bisecting cause commit starting from 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea building syzkaller on 510951950dc0ee69cfdaf746061d3dbe31b49fd8 testing commit 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea with gcc (GCC) 8.1.0 kernel signature: 62497d5718d950525fcce8aceee008ba56e417e12aa9087bf70ac757e5d984d6 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #6: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #7: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #8: OK run #9: OK testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.1.0 kernel signature: 732c93bb226e3ca12fe9e24f2bf50f22ecc0e45062e1b4a88d5227acd94f0efe run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #6: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #7: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #8: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #9: crashed: BUG: MAX_LOCKDEP_KEYS too low! testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.1.0 kernel signature: 7bc93cd519d2e0cf9ea0979800eb5731fb22eada1bcb74dde1a0505c519814ff run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #4: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #5: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #6: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #7: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #8: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #9: crashed: BUG: MAX_LOCKDEP_KEYS too low! testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.1.0 kernel signature: 8fec8fcd68dc728a3d3a6f982911e59ea023ac65a99f03e6f4f69af0bd1ae43f run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #4: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #5: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #6: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #7: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #8: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #9: crashed: BUG: MAX_LOCKDEP_KEYS too low! testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: 19c3857577151c4f26b45fb483c4afaf274608d74ec72947b92ddf07fe06ae7a run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #3: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #6: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #7: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #8: crashed: BUG: MAX_LOCKDEP_KEYS too low! run #9: crashed: BUG: MAX_LOCKDEP_KEYS too low! testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.1.0 kernel signature: 45ca501114c33666432110925c48a680b3c7242c87b5d566e6b9e8fb405216cb run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0 kernel signature: e9633d7a4b140ac5d91c669f148e4faef58184f3cfe9afbfac85dc7766003e91 all runs: OK # git bisect start 4d856f72c10ecb060868ed10ff1b1453943fc6c8 0ecfebd2b52404ae0c54a878c872bb93363ada36 Bisecting: 7848 revisions left to test after this (roughly 13 steps) [43c95d3694cc448fdf50bd53b7ff3a5bb4655883] Merge tag 'pinctrl-v5.3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl testing commit 43c95d3694cc448fdf50bd53b7ff3a5bb4655883 with gcc (GCC) 8.1.0 kernel signature: 166da331e87f0ec5b8749d9afcf96a558329954e31eb5a8136d6ec1b32ef61b7 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 43c95d3694cc448fdf50bd53b7ff3a5bb4655883 Bisecting: 4619 revisions left to test after this (roughly 12 steps) [8f6ccf6159aed1f04c6d179f61f6fb2691261e84] Merge tag 'clone3-v5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux testing commit 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 with gcc (GCC) 8.1.0 kernel signature: c8500d5117951283338cf038ce5364ec98286434704b4a182409059a7cef4018 all runs: OK # git bisect good 8f6ccf6159aed1f04c6d179f61f6fb2691261e84 Bisecting: 2306 revisions left to test after this (roughly 11 steps) [753c8d9b7d81206bb5d011b28abe829d364b028e] Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 753c8d9b7d81206bb5d011b28abe829d364b028e with gcc (GCC) 8.1.0 kernel signature: eabeedd4e1d8b35e9e4ada3576a67efda6907691c64cade4feb5b6c75b4cab0f run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: crashed: BUG: unable to handle kernel paging request in fl_dump_key # git bisect bad 753c8d9b7d81206bb5d011b28abe829d364b028e Bisecting: 1156 revisions left to test after this (roughly 10 steps) [2f9b0d93a9d3ec64558537ab5d7cff820886afa4] net: ethernet: ti: cpsw: Fix suspend/resume break testing commit 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 with gcc (GCC) 8.1.0 kernel signature: 9fe3cf5097acad28ed2751bdc72903fa248e8f599c771c338f8e2e88ef05c0e8 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 2f9b0d93a9d3ec64558537ab5d7cff820886afa4 Bisecting: 577 revisions left to test after this (roughly 9 steps) [d28d66e5a92de81199d21b696df707068361a4e7] net: ethernet: mediatek: fix mtk_eth_soc build errors & warnings testing commit d28d66e5a92de81199d21b696df707068361a4e7 with gcc (GCC) 8.1.0 kernel signature: 97c459f6e8adb59955461f79bd9b3af439adad1f18ae292059c6128894a700fa all runs: OK # git bisect good d28d66e5a92de81199d21b696df707068361a4e7 Bisecting: 288 revisions left to test after this (roughly 8 steps) [9126e75e39e14c357cfb2820abf0733bbc3cd8dc] net: ethernet: ti: cpsw_ethtool: simplify slave loops testing commit 9126e75e39e14c357cfb2820abf0733bbc3cd8dc with gcc (GCC) 8.1.0 kernel signature: 7edb5696fee96e416ab79271fd4a1efd10259c67b9b541d6c4c4b8686d5dd8d6 all runs: OK # git bisect good 9126e75e39e14c357cfb2820abf0733bbc3cd8dc Bisecting: 144 revisions left to test after this (roughly 7 steps) [c82481f7ea21be8ec960a28aef07bf258f6820b7] netlink: Add field to skip in-kernel notifications testing commit c82481f7ea21be8ec960a28aef07bf258f6820b7 with gcc (GCC) 8.1.0 kernel signature: 57b06b3bf3bd78f8c185a0a59fb2104ed4c88664b8963be4d2ecadd87e528c57 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: OK run #5: OK run #6: OK run #7: OK run #8: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #9: OK # git bisect bad c82481f7ea21be8ec960a28aef07bf258f6820b7 Bisecting: 76 revisions left to test after this (roughly 6 steps) [f48d2ccee1ba3b2bdb0901d4e5bb3cfe2edd7b36] udp: Remove unused variable/function (exact_dif) testing commit f48d2ccee1ba3b2bdb0901d4e5bb3cfe2edd7b36 with gcc (GCC) 8.1.0 kernel signature: 4c7feb8393cae358cde81122328f37a6cb43e90629648b877361f244a7c9c4e6 all runs: OK # git bisect good f48d2ccee1ba3b2bdb0901d4e5bb3cfe2edd7b36 Bisecting: 38 revisions left to test after this (roughly 5 steps) [871e846585919adf727f21398f433fd424b6f0e1] net: ethernet: ti: davinci_cpdma: use idled submit testing commit 871e846585919adf727f21398f433fd424b6f0e1 with gcc (GCC) 8.1.0 kernel signature: 3726a18aad99dfca0460aad5eada84f51bd1f8b4701b8b7ce4b3db6c65f77365 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 871e846585919adf727f21398f433fd424b6f0e1 Bisecting: 18 revisions left to test after this (roughly 4 steps) [422efd032775757c41e9579facd9656a87bf4f00] net: dsa: mv88e6xxx: do not flood CPU with unknown multicast testing commit 422efd032775757c41e9579facd9656a87bf4f00 with gcc (GCC) 8.1.0 kernel signature: 9e7ef858ffb716278d80c32f7a604484c76a5364cf205e87ddbd7f72fbaf3e72 all runs: OK # git bisect good 422efd032775757c41e9579facd9656a87bf4f00 Bisecting: 9 revisions left to test after this (roughly 3 steps) [91d0a48a480a29257e9a787ca73dc62e85bfeb72] Merge branch 'Reuse-ptp_qoriq-driver-for-dpaa2-ptp' testing commit 91d0a48a480a29257e9a787ca73dc62e85bfeb72 with gcc (GCC) 8.1.0 kernel signature: fbf99f9f87388957a7d21c8ace41fbb1e524ed87067821a5b8b596a58a935dfd all runs: OK # git bisect good 91d0a48a480a29257e9a787ca73dc62e85bfeb72 Bisecting: 4 revisions left to test after this (roughly 2 steps) [42a90766fe1ff438b2af26a94bb8395c405f684b] net: stmmac: use device_property_read_u32_array to read the reset delays testing commit 42a90766fe1ff438b2af26a94bb8395c405f684b with gcc (GCC) 8.1.0 kernel signature: 4e73f3843e2d256963023c3bed6989fc40a693b58f2ccd6481067bbe131beb6d run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 42a90766fe1ff438b2af26a94bb8395c405f684b Bisecting: 2 revisions left to test after this (roughly 1 step) [9d9f3fba4c46a88d51cd3be580419b52e0d74c6d] r8169: improve handling of Abit Fatal1ty F-190HD testing commit 9d9f3fba4c46a88d51cd3be580419b52e0d74c6d with gcc (GCC) 8.1.0 kernel signature: 883ac884ef636a628985731d7e73d8119ce9c066cc06eabcbae40a6bbd9310a1 all runs: OK # git bisect good 9d9f3fba4c46a88d51cd3be580419b52e0d74c6d Bisecting: 0 revisions left to test after this (roughly 1 step) [626c5fe423c2bc9b88cc07549626b94bcde05c9f] net: stmmac: drop redundant check in stmmac_mdio_reset testing commit 626c5fe423c2bc9b88cc07549626b94bcde05c9f with gcc (GCC) 8.1.0 kernel signature: 72d3a7ac82ee5995fe23b2354e80d704f3f52dc6d2abe50e6c0aa10ce19474ef run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: OK run #3: OK run #4: crashed: KASAN: global-out-of-bounds Read in fl_dump_key run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad 626c5fe423c2bc9b88cc07549626b94bcde05c9f Bisecting: 0 revisions left to test after this (roughly 0 steps) [a51486266c3ba8e035a47fa96df67f274fe0c7d0] net: sched: remove NET_CLS_IND config option testing commit a51486266c3ba8e035a47fa96df67f274fe0c7d0 with gcc (GCC) 8.1.0 kernel signature: d5915e7f9686ba9d9b1454b3f7dd1fb4204a99329b10e14fa275bc3cd4110593 run #0: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #1: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #2: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #3: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #4: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #5: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #6: OK run #7: crashed: BUG: unable to handle kernel paging request in fl_dump_key run #8: OK run #9: OK # git bisect bad a51486266c3ba8e035a47fa96df67f274fe0c7d0 a51486266c3ba8e035a47fa96df67f274fe0c7d0 is the first bad commit commit a51486266c3ba8e035a47fa96df67f274fe0c7d0 Author: Jiri Pirko Date: Sat Jun 15 11:03:49 2019 +0200 net: sched: remove NET_CLS_IND config option This config option makes only couple of lines optional. Two small helpers and an int in couple of cls structs. Remove the config option and always compile this in. This saves the user from unexpected surprises when he adds a filter with ingress device match which is silently ignored in case the config option is not set. Signed-off-by: Jiri Pirko Signed-off-by: David S. Miller arch/mips/configs/malta_defconfig | 1 - arch/mips/configs/malta_kvm_defconfig | 1 - arch/mips/configs/malta_kvm_guest_defconfig | 1 - arch/mips/configs/malta_qemu_32r6_defconfig | 1 - arch/mips/configs/maltaaprp_defconfig | 1 - arch/mips/configs/maltasmvp_defconfig | 1 - arch/mips/configs/maltasmvp_eva_defconfig | 1 - arch/mips/configs/maltaup_defconfig | 1 - arch/mips/configs/maltaup_xpa_defconfig | 1 - arch/mips/configs/rb532_defconfig | 1 - arch/powerpc/configs/ppc6xx_defconfig | 1 - arch/sh/configs/se7712_defconfig | 1 - arch/sh/configs/se7721_defconfig | 1 - arch/sh/configs/titan_defconfig | 1 - include/net/pkt_cls.h | 5 +---- include/uapi/linux/pkt_cls.h | 2 +- net/sched/Kconfig | 8 -------- net/sched/cls_flower.c | 3 +-- net/sched/cls_fw.c | 13 ------------- net/sched/cls_u32.c | 15 --------------- tools/include/uapi/linux/pkt_cls.h | 2 +- tools/testing/selftests/tc-testing/config | 1 - 22 files changed, 4 insertions(+), 59 deletions(-) culprit signature: d5915e7f9686ba9d9b1454b3f7dd1fb4204a99329b10e14fa275bc3cd4110593 parent signature: 883ac884ef636a628985731d7e73d8119ce9c066cc06eabcbae40a6bbd9310a1 revisions tested: 22, total time: 5h52m4.61318038s (build: 2h19m54.665736532s, test: 3h29m40.854840045s) first bad commit: a51486266c3ba8e035a47fa96df67f274fe0c7d0 net: sched: remove NET_CLS_IND config option recipients (to): ["dalias@libc.org" "davem@davemloft.net" "davem@davemloft.net" "jhogan@kernel.org" "jhs@mojatatu.com" "jiri@mellanox.com" "jiri@resnulli.us" "linux-kselftest@vger.kernel.org" "linux-mips@vger.kernel.org" "linux-sh@vger.kernel.org" "netdev@vger.kernel.org" "paul.burton@mips.com" "ralf@linux-mips.org" "shuah@kernel.org" "xiyou.wangcong@gmail.com" "ysato@users.sourceforge.jp"] recipients (cc): ["benh@kernel.crashing.org" "linux-kernel@vger.kernel.org" "linuxppc-dev@lists.ozlabs.org" "mpe@ellerman.id.au" "paulus@samba.org"] crash: BUG: unable to handle kernel paging request in fl_dump_key batman_adv: Cannot find parent device BUG: unable to handle page fault for address: fffffbfff887b6d0 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 21ffed067 P4D 21ffed067 PUD 21ffec067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 1069 Comm: syz-executor.5 Not tainted 5.2.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fl_dump_key+0xbf/0x15b0 net/sched/cls_flower.c:2123 Code: 40 1c 04 f2 f2 f2 c7 40 20 f2 f2 f2 f2 c7 40 24 04 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 48 89 c8 48 c1 e8 03 <0f> b6 04 10 84 c0 74 08 3c 03 0f 8e 17 12 00 00 41 8b 04 24 85 c0 RSP: 0018:ffff888034567200 EFLAGS: 00010a03 RAX: 1ffffffff887b6d0 RBX: ffffffffc43db4df RCX: ffffffffc43db687 RDX: dffffc0000000000 RSI: ffff8880a0d78140 RDI: ffff88809f7df500 RBP: ffff8880345673a8 R08: 0000000000000e88 R09: ffff888038c92a7c R10: ffffed100719254e R11: ffff888038c92a76 R12: ffffffffc43db687 R13: ffff88809f7df500 R14: ffff888034567380 R15: ffff8880a0d78140 FS: 00007f76b9336700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffbfff887b6d0 CR3: 0000000032a20000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fl_tmplt_dump+0xad/0x230 net/sched/cls_flower.c:2390 tc_chain_fill_node+0x436/0x8c0 net/sched/cls_api.c:2679 tc_chain_notify+0x17a/0x310 net/sched/cls_api.c:2705 tc_ctl_chain+0x8a2/0xec6 net/sched/cls_api.c:2885 rtnetlink_rcv_msg+0x34f/0x950 net/core/rtnetlink.c:5214 netlink_rcv_skb+0x13c/0x380 net/netlink/af_netlink.c:2477 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:5232 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x43b/0x650 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x666/0xc50 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:665 ___sys_sendmsg+0x647/0x950 net/socket.c:2286