ci starts bisection 2023-11-05 10:26:56.175850995 +0000 UTC m=+135056.352062663 bisecting fixing commit since e1c04510f521e853019afeca2a5991a5ef8d6a5b building syzkaller on 6be0f1f57faa36df4b215edbe2fcfdbbb6de9f6d ensuring issue is reproducible on original commit e1c04510f521e853019afeca2a5991a5ef8d6a5b testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a5cbb0ce4a036b7147d478894845b30c3166ac972af1c5f8b37f305a278701d4 all runs: crashed: unregister_netdevice: waiting for DEV to become free representative crash: unregister_netdevice: waiting for DEV to become free, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2443bc98f81c7b016950af8b563cce4f1099589486f85d75cd1fb8cc3c0e387a all runs: crashed: INFO: trying to register non-static key in net_free representative crash: INFO: trying to register non-static key in net_free, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed kconfig minimization: base=3938 full=7554 leaves diff=1990 split chunks (needed=false): <1990> split chunk #0 of len 1990 into 5 parts testing without sub-chunk 1/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e74df707cc00bc85409c1e55a1ae8a3369b38ef03654e7193b7401bab7243717 run #0: crashed: INFO: trying to register non-static key in corrupted run #1: crashed: INFO: trying to register non-static key in net_free run #2: crashed: INFO: trying to register non-static key in net_free run #3: crashed: INFO: trying to register non-static key in net_free run #4: crashed: INFO: trying to register non-static key in net_free run #5: crashed: INFO: trying to register non-static key in net_free run #6: crashed: INFO: trying to register non-static key in net_free run #7: crashed: INFO: trying to register non-static key in net_free run #8: crashed: INFO: trying to register non-static key in net_free run #9: crashed: INFO: trying to register non-static key in net_free representative crash: INFO: trying to register non-static key in corrupted, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4b7456d650dd3a757b13815bec84fb82e077a73fbaedcf91e00c1efe52daeae2 run #0: crashed: unregister_netdevice: waiting for DEV to become free run #1: crashed: INFO: trying to register non-static key in net_free run #2: crashed: INFO: trying to register non-static key in net_free run #3: crashed: INFO: trying to register non-static key in net_free run #4: crashed: INFO: trying to register non-static key in net_free run #5: crashed: INFO: trying to register non-static key in net_free run #6: crashed: INFO: trying to register non-static key in net_free run #7: crashed: INFO: trying to register non-static key in net_free run #8: crashed: INFO: trying to register non-static key in net_free run #9: crashed: INFO: trying to register non-static key in net_free representative crash: unregister_netdevice: waiting for DEV to become free, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c1f4f9f31806e1fdb649398c325b8f88daae8d82247c7d76697c57d6f8a012b4 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #2: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #3: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #4: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #5: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #6: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #7: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #8: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #9: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7eff0e3d820c97a9ada8b074abd08a33f975603ab7a6a734fd962c7a2287190d run #0: crashed: INFO: trying to register non-static key in corrupted run #1: crashed: INFO: trying to register non-static key in net_free run #2: crashed: INFO: trying to register non-static key in net_free run #3: crashed: INFO: trying to register non-static key in net_free run #4: crashed: unregister_netdevice: waiting for DEV to become free run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: INFO: trying to register non-static key in net_free run #9: crashed: unregister_netdevice: waiting for DEV to become free representative crash: INFO: trying to register non-static key in corrupted, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit e1c04510f521e853019afeca2a5991a5ef8d6a5b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f34ea0dc6455205ef635f2c831498f3321d83f0bb6572c28af177ce4764661a9 all runs: crashed: unregister_netdevice: waiting for DEV to become free representative crash: unregister_netdevice: waiting for DEV to become free, types: [UNKNOWN] the chunk can be dropped minimized to 398 configs; suspects: [ATM AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB FSCACHE HAMRADIO HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_MMIO KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LWTUNNEL LWTUNNEL_BPF MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MICROCODE_AMD MICROCODE_INTEL MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_CLS_RSVP NET_CLS_RSVP6 NET_CLS_TCINDEX NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_ATM NET_SCH_CAKE NET_SCH_CBQ NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_DSMARK NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing current HEAD 1c41041124bd14dd6610da256a3da4e5b74ce6b1 testing commit 1c41041124bd14dd6610da256a3da4e5b74ce6b1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: adf6a9ae10d1de9a71cb7e43729b0769b4cb34b587ca1bd80b7095e710f133f2 all runs: OK false negative chance: 0.000 # git bisect start 1c41041124bd14dd6610da256a3da4e5b74ce6b1 e1c04510f521e853019afeca2a5991a5ef8d6a5b Bisecting: 37396 revisions left to test after this (roughly 15 steps) [1b722407a13b7f8658d2e26917791f32805980a2] Merge tag 'drm-next-2023-06-29' of git://anongit.freedesktop.org/drm/drm determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 1b722407a13b7f8658d2e26917791f32805980a2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b3efa7817b1b3d63c7926f5c2cb8bcfd683f47d33ef9163896bc6968c820f1d6 run #0: crashed: invalid opcode in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 1b722407a13b7f8658d2e26917791f32805980a2 Bisecting: 18713 revisions left to test after this (roughly 14 steps) [92901222f83d988617aee37680cb29e1a743b5e4] Merge tag 'f2fs-for-6-6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 92901222f83d988617aee37680cb29e1a743b5e4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 680a30fa6492005489cb50a060da43347df3860c8024256c09fb643aeac7b81e run #0: crashed: invalid opcode in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 92901222f83d988617aee37680cb29e1a743b5e4 Bisecting: 8656 revisions left to test after this (roughly 13 steps) [89ed67ef126c4160349c1b96fdb775ea6170ac90] Merge tag 'net-next-6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 89ed67ef126c4160349c1b96fdb775ea6170ac90 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6827e1296ab35d616d55717b442c7da1f66cd39eaae9b02f312fdfa68ed0b3b3 all runs: OK false negative chance: 0.001 # git bisect bad 89ed67ef126c4160349c1b96fdb775ea6170ac90 Bisecting: 5034 revisions left to test after this (roughly 12 steps) [1002f8171d966f73e3d97b05fc0178e115fb5dca] wifi: ray_cs: Remove unnecessary (void*) conversions determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 1002f8171d966f73e3d97b05fc0178e115fb5dca gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3fb90cf59d069624697aba0bbde5984762693e18c88c4f30e015138a764e4ee7 all runs: OK false negative chance: 0.001 # git bisect bad 1002f8171d966f73e3d97b05fc0178e115fb5dca Bisecting: 2511 revisions left to test after this (roughly 11 steps) [551598a120d1445ebc7a54f4ca75e609773f5e6a] net: ethernet: korina: Convert to platform remove callback returning void determine whether the revision contains the guilty commit revision 92901222f83d988617aee37680cb29e1a743b5e4 crashed and is reachable testing commit 551598a120d1445ebc7a54f4ca75e609773f5e6a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d001be49bc57a6ff5a40da167523ee10066a54b083555352a7f56650c0329f41 run #0: crashed: invalid opcode in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 551598a120d1445ebc7a54f4ca75e609773f5e6a Bisecting: 1255 revisions left to test after this (roughly 10 steps) [2253bb3ff242af3b1a53cb98e2e4eb1eec82dd2a] nexthop: Annotate struct nh_res_table with __counted_by determine whether the revision contains the guilty commit revision 551598a120d1445ebc7a54f4ca75e609773f5e6a crashed and is reachable testing commit 2253bb3ff242af3b1a53cb98e2e4eb1eec82dd2a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8f61e63ae46fb25b774ecf4c22f03c039c82574f9066e45779958e95191c0280 all runs: OK false negative chance: 0.021 # git bisect bad 2253bb3ff242af3b1a53cb98e2e4eb1eec82dd2a Bisecting: 627 revisions left to test after this (roughly 9 steps) [3d9cf962067bef73757f987e3b30928b036499d8] bnxt_en: Use non-standard attribute to expose shutdown temperature determine whether the revision contains the guilty commit revision 1b722407a13b7f8658d2e26917791f32805980a2 crashed and is reachable testing commit 3d9cf962067bef73757f987e3b30928b036499d8 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: acc503e6e47515537af4e7ad3cb7976cb115d80df4e8016173aa880766859a96 run #0: crashed: invalid opcode in corrupted run #1: crashed: invalid opcode in corrupted run #2: crashed: invalid opcode in corrupted run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 3d9cf962067bef73757f987e3b30928b036499d8 Bisecting: 313 revisions left to test after this (roughly 8 steps) [14c06b913d4a11b50351ef5bcb3f112247f647f3] Merge tag 'ceph-for-6.6-rc4' of https://github.com/ceph/ceph-client determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 14c06b913d4a11b50351ef5bcb3f112247f647f3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3ad84c14ef630210d43b228130dadca279b444204d81362c93c7581cf8cfd38d run #0: crashed: invalid opcode in corrupted run #1: OK run #2: crashed: invalid opcode in corrupted run #3: crashed: invalid opcode in corrupted run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 14c06b913d4a11b50351ef5bcb3f112247f647f3 Bisecting: 157 revisions left to test after this (roughly 7 steps) [bc622f16c18dd5ef72a8b598b1d9e77bbe0c11d3] Merge tag 'mfd-fixes-6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd determine whether the revision contains the guilty commit revision 1b722407a13b7f8658d2e26917791f32805980a2 crashed and is reachable testing commit bc622f16c18dd5ef72a8b598b1d9e77bbe0c11d3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fbdc05fbc45e7ab181cae027a24e98a22c9ebe2db6892960d79fc9982d35042e run #0: crashed: invalid opcode in corrupted run #1: crashed: invalid opcode in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good bc622f16c18dd5ef72a8b598b1d9e77bbe0c11d3 Bisecting: 78 revisions left to test after this (roughly 6 steps) [72897b29599934753d67932fccdde4c61d03b6db] Merge tag 'wireless-2023-09-27' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless determine whether the revision contains the guilty commit revision 1b722407a13b7f8658d2e26917791f32805980a2 crashed and is reachable testing commit 72897b29599934753d67932fccdde4c61d03b6db gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fbc869d962ef63bce3abee5be71f9ff51f1e4a0fe3b9f201f3edfdfc53149b26 all runs: OK false negative chance: 0.064 # git bisect bad 72897b29599934753d67932fccdde4c61d03b6db Bisecting: 45 revisions left to test after this (roughly 5 steps) [51e7a66666e0ca9642c59464ef8359f0ac604d41] ibmveth: Remove condition to recompute TCP header checksum. determine whether the revision contains the guilty commit revision e1c04510f521e853019afeca2a5991a5ef8d6a5b crashed and is reachable testing commit 51e7a66666e0ca9642c59464ef8359f0ac604d41 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f9c654aa874f3ee3ebfb8a81e5647f869bddd7a8828f6ae9db11782c89a28aaf all runs: OK false negative chance: 0.064 # git bisect bad 51e7a66666e0ca9642c59464ef8359f0ac604d41 Bisecting: 16 revisions left to test after this (roughly 4 steps) [26297b4ce1ce4ea40bc9a48ec99f45da3f64d2e2] net: replace calls to sock->ops->connect() with kernel_connect() determine whether the revision contains the guilty commit revision 1b722407a13b7f8658d2e26917791f32805980a2 crashed and is reachable testing commit 26297b4ce1ce4ea40bc9a48ec99f45da3f64d2e2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f3761d4af4299443b00e26cd7636712f3d0ed07888bf974494bfd7b0b0fd1ab5 all runs: OK false negative chance: 0.064 # git bisect bad 26297b4ce1ce4ea40bc9a48ec99f45da3f64d2e2 Bisecting: 7 revisions left to test after this (roughly 3 steps) [b938790e70540bf4f2e653dcd74b232494d06c8f] Bluetooth: hci_codec: Fix leaking content of local_codecs determine whether the revision contains the guilty commit revision 92901222f83d988617aee37680cb29e1a743b5e4 crashed and is reachable testing commit b938790e70540bf4f2e653dcd74b232494d06c8f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0f48d9c5f0d1a5a9a4244e0de61c54c55e078454d936f70a3b3d2da7ec84717d all runs: OK false negative chance: 0.064 # git bisect bad b938790e70540bf4f2e653dcd74b232494d06c8f Bisecting: 3 revisions left to test after this (roughly 2 steps) [c7eaf80bfb0c8cef852cce9501b95dd5a6bddcb9] Bluetooth: Fix hci_link_tx_to RCU lock usage determine whether the revision contains the guilty commit revision 92901222f83d988617aee37680cb29e1a743b5e4 crashed and is reachable testing commit c7eaf80bfb0c8cef852cce9501b95dd5a6bddcb9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1140da9ce048679118ecd361aadc6314cf2ef47ab722b66e82d41725e11247b6 run #0: crashed: invalid opcode in corrupted run #1: crashed: invalid opcode in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good c7eaf80bfb0c8cef852cce9501b95dd5a6bddcb9 Bisecting: 1 revision left to test after this (roughly 1 step) [1d8e801422d66e4b8c7b187c52196bef94eed887] Bluetooth: Avoid redundant authentication determine whether the revision contains the guilty commit revision 92901222f83d988617aee37680cb29e1a743b5e4 crashed and is reachable testing commit 1d8e801422d66e4b8c7b187c52196bef94eed887 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c632c8a2bd4ccdc713188e38e941c769281d585db7a8f667c0ed746e367f922 run #0: crashed: invalid opcode in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good 1d8e801422d66e4b8c7b187c52196bef94eed887 Bisecting: 0 revisions left to test after this (roughly 0 steps) [dcda165706b9fbfd685898d46a6749d7d397e0c0] Bluetooth: hci_core: Fix build warnings determine whether the revision contains the guilty commit revision c7eaf80bfb0c8cef852cce9501b95dd5a6bddcb9 crashed and is reachable testing commit dcda165706b9fbfd685898d46a6749d7d397e0c0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 88d6c6a33b2a69e5670590d0bb7d65c00363c769dd6fa2b73c3b1e63bae29d8b run #0: crashed: invalid opcode in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] # git bisect good dcda165706b9fbfd685898d46a6749d7d397e0c0 b938790e70540bf4f2e653dcd74b232494d06c8f is the first bad commit commit b938790e70540bf4f2e653dcd74b232494d06c8f Author: Luiz Augusto von Dentz Date: Fri Sep 15 13:24:47 2023 -0700 Bluetooth: hci_codec: Fix leaking content of local_codecs The following memory leak can be observed when the controller supports codecs which are stored in local_codecs list but the elements are never freed: unreferenced object 0xffff88800221d840 (size 32): comm "kworker/u3:0", pid 36, jiffies 4294898739 (age 127.060s) hex dump (first 32 bytes): f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff ..........!..... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [] __kmalloc+0x47/0x120 [] hci_codec_list_add.isra.0+0x2d/0x160 [] hci_read_codec_capabilities+0x183/0x270 [] hci_read_supported_codecs+0x1bb/0x2d0 [] hci_read_local_codecs_sync+0x3e/0x60 [] hci_dev_open_sync+0x943/0x11e0 [] hci_power_on+0x10d/0x3f0 [] process_one_work+0x404/0x800 [] worker_thread+0x374/0x670 [] kthread+0x188/0x1c0 [] ret_from_fork+0x2b/0x50 [] ret_from_fork_asm+0x1a/0x30 Cc: stable@vger.kernel.org Fixes: 8961987f3f5f ("Bluetooth: Enumerate local supported codec and cache details") Signed-off-by: Luiz Augusto von Dentz net/bluetooth/hci_core.c | 1 + net/bluetooth/hci_event.c | 1 + net/bluetooth/hci_sync.c | 1 + 3 files changed, 3 insertions(+) accumulated error probability: 0.25 culprit signature: 0f48d9c5f0d1a5a9a4244e0de61c54c55e078454d936f70a3b3d2da7ec84717d parent signature: 88d6c6a33b2a69e5670590d0bb7d65c00363c769dd6fa2b73c3b1e63bae29d8b reproducer is flaky (0.07 repro chance estimate) revisions tested: 24, total time: 7h6m41.13589363s (build: 3h31m43.898334819s, test: 3h19m7.133367425s) first good commit: b938790e70540bf4f2e653dcd74b232494d06c8f Bluetooth: hci_codec: Fix leaking content of local_codecs recipients (to): ["johan.hedberg@gmail.com" "linux-bluetooth@vger.kernel.org" "luiz.dentz@gmail.com" "luiz.von.dentz@intel.com" "marcel@holtmann.org"] recipients (cc): ["linux-kernel@vger.kernel.org"]