ci2 starts bisection 2025-08-09 13:40:22.592474756 +0000 UTC m=+84709.432774136 bisecting fixing commit since d98fd109f8279feabed326ecd98923fa9b7affca building syzkaller on cfe3a04a188eb9a2c407783d8d6e6f55a4b30886 ensuring issue is reproducible on original commit d98fd109f8279feabed326ecd98923fa9b7affca testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fc5e42e2d578d94bb762cfa43629067e1a0a9d7436a3a92e7c52f8776d1c0254 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f45890378f0619dd030e1b7102a1b8ef01dc68ec7ecee0f051bb9d28140efea all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed kconfig minimization: base=3707 full=7302 leaves diff=2038 split chunks (needed=false): <2038> split chunk #0 of len 2038 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a240838e32374a6fc75835a5137dd66de4d6c3b388ddf088c2eba5a5640533c6 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [atomic_sleep hang memleak ubsan kasan locking], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 88d4c4019fbd1e4832b212e2afeb68176c00eb4525b510a009627b60641ea862 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6d595db97e7dd20201d377a476b14a7fa5ef04ab34c04dd13fc8dece5dc1b4dd all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c1fb5d37b188ddd2735d57a7a8b420c5ddbab8651d15f157956ab9ed9b061d5c all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [memleak ubsan kasan locking atomic_sleep hang], they are not needed testing commit d98fd109f8279feabed326ecd98923fa9b7affca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 609362428fcfc64b11d25c00edff9a5d05daad5497f4342528417cba27010a27 all runs: OK false negative chance: 0.000 minimized to 814 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID ANDROID_BINDERFS ANDROID_BINDER_IPC APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ASHMEM ASM_MODVERSIONS ASN1_ENCODER ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_BSGLIB BLK_DEV_CRYPTOLOOP BLK_DEV_INTEGRITY BLK_DEV_INTEGRITY_T10 BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_HIDP BT_HS BT_INTEL BT_LE BT_LEDS BT_MSFTEXT BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB2 CAN_ETAS_ES58X CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_RAW CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARDBUS CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CC_HAS_AUTO_VAR_INIT_ZERO_ENABLER CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CGROUP_DEVICE CGROUP_HUGETLB CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_PERF CGROUP_RDMA CGROUP_WRITEBACK CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MBYTES CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONTIG_ALLOC COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C_INTEL CRYPTO_CRC32_PCLMUL CRYPTO_CRCT10DIF CRYPTO_CRCT10DIF_PCLMUL CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECB CRYPTO_ECC CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LIB_SM4 CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM2 CRYPTO_SM3 CRYPTO_SM4 CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_VADDR DAX DCA DCB DEBUG_PREEMPT DEFAULT_PFIFO_FAST DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DEV_PAGEMAP_OPS DIMLIB DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_BOCHS DRM_BRIDGE DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DP_AUX_CHARDEV DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DVB_CORE ENCRYPTED_KEYS EXTCON FB FRONTSWAP FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE HID_ZEROPLUS I2C_MUX IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ IRQ_REMAP ISDN ISDN_CAPI LIBNVDIMM MAC80211 MAC80211_LEDS MEDIA_ANALOG_TV_SUPPORT MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_CONTROLLER MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTPLUG_SPARSE MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MTD NET_CLS_U32 NET_SCH_DEFAULT PARPORT PARTITION_ADVANCED PCCARD PCMCIA PHONET PREEMPTION RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RC_CORE RFKILL SERIAL_DEV_BUS SND SOUND SPI SSB STAGING TAP TARGET_CORE TCG_TPM TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS TUN USB_AMD5536UDC USB_ATM USB_CONFIGFS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CONN_GPIO USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_HAPS USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_FOTG210_HCD USB_FOTG210_UDC USB_FTDI_ELAN USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LGM_PHY USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AQC111 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PHY USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STKWEBCAM USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_U132_HCD USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PCI_RENESAS USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USB_ZR364XX USERFAULTFD USERIO USERMODE_DRIVER USER_RETURN_NOTIFIER U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VETH VFIO VFIO_IOMMU_TYPE1 VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_PCI_MMAP VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_VDPA VHOST_VSOCK VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOBUF_GEN VIDEOBUF_VMALLOC VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CPIA2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_STK1160_COMMON VIDEO_TM6000 VIDEO_TM6000_ALSA VIDEO_TM6000_DVB VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2 VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMAP_PFN VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS WANT_COMPAT_NETLINK_MESSAGES WANT_DEV_COREDUMP WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH X86_SGX X86_X2APIC X86_X32 XARRAY_MULTI XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA ZBUD ZEROPLUS_FF ZONEFS_FS ZONE_DEVICE ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing current HEAD c79648372d02944bf4a54d87e3901db05d0ac82e testing commit c79648372d02944bf4a54d87e3901db05d0ac82e gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 548b958bb9f642b990cb8d144993ea3a0bd0b333066b794214de735e688179a5 all runs: OK false negative chance: 0.000 # git bisect start c79648372d02944bf4a54d87e3901db05d0ac82e d98fd109f8279feabed326ecd98923fa9b7affca Bisecting: 1623 revisions left to test after this (roughly 11 steps) [0cae845446705bd44d157a887bbe89a0d039682b] ASoC: tas2764: Set the SDOUT polarity correctly determine whether the revision contains the guilty commit revision d98fd109f8279feabed326ecd98923fa9b7affca crashed and is reachable testing commit 0cae845446705bd44d157a887bbe89a0d039682b gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dedccb94348e17040b233084e0629a2742d81912217e836eec6f630aae51caa5 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good 0cae845446705bd44d157a887bbe89a0d039682b Bisecting: 811 revisions left to test after this (roughly 10 steps) [3eac35c34a985e379272f63d4d8ed4432c44a5ea] um: Store full CSGSFS and SS register from mcontext determine whether the revision contains the guilty commit revision d98fd109f8279feabed326ecd98923fa9b7affca crashed and is reachable testing commit 3eac35c34a985e379272f63d4d8ed4432c44a5ea gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16564adb885e9fcf86cef6fb78625fefae28f11ccaf6c98f0e959578879de345 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good 3eac35c34a985e379272f63d4d8ed4432c44a5ea Bisecting: 405 revisions left to test after this (roughly 9 steps) [bf9c07864765864b968e59c7b72db91130d621ca] vgacon: Add check for vc_origin address range in vgacon_scroll() determine whether the revision contains the guilty commit revision d98fd109f8279feabed326ecd98923fa9b7affca crashed and is reachable testing commit bf9c07864765864b968e59c7b72db91130d621ca gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 65bbf0e79a0f502c3eef608d5ce69ab7586a8b5eb637ccf6c9245a45a9e535c3 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good bf9c07864765864b968e59c7b72db91130d621ca Bisecting: 202 revisions left to test after this (roughly 8 steps) [4789cea3f8d470c1c811535963704d379b534c8f] fs/jfs: consolidate sanity checking in dbMount determine whether the revision contains the guilty commit revision 0cae845446705bd44d157a887bbe89a0d039682b crashed and is reachable testing commit 4789cea3f8d470c1c811535963704d379b534c8f gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 94402ac82f78917698fab338b7e7564a2271f2b02efdf5bc865951f7a5306634 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good 4789cea3f8d470c1c811535963704d379b534c8f Bisecting: 101 revisions left to test after this (roughly 7 steps) [56738cbac3bbb1d39a71a07f57484dec1db8b239] regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods determine whether the revision contains the guilty commit revision bf9c07864765864b968e59c7b72db91130d621ca crashed and is reachable testing commit 56738cbac3bbb1d39a71a07f57484dec1db8b239 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 806dd6610b94b578f4b9a82bf913dfe6a9867df776d088c336bac38788d07a27 all runs: OK false negative chance: 0.000 # git bisect bad 56738cbac3bbb1d39a71a07f57484dec1db8b239 Bisecting: 50 revisions left to test after this (roughly 6 steps) [34d3e10ab905f06445f8dbd8a3d9697095e71bae] drm/amd/display: Add null pointer check for get_first_active_display() determine whether the revision contains the guilty commit revision d98fd109f8279feabed326ecd98923fa9b7affca crashed and is reachable testing commit 34d3e10ab905f06445f8dbd8a3d9697095e71bae gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4927b66ed170566bd4d01ff9c1a7e50d96a2edbf867278324953269db8d0446d all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good 34d3e10ab905f06445f8dbd8a3d9697095e71bae Bisecting: 25 revisions left to test after this (roughly 5 steps) [a1950bb9edfae52d0176a07a1c9fe4b4da79be26] btrfs: fix missing error handling when searching for inode refs during log replay determine whether the revision contains the guilty commit revision bf9c07864765864b968e59c7b72db91130d621ca crashed and is reachable testing commit a1950bb9edfae52d0176a07a1c9fe4b4da79be26 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9b120dbdf70897d65f34ea8762fbf66fc037edb18d851a3de5a5ddd04313fb27 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good a1950bb9edfae52d0176a07a1c9fe4b4da79be26 Bisecting: 12 revisions left to test after this (roughly 4 steps) [5deab0fa6cfd0cd7def17598db15ceb84f950584] drm/msm: Fix a fence leak in submit error path determine whether the revision contains the guilty commit revision d98fd109f8279feabed326ecd98923fa9b7affca crashed and is reachable testing commit 5deab0fa6cfd0cd7def17598db15ceb84f950584 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 295d5eab5620d6d782f9525abf2636ba88152f86d1f1ee23c42405a4ebff83a0 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good 5deab0fa6cfd0cd7def17598db15ceb84f950584 Bisecting: 6 revisions left to test after this (roughly 3 steps) [a856228c44dc3b9c3b7cf37ea8944ce251e38a54] wifi: mac80211: drop invalid source address OCB frames determine whether the revision contains the guilty commit revision 0cae845446705bd44d157a887bbe89a0d039682b crashed and is reachable testing commit a856228c44dc3b9c3b7cf37ea8944ce251e38a54 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d18e21185fcb581eea1bff07ff9760f1575fca99cf9f4e9fefc1d0769db7ad24 all runs: crashed: WARNING in ath6kl_bmi_get_target_info representative crash: WARNING in ath6kl_bmi_get_target_info, types: [WARNING] # git bisect good a856228c44dc3b9c3b7cf37ea8944ce251e38a54 Bisecting: 3 revisions left to test after this (roughly 2 steps) [68d3417305ee100dcad90fd6e5846b22497aa394] mtd: spinand: fix memory leak of ECC engine conf determine whether the revision contains the guilty commit revision a856228c44dc3b9c3b7cf37ea8944ce251e38a54 crashed and is reachable testing commit 68d3417305ee100dcad90fd6e5846b22497aa394 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 233c52c637e76379ac97f2b51eeca5c7170ad6a6ead21b17c32ac659e5065011 all runs: OK false negative chance: 0.000 # git bisect bad 68d3417305ee100dcad90fd6e5846b22497aa394 Bisecting: 0 revisions left to test after this (roughly 1 step) [ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5] ACPICA: Refuse to evaluate a method if arguments are missing determine whether the revision contains the guilty commit revision 0cae845446705bd44d157a887bbe89a0d039682b crashed and is reachable testing commit ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 233c52c637e76379ac97f2b51eeca5c7170ad6a6ead21b17c32ac659e5065011 all runs: OK false negative chance: 0.000 # git bisect bad ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5 Bisecting: 0 revisions left to test after this (roughly 0 steps) [46b47d4b06fa7f234d93f0f8ac43798feafcff89] wifi: ath6kl: remove WARN on bad firmware input determine whether the revision contains the guilty commit revision 0cae845446705bd44d157a887bbe89a0d039682b crashed and is reachable testing commit 46b47d4b06fa7f234d93f0f8ac43798feafcff89 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: feb52dcfeae05f811c2991d07b734281adf16b13a64184ac303a44294493c36c all runs: OK false negative chance: 0.000 # git bisect bad 46b47d4b06fa7f234d93f0f8ac43798feafcff89 46b47d4b06fa7f234d93f0f8ac43798feafcff89 is the first bad commit commit 46b47d4b06fa7f234d93f0f8ac43798feafcff89 Author: Johannes Berg Date: Tue Jun 17 11:45:29 2025 +0200 wifi: ath6kl: remove WARN on bad firmware input [ Upstream commit e7417421d89358da071fd2930f91e67c7128fbff ] If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too. Reported-by: syzbot+92c6dd14aaa230be6855@syzkaller.appspotmail.com Tested-by: syzbot+92c6dd14aaa230be6855@syzkaller.appspotmail.com Acked-by: Jeff Johnson Link: https://patch.msgid.link/20250617114529.031a677a348e.I58bf1eb4ac16a82c546725ff010f3f0d2b0cca49@changeid Signed-off-by: Johannes Berg Signed-off-by: Sasha Levin drivers/net/wireless/ath/ath6kl/bmi.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: feb52dcfeae05f811c2991d07b734281adf16b13a64184ac303a44294493c36c parent signature: d18e21185fcb581eea1bff07ff9760f1575fca99cf9f4e9fefc1d0769db7ad24 revisions tested: 20, total time: 5h13m58.059348344s (build: 2h15m58.60291394s, test: 2h51m36.719501077s) first good commit: 46b47d4b06fa7f234d93f0f8ac43798feafcff89 wifi: ath6kl: remove WARN on bad firmware input recipients (to): ["jeff.johnson@oss.qualcomm.com" "johannes.berg@intel.com" "sashal@kernel.org" "syzbot+92c6dd14aaa230be6855@syzkaller.appspotmail.com"] recipients (cc): []