c21] bpf: Add a ARG_PTR_TO_CONST_STR argument type testing commit fff13c4bb646ef849fd74ced87eef54340d28c21 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 67bc7612c25082d52cb0f91d4c770158f91e024c26cbc2fed1a235d352f318e9 all runs: OK false negative chance: 0.000 # git bisect good fff13c4bb646ef849fd74ced87eef54340d28c21 Bisecting: 0 revisions left to test after this (roughly 0 steps) [7b15523a989b63927c2bb08e9b5b0bbc10b58bef] bpf: Add a bpf_snprintf helper testing commit 7b15523a989b63927c2bb08e9b5b0bbc10b58bef gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: db83a7fad107152a5a564d674703974b61bde63db03fa829a0fff951cd25f96b run #0: crashed: kernel BUG in prog_array_map_poke_run run #1: crashed: kernel BUG in prog_array_map_poke_run run #2: crashed: kernel BUG in prog_array_map_poke_run run #3: crashed: kernel BUG in prog_array_map_poke_run run #4: crashed: kernel BUG in prog_array_map_poke_run run #5: crashed: kernel BUG in prog_array_map_poke_run run #6: crashed: kernel BUG in prog_array_map_poke_run run #7: crashed: kernel BUG in prog_array_map_poke_run run #8: crashed: kernel BUG in prog_array_map_poke_run run #9: crashed: kernel BUG in prog_array_map_poke_run run #10: crashed: kernel BUG in prog_array_map_poke_run run #11: crashed: kernel BUG in prog_array_map_poke_run run #12: crashed: kernel BUG in prog_array_map_poke_run run #13: crashed: kernel BUG in prog_array_map_poke_run run #14: crashed: kernel BUG in prog_array_map_poke_run run #15: crashed: kernel BUG in prog_array_map_poke_run run #16: crashed: kernel BUG in prog_array_map_poke_run run #17: crashed: kernel BUG in prog_array_map_poke_run run #18: crashed: kernel BUG in prog_array_map_poke_run run #19: OK representative crash: kernel BUG in prog_array_map_poke_run, types: [BUG] # git bisect bad 7b15523a989b63927c2bb08e9b5b0bbc10b58bef 7b15523a989b63927c2bb08e9b5b0bbc10b58bef is the first bad commit commit 7b15523a989b63927c2bb08e9b5b0bbc10b58bef Author: Florent Revest Date: Mon Apr 19 17:52:40 2021 +0200 bpf: Add a bpf_snprintf helper The implementation takes inspiration from the existing bpf_trace_printk helper but there are a few differences: To allow for a large number of format-specifiers, parameters are provided in an array, like in bpf_seq_printf. Because the output string takes two arguments and the array of parameters also takes two arguments, the format string needs to fit in one argument. Thankfully, ARG_PTR_TO_CONST_STR is guaranteed to point to a zero-terminated read-only map so we don't need a format string length arg. Because the format-string is known at verification time, we also do a first pass of format string validation in the verifier logic. This makes debugging easier. Signed-off-by: Florent Revest Signed-off-by: Alexei Starovoitov Acked-by: Andrii Nakryiko Link: https://lore.kernel.org/bpf/20210419155243.1632274-4-revest@chromium.org include/linux/bpf.h | 1 + include/uapi/linux/bpf.h | 28 +++++++++++++++++++++++ kernel/bpf/helpers.c | 50 ++++++++++++++++++++++++++++++++++++++++++ kernel/bpf/verifier.c | 41 ++++++++++++++++++++++++++++++++++ kernel/trace/bpf_trace.c | 2 ++ tools/include/uapi/linux/bpf.h | 28 +++++++++++++++++++++++ 6 files changed, 150 insertions(+) accumulated error probability: 0.00 culprit signature: db83a7fad107152a5a564d674703974b61bde63db03fa829a0fff951cd25f96b parent signature: 67bc7612c25082d52cb0f91d4c770158f91e024c26cbc2fed1a235d352f318e9 reproducer is flaky (0.60 repro chance estimate) revisions tested: 32, total time: 10h47m23.285137421s (build: 4h46m7.643707596s, test: 5h37m24.94531849s) first bad commit: 7b15523a989b63927c2bb08e9b5b0bbc10b58bef bpf: Add a bpf_snprintf helper recipients (to): ["andrii@kernel.org" "ast@kernel.org" "revest@chromium.org"] recipients (cc): [] crash: kernel BUG in prog_array_map_poke_run ------------[ cut here ]------------ kernel BUG at kernel/bpf/arraymap.c:1008! invalid opcode: 0000 [#1] SMP CPU: 0 PID: 6698 Comm: kworker/0:7 Not tainted 5.12.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: events prog_array_map_clear_deferred RIP: 0010:prog_array_map_poke_run+0x1a6/0x1b0 kernel/bpf/arraymap.c:1008 Code: b0 ef ec ff 85 c0 0f 89 60 ff ff ff 83 f8 ea 0f 84 57 ff ff ff 0f 0b 4c 89 54 24 08 e8 33 30 f5 ff 4c 8b 54 24 08 eb 9f 0f 0b <0f> 0b 0f 0b e9 84 fe ff ff 90 41 56 49 89 f6 31 f6 41 55 41 54 55 RSP: 0018:ffffc9000020fdc8 EFLAGS: 00010216 RAX: 00000000fffffff0 RBX: ffff88810ff23480 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff83092328 RDI: ffff8881139b09b0 RBP: ffffc90000169000 R08: 0000000000000000 R09: 0000000000000001 R10: ffffffffa002873b R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88810fa9fb00 R15: ffff8881138f7000 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556399788 CR3: 0000000003021000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fd_array_map_delete_elem+0x56/0xa0 kernel/bpf/arraymap.c:801 bpf_fd_array_map_clear kernel/bpf/arraymap.c:849 [inline] prog_array_map_clear_deferred+0x38/0x70 kernel/bpf/arraymap.c:1028 process_one_work+0x2a3/0x4f0 kernel/workqueue.c:2275 worker_thread+0x50/0x3b0 kernel/workqueue.c:2421 kthread+0x116/0x130 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Modules linked in: ---[ end trace 32f796c199b97781 ]--- RIP: 0010:prog_array_map_poke_run+0x1a6/0x1b0 kernel/bpf/arraymap.c:1008 Code: b0 ef ec ff 85 c0 0f 89 60 ff ff ff 83 f8 ea 0f 84 57 ff ff ff 0f 0b 4c 89 54 24 08 e8 33 30 f5 ff 4c 8b 54 24 08 eb 9f 0f 0b <0f> 0b 0f 0b e9 84 fe ff ff 90 41 56 49 89 f6 31 f6 41 55 41 54 55 RSP: 0018:ffffc9000020fdc8 EFLAGS: 00010216 RAX: 00000000fffffff0 RBX: ffff88810ff23480 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff83092328 RDI: ffff8881139b09b0 RBP: ffffc90000169000 R08: 0000000000000000 R09: 0000000000000001 R10: ffffffffa002873b R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88810fa9fb00 R15: ffff8881138f7000 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556399788 CR3: 0000000003021000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400