ci starts bisection 2023-08-04 23:47:23.760508624 +0000 UTC m=+19852.578704212 bisecting cause commit starting from bdffb18b5dd8071cd25685b966f380a30b1fadaa building syzkaller on 746212479e443b2bb560dc310bd90300ecf31246 ensuring issue is reproducible on original commit bdffb18b5dd8071cd25685b966f380a30b1fadaa testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ab449459f0ba5deb86e7f6bd5469f7226e59a98cd54ae803dd8fcfbb2beafef2 all runs: crashed: general protection fault in generic_hwtstamp_ioctl_lower representative crash: general protection fault in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1bd42a9e87c9a149cf11d10e397edc798a1415273cdcf46d51015df743cc838e all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3883 full=7671 leaves diff=2013 split chunks (needed=false): <2013> split chunk #0 of len 2013 into 5 parts testing without sub-chunk 1/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cec96758ea4f0a1ac14515b7eb50693cbffca43f3f9c1990969a6e4a4e647f9b all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2f30cfbe328374e9b374faf5db2e41c390dd5c8cbe3a1f762f34b37d977dd70b all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2f7bb5f12c9d0960fadc4861c36433a1fcb61066497c80abf98111fd53c0a899 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b5005b7c20b2d74fe15f0437e84a0b469048dcb3348febefe7e319a4a06bb473 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit bdffb18b5dd8071cd25685b966f380a30b1fadaa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d39bfac53c3b1931c874da41178632c0b08742c64775f69f9ac6bda0f4498a24 all runs: OK false negative chance: 0.000 minimized to 401 configs; suspects: [ARCH_ENABLE_MEMORY_HOTREMOVE ATM BCMA BLK_DEV_ZONED BPF_SYSCALL CARDBUS CFG80211 CFG80211_WEXT CMA COMMON_CLK CONTIG_ALLOC CRYPTO_842 CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_ZSTD DVB_CORE EXTCON FB GPIOLIB HID_ZEROPLUS I2C_MUX IIO IOMMUFD IRQ_REMAP KVM KVM_INTEL LIBNVDIMM MEDIA_ANALOG_TV_SUPPORT MEDIA_CAMERA_SUPPORT MEDIA_CEC_SUPPORT MEDIA_CONTROLLER MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_VIPERBOARD PARPORT PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RC_CORE RFKILL SND SOUND SPI SSB TAP TARGET_CORE TUN USB_AMD5536UDC USB_ATM USB_CONFIGFS USB_CONFIGFS_F_FS USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_MASS_STORAGE USB_CONFIGFS_NCM USB_CONFIGFS_OBEX USB_CONFIGFS_PHONET USB_CONFIGFS_RNDIS USB_CONFIGFS_SERIAL USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2 USB_DWC2_HOST USB_DWC2_PCI USB_DWC3 USB_DWC3_GADGET USB_DWC3_OF_SIMPLE USB_DWC3_PCI USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_HCD_PLATFORM USB_EHCI_ROOT_HUB_TT USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_F_ACM USB_F_ECM USB_F_EEM USB_F_FS USB_F_HID USB_F_MASS_STORAGE USB_F_MIDI USB_F_NCM USB_F_OBEX USB_F_PHONET USB_F_PRINTER USB_F_RNDIS USB_F_SERIAL USB_F_SS_LB USB_F_SUBSET USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGET USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HSIC_USB3503 USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_ISP1760 USB_ISP1760_DUAL_ROLE USB_ISP1760_HCD USB_ISP1761_UDC USB_KAWETH USB_KC2190 USB_KEENE USB_LAN78XX USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LIBCOMPOSITE USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MR800 USB_MSI2500 USB_MUSB_DUAL_ROLE USB_MUSB_HDRC USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AX88179_178A USB_NET_AX8817X USB_NET_CDCETHER USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CDC_NCM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_DM9601 USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_OXU210HP_HCD USB_PEGASUS USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_RTL8150 USB_RTL8152 USB_RTL8153_ECM USB_S2255 USB_SERIAL USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CP210X USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_FTDI_SIO USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OPTION USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_WWAN USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SNP_CORE USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_UAS USB_UEAGLEATM USB_ULPI_BUS USB_USBNET USB_USS720 USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_VIDEO_CLASS USB_VIDEO_CLASS_INPUT_EVDEV USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XHCI_PLATFORM USB_XUSBATM USB_YUREX USERFAULTFD USERIO USERMODE_DRIVER USER_RETURN_NOTIFIER UVC_COMMON U_SERIAL_CONSOLE V4L2_MEM2MEM_DEV V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VETH VFIO VFIO_GROUP VFIO_PCI VFIO_PCI_CORE VFIO_PCI_INTX VFIO_PCI_MMAP VFIO_VIRQFD VGASTATE VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_TASK VHOST_VDPA VHOST_VSOCK VIDEOBUF2_CORE VIDEOBUF2_DMA_CONTIG VIDEOBUF2_DMA_SG VIDEOBUF2_MEMOPS VIDEOBUF2_V4L2 VIDEOBUF2_VMALLOC VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CMDLINE VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_DEV VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_NOMODESET VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_I2C VIDEO_V4L2_SUBDEV_API VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_BALLOON VIRTIO_DMA_SHARED_BUFFER VIRTIO_MEM VIRTIO_MMIO VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_PMEM VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VLAN_8021Q VLAN_8021Q_GVRP VLAN_8021Q_MVRP VMAP_PFN VMWARE_VMCI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VT_HW_CONSOLE_BINDING VXFS_FS WANT_DEV_COREDUMP WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS X86_SGX X86_SGX_KVM X86_X2APIC X86_X32_ABI XARRAY_MULTI XDP_SOCKETS XDP_SOCKETS_DIAG XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER_COMPAT XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XOR_BLOCKS YENTA YENTA_ENE_TUNE YENTA_O2 YENTA_RICOH YENTA_TI YENTA_TOSHIBA ZBUD ZEROPLUS_FF ZLIB_DEFLATE ZONEFS_FS ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSTD_COMPRESS ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0625c3dd196766db265f1ce8b7c38abe56e7b05f232db19394bc99639af27693 all runs: OK false negative chance: 0.000 # git bisect start bdffb18b5dd8071cd25685b966f380a30b1fadaa 6995e2de6891c724bfeb2db33d7b87775f913ad1 Bisecting: 10515 revisions left to test after this (roughly 13 steps) [0a8d6c9c7128a93689fba384cdd7f72b0ce19abd] Merge tag 'backlight-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/backlight testing commit 0a8d6c9c7128a93689fba384cdd7f72b0ce19abd gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3e36ad3b8c55f94120a3a860b79a5c370b513ee3e976a17b43f5734cc540fc31 all runs: OK false negative chance: 0.000 # git bisect good 0a8d6c9c7128a93689fba384cdd7f72b0ce19abd Bisecting: 5263 revisions left to test after this (roughly 12 steps) [ab5d5d19c43dff6fc139e7f159bb3b1109265c1a] Merge branch 'afs-next' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git testing commit ab5d5d19c43dff6fc139e7f159bb3b1109265c1a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e056482f55076445285dffbdb3010a7c634864516a5240aa7b3b80ae5fc1e2b7 all runs: OK false negative chance: 0.000 # git bisect good ab5d5d19c43dff6fc139e7f159bb3b1109265c1a Bisecting: 2521 revisions left to test after this (roughly 11 steps) [e8ca3b6cba74b39f74311810405ff5254de2904f] Merge branch 'drm-next' of https://gitlab.freedesktop.org/agd5f/linux testing commit e8ca3b6cba74b39f74311810405ff5254de2904f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 062aa0379ced4aaced5ac223d776dc413c0c1718c9073cdbed457dfb80624390 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] # git bisect bad e8ca3b6cba74b39f74311810405ff5254de2904f Bisecting: 998 revisions left to test after this (roughly 11 steps) [e26b10b8066da9d035c1b53652dd35fc8977898d] Merge branch 'main' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git testing commit e26b10b8066da9d035c1b53652dd35fc8977898d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d75da6d61c4a8954cead1020539d42519ca94becc38aecfdd68b6b9ffa3f01a5 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] # git bisect bad e26b10b8066da9d035c1b53652dd35fc8977898d Bisecting: 849 revisions left to test after this (roughly 10 steps) [5332e35a937c0a28a4f070c42c9dd7437efa7a5c] Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm.git testing commit 5332e35a937c0a28a4f070c42c9dd7437efa7a5c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cc0a2e457a62d61c383453a94c96b7877cbdd1ca02bb2bcb16851c2db8cc983e all runs: OK false negative chance: 0.000 # git bisect good 5332e35a937c0a28a4f070c42c9dd7437efa7a5c Bisecting: 424 revisions left to test after this (roughly 9 steps) [eb03993a60780589e06e04a4dc23fda62b905ca6] Merge branch 'support-defragmenting-ipv-4-6-packets-in-bpf' testing commit eb03993a60780589e06e04a4dc23fda62b905ca6 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1319a849edc566e52a26a418c18693a8c41293a8fca9cb5c1357f288271a3c66 all runs: OK false negative chance: 0.000 # git bisect good eb03993a60780589e06e04a4dc23fda62b905ca6 Bisecting: 212 revisions left to test after this (roughly 8 steps) [05e1d8bdb276068069d3de65e488700280029e20] Merge branch 'mptcp-cleanup-and-improvements-in-the-selftests' testing commit 05e1d8bdb276068069d3de65e488700280029e20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fb0bcbbc668a135be395cebd43ab6b06194e54cc0d227e79ab16cfb2b8007b78 all runs: OK false negative chance: 0.000 # git bisect good 05e1d8bdb276068069d3de65e488700280029e20 Bisecting: 106 revisions left to test after this (roughly 7 steps) [f11e5bd159b08976db9e7a9eabbf0318dfe5429d] bonding: support balance-alb with openvswitch testing commit f11e5bd159b08976db9e7a9eabbf0318dfe5429d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 873781273974006776f85ae4890bd141cf6327354100fc6f02509d250a87a44c all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] # git bisect bad f11e5bd159b08976db9e7a9eabbf0318dfe5429d Bisecting: 52 revisions left to test after this (roughly 6 steps) [b8d5008f8c517b7cd61855fdb574b1ee80bcf4a3] net: ti: icssg-prueth: Add icssg queues APIs and macros testing commit b8d5008f8c517b7cd61855fdb574b1ee80bcf4a3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 05fb7143bdc1012a67bffe6380a5e664b469a6f0e969f7558be59b969b31ee92 all runs: OK false negative chance: 0.000 # git bisect good b8d5008f8c517b7cd61855fdb574b1ee80bcf4a3 Bisecting: 26 revisions left to test after this (roughly 5 steps) [f46e92d664fb6a3751e90812419decf5e178e06a] net/mlx5e: Refactor IPsec TX tables creation testing commit f46e92d664fb6a3751e90812419decf5e178e06a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7c7fdc8d25386c46ebf46702fcc273095c7631e3d677ece6841c5811ea2dbd13 all runs: OK false negative chance: 0.000 # git bisect good f46e92d664fb6a3751e90812419decf5e178e06a Bisecting: 13 revisions left to test after this (roughly 4 steps) [72c1a28473fb132f08a2a447dd1425a472696cd9] Merge branch 'net-extend-alloc_skb_with_frags-max-size' testing commit 72c1a28473fb132f08a2a447dd1425a472696cd9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 73c755a0227e39062e4572ef9a7c66b32a39cbdc2de9849dc69f8dac9cf760d9 all runs: OK false negative chance: 0.000 # git bisect good 72c1a28473fb132f08a2a447dd1425a472696cd9 Bisecting: 6 revisions left to test after this (roughly 3 steps) [547b006d192261067323efe4b1a12287cf3e4ac2] net: fec: delete fec_ptp_disable_hwts() testing commit 547b006d192261067323efe4b1a12287cf3e4ac2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3abf1fbbba96d6ce5b64e43225b2d8654f03254bd35d4db654f8a3e00b6d826d all runs: OK false negative chance: 0.000 # git bisect good 547b006d192261067323efe4b1a12287cf3e4ac2 Bisecting: 3 revisions left to test after this (roughly 2 steps) [70ef7d87f62a86674c21a99341dabc175c19681a] net: transfer rtnl_lock() requirement from ethtool_set_ethtool_phy_ops() to caller testing commit 70ef7d87f62a86674c21a99341dabc175c19681a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ba11ca9487bae4e03eaebb633c50dea244ab40969eb5a5d61759d40eb73f4416 all runs: OK false negative chance: 0.000 # git bisect good 70ef7d87f62a86674c21a99341dabc175c19681a Bisecting: 1 revision left to test after this (roughly 1 step) [fd770e856e226f80fe6e1dc9d1861bcb135cdf0b] net: remove phy_has_hwtstamp() -> phy_mii_ioctl() decision from converted drivers testing commit fd770e856e226f80fe6e1dc9d1861bcb135cdf0b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 34fdf7ae3e229593ec40f499928c5574ebaf583e2acff3056d8f18f7f54fffce all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower representative crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower, types: [UNKNOWN] # git bisect bad fd770e856e226f80fe6e1dc9d1861bcb135cdf0b Bisecting: 0 revisions left to test after this (roughly 0 steps) [60495b6622ca67f5180343b89bd932d28d23f63a] net: phy: provide phylib stubs for hardware timestamping operations testing commit 60495b6622ca67f5180343b89bd932d28d23f63a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f3848e209694c8442f6db1dc26e3c07515547a30f3a657b203492f06cd655dbb all runs: OK false negative chance: 0.000 # git bisect good 60495b6622ca67f5180343b89bd932d28d23f63a fd770e856e226f80fe6e1dc9d1861bcb135cdf0b is the first bad commit commit fd770e856e226f80fe6e1dc9d1861bcb135cdf0b Author: Vladimir Oltean Date: Tue Aug 1 17:28:24 2023 +0300 net: remove phy_has_hwtstamp() -> phy_mii_ioctl() decision from converted drivers It is desirable that the new .ndo_hwtstamp_set() API gives more uniformity, less overhead and future flexibility w.r.t. the PHY timestamping behavior. Currently there are some drivers which allow PHY timestamping through the procedure mentioned in Documentation/networking/timestamping.rst. They don't do anything locally if phy_has_hwtstamp() is set, except for lan966x which installs PTP packet traps. Centralize that behavior in a new dev_set_hwtstamp_phylib() code function, which calls either phy_mii_ioctl() for the phylib PHY, or .ndo_hwtstamp_set() of the netdev, based on a single policy (currently simplistic: phy_has_hwtstamp()). Any driver converted to .ndo_hwtstamp_set() will automatically opt into the centralized phylib timestamping policy. Unconverted drivers still get to choose whether they let the PHY handle timestamping or not. Netdev drivers with integrated PHY drivers that don't use phylib presumably don't set dev->phydev, and those will always see HWTSTAMP_SOURCE_NETDEV requests even when converted. The timestamping policy will remain 100% up to them. Signed-off-by: Vladimir Oltean Reviewed-by: Jacob Keller Tested-by: Horatiu Vultur Link: https://lore.kernel.org/r/20230801142824.1772134-13-vladimir.oltean@nxp.com Signed-off-by: Jakub Kicinski drivers/net/ethernet/freescale/fec_main.c | 8 -- .../net/ethernet/microchip/lan966x/lan966x_main.c | 25 +++--- .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 6 -- include/linux/net_tstamp.h | 16 ++++ include/linux/netdevice.h | 4 + net/core/dev_ioctl.c | 91 ++++++++++++++++++++-- 6 files changed, 117 insertions(+), 33 deletions(-) accumulated error probability: 0.00 culprit signature: 34fdf7ae3e229593ec40f499928c5574ebaf583e2acff3056d8f18f7f54fffce parent signature: f3848e209694c8442f6db1dc26e3c07515547a30f3a657b203492f06cd655dbb revisions tested: 23, total time: 5h48m24.30010454s (build: 2h53m17.654073037s, test: 2h32m38.788373029s) first bad commit: fd770e856e226f80fe6e1dc9d1861bcb135cdf0b net: remove phy_has_hwtstamp() -> phy_mii_ioctl() decision from converted drivers recipients (to): ["horatiu.vultur@microchip.com" "jacob.e.keller@intel.com" "kuba@kernel.org" "vladimir.oltean@nxp.com"] recipients (cc): [] crash: BUG: unable to handle kernel NULL pointer dereference in generic_hwtstamp_ioctl_lower BUG: kernel NULL pointer dereference, address: 0000000000000010 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 11a71e067 P4D 11a71e067 PUD 11a726067 PMD 0 Oops: 0000 [#1] PREEMPT SMP CPU: 1 PID: 2795 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 RIP: 0010:generic_hwtstamp_ioctl_lower+0x70/0xe0 net/core/dev_ioctl.c:419 Code: 48 c7 44 24 10 00 00 00 00 48 c7 44 24 18 00 00 00 00 48 c7 44 24 20 00 00 00 00 e8 7a 01 7b ff 48 8b 43 10 4c 89 e7 48 89 e6 <48> 8b 50 10 48 89 54 24 10 48 8b 50 18 48 89 54 24 18 48 8b 40 20 RSP: 0018:ffffc9000159bbc0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffc9000159bc20 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffc9000159bbc0 RDI: ffff88811a507000 RBP: ffffc9000159bc08 R08: fefefefefeff6d60 R09: 0000000000000003 R10: ffffc9000159bbcb R11: fefefefefefefeff R12: ffff88811a507000 R13: 00000000000089b1 R14: 0000000000000000 R15: ffff88811a524000 FS: 00007f7e04b7e6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000010 CR3: 000000011a6c4000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dev_set_hwtstamp_phylib+0x123/0x210 net/core/dev_ioctl.c:338 dev_set_hwtstamp+0x106/0x180 net/core/dev_ioctl.c:395 dev_ifsioc+0x251/0x5d0 net/core/dev_ioctl.c:597 dev_ioctl+0x115/0x500 net/core/dev_ioctl.c:783 sock_do_ioctl+0xcb/0x110 net/socket.c:1204 sock_ioctl+0xe8/0x330 net/socket.c:1307 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x8b/0xc0 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7e04ffbae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7e04b7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f7e0511af80 RCX: 00007f7e04ffbae9 RDX: 0000000020000080 RSI: 00000000000089b0 RDI: 0000000000000003 RBP: 00007f7e0504747a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f7e0511af80 R15: 00007ffd73034b28 Modules linked in: CR2: 0000000000000010 ---[ end trace 0000000000000000 ]--- RIP: 0010:generic_hwtstamp_ioctl_lower+0x70/0xe0 net/core/dev_ioctl.c:419 Code: 48 c7 44 24 10 00 00 00 00 48 c7 44 24 18 00 00 00 00 48 c7 44 24 20 00 00 00 00 e8 7a 01 7b ff 48 8b 43 10 4c 89 e7 48 89 e6 <48> 8b 50 10 48 89 54 24 10 48 8b 50 18 48 89 54 24 18 48 8b 40 20 RSP: 0018:ffffc9000159bbc0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffc9000159bc20 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffc9000159bbc0 RDI: ffff88811a507000 RBP: ffffc9000159bc08 R08: fefefefefeff6d60 R09: 0000000000000003 R10: ffffc9000159bbcb R11: fefefefefefefeff R12: ffff88811a507000 R13: 00000000000089b1 R14: 0000000000000000 R15: ffff88811a524000 FS: 00007f7e04b7e6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000010 CR3: 000000011a6c4000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 c7 44 24 10 00 00 movq $0x0,0x10(%rsp) 7: 00 00 9: 48 c7 44 24 18 00 00 movq $0x0,0x18(%rsp) 10: 00 00 12: 48 c7 44 24 20 00 00 movq $0x0,0x20(%rsp) 19: 00 00 1b: e8 7a 01 7b ff call 0xff7b019a 20: 48 8b 43 10 mov 0x10(%rbx),%rax 24: 4c 89 e7 mov %r12,%rdi 27: 48 89 e6 mov %rsp,%rsi * 2a: 48 8b 50 10 mov 0x10(%rax),%rdx <-- trapping instruction 2e: 48 89 54 24 10 mov %rdx,0x10(%rsp) 33: 48 8b 50 18 mov 0x18(%rax),%rdx 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 8b 40 20 mov 0x20(%rax),%rax