bisecting cause commit starting from b42a738e409b62f38a15ce7530e8290b00f823a4 building syzkaller on 45a13a7381e60020d94d037d88a75727984b7a9a testing commit b42a738e409b62f38a15ce7530e8290b00f823a4 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: e95e2615c0a2b22488d3905b2f01408f1846dbd1baf4a32cece4e5a2a77401b5 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: WARNING in bpf_test_finish run #2: crashed: WARNING in bpf_test_finish run #3: crashed: WARNING in bpf_test_finish run #4: crashed: WARNING in bpf_test_finish run #5: crashed: WARNING in bpf_test_finish run #6: crashed: WARNING in bpf_test_finish run #7: crashed: WARNING in bpf_test_finish run #8: crashed: WARNING in bpf_test_finish run #9: crashed: WARNING in bpf_test_finish run #10: crashed: WARNING in bpf_test_finish run #11: crashed: WARNING in bpf_test_finish run #12: crashed: WARNING in bpf_test_finish run #13: crashed: WARNING in bpf_test_finish run #14: crashed: WARNING in bpf_test_finish run #15: crashed: WARNING in bpf_test_finish run #16: crashed: WARNING in bpf_test_finish run #17: crashed: WARNING in bpf_test_finish run #18: crashed: WARNING in bpf_test_finish run #19: crashed: WARNING in bpf_test_finish testing release v5.16 testing commit df0cc57e057f18e44dac8e6c18aba47ab53202f9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1fd9ab6ec52dc5d6eec160897ae3403fe7938723519a9996a423afd6588ef1fc all runs: OK # git bisect start b42a738e409b62f38a15ce7530e8290b00f823a4 df0cc57e057f18e44dac8e6c18aba47ab53202f9 Bisecting: 7393 revisions left to test after this (roughly 13 steps) [57ea81971b7296b42fc77424af44c5915d3d4ae2] Merge tag 'usb-5.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb testing commit 57ea81971b7296b42fc77424af44c5915d3d4ae2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2999cdeaba18f5414df7cd20ae259e101bbabf7915fc0c9d61d4e89993822a43 all runs: OK # git bisect good 57ea81971b7296b42fc77424af44c5915d3d4ae2 Bisecting: 3723 revisions left to test after this (roughly 12 steps) [fd6f57bfda7c36f2d465cee39d5d8c623db5d7aa] Merge tag 'kbuild-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit fd6f57bfda7c36f2d465cee39d5d8c623db5d7aa compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2a57ad9741c2a12cbafc025e7da05461ae0674f243d11ee7470c4ee31985ab1e all runs: OK # git bisect good fd6f57bfda7c36f2d465cee39d5d8c623db5d7aa Bisecting: 1860 revisions left to test after this (roughly 11 steps) [080eba785fe10ba21c40bbdd80f2bd5331a28be6] Merge tag 'char-misc-5.17-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit 080eba785fe10ba21c40bbdd80f2bd5331a28be6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1cff5fc6bcf56021c0e426338f7ed8245bba9d473619cd6069961db0a42c5ee8 all runs: OK # git bisect good 080eba785fe10ba21c40bbdd80f2bd5331a28be6 Bisecting: 859 revisions left to test after this (roughly 10 steps) [b96a79253fff1cd2c928b379eadd8c7a6f8055e1] Merge tag 'wireless-next-2022-02-11' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit b96a79253fff1cd2c928b379eadd8c7a6f8055e1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 086c10ad3d95734eee0fbc796848edb17f466c7ad7b2f1b57e40cd9f5040b3e8 all runs: basic kernel testing failed: WARNING: suspicious RCU usage in hsr_node_get_first # git bisect skip b96a79253fff1cd2c928b379eadd8c7a6f8055e1 Bisecting: 859 revisions left to test after this (roughly 10 steps) [fc76387003d6907e298fd6b87f13847c4edddab1] libbpf: Mark bpf_object__open_xattr() deprecated testing commit fc76387003d6907e298fd6b87f13847c4edddab1 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 650fcab15762184eea917558bde2581ffa6acd32b70f9f21cfaad65c4258773a all runs: crashed: WARNING in bpf_test_finish # git bisect bad fc76387003d6907e298fd6b87f13847c4edddab1 Bisecting: 48 revisions left to test after this (roughly 6 steps) [1058b6a78db21e3f503362ac4719b3d83b3dd745] selftests/bpf: Do not fail build if CONFIG_NF_CONNTRACK=m/n testing commit 1058b6a78db21e3f503362ac4719b3d83b3dd745 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bef9b1653fcafc8f85f5103aab76d43bcb75cafbc265987223206059178be31c all runs: OK # git bisect good 1058b6a78db21e3f503362ac4719b3d83b3dd745 Bisecting: 24 revisions left to test after this (roughly 5 steps) [bf25146a5595269810b1f47d048f114c5ff9f544] bpf: add frags support to the bpf_xdp_adjust_tail() API testing commit bf25146a5595269810b1f47d048f114c5ff9f544 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8d656f6d1e0551615b575b42544dec382c1e9f41f392bbeb88c808e1fbb179ca all runs: OK # git bisect good bf25146a5595269810b1f47d048f114c5ff9f544 Bisecting: 12 revisions left to test after this (roughly 4 steps) [a9921ce1cae55f3c238b8c90d878b20a506b85c3] Merge branch 'mvneta: introduce XDP multi-buffer support' testing commit a9921ce1cae55f3c238b8c90d878b20a506b85c3 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d55d5d18d5f6e4d6531ae4171495fb78c0fa1ff623fdd3ea29c5f57af94df795 all runs: crashed: WARNING in bpf_test_finish # git bisect bad a9921ce1cae55f3c238b8c90d878b20a506b85c3 Bisecting: 5 revisions left to test after this (roughly 3 steps) [082c4bfba4f77d6c65b451d7ef23093a75cc50e7] libbpf: Add SEC name for xdp frags programs testing commit 082c4bfba4f77d6c65b451d7ef23093a75cc50e7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b3a56015e8c04e8466888b19a513850ed4aff495c1db365ce92e7ae05b223c9b all runs: crashed: WARNING in bpf_test_finish # git bisect bad 082c4bfba4f77d6c65b451d7ef23093a75cc50e7 Bisecting: 2 revisions left to test after this (roughly 2 steps) [1c194998252469cad00a08bd9ef0b99fd255c260] bpf: introduce frags support to bpf_prog_test_run_xdp() testing commit 1c194998252469cad00a08bd9ef0b99fd255c260 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 563ffdbe6b6b9cb3efa4653d88207d68cbd2cca5d5883a7d49c8ac6b1c3a4364 all runs: OK # git bisect good 1c194998252469cad00a08bd9ef0b99fd255c260 Bisecting: 0 revisions left to test after this (roughly 1 step) [110221081aac19ae147e472f590abe20a750dd25] bpf: selftests: update xdp_adjust_tail selftest to include xdp frags testing commit 110221081aac19ae147e472f590abe20a750dd25 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ced6f11aafaf2c702f956294bf09dc7922f8ab224a227389893c882e77bde94d all runs: crashed: WARNING in bpf_test_finish # git bisect bad 110221081aac19ae147e472f590abe20a750dd25 Bisecting: 0 revisions left to test after this (roughly 0 steps) [7855e0db150ad8f494d66913c26deadc52f12e07] bpf: test_run: add xdp_shared_info pointer in bpf_test_finish signature testing commit 7855e0db150ad8f494d66913c26deadc52f12e07 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: ced6f11aafaf2c702f956294bf09dc7922f8ab224a227389893c882e77bde94d all runs: crashed: WARNING in bpf_test_finish # git bisect bad 7855e0db150ad8f494d66913c26deadc52f12e07 7855e0db150ad8f494d66913c26deadc52f12e07 is the first bad commit commit 7855e0db150ad8f494d66913c26deadc52f12e07 Author: Lorenzo Bianconi Date: Fri Jan 21 11:09:59 2022 +0100 bpf: test_run: add xdp_shared_info pointer in bpf_test_finish signature introduce xdp_shared_info pointer in bpf_test_finish signature in order to copy back paged data from a xdp frags frame to userspace buffer Acked-by: Toke Hoiland-Jorgensen Acked-by: John Fastabend Signed-off-by: Lorenzo Bianconi Link: https://lore.kernel.org/r/c803673798c786f915bcdd6c9338edaa9740d3d6.1642758637.git.lorenzo@kernel.org Signed-off-by: Alexei Starovoitov net/bpf/test_run.c | 48 +++++++++++++++++++++++++++++++++++++++--------- 1 file changed, 39 insertions(+), 9 deletions(-) culprit signature: ced6f11aafaf2c702f956294bf09dc7922f8ab224a227389893c882e77bde94d parent signature: 563ffdbe6b6b9cb3efa4653d88207d68cbd2cca5d5883a7d49c8ac6b1c3a4364 revisions tested: 14, total time: 2h25m4.409363704s (build: 1h45m35.441986799s, test: 38m2.908213025s) first bad commit: 7855e0db150ad8f494d66913c26deadc52f12e07 bpf: test_run: add xdp_shared_info pointer in bpf_test_finish signature recipients (to): ["ast@kernel.org" "john.fastabend@gmail.com" "lorenzo@kernel.org" "toke@redhat.com"] recipients (cc): [] crash: WARNING in bpf_test_finish ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4042 at include/linux/thread_info.h:230 check_copy_size include/linux/thread_info.h:230 [inline] WARNING: CPU: 1 PID: 4042 at include/linux/thread_info.h:230 copy_to_user include/linux/uaccess.h:199 [inline] WARNING: CPU: 1 PID: 4042 at include/linux/thread_info.h:230 bpf_test_finish.isra.0+0x3c5/0x5b0 net/bpf/test_run.c:170 Modules linked in: CPU: 1 PID: 4042 Comm: syz-executor183 Not tainted 5.16.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:check_copy_size include/linux/thread_info.h:230 [inline] RIP: 0010:copy_to_user include/linux/uaccess.h:199 [inline] RIP: 0010:bpf_test_finish.isra.0+0x3c5/0x5b0 net/bpf/test_run.c:170 Code: f2 7c 09 40 84 f6 0f 85 84 01 00 00 8b 55 3c 49 83 c5 10 49 63 ec 48 03 2c 24 48 01 d3 49 81 fe ff ff ff 7f 0f 86 d2 fe ff ff <0f> 0b 48 8d 7c 24 70 e8 6f f8 ff ff 44 8b 44 24 70 48 b8 00 00 00 RSP: 0018:ffffc90001c7fa18 EFLAGS: 00010292 RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffff9200038ff4b RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffff888076106ee4 RBP: fffffffffffffea7 R08: ffff888076106ec0 R09: 0000000000001000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888076106100 R13: 00000000000000e7 R14: 0000000090f2eed5 R15: 00000000fffffea7 FS: 000055555645a300(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000d000 CR3: 000000007162f000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bpf_prog_test_run_xdp+0x88b/0x1030 net/bpf/test_run.c:1002 bpf_prog_test_run kernel/bpf/syscall.c:3357 [inline] __sys_bpf+0x1054/0x4410 kernel/bpf/syscall.c:4659 __do_sys_bpf kernel/bpf/syscall.c:4745 [inline] __se_sys_bpf kernel/bpf/syscall.c:4743 [inline] __x64_sys_bpf+0x70/0xb0 kernel/bpf/syscall.c:4743 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4e5aca1d39 Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc89583a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e5aca1d39 RDX: 0000000000000048 RSI: 0000000020000340 RDI: 000000000000000a RBP: 00007f4e5ac65ee0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e5ac65f70 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000