ci starts bisection 2023-11-29 06:07:58.864542449 +0000 UTC m=+53269.113838997 bisecting fixing commit since 6808918343a8b4b6970ba52ba2d1d511a0976748 building syzkaller on 3c418d724accee0ff5b8487bdddeb5827ab216bd ensuring issue is reproducible on original commit 6808918343a8b4b6970ba52ba2d1d511a0976748 testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a728ce1ac93f00c2a130720f4a584d684c31e9b46d838117fadfd5a73a03a83c all runs: crashed: general protection fault in inherit_task_group representative crash: general protection fault in inherit_task_group, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 605c5095543ad8da483a2b49415d50e4abde7666f134d904deea637c9f93229e run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #8: ignore: SYZFAIL: clone failed run #9: ignore: SYZFAIL: clone failed representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=3923 full=7621 leaves diff=2003 split chunks (needed=false): <2003> split chunk #0 of len 2003 into 5 parts testing without sub-chunk 1/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a7bd2dbbfb518d212c93f7b80800aafdcfb445682c7f4392db3884af1a698ef0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #9: ignore: SYZFAIL: clone failed representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7b3e4e441d29d05a78a003a160b2fd04725230b51f7ab81dff3f8183fb77cb04 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #8: ignore: SYZFAIL: clone failed run #9: ignore: SYZFAIL: clone failed representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 755383d92ab5a2939832c4e46c09cd2e0df29f0febd258644d0f4ac56d0f4884 all runs: OK false negative chance: 0.000 testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 64be2f14a707d518cc477e0d38802b33e2ba77ba631c7bb5c291be467f150be4 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 6808918343a8b4b6970ba52ba2d1d511a0976748 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 49c250a3d42b26f9969a55a0707577163b9cde13bf77e4c684969b56fe24c791 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] the chunk can be dropped minimized to 401 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CFG80211 CHECKPOINT_RESTORE DVB_CORE FB_CORE FSCACHE HAMRADIO HSR IMA IMA_APPRAISE IMA_APPRAISE_MODSIG INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_SIGNATURE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_MMIO KVM_PROVE_MMU KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LRU_GEN LRU_GEN_ENABLED LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MMU_NOTIFIER MODULE_SIG_SHA1 MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_SNMP NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_NAT_PPTP NF_NAT_REDIRECT NF_NAT_SNMP_BASIC NF_NAT_TFTP NF_SOCKET_IPV4 NF_SOCKET_IPV6 NF_TABLES NF_TABLES_ARP NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI] disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing current HEAD d4e7dd4842b190e87a5b7179a460f54b13da3ac4 testing commit d4e7dd4842b190e87a5b7179a460f54b13da3ac4 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 286acaa92f310cfba717ae7f13db2fd4f57ea8382514b09b99741013ac9a1bfd all runs: OK false negative chance: 0.000 # git bisect start d4e7dd4842b190e87a5b7179a460f54b13da3ac4 6808918343a8b4b6970ba52ba2d1d511a0976748 Bisecting: 7837 revisions left to test after this (roughly 13 steps) [deefd5024f0772cf56052ace9a8c347dc70bcaf3] Merge tag 'vfio-v6.7-rc1' of https://github.com/awilliam/linux-vfio determine whether the revision contains the guilty commit revision 6808918343a8b4b6970ba52ba2d1d511a0976748 crashed and is reachable testing commit deefd5024f0772cf56052ace9a8c347dc70bcaf3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e53cd61e9b16852e96a3e58740d75fe4e34c24cae4110615113d47ff89b049e8 all runs: OK false negative chance: 0.000 # git bisect bad deefd5024f0772cf56052ace9a8c347dc70bcaf3 Bisecting: 3651 revisions left to test after this (roughly 12 steps) [ed766c26119c4cf9b1f909f045c2eb987180ace3] Merge tag 'x86-entry-2023-10-28' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit checking the merge base c17cda15cc86e65e9725641daddcd7a63cc9ad01 no existing result, test the revision testing commit c17cda15cc86e65e9725641daddcd7a63cc9ad01 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9ca1e26a5fd0a1e52c691f0899ad7f295a1759dc6e73f093d088af27def3ea3f run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group run #8: ignore: SYZFAIL: clone failed run #9: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] testing commit ed766c26119c4cf9b1f909f045c2eb987180ace3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4df1c8e5b146ad9ae9c7f851b2e5505327d8bc008262cb536d5cceb043b3af97 run #0: ignore: SYZFAIL: clone failed run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad ed766c26119c4cf9b1f909f045c2eb987180ace3 Bisecting: 1831 revisions left to test after this (roughly 11 steps) [11f5e595bf7cd11c395f0041cdd6448f238a5614] bcachefs: Always print when doing journal replay in fsck determine whether the revision contains the guilty commit checking the merge base 0bb80ecc33a8fb5a682236443c1e740d5c917d1d no existing result, test the revision testing commit 0bb80ecc33a8fb5a682236443c1e740d5c917d1d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85bb86de8f25213eb1bd88c759529454ea48314ca9b8bfe9fdea767c8c68fd23 run #0: ignore: SYZFAIL: clone failed run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 the bug was not introduced yet; pretend that kernel crashed # git bisect good 11f5e595bf7cd11c395f0041cdd6448f238a5614 Bisecting: 915 revisions left to test after this (roughly 10 steps) [40a53b92150fe9576538f775138413c40cdb30cf] bcachefs: More minor smatch fixes determine whether the revision contains the guilty commit checking the merge base 0bb80ecc33a8fb5a682236443c1e740d5c917d1d the bug was not introduced yet; pretend that kernel crashed # git bisect good 40a53b92150fe9576538f775138413c40cdb30cf Bisecting: 465 revisions left to test after this (roughly 9 steps) [8829687a4ac1d484639425a691da46f6e361aec1] Merge tag 'fscrypt-for-linus' of git://git.kernel.org/pub/scm/fs/fscrypt/linux determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 8829687a4ac1d484639425a691da46f6e361aec1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1924b3f456ab854f4a0b4ce8ed181927c4799399c2d09b4a8366bad54056224e all runs: OK false negative chance: 0.000 # git bisect bad 8829687a4ac1d484639425a691da46f6e361aec1 Bisecting: 222 revisions left to test after this (roughly 8 steps) [7352a6765cf5d95888b3952ac89efbb817b4c3cf] Merge tag 'vfs-6.7.xattr' of gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 7352a6765cf5d95888b3952ac89efbb817b4c3cf gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7b3bed63aa484dbe1ce5b12622edae2c83de7d005c6e0299095af499400e06d4 all runs: OK false negative chance: 0.000 # git bisect bad 7352a6765cf5d95888b3952ac89efbb817b4c3cf Bisecting: 119 revisions left to test after this (roughly 7 steps) [ffc253263a1375a65fa6c9f62a893e9767fbebfa] Linux 6.6 determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: edf153522fd2510b186acde78980dad8015328a67f11d7b0dfcac9b820d2fa46 all runs: OK false negative chance: 0.000 # git bisect bad ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 53 revisions left to test after this (roughly 6 steps) [888cf78c29e223fd808682f477c18cf8f61ad995] Merge tag 'iommu-fix-v6.6-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 888cf78c29e223fd808682f477c18cf8f61ad995 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 54ce8a36e21a8e1d1770a17bf2f8ea0eb3ce92f30bdc1ae4118f07d8804edef8 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] # git bisect good 888cf78c29e223fd808682f477c18cf8f61ad995 Bisecting: 30 revisions left to test after this (roughly 5 steps) [8907bfd2b11ab0d09f2c408f82bff09e55d53a9a] Merge tag 'i2c-for-6.6-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 8907bfd2b11ab0d09f2c408f82bff09e55d53a9a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 14c311f36e2d450d6a8f070accd9127c7c79a04ce811ed854046ed38784ffd19 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] # git bisect good 8907bfd2b11ab0d09f2c408f82bff09e55d53a9a Bisecting: 15 revisions left to test after this (roughly 4 steps) [1e55c5200dc7efeb84d4582a82d289329255fd82] fpga: m10bmc-sec: Change contact for secure update driver determine whether the revision contains the guilty commit checking the merge base 58720809f52779dc0f08e53e54b014209d13eebb no existing result, test the revision testing commit 58720809f52779dc0f08e53e54b014209d13eebb gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: feed80cfbc01635bb796510919c42898d85130594109a3697034d4491f9b9b9e all runs: OK false negative chance: 0.000 the bug was not introduced yet; pretend that kernel crashed # git bisect good 1e55c5200dc7efeb84d4582a82d289329255fd82 Bisecting: 8 revisions left to test after this (roughly 3 steps) [51a7691038c334db81b736faa6b4cc4778e751fc] Merge tag 'probes-fixes-v6.6-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 51a7691038c334db81b736faa6b4cc4778e751fc gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 294d1bfb1025fdccb43572015e0f88f65f213a23e7e8a90c8e2c8770ae5080f3 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] # git bisect good 51a7691038c334db81b736faa6b4cc4778e751fc Bisecting: 4 revisions left to test after this (roughly 2 steps) [e663ab6bb56fa8f048cf8725aba577e56f7b2644] Merge tag 'irq-urgent-2023-10-28' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit revision 888cf78c29e223fd808682f477c18cf8f61ad995 crashed and is reachable testing commit e663ab6bb56fa8f048cf8725aba577e56f7b2644 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 71ab75f899762d74a0035995fa5658bfdafcf17db11d823bee8ab99cfd572c51 all runs: OK false negative chance: 0.000 # git bisect bad e663ab6bb56fa8f048cf8725aba577e56f7b2644 Bisecting: 1 revision left to test after this (roughly 1 step) [4714de03329810b9ac57762b6bfdb73b123fedd5] Merge tag 'perf-urgent-2023-10-28' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip determine whether the revision contains the guilty commit revision c17cda15cc86e65e9725641daddcd7a63cc9ad01 crashed and is reachable testing commit 4714de03329810b9ac57762b6bfdb73b123fedd5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 608e5b8d14f5d26c936dabe133ac1eb7d0adb18aae0847efb496eb7e67f4e4e2 all runs: OK false negative chance: 0.000 # git bisect bad 4714de03329810b9ac57762b6bfdb73b123fedd5 Bisecting: 0 revisions left to test after this (roughly 0 steps) [a71ef31485bb51b846e8db8b3a35e432cc15afb5] perf/core: Fix potential NULL deref determine whether the revision contains the guilty commit checking the merge base 05d3ef8bba77c1b5f98d941d8b2d4aeab8118ef1 no existing result, test the revision testing commit 05d3ef8bba77c1b5f98d941d8b2d4aeab8118ef1 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: fabf1d87feb53b6f0e3eb6c2438ab175b9838c9fe8ae34b43690610492a7dcc6 all runs: crashed: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group representative crash: BUG: unable to handle kernel NULL pointer dereference in inherit_task_group, types: [UNKNOWN] testing commit a71ef31485bb51b846e8db8b3a35e432cc15afb5 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c7db8466d422ddfb2fa1878d326ffefeb7e172b06d1cefdeb85b748383208fa8 run #0: ignore: SYZFAIL: clone failed run #1: ignore: SYZFAIL: clone failed run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect bad a71ef31485bb51b846e8db8b3a35e432cc15afb5 a71ef31485bb51b846e8db8b3a35e432cc15afb5 is the first bad commit commit a71ef31485bb51b846e8db8b3a35e432cc15afb5 Author: Peter Zijlstra Date: Tue Oct 24 11:42:21 2023 +0200 perf/core: Fix potential NULL deref Smatch is awesome. Fixes: 32671e3799ca ("perf: Disallow mis-matched inherited group reads") Reported-by: Dan Carpenter Signed-off-by: Peter Zijlstra (Intel) Signed-off-by: Ingo Molnar kernel/events/core.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: c7db8466d422ddfb2fa1878d326ffefeb7e172b06d1cefdeb85b748383208fa8 parent signature: fabf1d87feb53b6f0e3eb6c2438ab175b9838c9fe8ae34b43690610492a7dcc6 revisions tested: 23, total time: 6h8m41.382677729s (build: 2h12m10.864834528s, test: 3h34m52.014760309s) first good commit: a71ef31485bb51b846e8db8b3a35e432cc15afb5 perf/core: Fix potential NULL deref recipients (to): ["acme@kernel.org" "linux-perf-users@vger.kernel.org" "mingo@kernel.org" "mingo@redhat.com" "peterz@infradead.org" "peterz@infradead.org"] recipients (cc): ["adrian.hunter@intel.com" "alexander.shishkin@linux.intel.com" "irogers@google.com" "jolsa@kernel.org" "linux-kernel@vger.kernel.org" "mark.rutland@arm.com" "namhyung@kernel.org"]