ci starts bisection 2023-12-25 12:15:24.467833868 +0000 UTC m=+236552.064599075 bisecting cause commit starting from 5abde62465222edd3080b70099bd809f166d5d7d building syzkaller on fb427a0782000106c62de76d251e5a02de5406a9 ensuring issue is reproducible on original commit 5abde62465222edd3080b70099bd809f166d5d7d testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a03ddbc43531d39582139162774cb025691b95fbf7aa8e5e68920dc9f58d7ba6 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3df28fee37f2ee5aad858543afc0db8254ef1d32489432e4eee6025d9295fa73 all runs: OK false negative chance: 0.000 kconfig minimization: base=3923 full=7658 leaves diff=2007 split chunks (needed=false): <2007> split chunk #0 of len 2007 into 5 parts testing without sub-chunk 1/5 testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 89f903033df75364f62dd226fbb5631d5af7b3b29c2cc6c1dcacfa1dd3621e22 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 777bdf3032f70e3bf6a0b81a34f26d714135efe1889a74ff100d51c072df61b5 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bb5be2777b0636274d7077612ef14b9fdbaa0ceed73d29c0bae5b6dfe3bc229e all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: aad6ccca4ad3d4e58c646cf663d1a900bf8c121ea1803307c361849f63dc3df3 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 testing commit 5abde62465222edd3080b70099bd809f166d5d7d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e338e13f4a53d25f1694508400b539ba7e0537ebff699b7d3f9c91ca618ad92f all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] the chunk can be dropped picked [v6.6 v6.5 v6.4 v6.2 v6.0 v5.18 v5.16 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 29 release tags testing release v6.6 testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 00db84d75efb622483b84f039f040ab2bf747b8adabc31ff8ac8396f3a71f4a7 all runs: OK false negative chance: 0.000 # git bisect start 5abde62465222edd3080b70099bd809f166d5d7d ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 9298 revisions left to test after this (roughly 13 steps) [c035f0268b87fc21f517f638b3bad26c81babc85] Merge tag 'soc-dt-6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc testing commit c035f0268b87fc21f517f638b3bad26c81babc85 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fc455ca1c0438055aceff3a5e711611530c86f814dede95716ec33bda5f356a4 all runs: OK false negative chance: 0.000 # git bisect good c035f0268b87fc21f517f638b3bad26c81babc85 Bisecting: 4636 revisions left to test after this (roughly 12 steps) [1c41041124bd14dd6610da256a3da4e5b74ce6b1] Merge tag 'i3c/for-6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux testing commit 1c41041124bd14dd6610da256a3da4e5b74ce6b1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2cb62d606e7f941eaa06f11b3c62379cfbb2febbcbbf26313c96289b6c38728d all runs: OK false negative chance: 0.000 # git bisect good 1c41041124bd14dd6610da256a3da4e5b74ce6b1 Bisecting: 2318 revisions left to test after this (roughly 11 steps) [4515866db1346d0b3d7c53214c60ff5373e39bb7] Merge tag '6.7-rc2-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 testing commit 4515866db1346d0b3d7c53214c60ff5373e39bb7 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1166763e6b2c7e9e7b1b6321be2ce98ca5d37285681be3670c0296663d617bab all runs: OK false negative chance: 0.000 # git bisect good 4515866db1346d0b3d7c53214c60ff5373e39bb7 Bisecting: 1159 revisions left to test after this (roughly 10 steps) [4624a78c18c62da815f3253966b7a87995f77e1b] selftests/net: convert test_bridge_backup_port.sh to run it in unique namespace testing commit 4624a78c18c62da815f3253966b7a87995f77e1b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d8be36d137e3a1ff958d2ece752875d81537db3fcd88f7ba22d0c21c7c8509b6 all runs: OK false negative chance: 0.000 # git bisect good 4624a78c18c62da815f3253966b7a87995f77e1b Bisecting: 570 revisions left to test after this (roughly 9 steps) [8f674972d698c1223b6b4f374df5dde835b88c34] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 8f674972d698c1223b6b4f374df5dde835b88c34 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 557c259ca4f0749f72081ea2b58448e7499142e4d0d37de687387fca239ea593 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad 8f674972d698c1223b6b4f374df5dde835b88c34 Bisecting: 292 revisions left to test after this (roughly 8 steps) [ca20f1622b0cb21853c41d2c264fafa88ebba7c0] Merge tag 'char-misc-6.7-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc testing commit ca20f1622b0cb21853c41d2c264fafa88ebba7c0 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85a2c8110acf456a5c95e3df973ec98dc316904723bcafd85695aef6c7577d69 all runs: OK false negative chance: 0.000 # git bisect good ca20f1622b0cb21853c41d2c264fafa88ebba7c0 Bisecting: 128 revisions left to test after this (roughly 7 steps) [c7402612e2e61b76177f22e6e7f705adcbecc6fe] Merge tag 'net-6.7-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit c7402612e2e61b76177f22e6e7f705adcbecc6fe gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fd2171cee2c2f299b145f0d46c6c75485ac8e0707b74d9a4b92a7969297d7223 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad c7402612e2e61b76177f22e6e7f705adcbecc6fe Bisecting: 82 revisions left to test after this (roughly 6 steps) [88035e5694a86a7167d490bb95e9df97a9bb162b] Merge tag 'hid-for-linus-2023121201' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid testing commit 88035e5694a86a7167d490bb95e9df97a9bb162b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 936b132c8112701466f3e372fc64980c01b79cd20b41068de191bf19f1e152ad all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad 88035e5694a86a7167d490bb95e9df97a9bb162b Bisecting: 40 revisions left to test after this (roughly 5 steps) [52bf9f6c09fca8c74388cd41cc24e5d1bff812a9] afs: Fix refcount underflow from error handling race testing commit 52bf9f6c09fca8c74388cd41cc24e5d1bff812a9 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: de78ecc556db9c7a3a01ec5b8a462e0e50c9d7cfe07f813675b7d8a18fb4074f all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad 52bf9f6c09fca8c74388cd41cc24e5d1bff812a9 Bisecting: 22 revisions left to test after this (roughly 4 steps) [c527f5606aa545233a4d2c6d5c636ed82b8633ef] Merge tag 'powerpc-6.7-4' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux testing commit c527f5606aa545233a4d2c6d5c636ed82b8633ef gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 77e19a07de0a45a6a42cd0effe902667b8a082018291c12a6e18427afaf458a7 all runs: OK false negative chance: 0.000 # git bisect good c527f5606aa545233a4d2c6d5c636ed82b8633ef Bisecting: 11 revisions left to test after this (roughly 4 steps) [4a073e813477be4ae95dfd23cb08baf36e93a29f] KVM: selftests: Actually print out magic token in NX hugepages skip message testing commit 4a073e813477be4ae95dfd23cb08baf36e93a29f gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7dfbe8e34a89378edeb7ee51961ad9ad9de24480b24abef2abd09d6f369e9182 all runs: OK false negative chance: 0.000 # git bisect good 4a073e813477be4ae95dfd23cb08baf36e93a29f Bisecting: 5 revisions left to test after this (roughly 3 steps) [5412fed784876892c4d0960f003795b6dbdcfc5a] Merge tag 'x86_urgent_for_v6.7_rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 5412fed784876892c4d0960f003795b6dbdcfc5a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6cfad570c33e3e0e44eafac0dd11d7297e99e2eab6f7d0481b8cbbb68a84ed8d all runs: OK false negative chance: 0.000 # git bisect good 5412fed784876892c4d0960f003795b6dbdcfc5a Bisecting: 3 revisions left to test after this (roughly 2 steps) [537ccb5d28d6f398215e7f578e46ee7836f5ac47] Merge tag 'perf_urgent_for_v6.7_rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 537ccb5d28d6f398215e7f578e46ee7836f5ac47 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5a524010aedf00aa4bc5ccf89913faba9305e29a2eac4c10b59c1b33c90b5d1b all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad 537ccb5d28d6f398215e7f578e46ee7836f5ac47 Bisecting: 0 revisions left to test after this (roughly 0 steps) [382c27f4ed28f803b1f1473ac2d8db0afc795a1b] perf: Fix perf_event_validate_size() testing commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f2fbf3c20dac9802425344f9d136436c1cd6afdd4fce643966f85fd19508f143 all runs: crashed: WARNING in perf_event_open representative crash: WARNING in perf_event_open, types: [WARNING] # git bisect bad 382c27f4ed28f803b1f1473ac2d8db0afc795a1b 382c27f4ed28f803b1f1473ac2d8db0afc795a1b is the first bad commit commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b Author: Peter Zijlstra Date: Wed Nov 29 15:24:52 2023 +0100 perf: Fix perf_event_validate_size() Budimir noted that perf_event_validate_size() only checks the size of the newly added event, even though the sizes of all existing events can also change due to not all events having the same read_format. When we attach the new event, perf_group_attach(), we do re-compute the size for all events. Fixes: a723968c0ed3 ("perf: Fix u16 overflows") Reported-by: Budimir Markovic Signed-off-by: Peter Zijlstra (Intel) kernel/events/core.c | 61 ++++++++++++++++++++++++++++++++-------------------- 1 file changed, 38 insertions(+), 23 deletions(-) accumulated error probability: 0.00 parent commit 2cc14f52aeb78ce3f29677c2de1f06c0e91471ab wasn't tested testing commit 2cc14f52aeb78ce3f29677c2de1f06c0e91471ab gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cf2caa65238a95e47ab72e68dad8f64d364b8c3db9086696fc0645d67e1b4e1e culprit signature: f2fbf3c20dac9802425344f9d136436c1cd6afdd4fce643966f85fd19508f143 parent signature: cf2caa65238a95e47ab72e68dad8f64d364b8c3db9086696fc0645d67e1b4e1e revisions tested: 22, total time: 5h15m2.116012409s (build: 2h8m53.278101255s, test: 2h50m6.210953143s) first bad commit: 382c27f4ed28f803b1f1473ac2d8db0afc795a1b perf: Fix perf_event_validate_size() recipients (to): ["acme@kernel.org" "linux-perf-users@vger.kernel.org" "mingo@redhat.com" "peterz@infradead.org" "peterz@infradead.org"] recipients (cc): ["adrian.hunter@intel.com" "alexander.shishkin@linux.intel.com" "irogers@google.com" "jolsa@kernel.org" "linux-kernel@vger.kernel.org" "mark.rutland@arm.com" "namhyung@kernel.org"] crash: WARNING in perf_event_open ------------[ cut here ]------------ WARNING: CPU: 1 PID: 1869 at kernel/events/core.c:1950 perf_event_validate_size kernel/events/core.c:1950 [inline] WARNING: CPU: 1 PID: 1869 at kernel/events/core.c:1950 __do_sys_perf_event_open+0x1b2c/0x2210 kernel/events/core.c:12655 Modules linked in: CPU: 1 PID: 1869 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:perf_event_validate_size kernel/events/core.c:1950 [inline] RIP: 0010:__do_sys_perf_event_open+0x1b2c/0x2210 kernel/events/core.c:12655 Code: 80 3c 02 00 0f 85 f8 06 00 00 48 8b 83 28 02 00 00 83 ce ff 48 8d b8 a8 00 00 00 e8 ee f1 db 01 83 e8 01 0f 84 f9 f3 ff ff 90 <0f> 0b 90 e9 f0 f3 ff ff 90 0f 0b 90 e9 d9 f4 ff ff 49 8d 7d 10 b8 RSP: 0018:ffffc90001fefda0 EFLAGS: 00010297 RAX: 00000000ffffffff RBX: ffff8881165d0000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff83675f80 RDI: ffffffff83813140 RBP: ffff8881165d0230 R08: 0000000000000001 R09: fffffbfff0ce7156 R10: ffffffff86738ab7 R11: ffffffff85e00a48 R12: ffff88810d33bc00 R13: 0000000000000000 R14: 1ffff920003fdfbd R15: ffff88810a6c8300 FS: 00007f38247076c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556f38da8 CR3: 0000000113cea000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x40/0xe0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f3824b84ce9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f38247070c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007f3824ca3f80 RCX: 00007f3824b84ce9 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f3824bd147a R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000006 R14: 00007f3824ca3f80 R15: 00007ffd50515af8