ci starts bisection 2023-08-24 14:45:55.921482959 +0000 UTC m=+69155.212038408 bisecting cause commit starting from 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 building syzkaller on 3c27dfcd35f9666a404f0e34390da6878f544caa fetch other tags and check if the commit is present ensuring issue is reproducible on original commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cbbc09197c247c6f799b1ea364f05c58c12ab87337a483cd9577ac659691ead5 run #0: crashed: general protection fault in update_blocked_averages run #1: crashed: general protection fault in lookup_object_or_alloc run #2: crashed: general protection fault in update_blocked_averages run #3: crashed: general protection fault in debug_check_no_obj_freed run #4: crashed: WARNING in anon_vma_clone run #5: crashed: general protection fault in __call_rcu_common run #6: crashed: general protection fault in __find_rr_leaf run #7: crashed: BUG: unable to handle kernel paging request in getname_flags run #8: crashed: general protection fault in vma_interval_tree_remove run #9: crashed: general protection fault in lookup_object_or_alloc run #10: crashed: general protection fault in add_grec run #11: crashed: general protection fault in update_blocked_averages run #12: crashed: general protection fault in timerqueue_add run #13: crashed: KASAN: use-after-free Write in __schedule run #14: crashed: KASAN: unknown-crash Read in tick_sched_handle run #15: crashed: general protection fault in lookup_object_or_alloc run #16: crashed: general protection fault in debug_check_no_obj_freed run #17: crashed: general protection fault in timerqueue_add run #18: crashed: BUG: unable to handle kernel paging request in __alloc_skb run #19: crashed: BUG: stack guard page was hit in corrupted representative crash: general protection fault in update_blocked_averages, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 42f3ab265e4dbcb5cbbeafe550ee68d2d875795f043ad9cc6538ce8f2fe1bfe6 all runs: crashed: WARNING: bad unlock balance in vkms_vblank_simulate representative crash: WARNING: bad unlock balance in vkms_vblank_simulate, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed kconfig minimization: base=3883 full=7674 leaves diff=2013 split chunks (needed=false): <2013> split chunk #0 of len 2013 into 5 parts testing without sub-chunk 1/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 29be1fe00e780f7c347f6932f0ea0f0587f3e3301c3f63339e43c8d35bcd5390 all runs: crashed: WARNING: bad unlock balance in vkms_vblank_simulate representative crash: WARNING: bad unlock balance in vkms_vblank_simulate, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b05ff845bcfa64c57d1967d520adec66e3854ee138ae71d630d3902d88ad49b9 run #0: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #1: crashed: BUG: unable to handle kernel paging request in __run_timers run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK representative crash: BUG: unable to handle kernel paging request in leaf_paste_entries, types: [UNKNOWN] testing without sub-chunk 3/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 02ac5ab94be670440da782c570fee014c303399982a131753389a2e528b6877c run #0: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #1: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #2: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #3: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #4: crashed: BUG: unabSeaBIOS (version NUM.NUM.NUM-google) run #5: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #6: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #7: crashed: BUG: unable to handle kernel paging request in corrupted run #8: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #9: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #10: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #11: crashed: BUG: unable to handle pagSeaBIOS (version NUM.NUM.NUM-google) run #12: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #13: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #14: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #15: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #16: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #17: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #18: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #19: crashed: WARNING: bad unlock balance in vkms_vblank_simulate representative crash: WARNING: bad unlock balance in vkms_vblank_simulate, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 50709d7dfc2f5ca073915f57c51ed2c02314798f300dc30fe23a122adbf7ce38 all runs: OK false negative chance: 0.000 testing without sub-chunk 5/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 71cd4fc492ec41e4acd85e98bbf7a13753fc1e03 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ffd2da9f9b20176a99bbb131f4cf1abec73b18cdf07446ca6184f2bd482cd78f run #0: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #1: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #2: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #3: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #4: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #5: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #6: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #7: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #8: crashed: BUG: unable to handle kernel paging request in ip6_finish_output2 run #9: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #10: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #11: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #12: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #13: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #14: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #15: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #16: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #17: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #18: crashed: WARNING: bad unlock balance in vkms_vblank_simulate run #19: basic kernel testing failed: lost connection to test machine representative crash: WARNING: bad unlock balance in vkms_vblank_simulate, types: [LOCKDEP] the chunk can be dropped minimized to 806 configs; suspects: [6LOWPAN AF_RXRPC ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI ATM AX25 BLK_DEV_ZONED CFG80211 CMA COMMON_CLK DAX DLM DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DP_AUX_CHARDEV DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXTCON EXTCON_INTEL_CHT_WC F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_CORE FB_DEFERRED_IO FB_DEVICE FB_IOMEM_HELPERS FB_NOTIFY FB_SYSMEM_HELPERS FB_SYSMEM_HELPERS_DEFERRED FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GENEVE GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GUEST_PERF_EVENTS GVE HAMRADIO HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_EVENTFD HAVE_KVM_IRQCHIP HAVE_KVM_IRQFD HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_DRAGONRISE HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SMARTJOYPLUS HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_THRUSTMASTER HID_TIVO HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INFINIBAND_VIRT_DMA INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_TABLET INPUT_TOUCHSCREEN INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_TEST IOMMU_SVA IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_ROUTE_CLASSID IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_PROTO_TCP IRQ_TIME_ACCOUNTING L2TP LAPB LCD_CLASS_DEVICE LIBNVDIMM MAC802154 MEDIA_COMMON_OPTIONS MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_RETU MFD_VIPERBOARD MMC MPTCP MTD MTD_UBI NETFILTER_ADVANCED NETFILTER_CONNCOUNT NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE NET_IPGRE_DEMUX NFS_V4_1 NFT_FWD_NETDEV NF_CONNTRACK_SNMP NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TABLES_NETDEV NF_TPROXY_IPV4 NF_TPROXY_IPV6 NILFS2_FS NLMON NLS_CODEPAGE_1250 NLS_CODEPAGE_1251 NLS_CODEPAGE_737 NLS_CODEPAGE_775 NLS_CODEPAGE_850 NLS_CODEPAGE_852 NLS_CODEPAGE_855 NLS_CODEPAGE_857 NLS_CODEPAGE_860 NLS_CODEPAGE_861 NLS_CODEPAGE_862 NLS_CODEPAGE_863 NLS_CODEPAGE_864 NLS_CODEPAGE_865 NLS_CODEPAGE_866 NLS_CODEPAGE_869 NLS_CODEPAGE_874 NLS_CODEPAGE_932 NLS_CODEPAGE_936 NLS_CODEPAGE_949 NLS_CODEPAGE_950 NLS_ISO8859_13 NLS_ISO8859_14 NLS_ISO8859_15 NLS_ISO8859_2 NLS_ISO8859_3 NLS_ISO8859_4 NLS_ISO8859_5 NLS_ISO8859_6 NLS_ISO8859_7 NLS_ISO8859_8 NLS_ISO8859_9 NLS_KOI8_R NLS_KOI8_U NLS_MAC_CELTIC NLS_MAC_CENTEURO NLS_MAC_CROATIAN NLS_MAC_CYRILLIC NLS_MAC_GAELIC NLS_MAC_GREEK NLS_MAC_ICELAND NLS_MAC_INUIT NLS_MAC_ROMAN NLS_MAC_ROMANIAN NLS_MAC_TURKISH NOP_USB_XCEIV NOZOMI NTFS3_FS NTFS3_FS_POSIX_ACL NTFS3_LZX_XPRESS NTFS_FS NTFS_RW NULL_TTY NUMA_BALANCING NUMA_BALANCING_DEFAULT_ENABLED NUMA_EMU NUMA_KEEP_MEMINFO NVDIMM_DAX NVDIMM_KEYS NVDIMM_PFN NVME_CORE NVME_FABRICS NVME_FC NVME_MULTIPATH NVME_RDMA NVME_TARGET NVME_TARGET_FC NVME_TARGET_FCLOOP NVME_TARGET_LOOP NVME_TARGET_RDMA NVME_TARGET_TCP NVME_TCP N_GSM N_HDLC OCFS2_DEBUG_FS OCFS2_FS OCFS2_FS_O2CB OCFS2_FS_STATS OCFS2_FS_USERSPACE_CLUSTER OF_GPIO OF_PMEM OMFS_FS OPENVSWITCH OPENVSWITCH_GENEVE OPENVSWITCH_GRE OPENVSWITCH_VXLAN ORANGEFS_FS OSF_PARTITION OVERLAY_FS OVERLAY_FS_INDEX OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW OVERLAY_FS_REDIRECT_DIR PACKET_DIAG PADATA PAGE_IDLE_FLAG PAGE_POOL PAGE_REPORTING PAHOLE_HAS_LANG_EXCLUDE PAHOLE_HAS_SPLIT_BTF PARPORT PARPORT_NOT_PC PARTITION_ADVANCED PCCARD PCCARD_NONSTATIC PCIEAER PCI_ENDPOINT PCI_IOV PCMCIA PCMCIA_LOAD_CIS PERCPU_STATS PERSISTENT_KEYRINGS PHONET PHYLINK PHY_CPCAP_USB PHY_QCOM_USB_HS PHY_QCOM_USB_HSIC PHY_SAMSUNG_USB2 PHY_TUSB1210 PKCS7_TEST_KEY PKCS8_PRIVATE_KEY_PARSER PM_CLK PNFS_BLOCK PNFS_FILE_LAYOUT PNFS_FLEXFILE_LAYOUT PPP PPPOATM PPPOE PPPOE_HASH_BITS_4 PPPOL2TP PPP_ASYNC PPP_BSDCOMP PPP_DEFLATE PPP_FILTER PPP_MPPE PPP_MULTILINK PPP_SYNC_TTY PPTP PREEMPT PREEMPT_NOTIFIERS PRISM2_USB PROC_CHILDREN PSI PSTORE PSTORE_COMPRESS QCOM_QMI_HELPERS QNX4FS_FS QNX6FS_FS QRTR QRTR_TUN R8712U RADIO_ADAPTERS RADIO_SHARK RADIO_SHARK2 RADIO_SI4713 RADIO_TEA575X RAID6_PQ RAID_ATTRS RAS RC_ATI_REMOTE RC_CORE RC_DEVICES RDMA_RXE RDMA_SIW RDS RDS_RDMA RDS_TCP READ_ONLY_THP_FOR_FS REALTEK_AUTOPM REED_SOLOMON REED_SOLOMON_DEC8 REGMAP REGMAP_I2C REGMAP_IRQ REGMAP_MMIO REGULATOR REGULATOR_TWL4030 REISERFS_FS REISERFS_FS_POSIX_ACL REISERFS_FS_SECURITY REISERFS_FS_XATTR REISERFS_PROC_INFO RESET_CONTROLLER RFKILL RFKILL_INPUT RFKILL_LEDS RMI4_2D_SENSOR RMI4_CORE RMI4_F03 RMI4_F03_SERIO RMI4_F11 RMI4_F12 RMI4_F30 ROMFS_BACKED_BY_BOTH ROMFS_FS ROMFS_ON_BLOCK ROMFS_ON_MTD ROSE RTC_DRV_HID_SENSOR_TIME RXKAD SCHED_CORE SCSI_FC_ATTRS SCSI_HPSA SCSI_ISCSI_ATTRS SCSI_LOGGING SCSI_NETLINK SCSI_SAS_ATA SCSI_SAS_ATTRS SCSI_SAS_LIBSAS SCSI_SCAN_ASYNC SCSI_SRP_ATTRS SCTP_COOKIE_HMAC_MD5 SCTP_COOKIE_HMAC_SHA1 SCTP_DEFAULT_COOKIE_HMAC_MD5 SECONDARY_TRUSTED_KEYRING SECURITY_INFINIBAND SECURITY_NETWORK_XFRM SERIAL_DEV_BUS SERIAL_DEV_CTRL_TTYPORT SERIAL_MCTRL_GPIO SGI_PARTITION SIGNATURE SIGNED_PE_FILE_VERIFICATION SLHC SLIP SLIP_COMPRESSED SLIP_MODE_SLIP6 SLIP_SMART SMARTJOYPLUS_FF SMBFS SMC SMC_DIAG SMSC_PHY SMS_SIANO_MDTV SMS_SIANO_RC SMS_USB_DRV SND SND_ALOOP SND_BCD2000 SND_CTL_FAST_LOOKUP SND_CTL_LED SND_DEBUG SND_DMA_SGBUF SND_DRIVERS SND_DUMMY SND_DYNAMIC_MINORS SND_HDA SND_HDA_CODEC_ANALOG SND_HDA_CODEC_CA0110 SND_HDA_CODEC_CA0132 SND_HDA_CODEC_CIRRUS SND_HDA_CODEC_CMEDIA SND_HDA_CODEC_CONEXANT SND_HDA_CODEC_HDMI SND_HDA_CODEC_REALTEK SND_HDA_CODEC_SI3054 SND_HDA_CODEC_SIGMATEL SND_HDA_CODEC_VIA SND_HDA_COMPONENT SND_HDA_CORE SND_HDA_GENERIC SND_HDA_GENERIC_LEDS SND_HDA_HWDEP SND_HDA_I915 SND_HDA_INPUT_BEEP SND_HDA_INTEL SND_HDA_PATCH_LOADER SND_HDA_RECONFIG SND_HRTIMER SND_HWDEP SND_INTEL_DSP_CONFIG SND_INTEL_NHLT SND_INTEL_SOUNDWIRE_ACPI SND_JACK SND_JACK_INPUT_DEV SND_MIXER_OSS SND_OSSEMUL SND_PCI SND_PCM SND_PCMCIA SND_PCM_OSS SND_PCM_OSS_PLUGINS SND_PCM_TIMER SND_PCM_XRUN_DEBUG SND_PROC_FS SND_RAWMIDI SND_SEQUENCER SND_SEQUENCER_OSS SND_SEQ_DEVICE SND_SEQ_DUMMY SND_SEQ_HRTIMER_DEFAULT SND_SEQ_MIDI SND_SEQ_MIDI_EVENT SND_SEQ_VIRMIDI SND_SUPPORT_OLD_API SND_TIMER SND_USB SND_USB_6FIRE SND_USB_AUDIO SND_USB_AUDIO_USE_MEDIA_CONTROLLER SND_USB_CAIAQ SND_USB_CAIAQ_INPUT SND_USB_HIFACE SND_USB_LINE6 SND_USB_POD SND_USB_PODHD SND_USB_TONEPORT SND_USB_UA101 SND_USB_US122L SND_USB_USX2Y SND_USB_VARIAX SND_VERBOSE_PROCFS SND_VIRMIDI SND_VIRTIO SND_VMASTER SND_X86 SOCK_VALIDATE_XMIT SOLARIS_X86_PARTITION SONY_FF SOUND SOUND_OSS_CORE SOUND_OSS_CORE_PRECLAIM SPI SPI_DLN2 SPI_DYNAMIC SPI_MASTER SQUASHFS SQUASHFS_4K_DEVBLK_SIZE SQUASHFS_COMPILE_DECOMP_SINGLE SQUASHFS_DECOMP_SINGLE SQUASHFS_FILE_DIRECT SQUASHFS_LZ4 SQUASHFS_LZO SQUASHFS_XATTR SQUASHFS_XZ SQUASHFS_ZLIB SQUASHFS_ZSTD SSB SSB_PCIHOST_POSSIBLE SSB_PCMCIAHOST_POSSIBLE SSB_SDIOHOST_POSSIBLE STAGING STP STREAM_PARSER SUNRPC_BACKCHANNEL SUN_PARTITION SW_SYNC SYSFB SYSV68_PARTITION SYSV_FS TABLET_USB_ACECAD TABLET_USB_AIPTEK TABLET_USB_HANWANG TABLET_USB_KBTAB TABLET_USB_PEGASUS TAHVO_USB TAHVO_USB_HOST_BY_DEFAULT TASKS_TRACE_RCU TCG_CRB TCG_TIS TCG_TIS_CORE TCG_TPM TCP_CONG_BBR TCP_CONG_BIC TCP_CONG_CDG TCP_CONG_DCTCP TCP_CONG_HSTCP TCP_CONG_HTCP TCP_CONG_HYBLA TCP_CONG_ILLINOIS TCP_CONG_LP TCP_CONG_NV TCP_CONG_SCALABLE TCP_CONG_VEGAS TCP_CONG_VENO TCP_CONG_WESTWOOD TCP_CONG_YEAH TEXTSEARCH TEXTSEARCH_BM TEXTSEARCH_FSM TEXTSEARCH_KMP THERMAL_NETLINK THP_SWAP THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_TOE TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TWL4030_CORE TYPEC TYPEC_FUSB302 TYPEC_TCPCI TYPEC_TCPM TYPEC_TPS6598X TYPEC_UCSI UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ACM USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AN2720 USB_APPLEDISPLAY USB_ARMLINUX USB_BDC_UDC USB_BELKIN USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CHAOSKEY USB_CHIPIDEA USB_CHIPIDEA_HOST USB_CHIPIDEA_PCI USB_CHIPIDEA_UDC USB_CONFIGFS USB_CONFIGFS_ACM USB_CONFIGFS_ECM USB_CONFIGFS_ECM_SUBSET USB_CONFIGFS_EEM USB_DWC2 USB_GADGET USB_MUSB_HDRC USB_NET_CDC_SUBSET USB_ROLE_SWITCH USB_STORAGE_REALTEK USB_ULPI_BUS USB_USBNET VIDEO_DEV VIRTIO_FS VXLAN WAN WIRELESS WLAN ZONE_DEVICE] disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing release v6.4 testing commit 6995e2de6891c724bfeb2db33d7b87775f913ad1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3d5c30737ef9bf781666b7923daaeb1abfa94454f712b4804e6e7983a6dfdb6a run #0: crashed: BUG: unable to handle kernel paging request in timerqueue_add run #1: crashed: BUG: unable to handle kernel paging request in corrupted run #2: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #3: crashed: BUG: unable to handle kernel paging request in __run_timers run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in timerqueue_add, types: [UNKNOWN] testing release v6.3 testing commit 457391b0380335d5e9a5babdec90ac53928b23b4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: da2d45002def1173047c5e56484937ed0c8395cc2470e3e8c917252cf210f3e0 run #0: crashed: invalid opcode in corrupted run #1: crashed: BUG: unable to handle kernel paging request in alloc_buffer_head run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in corrupted, types: [UNKNOWN] testing release v6.2 testing commit c9c3395d5e3dcc6daee66c6908354d47bf98cb0c gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3673746c72fb63091c37b95f77b8644b00a19723374b3c81ff847750091f18e2 run #0: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #1: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #2: crashed: BUG: unable to handle kernel paging request in __handle_mm_fault run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in leaf_paste_entries, types: [UNKNOWN] testing release v6.1 testing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 08caf7c2fa1243e1de388ebfa6082e86e08472724f476a4a145e8d87e9fc4316 run #0: crashed: BUG: unable to handle kernel paging request in corrupted run #1: crashed: invalid opcode in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in corrupted, types: [UNKNOWN] testing release v6.0 testing commit 4fe89d07dcc2804c8b562f6c7896a45643d34b2f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5e1aabf0650245a47de51984f58948240a03bef51e0ce28082db80caef218b53 run #0: crashed: BUG: unable to handle kernel paging request in __find_get_block run #1: crashed: BUG: unable to handle kernel paging request in timerqueue_add run #2: crashed: kernel panic: stack is corrupted in do_idle run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in __find_get_block, types: [UNKNOWN] testing release v5.19 testing commit 3d7cb6b04c3f3115719235cc6866b10326de34cd gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6f0b41384a2a9d6971249651ca3891596d23adb3b8f27bbffccaab42ef4d8367 run #0: crashed: BUG: unable to handle kernel paging request in corrupted run #1: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #2: crashed: BUG: unable to handle kernel paging request in timerqueue_del run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in corrupted, types: [UNKNOWN] testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 51f0a06acf9b82b542c8855dcade9262fdf5758debb52b8bb6aac049a4319d4a all runs: OK false negative chance: 0.000 # git bisect start 3d7cb6b04c3f3115719235cc6866b10326de34cd 4b0986a3613c92f4ec1bdc7f60ec66fea135991f Bisecting: 8493 revisions left to test after this (roughly 13 steps) [c011dd537ffe47462051930413fed07dbdc80313] Merge tag 'arm-soc-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit c011dd537ffe47462051930413fed07dbdc80313 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 475d251347aafbcc82b950dab7d7694cef1bf30a27f5b5a8fc1ca477ba2c68f6 run #0: crashed: BUG: unable to handle page fault foSeaBIOS (version NUM.NUM.NUM-google) run #1: basic kernel testing failed: failed to copy binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/tmp/syz-executor3732587760" "root@10.128.1.112:./syz-executor3732587760"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.1.112, user root, command sftp OpenSSH_9.2p1 Debian-2, OpenSSL 3.0.9 30 May 2023 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.1.112 [10.128.1.112] port 22. debug1: connect to address 10.128.1.112 port 22: Connection timed out ssh: connect to host 10.128.1.112 port 22: Connection timed out scp: Connection closed run #2: crashed: BUG: Bad page map run #3: crashed: BUG: stack guard page was hit in corrupted run #4: crashed: invalid opcode in jbd2_journal_commit_transaction run #5: crashed: BUG: unable to handle kernel paging request in corrupted run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle page fault foSeaBIOS (version NUM.NUM.NUM-google), types: [UNKNOWN] # git bisect bad c011dd537ffe47462051930413fed07dbdc80313 Bisecting: 2961 revisions left to test after this (roughly 12 steps) [7e062cda7d90543ac8c7700fc7c5527d0c0f22ad] Merge tag 'net-next-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next testing commit 7e062cda7d90543ac8c7700fc7c5527d0c0f22ad gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1c6aeb25a1a608ee0a3fc0875bc69fdf4086d26f3687f8a053e46507e4864d35 run #0: crashed: invalid opcode in jbd2_journal_commit_transaction run #1: crashed: BUG: unable to handle kernel paging request in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: invalid opcode in jbd2_journal_commit_transaction, types: [UNKNOWN] # git bisect bad 7e062cda7d90543ac8c7700fc7c5527d0c0f22ad Bisecting: 2538 revisions left to test after this (roughly 11 steps) [3842007b1a33589d57f67eac479b132b77767514] Merge tag 'zonefs-5.19-rc1-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/zonefs testing commit 3842007b1a33589d57f67eac479b132b77767514 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dfa2b8af74a25a33729966647338cd43290c9b6d704c167abc04e590184f0fcf run #0: crashed: BUG: Bad page map run #1: crashed: kernel panic: stack-protector: KernelSeaBIOS (version NUM.NUM.NUM-google) run #2: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: Bad page map, types: [UNKNOWN] # git bisect bad 3842007b1a33589d57f67eac479b132b77767514 Bisecting: 1204 revisions left to test after this (roughly 10 steps) [22922deae13fc8d3769790c2eb388e9afce9771d] Merge tag 'objtool-core-2022-05-23' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 22922deae13fc8d3769790c2eb388e9afce9771d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6ad623fd355b72b1e5e18ff0a896b668198ad40decd428614722deb301020a36 all runs: OK false negative chance: 0.003 # git bisect good 22922deae13fc8d3769790c2eb388e9afce9771d Bisecting: 604 revisions left to test after this (roughly 9 steps) [d8e0f976f104a0258c0426b3805b057411cd0bd2] Merge tag 'spi-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi testing commit d8e0f976f104a0258c0426b3805b057411cd0bd2 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5cbab3e713eb67bce1b599f8c9a4864461555b4f26c6e1ec14f81a03015fbab4 run #0: crashed: BUG: unable to handle kernel paging request in __run_timers run #1: crashed: invalid opcode in __tlb_remove_page_size run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in __run_timers, types: [UNKNOWN] # git bisect bad d8e0f976f104a0258c0426b3805b057411cd0bd2 Bisecting: 282 revisions left to test after this (roughly 8 steps) [076f222a690e11b433d2b1e218dbd9bdb08fb190] Merge tag 'hwmon-for-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging testing commit 076f222a690e11b433d2b1e218dbd9bdb08fb190 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e19160506d530793101d0ee71bda5731ce4e13b002240d8852433e012edb4753 run #0: crashed: BUG: unable to handle kernel paging request in dump_invalid_creds run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in dump_invalid_creds, types: [UNKNOWN] # git bisect bad 076f222a690e11b433d2b1e218dbd9bdb08fb190 Bisecting: 157 revisions left to test after this (roughly 7 steps) [dc8af1ffd657c90733088e0093c7990305b2b4e9] Merge tag 'seccomp-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux testing commit dc8af1ffd657c90733088e0093c7990305b2b4e9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 892ac0615b77d4f6eb54c06878dd216a987668e9e159fd64e1acd5868d4610bb run #0: crashed: BUG: unable to handle kernel paging request in _compound_head run #1: crashed: BUG: unable to handle kernel paging request in __vunmap run #2: crashed: BUG: unable to handle kernel paging request in corrupted run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in _compound_head, types: [UNKNOWN] # git bisect bad dc8af1ffd657c90733088e0093c7990305b2b4e9 Bisecting: 101 revisions left to test after this (roughly 6 steps) [eadb2f47a3ced5c64b23b90fd2a3463f63726066] lockdown: also lock down previous kgdb use testing commit eadb2f47a3ced5c64b23b90fd2a3463f63726066 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 96fde396921518f5737c82d62e7b57b451f2a72e6406d136974d2f7b86378be5 all runs: OK false negative chance: 0.088 # git bisect good eadb2f47a3ced5c64b23b90fd2a3463f63726066 Bisecting: 51 revisions left to test after this (roughly 6 steps) [ac2ab99072cce553c78f326ea22d72856f570d88] Merge tag 'random-5.19-rc1-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/crng/random testing commit ac2ab99072cce553c78f326ea22d72856f570d88 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fd90fbc68c33c0aef2c03bdd10834dafae537a6d8178c7affe985e29153e24a4 run #0: crashed: BUG: Bad page map run #1: crashed: BUG: unable to handle kernel paging request in sock_poll run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: Bad page map, types: [UNKNOWN] # git bisect bad ac2ab99072cce553c78f326ea22d72856f570d88 Bisecting: 24 revisions left to test after this (roughly 5 steps) [a4b5c26b79ffdfcfb816c198f2fc2b1e7b5b580f] random: order timer entropy functions below interrupt functions testing commit a4b5c26b79ffdfcfb816c198f2fc2b1e7b5b580f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7af6e8591c443d550cbc1fcbdef9efec66a9295d4d2fbeb14461a507bdce1dba all runs: OK false negative chance: 0.103 # git bisect good a4b5c26b79ffdfcfb816c198f2fc2b1e7b5b580f Bisecting: 12 revisions left to test after this (roughly 4 steps) [f5bda35fba615ace70a656d4700423fa6c9bebee] random: use static branch for crng_ready() testing commit f5bda35fba615ace70a656d4700423fa6c9bebee gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1e2c6bb06d2dd20eaeb05f4a5544e7562119e0375e9b04f215631db870f507e7 run #0: crashed: kernel panic: stack is corrupted in do_idle run #1: crashed: BUG: unable to handle kernel paging request in timerqueue_add run #2: crashed: BUG: unable to handle kernel paging request in __find_get_block run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: kernel panic: stack is corrupted in do_idle, types: [UNKNOWN] # git bisect bad f5bda35fba615ace70a656d4700423fa6c9bebee Bisecting: 5 revisions left to test after this (roughly 3 steps) [fed7ef061686cc813b1f3d8d0edc6c35b4d3537b] random: avoid initializing twice in credit race testing commit fed7ef061686cc813b1f3d8d0edc6c35b4d3537b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ff437945d89d58beff6b4766cfa7574ed3b9f88c8917ce6520793086eb2dbaef run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in corrupted run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel NULL pointer dereference in corrupted, types: [UNKNOWN] # git bisect bad fed7ef061686cc813b1f3d8d0edc6c35b4d3537b Bisecting: 2 revisions left to test after this (roughly 2 steps) [e73aaae2fa9024832e1f42e30c787c7baf61d014] siphash: use one source of truth for siphash permutations testing commit e73aaae2fa9024832e1f42e30c787c7baf61d014 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 64cfdae6b737016cb40890d34a260f7db7344785b903825ff431b8600b3a3c1e run #0: crashed: BUG: unable to handle kernel paging request in leaf_paste_entries run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK representative crash: BUG: unable to handle kernel paging request in leaf_paste_entries, types: [UNKNOWN] # git bisect bad e73aaae2fa9024832e1f42e30c787c7baf61d014 Bisecting: 0 revisions left to test after this (roughly 1 step) [791332b3cbb080510954a4c152ce02af8832eac9] random: help compiler out with fast_mix() by using simpler arguments testing commit 791332b3cbb080510954a4c152ce02af8832eac9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0e0df629f5a3f0471a66ea7d72bd605e53009f21eb218d68f88ce73c9421804f all runs: OK false negative chance: 0.265 # git bisect good 791332b3cbb080510954a4c152ce02af8832eac9 e73aaae2fa9024832e1f42e30c787c7baf61d014 is the first bad commit commit e73aaae2fa9024832e1f42e30c787c7baf61d014 Author: Jason A. Donenfeld Date: Sat May 7 14:03:46 2022 +0200 siphash: use one source of truth for siphash permutations The SipHash family of permutations is currently used in three places: - siphash.c itself, used in the ordinary way it was intended. - random32.c, in a construction from an anonymous contributor. - random.c, as part of its fast_mix function. Each one of these places reinvents the wheel with the same C code, same rotation constants, and same symmetry-breaking constants. This commit tidies things up a bit by placing macros for the permutations and constants into siphash.h, where each of the three .c users can access them. It also leaves a note dissuading more users of them from emerging. Signed-off-by: Jason A. Donenfeld drivers/char/random.c | 30 +++++++----------------------- include/linux/prandom.h | 23 +++++++---------------- include/linux/siphash.h | 28 ++++++++++++++++++++++++++++ lib/siphash.c | 32 ++++++++++---------------------- 4 files changed, 52 insertions(+), 61 deletions(-) accumulated error probability: 0.40 culprit signature: 64cfdae6b737016cb40890d34a260f7db7344785b903825ff431b8600b3a3c1e parent signature: 0e0df629f5a3f0471a66ea7d72bd605e53009f21eb218d68f88ce73c9421804f reproducer is flaky (0.06 repro chance estimate) revisions tested: 28, total time: 6h58m40.23755964s (build: 2h11m54.777221491s, test: 4h30m28.808560562s) first bad commit: e73aaae2fa9024832e1f42e30c787c7baf61d014 siphash: use one source of truth for siphash permutations recipients (to): ["jason@zx2c4.com"] recipients (cc): [] crash: BUG: unable to handle kernel paging request in leaf_paste_entries REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using r5 hash to sort names REISERFS (device loop0): using 3.5.x disk format BUG: unable to handle page fault for address: ffff88811a826000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 5601067 P4D 5601067 PUD 109315063 PMD 11a825063 PTE 100040020 Oops: 0002 [#1] PREEMPT SMP CPU: 1 PID: 2266 Comm: syz-executor.0 Not tainted 5.18.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:__memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:41 Code: 66 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 RSP: 0018:ffffc90002c17660 EFLAGS: 00010286 RAX: ffff88811112dfb4 RBX: ffff88811112dfa4 RCX: fffffffff6907f94 RDX: ffffffffffffffe0 RSI: ffff88811a825ff0 RDI: ffff88811a826000 RBP: ffff88811112df84 R08: ffff88811112df84 R09: ffff88811112dfb4 R10: 0000000000000020 R11: 0000ff0100000001 R12: 0000000000000001 R13: ffff88811112df84 R14: 0000000000000002 R15: 0000000000000010 FS: 00007f0f8099a6c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88811a826000 CR3: 0000000105bfa000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: leaf_paste_entries+0x130/0x200 fs/reiserfs/lbalance.c:1377 balance_leaf_finish_node_paste_dirent fs/reiserfs/do_balan.c:1295 [inline] balance_leaf_finish_node_paste fs/reiserfs/do_balan.c:1321 [inline] balance_leaf_finish_node fs/reiserfs/do_balan.c:1364 [inline] balance_leaf+0x221a/0x2400 fs/reiserfs/do_balan.c:1452 do_balance+0xa8/0x1c0 fs/reiserfs/do_balan.c:1888 reiserfs_paste_into_item+0x28b/0x2c0 fs/reiserfs/stree.c:2159 reiserfs_add_entry+0x316/0x460 fs/reiserfs/namei.c:567 reiserfs_mkdir+0x244/0x340 fs/reiserfs/namei.c:860 xattr_mkdir fs/reiserfs/xattr.c:76 [inline] create_privroot fs/reiserfs/xattr.c:889 [inline] reiserfs_xattr_init+0x105/0x2c0 fs/reiserfs/xattr.c:1012 reiserfs_fill_super+0xb4d/0xdc0 fs/reiserfs/super.c:2177 mount_bdev+0x177/0x1a0 fs/super.c:1367 legacy_get_tree+0x2c/0x50 fs/fs_context.c:610 vfs_get_tree+0x1c/0x80 fs/super.c:1497 do_new_mount fs/namespace.c:3040 [inline] path_mount+0x475/0xba0 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __x64_sys_mount+0x111/0x150 fs/namespace.c:3568 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f0f7fc7e1ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0f80999ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f0f80999f80 RCX: 00007f0f7fc7e1ea RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007f0f80999f40 RBP: 0000000020001100 R08: 00007f0f80999f80 R09: 0000000000000080 R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040 R13: 00007f0f80999f40 R14: 00000000000010f6 R15: 00000000200000c0 Modules linked in: CR2: ffff88811a826000 ---[ end trace 0000000000000000 ]--- RIP: 0010:__memmove+0x28/0x1b0 arch/x86/lib/memmove_64.S:41 Code: 66 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48 RSP: 0018:ffffc90002c17660 EFLAGS: 00010286 RAX: ffff88811112dfb4 RBX: ffff88811112dfa4 RCX: fffffffff6907f94 RDX: ffffffffffffffe0 RSI: ffff88811a825ff0 RDI: ffff88811a826000 RBP: ffff88811112df84 R08: ffff88811112df84 R09: ffff88811112dfb4 R10: 0000000000000020 R11: 0000ff0100000001 R12: 0000000000000001 R13: ffff88811112df84 R14: 0000000000000002 R15: 0000000000000010 FS: 00007f0f8099a6c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88811a826000 CR3: 0000000105bfa000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 66 90 xchg %ax,%ax 2: f3 0f 1e fa endbr64 6: 48 89 f8 mov %rdi,%rax 9: 48 39 fe cmp %rdi,%rsi c: 7d 0f jge 0x1d e: 49 89 f0 mov %rsi,%r8 11: 49 01 d0 add %rdx,%r8 14: 49 39 f8 cmp %rdi,%r8 17: 0f 8f b5 00 00 00 jg 0xd2 1d: 48 83 fa 20 cmp $0x20,%rdx 21: 0f 82 01 01 00 00 jb 0x128 27: 48 89 d1 mov %rdx,%rcx * 2a: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) <-- trapping instruction 2c: c3 ret 2d: 48 81 fa a8 02 00 00 cmp $0x2a8,%rdx 34: 72 05 jb 0x3b 36: 40 38 fe cmp %dil,%sil 39: 74 47 je 0x82 3b: 48 83 ea 20 sub $0x20,%rdx 3f: 48 rex.W